Page 1 of 2 12 LastLast
Results 1 to 10 of 12

Thread: Linux DM-Crypt Being Parallelized

  1. #1
    Join Date
    Jan 2007
    Posts
    15,126

    Default Linux DM-Crypt Being Parallelized

    Phoronix: Linux DM-Crypt Being Parallelized

    Red Hat's Mikulas Patocka has posted a set of Linux kernel patches that parallelize the dm-crypt sub-system...

    http://www.phoronix.com/vr.php?view=MTM0NzQ

  2. #2
    Join Date
    Jan 2012
    Posts
    59

    Default

    On modern hardware, I suspect this is pretty much moot anyway, thanks to AES-NI, right?

  3. #3

    Default

    Quote Originally Posted by pdffs View Post
    On modern hardware, I suspect this is pretty much moot anyway, thanks to AES-NI, right?
    probably, but that's only available since the last 2 processor "generations", or something like that. for normal workloads most people don't need anything faster than a core2quad and these don't have it.

  4. #4
    Join Date
    Dec 2011
    Posts
    2,106

    Default

    AES-NI can be used by dm-crypt, TrueCrypt, 7-Zip, OpenSSL, and by libraries such as Network Security Services (NSS), and the Crypto API in the Linux kernel.
    Last edited by uid313; 04-10-2013 at 05:36 AM.

  5. #5
    Join Date
    Mar 2013
    Posts
    2

    Default

    Not everything is x86 or x86_64. Recent quad-core ARM CPUs obviously lack AES-NI and could conceivably benefit from this.

    Also, AES-NI only improves performance for AES. AES is probably the most common algorithm for bulk encryption, but it is not the only algorithm out there.

  6. #6
    Join Date
    Jan 2012
    Posts
    18

    Default

    AES-NI isn't available in low-end intel processors. Not even the last generation of i3's has it (i3-3240 for example: http://ark.intel.com/products/65690/...Cache-3_40-GHz). Most i5 has it, but not all (2nd gen i5: i5-750 http://ark.intel.com/products/42917/...Cache-2_40-GHz). Intels "market segmentation is a bit weird and not always easy to follow. I always check ark.intel.com before pressing "buy" on processors to make sure I get the features I want.

    Either way, parallelization seems reasonable if it can be made to not hurt efficiency when io-loads are low.

  7. #7
    Join Date
    Sep 2009
    Posts
    60

    Default More things parallelizable

    What else hasn't been made parallel that would benefit most Linux users?
    Honest question. This is basically low-hanging fruit nowadays.

  8. #8
    Join Date
    Oct 2009
    Posts
    13

    Default

    Quote Originally Posted by Qaz` View Post
    AES-NI isn't available in low-end intel processors.
    I wouldn't even go so far as to call it low-end, AES-NI is unfortunately disabled on the majority of Intels CPUs:

    According to Geizhals.de/Skinflint.co.uk there are currently 117 socket 1155 CPUs available from Intel. Of those, slightly less than half (58) support AES-NI.

    That looks good initially until you notice there is just a SINGLE dual core cpu with AES-NI support: Core i5-3470T.
    Basically, unless you get a quad core today (which will cost you upwards of 150€) you will not have AES-NI from Intel. And of course, four cores in a file-server are a bit of a waste...

    Fortunately, AMD offers AES-capable CPUs starting at 40€ so not all is lost!

  9. #9
    Join Date
    Feb 2008
    Location
    Linuxland
    Posts
    5,186

    Default

    With the AES talk I wondered how Via's old hw block Padlock stacked up against AES-NI instructions. Voila google: http://grantmcwilliams.com/tech/tech...s-amd-hexacore

    AES-NI has 2-3x more performance over a C3 Padlock, which still beats a 6-core cpu without those instructions.

  10. #10
    Join Date
    Sep 2008
    Location
    Seattle, WA, US
    Posts
    107

    Default

    Quote Originally Posted by anybody View Post
    I wouldn't even go so far as to call it low-end, AES-NI is unfortunately disabled on the majority of Intels CPUs:

    According to Geizhals.de/Skinflint.co.uk there are currently 117 socket 1155 CPUs available from Intel. Of those, slightly less than half (58) support AES-NI.

    That looks good initially until you notice there is just a SINGLE dual core cpu with AES-NI support: Core i5-3470T.
    Basically, unless you get a quad core today (which will cost you upwards of 150€) you will not have AES-NI from Intel. And of course, four cores in a file-server are a bit of a waste...

    Fortunately, AMD offers AES-capable CPUs starting at 40€ so not all is lost!
    Wow, that is really pathetic, Intel. Glad AMD is doing it right...

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •