clacker
Group: Members
Posts: 570
Joined: June 2004 |
 |
Posted: Feb. 01 2006,18:33 |
 |
As far as perfomance, not so bad. I ran the following experiment to create a mounted loop and a mounted encrypted loop and compared the performance:
| Code Sample | # create two 20M files to use as an ecrypted and unencrypted loop
dd if=/dev/zero of=secret.img bs=20M count=1
dd if=/dev/zero of=unsecret.img bs=20M count=1
# change to root and setup the two loops for use
sudo su
losetup -e aes256 -S "damnsmalllinux" /dev/loop1 secret.img
## used password=onetwothreeonetwothree
## not really secure, but this is just for timing
mke2fs -j /dev/loop1
mke2fs unsecret.img
## said y to prompt, it's OK
mkdir /mnt/efs
mkdir /mnt/uefs
mount /dev/loop1 /mnt/efs
mount unsecret.img /mnt/efs -o loop
# create a test directory and script to copy, move and delete files
mkdir test
dd if=/dev/random of=test/1Mtest bs=1M count=1
mkdir test/temp
# create the test.sh script below and make it executable
vi test/test.sh
chmod 777 test/test.sh
cp -r /home/dsl/test /mnt/efs
cp -r /home/dsl/test /mnt/uefs
# run the tests
cd test
time ./test.sh
cd /mnt/uefs/test
time ./test.sh
cd /mnt/efs/test
time ./test.sh |
and this is test.sh:
| Code Sample | #!/bin/bash
#test.sh
#
# copies, moves, and deletes to check loop performance
i=0
while [ $i -lt 6000 ]
do
i=`expr $i + 1`
cp -f 1Mtest temp/1Mtest1
cp -f 1Mtest temp/1Mtest2
cp -f 1Mtest temp/1Mtest3
cp -f 1Mtest temp/1Mtest4
mv -f temp/1Mtest1 temp/1Mtest1a
mv -f temp/1Mtest2 temp/1Mtest2a
mv -f temp/1Mtest3 temp/1Mtest3a
mv -f temp/1Mtest4 temp/1Mtest4a
rm -f temp/1Mtest1a
rm -f temp/1Mtest2a
rm -f temp/1Mtest3a
rm -f temp/1Mtest4a
done |
my results were:
test in /home/dsl:
real 0m49.192s
user 0m20.260s
sys 0m28.900s
test in loop mounted file:
real 0m49.802s
user 0m20.380s
sys 0m29.000s
test in encrypted loop file:
real 0m50.128s
user 0m20.260s
sys 0m29.660s
So it looks like the encrypted file system takes a very minor hit in terms of speed, maybe 2% slower.
|
.
DSL Market ,
Great VPS hosting provided by Tektonic
