[kwlug-disc] Encrypted disk vs Encrypted Home

[Benjamin Tompkins]

Ok.  So you are using AES as the cipher, so it should be using the CPU
hardware capability already.

I am not sure if you are going to be able get any more efficiency and a
cooler CPU.



On Thu, Apr 23, 2020 at 9:27 PM Ron Singh <ronsingh149 at gmail.com> wrote:

> I get this --
>
> sudo cryptsetup luksDump /dev/sda5
> LUKS header information for /dev/sda5
>
> Version:       1
> Cipher name:   aes
> Cipher mode:   xts-plain64
> Hash spec:     sha256
> Payload offset: 4096
> MK bits:       512
>
> Thanks,
>
> Ron S.
>
>
>
> On Thu, Apr 23, 2020 at 9:18 PM Benjamin Tompkins <bjtompkins at gmail.com>
> wrote:
>
>> What cipher though?
>>
>>
>> https://unix.stackexchange.com/questions/260533/how-do-can-i-tell-what-encryption-is-being-used-with-signed-in-luks
>>
>> There are a couple of commands here that can help determine that.
>>
>>
>>
>> On Thu, Apr 23, 2020 at 9:16 PM Ron Singh <ronsingh149 at gmail.com> wrote:
>>
>>> dm-crypt and LUKS, and I have the Intel i7-2640M SandyBridge CPU with
>>> AES built-in, but I have no idea(yet) if dm-crypt uses any sort of built-in
>>> CPU encryption schemes.
>>>
>>> *Perhaps I should keep a piece of balsa wood(nice and light) in my
>>> knapsack as a lap platform and be done with it.*
>>>
>>> Thanks,
>>>
>>> Ron S.
>>>
>>>
>>>
>>> On Thu, Apr 23, 2020 at 8:17 PM Benjamin Tompkins <bjtompkins at gmail.com>
>>> wrote:
>>>
>>>> Do you know what cipher is being used, and is that cipher built into
>>>> the CPU?
>>>>
>>>> You may need to back up the data and re-encrypt the drive with a cipher
>>>> that the CPU  can do in hardware and not rely on it performing the
>>>> calculations in software.
>>>>
>>>> On Thu, Apr 23, 2020 at 7:16 PM Ron Singh <ronsingh149 at gmail.com>
>>>> wrote:
>>>>
>>>>> I use laptops exclusively, I use Linux Mint all day long for my
>>>>> various jobs. I have a fleet of older Thinkpads I use for each biz/client.
>>>>>
>>>>> I grow more fearful of having my laptop du jour stolen.
>>>>>
>>>>> I have 3 identical laptops set up with Mint 18.2(based on Ubu 16.04
>>>>> LTS) with the same power profile(using TLP).
>>>>> One has no encryption, 1 has encryption only on Home, the last has the
>>>>> entire SSD encrypted.
>>>>> - No encryption, idle temp is 39-40C (no issues on lap)
>>>>> - Encrypted Home,  idle temp is 42-45C (warm on lap but not
>>>>> uncomfortable)
>>>>> - Encrypted Disk, idle temp is 46-50C (uncomfortable as hell on lap)
>>>>>
>>>>> Any ideas on how to get that Encryted Disk temps down? I have the CPU
>>>>> locked down at 1.2Ghz max(from 2.6Ghz), unused ports go to sleep, running
>>>>> an SSD, fan is set  for aggressive blowing to reduce internal chassis temp.
>>>>>
>>>>> Thanks,
>>>>>
>>>>> Ron S.
>>>>>
>>>>> _______________________________________________
>>>>> kwlug-disc mailing list
>>>>> kwlug-disc at kwlug.org
>>>>> https://kwlug.org/mailman/listinfo/kwlug-disc_kwlug.org
>>>>>
>>>> _______________________________________________
>>>> kwlug-disc mailing list
>>>> kwlug-disc at kwlug.org
>>>> https://kwlug.org/mailman/listinfo/kwlug-disc_kwlug.org
>>>>
>>> _______________________________________________
>>> kwlug-disc mailing list
>>> kwlug-disc at kwlug.org
>>> https://kwlug.org/mailman/listinfo/kwlug-disc_kwlug.org
>>>
>> _______________________________________________
>> kwlug-disc mailing list
>> kwlug-disc at kwlug.org
>> https://kwlug.org/mailman/listinfo/kwlug-disc_kwlug.org
>>
> _______________________________________________
> kwlug-disc mailing list
> kwlug-disc at kwlug.org
> https://kwlug.org/mailman/listinfo/kwlug-disc_kwlug.org
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://kwlug.org/pipermail/kwlug-disc_kwlug.org/attachments/20200423/48087d55/attachment.htm>