On 06/29/2013 12:31 PM, Heinz Diehl wrote:
On 29.06.2013, Roberto Ragusa wrote:
> CPUs with AES-NI make encryption speed penalty basically null (even on a SSD);
This is not true in my case. My OCZ Vertex delivers 465 MB/s
unencrypted, and 167 MB/s encrypted with aes-xts-plain64:sha256 using
the Core i5-2450's AES-NI and AVX instruction set.
Your SSD is better (and/or newer) than mine: I see 217 MB/s both with
encryption and without.
In my tests (on my i7-2860QM) I remember to have measured about 900 MB/s
when reading an encrypted loop device on a file on tmpfs.
Note that I'm using aes-cbc-essiv:sha256, after discovering that the xts
variant has half the speed (as it actually encrypts twice); my investigation
about what kind of increased security it offers finally led me to avoid it.
You should try aes-cbc-essiv:sha256, it could give you 330 MB/s.
--
Roberto Ragusa mail at robertoragusa.it