From owner-freebsd-questions@FreeBSD.ORG Wed Nov 22 23:49:18 2006 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 42A0816A412 for ; Wed, 22 Nov 2006 23:49:18 +0000 (UTC) (envelope-from dundeemt@gmail.com) Received: from nf-out-0910.google.com (nf-out-0910.google.com [64.233.182.189]) by mx1.FreeBSD.org (Postfix) with ESMTP id 9002743D5A for ; Wed, 22 Nov 2006 23:48:45 +0000 (GMT) (envelope-from dundeemt@gmail.com) Received: by nf-out-0910.google.com with SMTP id x37so650350nfc for ; Wed, 22 Nov 2006 15:49:15 -0800 (PST) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:sender:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references:x-google-sender-auth; b=s3B9QPBRwX49VR45dEKOFMI94JX+lPcWVpen6x/6BO+Uhf/+eo4x+j9prdqOxUvyoF+S0/Gu2/txlhadJw7F5iOxifrev/pkl7bUcRqzwnV7dLRyBBBwORSTRggw58mvFkjDwuT5WkRm+L9Y42NHBiSbcdbdKol9jHc1w71nMCQ= Received: by 10.82.120.15 with SMTP id s15mr1339955buc.1164239355209; Wed, 22 Nov 2006 15:49:15 -0800 (PST) Received: by 10.82.108.18 with HTTP; Wed, 22 Nov 2006 15:49:15 -0800 (PST) Message-ID: <5aaed53f0611221549o4e73ac0er421c21b3cabc665e@mail.gmail.com> Date: Wed, 22 Nov 2006 17:49:15 -0600 From: "Jeff Hinrichs - DM&T" Sender: dundeemt@gmail.com To: VeeJay , "FreeBSD Questions" In-Reply-To: <2cd0a0da0611220653g3bafe699l2ccb36da500e6089@mail.gmail.com> MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline References: <2cd0a0da0611211941iae07787q3f433fb2c8ab1f22@mail.gmail.com> <20061121225903.fswba3d1uss8wgos@secure.rem1tech.com> <5aaed53f0611212245v2f194531q569ab17a9bac1d6e@mail.gmail.com> <2cd0a0da0611220549i1fe5d6dekc51e0aa0eda13ec2@mail.gmail.com> <5aaed53f0611220645n7b16fa53x81232f44d5197013@mail.gmail.com> <2cd0a0da0611220653g3bafe699l2ccb36da500e6089@mail.gmail.com> X-Google-Sender-Auth: 1c0da55afe6c7cba Cc: Subject: Re: Password Security X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 22 Nov 2006 23:49:18 -0000 On 11/22/06, VeeJay wrote: > Thanks Jeff... > > But does this encryption affects on Disk Speed or Performance for Data > Access/Read/Write? > > > On 11/22/06, Jeff Hinrichs - DM&T wrote: > > Although I haven't used either, gbde and geli are possible methods. > > > > > http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/disks-encrypting.html > > As I stated before, I haven't used either so I am in no way an authoritative source, but in general anytime you do additional processing in the data channel, some penalty is going to be incurred. I am sure there are things that can be done to mitigate this penalty to a degree (i.e. offloading encryption operations to an add-in card) but only you can be the judge if the trade off is a good one. -Jeff