Bug 1263838

Summary: encryption is slower than dirt
Product: [Fedora] Fedora Reporter: Richard Jasmin <spike85051>
Component: distributionAssignee: Václav Pavlín <vpavlin>
Status: CLOSED EOL QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 22CC: dennis
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2016-07-19 17:54:52 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Richard Jasmin 2015-09-16 20:40:57 UTC 
Description of problem:
encryption is just slower then dirt.I cant figure out why.While this is not a solution, AES XTS mode does seem to somewhat alleviate the problem.The reason why is that TPM and the CPU are involved. AES is a AMD CPU instruction.Its quite possible intel has it too on newer chips but I have not checked and dont have an intel chip to test with. lshw will tell you whats supported.

Im using GOST and getting about 10X slow on data rate transfers.

And furthermore should we not be exceeding 100MB/sec rates on these 6GB/sec sata connections?

Both GOST and (formerly TC) CipherShed are used for testing this.Source are available to build from.Both applications have similar requirements.You will not be able to build them on debian because the widgets are messed up.

I have yet to test luks but I have tested ecryptfs and got a very sad transfer rate from it.

I would not recommend external disk transfers, the kernel will drop the drive out of the queue and your transfer rate will drop straight to hell.

To be fair I am using large transfers but really any data transfer should not be affected this way.

This seems to be another core linux issue.

Version-Release number of selected component (if applicable):
22

How reproducible:
always

Steps to Reproduce:
1.make a volume -or-
2.have a volume and transfer data to or from it
Use keys password, whatever, YMMV.
Comment 1 Fedora End Of Life 2016-07-19 17:54:52 UTC 
Fedora 22 changed to end-of-life (EOL) status on 2016-07-19. Fedora 22 is
no longer maintained, which means that it will not receive any further
security or bug fix updates. As a result we are closing this bug.

If you can reproduce this bug against a currently maintained version of
Fedora please feel free to reopen this bug against that version. If you
are unable to reopen this bug, please file a new report against the
current release. If you experience problems, please add a comment to this
bug.

Thank you for reporting this bug and we are sorry it could not be fixed.