<div dir="ltr"><div dir="ltr"><div class="gmail_default" style="font-family:tahoma,sans-serif">Wow, that article was quite something! A bit past my pay grade, but I was able to get the gist of it. Thanks for the link.</div><div class="gmail_default" style="font-family:tahoma,sans-serif">I will play with the kernel, still on 4.4.x, but will have at go at 5.4 and work my way back as it is dead easy to do wit hthe kernel loading tool in Mint.</div><div class="gmail_default" style="font-family:tahoma,sans-serif"><br clear="all"></div><div><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div>Thanks,<br><br>Ron S.<br><br></div></div></div></div></div></div><br></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Thu, Apr 23, 2020 at 10:17 PM Hubert Chathi <<a href="mailto:hubert@uhoreg.ca">hubert@uhoreg.ca</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">CloudFlare had an interesting blog post about some of the work they're<br>
doing to improve performance of hard drive encryption:<br>
<a href="https://blog.cloudflare.com/speeding-up-linux-disk-encryption/" rel="noreferrer" target="_blank">https://blog.cloudflare.com/speeding-up-linux-disk-encryption/</a><br>
<br>
One of the results of their investigation is that the kernel may not be<br>
using hardware-accelerated encryption, even if it's available.<br>
<br>
They're working on upstreaming their changes, but I don't know how much<br>
(if any) is in yet. But it may be worth trying a newer kernel if<br>
possible.<br>
<br>
On Thu, 23 Apr 2020 21:33:14 -0400, Benjamin Tompkins <<a href="mailto:bjtompkins@gmail.com" target="_blank">bjtompkins@gmail.com</a>> said:<br>
<br>
> Ok. So you are using AES as the cipher, so it should be using the CPU<br>
> hardware capability already.<br>
<br>
> I am not sure if you are going to be able get any more efficiency and<br>
> a cooler CPU.<br>
<br>
<br>
<br>
> On Thu, Apr 23, 2020 at 9:27 PM Ron Singh <<a href="mailto:ronsingh149@gmail.com" target="_blank">ronsingh149@gmail.com</a>> wrote:<br>
<br>
>> I get this --<br>
>> <br>
>> sudo cryptsetup luksDump /dev/sda5 LUKS header information for<br>
>> /dev/sda5<br>
>> <br>
>> Version: 1 Cipher name: aes Cipher mode: xts-plain64 Hash spec:<br>
>> sha256 Payload offset: 4096 MK bits: 512<br>
>> <br>
>> Thanks,<br>
>> <br>
>> Ron S.<br>
>> <br>
>> <br>
>> <br>
>> On Thu, Apr 23, 2020 at 9:18 PM Benjamin Tompkins<br>
>> <<a href="mailto:bjtompkins@gmail.com" target="_blank">bjtompkins@gmail.com</a>><br>
>> wrote:<br>
>> <br>
>>> What cipher though?<br>
>>> <br>
>>> <br>
>>> <a href="https://unix.stackexchange.com/questions/260533/how-do-can-i-tell-what-encryption-is-being-used-with-signed-in-luks" rel="noreferrer" target="_blank">https://unix.stackexchange.com/questions/260533/how-do-can-i-tell-what-encryption-is-being-used-with-signed-in-luks</a><br>
>>> <br>
>>> There are a couple of commands here that can help determine that.<br>
>>> <br>
>>> <br>
>>> <br>
>>> On Thu, Apr 23, 2020 at 9:16 PM Ron Singh <<a href="mailto:ronsingh149@gmail.com" target="_blank">ronsingh149@gmail.com</a>> wrote:<br>
>>> <br>
>>>> dm-crypt and LUKS, and I have the Intel i7-2640M SandyBridge CPU<br>
>>>> with AES built-in, but I have no idea(yet) if dm-crypt uses any<br>
>>>> sort of built-in CPU encryption schemes.<br>
>>>> <br>
>>>> *Perhaps I should keep a piece of balsa wood(nice and light) in my<br>
>>>> knapsack as a lap platform and be done with it.*<br>
>>>> <br>
>>>> Thanks,<br>
>>>> <br>
>>>> Ron S.<br>
>>>> <br>
>>>> <br>
>>>> <br>
>>>> On Thu, Apr 23, 2020 at 8:17 PM Benjamin Tompkins<br>
>>>> <<a href="mailto:bjtompkins@gmail.com" target="_blank">bjtompkins@gmail.com</a>><br>
>>>> wrote:<br>
>>>> <br>
>>>>> Do you know what cipher is being used, and is that cipher built<br>
>>>>> into the CPU?<br>
>>>>> <br>
>>>>> You may need to back up the data and re-encrypt the drive with a<br>
