Speeding Up Linux Disk Encryption
summary
A runtime patch removes DM‑crypt’s multiple offload queues and adds a DM-crypt queue bypass flag plus an AES-NI proxy module that forces inline, synchronous crypto on x86. Read throughput on a RAM-backed test rises from ~300 MB/s to ~600 MB/s (200%–300% in some configs), and production SSD latency drops noticeably. Patch applies to stock LUKS/dm-crypt, is toggleable live, requires CPU crypto acceleration and currently targets x86; very large 2 MB bios can regress performance.
AI-written summary · about
chapters (10)
- 0:00Introduction
- 0:30Disk Encryption Overview
- 3:22Benchmark Exercise
- 7:15What We Tried
- 7:59Is Encryption Heavyweight
- 9:13Up Crimp
- 11:00Why this happens
- 15:05Ifelse clause
- 18:36Conclusions
- 22:10Questions
related talks
41mLinux Encryption Performance is Not an Excuse Anymore
30mAccelerate TLS with DPDK
47mLinux Cryptographic Acceleration on an i.MX6
30mEncrypting Memory at Scale
30mFacing Extinction: The Fight To Keep Hardware Crypto Engines in Embedded Linux
28mModernizing Kernel Cryptography: From Complex APIs To Streamlined Libraries
51mAn Overview of the Linux Kernel Crypto Subsystem
24mOpenSSL Crypto PMD - Analysis and Optimisations