On Fri, Jun 28, 2013 at 10:44:09PM +0200, Mateusz Marzantowicz wrote:
On 28.06.2013 17:21, J.Witvliet(a)mindef.nl wrote:
> It surely works, but at a performance price. And the certainty that you have to
enter the LUKS-key each time you boot.
Intel Sandy/Ivy Bridge processors and later (AMD also) have something
called AES-NI which significantly speeds up disk encryption. I haven't
done any benchmarks but I see no difference between encrypted and plain
LVM in everyday use.
that would be lovely. but this, unfortunately, is a dual core Atom
processor, so it's gonna be dog slow.
User can unlock LUKS volume using key on SD card or any other media that
can be mounted during system boot. So no passphrase is needed every time
system is rebooted.
Mateusz Marzantowicz
--
---- Fred Smith -- fredex(a)fcshome.stoneham.ma.us -----------------------------
The Lord detests the way of the wicked
but he loves those who pursue righteousness.
----------------------------- Proverbs 15:9 (niv) -----------------------------