Welcome to Soft32 Linux Forums!
FAQFAQ    SearchSearch      ProfileProfile    Private MessagesPrivate Messages   Log inLog in

Encryption method for best speed

 
   Soft32 Home -> Linux -> Security RSS
Next:  [News] [Rival] Microsoft Crimes Gets Wrath of EU,..  
Author Message
buck

External


Since: Jul 02, 2004
Posts: 22



(Msg. 1) Posted: Sun Feb 08, 2009 3:16 pm
Post subject: Encryption method for best speed
Archived from groups: comp>os>linux>security (more info?)

I've attempted to google an answer to this question but without much
luck.

Where is an understandable and recent web page (or NG cite, Etc.) that
provides encryption method and speed information? In particular, I
want to create an encrypted file and loop mount it. DM-Crypt kills
performance (I have benchmarks to prove that!), so I want an alternate
_FAST_ but reasonably secure method.

The current files to be encrypted sum to 31G.
Thanks for any pointers,
buck
Back to top
Login to vote
buck

External


Since: Jul 02, 2004
Posts: 22



(Msg. 2) Posted: Sun Feb 08, 2009 11:20 pm
Post subject: Re: Encryption method for best speed [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

Ertugrul =?UTF-8?B?U8O2eWxlbWV6?= <es DeleteThis @ertes.de> wrote in
news:20090209024736.22353d9e@ertes.de:

> buck <buck DeleteThis @private.mil> wrote:
>
>> Where is an understandable and recent web page (or NG cite, Etc.)
>> that provides encryption method and speed information? In
>> particular, I want to create an encrypted file and loop mount it.
>> DM-Crypt kills performance (I have benchmarks to prove that!), so I
>> want an alternate _FAST_ but reasonably secure method.
>
> If dm-crypt kills your performance, then probably you have an old or
> improperly configured kernel. While configuring, you can select to
> enable cipher implementations, which are optimized for your particular
> architecture. The implementations from the Linux kernel are already
> quite fast.

DM-Crypt defaults to AES mode cbc-essiv:sha256, which was compiled for
kernel 2.6.24.5_smp (Slackware 12.1 then, 12.2 now). How much more can
one optimize? My benchmark files have long since been deleted, but
encryption, because it uses only one CPU, was definitely a problem. I
found this, which clearly demonstrates my assertion that encryption is
the bottleneck:
http://tynne.de/linux-crypto-speed
which indicates aes586 module - which will have to be located because it
isn't a module on my machine. There is no date on the page, but the
kernel version isn't horribly old (2.6.21.4).

> Greets,
> Ertugrul.

Wikipedia lists so many algorithms that it takes 4 lines of text to
display them all.

Thanks,
buck
Back to top
Login to vote
Display posts from previous:   
Related Topics:
NIS+PAM+SSH+Firewalling.....all in the mix - I've encountered an issue in trying to setup an iptables firewall (shorewall) on a debian etch server (hostname zeus).....

problem with sftp rpm - Hi all I downloaded 'sftp-0.9.9-4.src.rpm' and when I run the command "rpm -ivh sftp-0.9.9-4.src.rpm", it giv...

[PATCH] ARM/ARM26: Enable arbitary speed tty ioctls and sp.. - Add the ioctls and values needed for this to the ARM26/ARM32 ports. The actual code has been in the base kernel for a..

rsync and encryption - Hi guys I need to do a daily backup of a big amount of data on a remote site. I thought to use rsync over ssh, but I..

Grab any d-v-d. (with any encryption) to you computer. - Redneck http://www.get4fast.com/ A House Divided Against Itself Cannot Stand Charley Horse Anything that is designed to...

Grab any d-v-d. (with any encryption) to you computer. - Always remember no matter where you go, there you are. http://www.get4fast.com/ Play by ear Under the Weather High on..
       Soft32 Home -> Linux -> Security All times are: Pacific Time (US & Canada) (change)
Page 1 of 1

 
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum

Categories:
 Windows
  Linux
 Mac
 PDA


[ Contact us | Terms of Service/Privacy Policy ]