From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <dpchrist@holgerdanske.com>
Received: from holgerdanske.com (holgerdanske.com [184.105.128.27])
 by mail.server123.net (Postfix) with SMTP
 for <dm-crypt@saout.de>; Fri,  3 Jun 2016 04:47:01 +0200 (CEST)
Received: from ::ffff:99.100.19.101 ([99.100.19.101]) by holgerdanske.com
 for <dm-crypt@saout.de>; Thu, 2 Jun 2016 19:41:30 -0700
References: <1464911269.14592.52.camel@scientia.net>
From: David Christensen <dpchrist@holgerdanske.com>
Message-ID: <5750EE68.2050006@holgerdanske.com>
Date: Thu, 2 Jun 2016 19:41:44 -0700
MIME-Version: 1.0
In-Reply-To: <1464911269.14592.52.camel@scientia.net>
Content-Type: text/plain; charset=windows-1252; format=flowed
Content-Transfer-Encoding: 7bit
Subject: Re: [dm-crypt] security concerns with RAID on top of dmcrpyt and
 with mulitple devices with the same key slot key?
List-Id: <dm-crypt.saout.de>
List-Unsubscribe: <http://www.saout.de/mailman/options/dm-crypt>,
 <mailto:dm-crypt-request@saout.de?subject=unsubscribe>
List-Archive: <http://www.saout.de/pipermail/dm-crypt/>
List-Post: <mailto:dm-crypt@saout.de>
List-Help: <mailto:dm-crypt-request@saout.de?subject=help>
List-Subscribe: <http://www.saout.de/mailman/listinfo/dm-crypt>,
 <mailto:dm-crypt-request@saout.de?subject=subscribe>
To: dm-crypt@saout.de

On 06/02/2016 04:47 PM, Christoph Anton Mitterer wrote:
> ... RAID (e.g. btrfs RAID or MD RAID) on top of dmcrypt devices?
> Any performance or stability issues with such setup?

If you put encryption on top of a RAID of N devices, your CPU will have 
to process one layer of encryption.  If you put a RAID on top of N 
encrypted devices, your CPU will have to process N layers of encryption. 
  But if you have enough cores and/or AES-NI, the latter might perform 
better.  Benchmark to find out.


For stability, the kernel, device drivers, dm-crypt, LVM, btrfs, etc., 
need to function correctly under concurrent workloads.  Choose your 
software accordingly.


David