>>>>> cipher that the CPU can do in hardware and not rely on it<br>
>>>>> performing the calculations in software.<br>
>>>>> <br>
>>>>> On Thu, Apr 23, 2020 at 7:16 PM Ron Singh <<a href="mailto:ronsingh149@gmail.com" target="_blank">ronsingh149@gmail.com</a>><br>
>>>>> wrote:<br>
>>>>> <br>
>>>>>> I use laptops exclusively, I use Linux Mint all day long for my<br>
>>>>>> various jobs. I have a fleet of older Thinkpads I use for each<br>
>>>>>> biz/client.<br>
>>>>>> <br>
>>>>>> I grow more fearful of having my laptop du jour stolen.<br>
>>>>>> <br>
>>>>>> I have 3 identical laptops set up with Mint 18.2(based on Ubu<br>
>>>>>> 16.04 LTS) with the same power profile(using TLP). One has no<br>
>>>>>> encryption, 1 has encryption only on Home, the last has the<br>
>>>>>> entire SSD encrypted. - No encryption, idle temp is 39-40C (no<br>
>>>>>> issues on lap) - Encrypted Home, idle temp is 42-45C (warm on lap<br>
>>>>>> but not uncomfortable) - Encrypted Disk, idle temp is 46-50C<br>
>>>>>> (uncomfortable as hell on lap)<br>
>>>>>> <br>
>>>>>> Any ideas on how to get that Encryted Disk temps down? I have the<br>
>>>>>> CPU locked down at 1.2Ghz max(from 2.6Ghz), unused ports go to<br>
>>>>>> sleep, running an SSD, fan is set for aggressive blowing to<br>
>>>>>> reduce internal chassis temp.<br>
>>>>>> <br>
>>>>>> Thanks,<br>
>>>>>> <br>
>>>>>> Ron S.<br>
>>>>>> <br>
>>>>>> _______________________________________________ kwlug-disc<br>
>>>>>> mailing list <a href="mailto:kwlug-disc@kwlug.org" target="_blank">kwlug-disc@kwlug.org</a><br>
>>>>>> <a href="https://kwlug.org/mailman/listinfo/kwlug-disc_kwlug.org" rel="noreferrer" target="_blank">https://kwlug.org/mailman/listinfo/kwlug-disc_kwlug.org</a><br>
>>>>>> <br>
>>>>> _______________________________________________ kwlug-disc mailing<br>
>>>>> list <a href="mailto:kwlug-disc@kwlug.org" target="_blank">kwlug-disc@kwlug.org</a><br>
>>>>> <a href="https://kwlug.org/mailman/listinfo/kwlug-disc_kwlug.org" rel="noreferrer" target="_blank">https://kwlug.org/mailman/listinfo/kwlug-disc_kwlug.org</a><br>
>>>>> <br>
>>>> _______________________________________________ kwlug-disc mailing<br>
>>>> list <a href="mailto:kwlug-disc@kwlug.org" target="_blank">kwlug-disc@kwlug.org</a><br>
>>>> <a href="https://kwlug.org/mailman/listinfo/kwlug-disc_kwlug.org" rel="noreferrer" target="_blank">https://kwlug.org/mailman/listinfo/kwlug-disc_kwlug.org</a><br>
>>>> <br>
>>> _______________________________________________ kwlug-disc mailing<br>
>>> list <a href="mailto:kwlug-disc@kwlug.org" target="_blank">kwlug-disc@kwlug.org</a><br>
>>> <a href="https://kwlug.org/mailman/listinfo/kwlug-disc_kwlug.org" rel="noreferrer" target="_blank">https://kwlug.org/mailman/listinfo/kwlug-disc_kwlug.org</a><br>
>>> <br>
>> _______________________________________________ kwlug-disc mailing<br>
>> list <a href="mailto:kwlug-disc@kwlug.org" target="_blank">kwlug-disc@kwlug.org</a><br>
>> <a href="https://kwlug.org/mailman/listinfo/kwlug-disc_kwlug.org" rel="noreferrer" target="_blank">https://kwlug.org/mailman/listinfo/kwlug-disc_kwlug.org</a><br>
>> <br>
> _______________________________________________ kwlug-disc mailing<br>
> list <a href="mailto:kwlug-disc@kwlug.org" target="_blank">kwlug-disc@kwlug.org</a><br>
> <a href="https://kwlug.org/mailman/listinfo/kwlug-disc_kwlug.org" rel="noreferrer" target="_blank">https://kwlug.org/mailman/listinfo/kwlug-disc_kwlug.org</a><br>
<br>
_______________________________________________<br>
kwlug-disc mailing list<br>
<a href="mailto:kwlug-disc@kwlug.org" target="_blank">kwlug-disc@kwlug.org</a><br>
<a href="https://kwlug.org/mailman/listinfo/kwlug-disc_kwlug.org" rel="noreferrer" target="_blank">https://kwlug.org/mailman/listinfo/kwlug-disc_kwlug.org</a><br>
</blockquote></div></div>