From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail.saout.de ([127.0.0.1]) by localhost (mail.saout.de [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CHgOBI1qPxzr for ; Tue, 2 Apr 2013 04:56:29 +0200 (CEST) Received: from balrog.mandarb.com (unknown [173.160.28.137]) (using TLSv1.2 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by mail.saout.de (Postfix) with ESMTPS for ; Tue, 2 Apr 2013 04:56:29 +0200 (CEST) Received: from omen by balrog.mandarb.com with local (Exim 4.80) (envelope-from ) id 1UMrOd-0000e9-Ly for dm-crypt@saout.de; Mon, 01 Apr 2013 19:56:27 -0700 Date: Mon, 1 Apr 2013 19:56:27 -0700 From: Omen Wild Message-ID: <20130402025627.GA25125@mandarb.com> References: <20130402004639.GA22085@tansi.org> MIME-Version: 1.0 Content-Disposition: inline In-Reply-To: <20130402004639.GA22085@tansi.org> Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=sha1; boundary="opJtzjQTFsWo+cga" Subject: Re: [dm-crypt] Re2: Encrypt underlying disks after the fact? List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: dm-crypt@saout.de --opJtzjQTFsWo+cga Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Quoting Arno Wagner on Tue, Apr 02 02:46: > > P.S.: You should also realize that if you encrypt individual > disks, you get significantly higher CPU loads than if you encrypt=20 > an md-raid. At least on writes, everything has to be encrypted twice > with RAID1 on individually encrypted disks. Good point. I forgot to mention this is a very lightly loaded home server with lots of CPU to spare. It looks like it averages 90+% idle on an average day, that's with the CPUs running downclocked to save power. --=20 Wish for a master key and open the Magic Memory Vault! --opJtzjQTFsWo+cga Content-Type: application/x-pkcs7-signature Content-Disposition: attachment; filename="smime.p7s" Content-Transfer-Encoding: base64 MIIQqgYJKoZIhvcNAQcCoIIQmzCCEJcCAQExCzAJBgUrDgMCGgUAMAsGCSqGSIb3DQEHAaCC DdwwggY0MIIEHKADAgECAgEgMA0GCSqGSIb3DQEBBQUAMH0xCzAJBgNVBAYTAklMMRYwFAYD VQQKEw1TdGFydENvbSBMdGQuMSswKQYDVQQLEyJTZWN1cmUgRGlnaXRhbCBDZXJ0aWZpY2F0 ZSBTaWduaW5nMSkwJwYDVQQDEyBTdGFydENvbSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAe Fw0wNzEwMjQyMTAyNTVaFw0xNzEwMjQyMTAyNTVaMIGMMQswCQYDVQQGEwJJTDEWMBQGA1UE ChMNU3RhcnRDb20gTHRkLjErMCkGA1UECxMiU2VjdXJlIERpZ2l0YWwgQ2VydGlmaWNhdGUg U2lnbmluZzE4MDYGA1UEAxMvU3RhcnRDb20gQ2xhc3MgMiBQcmltYXJ5IEludGVybWVkaWF0 ZSBDbGllbnQgQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLKIVFnAEs+xny q6UzjCqgDcvQVe1dIoFnRsQPCFO+y92k8RK0Pn3MbQ2Gd+mehh9GBZ+36uUQA7Xj9AGM6wgP hEE34vKtfpAN5tJ8LcFxveDObCKrL7O5UT9WsnAZHv7OYPYSR68mdmnEnJ83M4wQgKO19b+R t8sPDAz9ptkQsntCn4GeJzg3q2SVc4QJTg/WHo7wF2ah5LMOeh8xJVSKGEmd6uPkSbj113yK Mm8vmNptRPmM1+YgmVwcdOYJOjCgFtb2sOP79jji8uhWR91xx7TpM1K3hv/wrBZwffrmmEpU euXHRs07JqCCvFh9coKF4UQZvfEg+x3/69xRCzb1AgMBAAGjggGtMIIBqTAPBgNVHRMBAf8E BTADAQH/MA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUrlWDb+wxyrn3HfqvazHzyB3jrLsw HwYDVR0jBBgwFoAUTgvvGqRAW6UXaYcwyjRoQ9BBrvIwZgYIKwYBBQUHAQEEWjBYMCcGCCsG AQUFBzABhhtodHRwOi8vb2NzcC5zdGFydHNzbC5jb20vY2EwLQYIKwYBBQUHMAKGIWh0dHA6 Ly93d3cuc3RhcnRzc2wuY29tL3Nmc2NhLmNydDBbBgNVHR8EVDBSMCegJaAjhiFodHRwOi8v d3d3LnN0YXJ0c3NsLmNvbS9zZnNjYS5jcmwwJ6AloCOGIWh0dHA6Ly9jcmwuc3RhcnRzc2wu Y29tL3Nmc2NhLmNybDCBgAYDVR0gBHkwdzB1BgsrBgEEAYG1NwECATBmMC4GCCsGAQUFBwIB FiJodHRwOi8vd3d3LnN0YXJ0c3NsLmNvbS9wb2xpY3kucGRmMDQGCCsGAQUFBwIBFihodHRw Oi8vd3d3LnN0YXJ0c3NsLmNvbS9pbnRlcm1lZGlhdGUucGRmMA0GCSqGSIb3DQEBBQUAA4IC AQA6qScNyNO0FpHvaZTQacVMXH33O51KyEKSRw3IvdQxRu31YR0ZDGdSfgSoOVDVMSBSdmfQ fdDInHPzV3LO5DwUXZ+lxjv7z3PO2OkfnFkvTXPfn6dxJ5rJveDsTsCPcJ/Kp6/+qN5g+J6D /SaYcFD018B6L42r0Z4VEBy36P4tjRtF14Ex10tl5tJFVKM16qWKQHbpjIgf73s49UB0CQ5l HT2DHKfq3oPfdNc5Mk93w1v4ryVb+qVrZIej8NsrWU+5r4O2IV91edDb/OtHFddZqHFFXKgS 79IHE/hwQ2LW7r3sTX7cDUCg+dfdwO8zeLxuwk2JF8crUoyrl66RGrRIhT8VoG/OJ1Y9uUlO av69V4cG8upi4ZG2l7JZFbcBFk91Wp+Payo5SuF61CmGFrZ386umkmpObtFacXda2O/bVoQ9 xHQrzoTc/0KZTWvlZCLK3Ke/vGYT9ZdW9lOjGsSFbXrlTA919L84iMK+48WGnvRWY28ZaVHp ql43AtEGhXze6iNCbEDACy+4hkQYOytAqDgcxAnQ937mYpeZFPyz/XK9QSt9VNFMuudWxZwD DDJKoQAoSG59Hou9lZ26UrK60nRdAQBmEPL8h2nuWgoPh++XVQld9yuhbsWa39Pck8/lcfz5 HUVGJF5mc/zk38iV7FDlF68puiryNq2KXHEpOTCCB6AwggaIoAMCAQICAh0vMA0GCSqGSIb3 DQEBBQUAMIGMMQswCQYDVQQGEwJJTDEWMBQGA1UEChMNU3RhcnRDb20gTHRkLjErMCkGA1UE CxMiU2VjdXJlIERpZ2l0YWwgQ2VydGlmaWNhdGUgU2lnbmluZzE4MDYGA1UEAxMvU3RhcnRD b20gQ2xhc3MgMiBQcmltYXJ5IEludGVybWVkaWF0ZSBDbGllbnQgQ0EwHhcNMTIwMjIyMTYx NjM5WhcNMTQwMjIzMDEyMjU2WjCBgjEZMBcGA1UEDRMQcU1sMmtIaXNIczc1RGpsbDELMAkG A1UEBhMCVVMxEzARBgNVBAgTCkNhbGlmb3JuaWExDjAMBgNVBAcTBURhdmlzMRIwEAYDVQQD EwlPbWVuIFdpbGQxHzAdBgkqhkiG9w0BCQEWEG9tZW5AbWFuZGFyYi5jb20wggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOx/wfbUjwfzM6yEcgjMODLBXAUgBCdOkgQtqKHwyn gru6Ke7m5Rclw/q/cPlQpS3BvIqGJmWvIP8PvW0/03M4j11lYDLXFDOElc1TgaPQsN3ZGEwp P8ZmdieO4Yf01iq7AdMf4TgeqR3yQTVeMPgbG3X1VUh29PgSOv17XLCiS+oiYhH5fBiQwdLm f80JVuuPF8Iyg9Xn6PZyQPeSjcNFvkOxLtkwfHN5/whwMsQTKx32ZrBGP6kAzIRJ2f0DR79o WHvu3CegQ6NaLcXmzWs0Fp4Pkdg1qCqzdqCyZq6bzLjVpIwbwbp1A87/A+9qUPeBCQZO2wIM a2tmnBfAnCaRAgMBAAGjggQSMIIEDjAJBgNVHRMEAjAAMAsGA1UdDwQEAwIEsDAdBgNVHSUE FjAUBggrBgEFBQcDAgYIKwYBBQUHAwQwHQYDVR0OBBYEFCC+uLCjHMzmBYFvRy9/OzT7R6hT MB8GA1UdIwQYMBaAFK5Vg2/sMcq59x36r2sx88gd46y7MIGBBgNVHREEejB4gRBvbWVuQG1h bmRhcmIuY29tgRBvbWVuQG1hbmRhcmIuY29tgRNvbWVuLndpbGRAZ21haWwuY29tgRdvbWVu QGFzbXVuZHNvbi13aWxkLmNvbYESb21lbkB0cmVlZGF2aXMub3JngRBvbWVuQHVjZGF2aXMu ZWR1MIICIQYDVR0gBIICGDCCAhQwggIQBgsrBgEEAYG1NwECAjCCAf8wLgYIKwYBBQUHAgEW Imh0dHA6Ly93d3cuc3RhcnRzc2wuY29tL3BvbGljeS5wZGYwNAYIKwYBBQUHAgEWKGh0dHA6 Ly93d3cuc3RhcnRzc2wuY29tL2ludGVybWVkaWF0ZS5wZGYwgfcGCCsGAQUFBwICMIHqMCcW IFN0YXJ0Q29tIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MAMCAQEagb5UaGlzIGNlcnRpZmlj YXRlIHdhcyBpc3N1ZWQgYWNjb3JkaW5nIHRvIHRoZSBDbGFzcyAyIFZhbGlkYXRpb24gcmVx dWlyZW1lbnRzIG9mIHRoZSBTdGFydENvbSBDQSBwb2xpY3ksIHJlbGlhbmNlIG9ubHkgZm9y IHRoZSBpbnRlbmRlZCBwdXJwb3NlIGluIGNvbXBsaWFuY2Ugb2YgdGhlIHJlbHlpbmcgcGFy dHkgb2JsaWdhdGlvbnMuMIGcBggrBgEFBQcCAjCBjzAnFiBTdGFydENvbSBDZXJ0aWZpY2F0 aW9uIEF1dGhvcml0eTADAgECGmRMaWFiaWxpdHkgYW5kIHdhcnJhbnRpZXMgYXJlIGxpbWl0 ZWQhIFNlZSBzZWN0aW9uICJMZWdhbCBhbmQgTGltaXRhdGlvbnMiIG9mIHRoZSBTdGFydENv bSBDQSBwb2xpY3kuMDYGA1UdHwQvMC0wK6ApoCeGJWh0dHA6Ly9jcmwuc3RhcnRzc2wuY29t L2NydHUyLWNybC5jcmwwgY4GCCsGAQUFBwEBBIGBMH8wOQYIKwYBBQUHMAGGLWh0dHA6Ly9v Y3NwLnN0YXJ0c3NsLmNvbS9zdWIvY2xhc3MyL2NsaWVudC9jYTBCBggrBgEFBQcwAoY2aHR0 cDovL2FpYS5zdGFydHNzbC5jb20vY2VydHMvc3ViLmNsYXNzMi5jbGllbnQuY2EuY3J0MCMG A1UdEgQcMBqGGGh0dHA6Ly93d3cuc3RhcnRzc2wuY29tLzANBgkqhkiG9w0BAQUFAAOCAQEA xTMXGZ3KYLF/4W1mZqFxf+4JqpRF8DmfIQs7jG0pM4/E8W18xuzlU9ROgqNduc4HXw6YHLhO etG+/+FYrFhkeNOGS8JOsiXKRI/7/YMedDiTeBdzhL+lZaroqhPLpWcM2fpfIL8o6MbFKg1t hid//ZYc0sobyDlrb9OMmxAxU0NtNcF8z4osd+fzPb3tRlmY8dXU+UB5Z7LBlTAMBl6hXPWh 63KZWyRvbzq1gVBLSeSsPgELH9XvckRZfklXfzWphq93PmJSQnLB4MpfovjJlvP5x4JvpB1M giaDD7pHzAn97TsPkaX8IG/7JqVQKAsjNzKpWbfwN3zszJN4ZB5LbzGCApYwggKSAgEBMIGT MIGMMQswCQYDVQQGEwJJTDEWMBQGA1UEChMNU3RhcnRDb20gTHRkLjErMCkGA1UECxMiU2Vj dXJlIERpZ2l0YWwgQ2VydGlmaWNhdGUgU2lnbmluZzE4MDYGA1UEAxMvU3RhcnRDb20gQ2xh c3MgMiBQcmltYXJ5IEludGVybWVkaWF0ZSBDbGllbnQgQ0ECAh0vMAkGBSsOAwIaBQCggdgw GAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMTMwNDAyMDI1NjI3 WjAjBgkqhkiG9w0BCQQxFgQUhHkbQ+p4YiqoNkLKGdlUGS5wJfAweQYJKoZIhvcNAQkPMWww ajALBglghkgBZQMEASowCwYJYIZIAWUDBAEWMAsGCWCGSAFlAwQBAjAKBggqhkiG9w0DBzAO BggqhkiG9w0DAgICAIAwDQYIKoZIhvcNAwICAUAwBwYFKw4DAgcwDQYIKoZIhvcNAwICASgw DQYJKoZIhvcNAQEBBQAEggEAOVosNYMSKbXR1l9htPrkRfO+ZiRNNOiK5cXNqCo44f1FFvBb /7HtY6JyAIuW2GN3OvnEYB9ufjaBmudS7EYJH9uyf1DHMTyxtr29MbNP2pMXeVQZnTETCYLF QqGQdmHFUlvwz8wIxIUQvcd/0oWwJg+UOwWoC+QUK4tVBlGXX/2RVjZto/pPQLzfqj9OG+Kt 45r9u3FMyNxOALUQUC0vdNHrNAkZNBsMlyHg/U6jYGKulvig/EH5/vAikdWK9hcBJEfyv8jl P7Z2n7c0EKhMvkAPOyHEx5eGE2NPnkxGzjTAe3yvdGKbEmBmiWOdAhXWq49F810y37esA+7c GrkF3w== --opJtzjQTFsWo+cga--