[dm-crypt] security concerns with RAID on top of dmcrpyt and with mulitple devices with the same key slot key?

David Christensen dpchrist at holgerdanske.com
Fri Jun 3 04:41:44 CEST 2016


On 06/02/2016 04:47 PM, Christoph Anton Mitterer wrote:
> ... RAID (e.g. btrfs RAID or MD RAID) on top of dmcrypt devices?
> Any performance or stability issues with such setup?

If you put encryption on top of a RAID of N devices, your CPU will have 
to process one layer of encryption.  If you put a RAID on top of N 
encrypted devices, your CPU will have to process N layers of encryption. 
  But if you have enough cores and/or AES-NI, the latter might perform 
better.  Benchmark to find out.


For stability, the kernel, device drivers, dm-crypt, LVM, btrfs, etc., 
need to function correctly under concurrent workloads.  Choose your 
software accordingly.


David



More information about the dm-crypt mailing list