Cryptography on (and in) Linux

Matthias Schniedermeyer | 22 Oct 2009 18:24

Is there a plan to support AES-NI in loop-aes?

Hi

I think the subject about covers it.

I recently bought a Intel SSD (X25-E). With my current machine (Core2Duo 
E6850, 3.2 GHz) i get about 130MB/s of the possible 230MB/s when i 
compare a linear dd of the loop-device vs. raw block-device.

The real appeal of a new Nehalem-type CPU (like a Core i7-860) would be 
the possibility that AES-NI delivers Full-Encryption with very small to 
neglible performance impact on the SSD.

Bis denn

--

-- 
Real Programmers consider "what you see is what you get" to be just as 
bad a concept in Text Editors as it is in women. No, the Real Programmer
wants a "you asked for it, you got it" text editor -- complicated, 
cryptic, powerful, unforgiving, dangerous.

-
Linux-crypto:  cryptography in and on the Linux system
Archive:       http://mail.nl.linux.org/linux-crypto/

headers

Jari Ruusu | 25 Oct 2009 11:01

Re: Is there a plan to support AES-NI in loop-aes?

Matthias Schniedermeyer wrote:
> I think the subject about covers it.
> 
> I recently bought a Intel SSD (X25-E). With my current machine (Core2Duo
> E6850, 3.2 GHz) i get about 130MB/s of the possible 230MB/s when i
> compare a linear dd of the loop-device vs. raw block-device.
> 
> The real appeal of a new Nehalem-type CPU (like a Core i7-860) would be
> the possibility that AES-NI delivers Full-Encryption with very small to
> neglible performance impact on the SSD.

As of this writing, I don't have access to a machine that has AES-NI
instructions.

Would you be willing to test code if AES-NI support is added to loop-AES?

Most of the testing would be done as unprivileged userspace program. After
it runs fine in userspace, then the code gets copied to kernel driver.

--

-- 
Jari Ruusu  1024R/3A220F51 5B 4B F9 BB D3 3F 52 E9  DB 1D EB E3 24 0E A9 DD

-
Linux-crypto:  cryptography in and on the Linux system
Archive:       http://mail.nl.linux.org/linux-crypto/

headers

Matthias Schniedermeyer | 25 Oct 2009 19:07

Re: Is there a plan to support AES-NI in loop-aes?

On 25.10.2009 12:01, Jari Ruusu wrote:
> Matthias Schniedermeyer wrote:
> > I think the subject about covers it.
> > 
> > I recently bought a Intel SSD (X25-E). With my current machine (Core2Duo
> > E6850, 3.2 GHz) i get about 130MB/s of the possible 230MB/s when i
> > compare a linear dd of the loop-device vs. raw block-device.
> > 
> > The real appeal of a new Nehalem-type CPU (like a Core i7-860) would be
> > the possibility that AES-NI delivers Full-Encryption with very small to
> > neglible performance impact on the SSD.
> 
> As of this writing, I don't have access to a machine that has AES-NI
> instructions.
> 
> Would you be willing to test code if AES-NI support is added to loop-AES?

Yes i definitly am willing to test code.

> Most of the testing would be done as unprivileged userspace program. After
> it runs fine in userspace, then the code gets copied to kernel driver.

OK, so i made my order at my local dealer a few minutes ago.
It will take a few days until i can get my claws on them. 

Bis denn

--

-- 
Real Programmers consider "what you see is what you get" to be just as 
bad a concept in Text Editors as it is in women. No, the Real Programmer

(Continue reading)