Finally encrypted my Notebook
So I've finally encrypted my notebook's HDD using LUKS. Was surprisingly easy, but very time consuming.
Here is an excellent article about LUKS from the Arch wiki.
But there was one odd thing:
According to the german Wikipedia, Serpent is slower than Rijndael, when implemented in software. But cryptsetup benchmark
said that Serpent was faster, at least when using it with XTS:
$ cryptsetup benchmark
# Tests are approximate using memory only (no storage IO).
PBKDF2-sha1 281875 iterations per second
PBKDF2-sha256 158490 iterations per second
PBKDF2-sha512 105703 iterations per second
PBKDF2-ripemd160 232809 iterations per second
PBKDF2-whirlpool 130031 iterations per second
# Algorithm | Key | Encryption | Decryption
aes-cbc 128b 112.2 MiB/s 136.9 MiB/s
serpent-cbc 128b 46.0 MiB/s 194.4 MiB/s
twofish-cbc 128b 101.6 MiB/s 193.3 MiB/s
aes-cbc 256b 86.0 MiB/s 96.4 MiB/s
serpent-cbc 256b 46.2 MiB/s 176.6 MiB/s
twofish-cbc 256b 101.8 MiB/s 200.6 MiB/s
aes-xts 256b 139.6 MiB/s 136.3 MiB/s
serpent-xts 256b 200.0 MiB/s 185.8 MiB/s
twofish-xts 256b 153.8 MiB/s 197.6 MiB/s
aes-xts 512b 98.9 MiB/s 98.1 MiB/s
serpent-xts 512b 203.0 MiB/s 192.8 MiB/s
twofish-xts 512b 208.4 MiB/s 210.4 MiB/s
Is this normal?