Explore the intricacies of Linux disk encryption performance in this 27-minute USENIX conference talk. Delve into the challenges faced by LUKS/dm-crypt solutions as storage speeds increase, causing noticeable IO latency. Discover how hardware optimizations for encryption on modern platforms don't necessarily translate to improved transparent disk encryption performance. Follow the speaker's investigation into dm-crypt's source code, revealing inefficiencies in its architecture. Learn about a proof-of-concept patch that dramatically improved read speeds from encrypted block devices. Gain insights into potential improvements for Linux transparent disk encryption, and understand the underlying reasons for current performance bottlenecks. Engage with topics such as encryption overhead, benchmarking exercises, and architectural design choices in dm-crypt.
Overview
Syllabus
Introduction
Disk Encryption Overview
Benchmark Exercise
What We Tried
Is Encryption Heavyweight
Up Crimp
Why this happens
Ifelse clause
Conclusions
Questions
Taught by
USENIX