[dm-crypt] security concerns with RAID on top of dmcrpyt and with mulitple devices with the same key slot key?
dpchrist at holgerdanske.com
Fri Jun 3 04:41:44 CEST 2016
On 06/02/2016 04:47 PM, Christoph Anton Mitterer wrote:
> ... RAID (e.g. btrfs RAID or MD RAID) on top of dmcrypt devices?
> Any performance or stability issues with such setup?
If you put encryption on top of a RAID of N devices, your CPU will have
to process one layer of encryption. If you put a RAID on top of N
encrypted devices, your CPU will have to process N layers of encryption.
But if you have enough cores and/or AES-NI, the latter might perform
better. Benchmark to find out.
For stability, the kernel, device drivers, dm-crypt, LVM, btrfs, etc.,
need to function correctly under concurrent workloads. Choose your
More information about the dm-crypt