Dne 13.5.2010 2:07, Pedro Ribeiro napsal(a): > Hello, > > I'm currently using a LUKS volume which contains an encrypted LVM with > itself contains my root, home and swap partitions. > > My processor is a core 2 duo 2.26ghz and I'm running x86_64. I'm using > cbc-essiv:sha256 and AES with 128 bit key. > > I was wondering, is CBC mode the fastest? > I have a fast processor and can't really complain about the read/write > speed, but I was wondering if I could gain any speed from counter mode > or other mode. > > I would also like to ask what are the real world speed gains when > using AES-NI? Can anyone please point me to some benchmarks, if there > are any? > > Thank for the help, > Pedro Hi Pedro, you can get better speeds with lower security. But before you change your working scheme (which is good imo, I prefer XTS..) do a quick test and compare if it's worth the pain :) ie: $ hdparm -t /dev/sda1 $ hdparm -t /dev/mapper/sda1_crypt Here are some numbers you should check - http://blog.wpkg.org/2009/04/23/cipher-benchmark-for-dm-crypt-luks My guess for single drive you're fine with your setup.. >From measuring specific server-loads and the impact on CPU frequency scaling with cpufreq-ondemand as governor I would recommend lowering default threshold value (95) for this load on desktop/server. ie: $ echo 50 > /sys/devices/system/cpu/cpufreq/ondemand/up_threshold HTH, Z. -- To unsubscribe from this list: send the line "unsubscribe linux-crypto" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
