From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <yaronf@gmx.com>
Received: from mail.saout.de ([127.0.0.1])
 by localhost (mail.saout.de [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id K6eU1YlrPHRV for <dm-crypt@saout.de>;
 Tue,  1 May 2012 08:38:53 +0200 (CEST)
Received: from mailout-eu.gmx.com (mailout-eu.gmx.com [213.165.64.42])
 by mail.saout.de (Postfix) with SMTP
 for <dm-crypt@saout.de>; Tue,  1 May 2012 08:38:53 +0200 (CEST)
Message-ID: <4F9F821F.2040209@gmx.com>
Date: Tue, 01 May 2012 09:26:39 +0300
From: Yaron Sheffer <yaronf@gmx.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Subject: [dm-crypt] XTS performance
List-Id: <dm-crypt.saout.de>
List-Unsubscribe: <http://www.saout.de/mailman/options/dm-crypt>,
 <mailto:dm-crypt-request@saout.de?subject=unsubscribe>
List-Archive: <http://www.saout.de/pipermail/dm-crypt>
List-Post: <mailto:dm-crypt@saout.de>
List-Help: <mailto:dm-crypt-request@saout.de?subject=help>
List-Subscribe: <http://www.saout.de/mailman/listinfo/dm-crypt>,
 <mailto:dm-crypt-request@saout.de?subject=subscribe>
To: dm-crypt@saout.de

Hi,

Looking back at the archives, it appears that aes-xts-plain in dm-crypt
runs at half the speed of aes-cbc-essiv:
http://www.saout.de/pipermail/dm-crypt/2010-November/001348.html. Milan
explained it at the time by XTS doing 2 AES operations for each
plaintext block. But my understanding of XTS is that it is similar to
ESSIV: 1 AES op per 16-byte block, plus 1 op for the sector.

- Did I misread the definition of XTS, and it's really 2 AES ops per
16-byte block?

- Does anybody have more recent performance comparisons, confirming (or
not) the performance difference?

Thanks,

     Yaron