Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
cryptsetup benchmark all chiphers and their implementations
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Networking & Security
View previous topic :: View next topic  
Author Message
szatox
Veteran
Veteran


Joined: 27 Aug 2013
Posts: 1717

PostPosted: Wed Jul 01, 2015 6:52 pm    Post subject: cryptsetup benchmark all chiphers and their implementations Reply with quote

I'm playing with disk encryption and I noticed that cryptsetup benchmark only tests a few algorithms instead of all chiphers available.
Is there any way to force cryptsetup to benchmark all chiphers kernel provides?
Is there any way to test different implementations?
Quote:
# cryptsetup benchmark
# Tests are approximate using memory only (no storage IO).
PBKDF2-sha1 327680 iterations per second
PBKDF2-sha256 189959 iterations per second
PBKDF2-sha512 128501 iterations per second
PBKDF2-ripemd160 273066 iterations per second
PBKDF2-whirlpool 123652 iterations per second
# Algorithm | Key | Encryption | Decryption
aes-cbc 128b 141.2 MiB/s 167.0 MiB/s
serpent-cbc 128b 60.4 MiB/s 150.6 MiB/s
twofish-cbc 128b 123.2 MiB/s 136.8 MiB/s
aes-cbc 256b 114.7 MiB/s 121.7 MiB/s
serpent-cbc 256b 58.8 MiB/s 154.2 MiB/s
twofish-cbc 256b 120.3 MiB/s 143.7 MiB/s
aes-xts 256b 158.2 MiB/s 170.2 MiB/s
serpent-xts 256b 141.6 MiB/s 139.4 MiB/s
twofish-xts 256b 132.3 MiB/s 138.8 MiB/s
aes-xts 512b 129.4 MiB/s 123.5 MiB/s
serpent-xts 512b 147.9 MiB/s 143.7 MiB/s
twofish-xts 512b 134.4 MiB/s 118.9 MiB/s

Only 3 algorithms in 2 modes. What about tea, xtea, salsa20, blowfish, etc? I have those and more available. I can run for example xtea benchmark manualy, but I would like to have some way to test everything in a batch so I can easily collect results. Also, there are more modes available, I could use ctr or lrw for example. (and if I try to test salsa20, it says there is no such chipher available)

Now, I have e.g.
name : cbc(serpent)
driver : cbc-serpent-sse2
name : cbc(serpent)
driver : cbc(serpent-generic)
in my /proc/crypto, how can I test them both to compare the speed?


Oh, and before someone says blowfish is old, rc4 sucks and aes is the way to go, let me remind you that links weaker than chipher exist in security chain. And I know rc4 sucks.
Back to top
View user's profile Send private message
frostschutz
Advocate
Advocate


Joined: 22 Feb 2005
Posts: 2968
Location: Germany

PostPosted: Wed Jul 01, 2015 7:35 pm    Post subject: Reply with quote

not quite what you're asking but maybe of interest anyway: http://www.metamorpher.de/files/cryptsetup-benchmark.html
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Networking & Security All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum