Bug#796742: general: system takes a hit when encryption used

[Josselin Mouette <joss@debian.org>]

Le dimanche 23 août 2015 à 15:16 -0500, Richard Jasmin a écrit : 
> modern day systems have 6GB/sec connections and GBs of RAM and Ghz of speed.
> There is simply no reason that ANY cipher algorithm should slow a system to a
> crawl.
> 
> Cached data or not.
> 
> Yet this is clearly the case.I tried both EncFS and GostCrypt(whole volume
> encryption) and am getting the same results here on SATA 6GB/sec connection
> with drives that support such speeds.

For the record (the bug has already been closed):
- GostCrypt is not part of Debian
- EncFS doesn’t support AES-NI so this is expected (and I’m not sure
about how secure it is, either)
You need to use dm-crypt or ecryptfs, that make use of the kernel’s
encryption library, if you want both acceptable security and
performance.

-- 
 .''`.      Josselin Mouette
: :' :
`. `'
  `-