Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 25 Jul 2012 20:57:30 +0200 (CEST)
From:      Wojciech Puchar <wojtek@wojtek.tensor.gdynia.pl>
To:        freebsd-questions@freebsd.org
Subject:   geli - selecting cipher
Message-ID:  <alpine.BSF.2.00.1207252055180.9814@wojtek.tensor.gdynia.pl>

next in thread | raw e-mail | index | archive | help
i need high speed disk encryption (many disks running in parallel, lots of 
data movement). i have processor with AES-NI.

geli give 150MB/s performance (tested from/to md ramdisk) using default 
and recommended AES-XTS

and ca 400MB/s read and 700MB/s write using AES-CBC.

I'm not cryptography expert, is CBC somehow "less secure", and if so is it 
really a problem?



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?alpine.BSF.2.00.1207252055180.9814>