> gargamel:~# cryptsetup luksDump /dev/md8 > LUKS header information for /dev/md8 > > Version: 1 > Cipher name: aes > Cipher mode: xts-plain64 > Hash spec: sha1 > Payload offset: 3072 > MK bits: 256 Does the box have AES-NI? What's your 'cryptsetup benchmark' look like? Sometimes there can be a problem if the AES-NI module is loaded too late. Without AES-NI your performance will suffer either way... You probably don't want encryption below the RAID; that would mean encrypting redundancy and parity so it's even more work to do, doubtful whether multicore CPU can offset that to make it worth it. Maybe if it's a NAS that has nothing else to do... Regards Andreas -- To unsubscribe from this list: send the line "unsubscribe linux-raid" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
