Intel AES-NI dmcrypt benchmark with i7-620M on Debian Squeeze

Flattr this
Tweet this: Intel AES-NI dmcrypt benchmark with i7-620M on Debian Squeeze
Dent this: Intel AES-NI dmcrypt benchmark with i7-620M on Debian Squeeze
Datum: 23.05.2010 00:05:45

A benchmarks showing how awesome fast dmcrypt is with AES-NI.

A benchmarks showing how awesome fast dmcrypt is with AES-NI. AES-NI was the main-cause I choose an i7-620M dualcore instead of an i7-720QM quadcore, since there are no quadcores with aes-ni yet, the only more than 2-core cpus with AES-NI are 6-core XEONs.

1021944+0 records in
1021944+0 records out
523235328 bytes (523 MB) copied, 0.915509 s, 572 MB/s
1021944+0 records in
1021944+0 records out
523235328 bytes (523 MB) copied, 0.917671 s, 570 MB/s
1021944+0 records in
1021944+0 records out
523235328 bytes (523 MB) copied, 0.90225 s, 580 MB/s
1021944+0 records in
1021944+0 records out
523235328 bytes (523 MB) copied, 0.920597 s, 568 MB/s
1021944+0 records in
1021944+0 records out
523235328 bytes (523 MB) copied, 0.915225 s, 572 MB/s
1021944+0 records in
1021944+0 records out
523235328 bytes (523 MB) copied, 0.915535 s, 572 MB/s
1021944+0 records in
1021944+0 records out
523235328 bytes (523 MB) copied, 0.912177 s, 574 MB/s
1021944+0 records in
1021944+0 records out
523235328 bytes (523 MB) copied, 0.919594 s, 569 MB/s
1021944+0 records in
1021944+0 records out
523235328 bytes (523 MB) copied, 0.900472 s, 581 MB/s
1021944+0 records in
1021944+0 records out
523235328 bytes (523 MB) copied, 0.919543 s, 569 MB/s

About 570mb/s ... should be enough for a SSD and having some power for work :)

Run tests are based on the test-setup described here in the german debianforum-wiki:

Debian Forum Wiki - BenchmarkFestplattenverschlüsselung

using a ramdrive to copy a 500mb file.

With deactivated AES-NI I only have tested on an old Kubuntu 8.04 with 32bit kernel, because running a completely encrypted system I can't unload aes-ni while running, and the newer live-cd's (grml64, ubuntu 10.04) I had lying around didn't boot on my new notebook. So the comparision isn't really fair, the values I got on my first test-installation of squeeze without aes-ni (but didn't save before reinstalling) where between 95 and 120mb/s with a running gnome and stuff.

1021944+0 Datensätze ein
1021944+0 Datensätze aus
523235328 Bytes (523 MB) kopiert, 5,21284 s, 100 MB/s
1021944+0 Datensätze ein
1021944+0 Datensätze aus
523235328 Bytes (523 MB) kopiert, 5,26647 s, 99,4 MB/s
1021944+0 Datensätze ein
1021944+0 Datensätze aus
523235328 Bytes (523 MB) kopiert, 5,37728 s, 97,3 MB/s
1021944+0 Datensätze ein
1021944+0 Datensätze aus
523235328 Bytes (523 MB) kopiert, 5,26647 s, 99,4 MB/s
1021944+0 Datensätze ein
1021944+0 Datensätze aus
523235328 Bytes (523 MB) kopiert, 5,23903 s, 99,9 MB/s
1021944+0 Datensätze ein
1021944+0 Datensätze aus
523235328 Bytes (523 MB) kopiert, 5,22523 s, 100 MB/s
1021944+0 Datensätze ein
1021944+0 Datensätze aus
523235328 Bytes (523 MB) kopiert, 5,10732 s, 102 MB/s
1021944+0 Datensätze ein
1021944+0 Datensätze aus
523235328 Bytes (523 MB) kopiert, 5,12601 s, 102 MB/s
1021944+0 Datensätze ein
1021944+0 Datensätze aus
523235328 Bytes (523 MB) kopiert, 4,94373 s, 106 MB/s
1021944+0 Datensätze ein
1021944+0 Datensätze aus
523235328 Bytes (523 MB) kopiert, 5,13347 s, 102 MB/s

Running Kubuntu 8.04 (Linux ubuntu 2.6.24-16-generic #1 SMP Thu Apr 10 13:23:42 UTC 2008 i686 GNU/Linux)

Compared with truecrypt which is able to use multiple processors/cores on one drive (dmcrypt only allows 1 thread per drive) but does not support AES-NI (yet?) dmcrypt with AES-NI is still faster.

Running the Truecrypt-Benchmarks under Windows 7 I got about 250mb/s for AES
More on the Screenshot I took:

Truecrypt i7-620M Benchmark Windows 7

In practice i really don't feel the encryption, not like on my old p4 which could only get about 44mb/s and where copying data from disk to disk was really limited by the cpu.

On the Wiki of the german debianforum you can find more benchmarks of other cpus and systems, some featuring AES-NI too:
Benchmark Festplattenverschlüsselung


Trackbacks (0)

Trackbackurl: http://www.robo47.net/trackback/blogentry/198

Es sind keine Trackbacks vorhanden.


Kommentare (5)

  • Kommentar von Paul am 12.07.2010 23:02:35
    Gravatar Paul

    Note: when using other ciphers (i.e. aes-xts-plain or aes-xts-essiv or aes-cbc-benbi or aes-xts-benbi) the performance drops over 50% to around 250MB/sec.

    aes-cbc-essiv seems to be the fastest.

    it drops further (5-10%) for aes-xts-plain when you use wp512 instead of sha256


  • Kommentar von robo47 am 13.07.2010 07:31:29
    Gravatar robo47

    thx for the info, good to know


  • Kommentar von Benjamin am 29.10.2010 23:48:27
    Gravatar Benjamin

    Is there a way to deactivate AES-NI for the benchmark ? Would like to compare the result with and without...


  • Kommentar von robo47 am 30.10.2010 11:47:56
    Gravatar robo47

    If you use an unecrypted system and don't have any thing which uses aes, you can unload aesni_intel with modprobe and load the normal aes-driver of your system instead.

    If you are running an encrypted system already you need a bios where you can turn it off so that on boot-time the normal aes-driver is loaded, or you need to recompile your kernel without aes-ni support so that the default aes-driver for your system gets loaded.


  • Kommentar von Nj am 10.11.2010 01:18:18
    Gravatar Nj

    Actually, dm-crypt does most work in one thread even for operations on multiple drives at once. I'm running a stock 2.6.32.25 kernel now, and it adds some limited SMP support over my old 2.6.25.6 (it was introduced with 2.6.30).. doesn't help much though, speed improved by maybe 10 or 15%.


Die Kommentare zu diesem Beitrag sind gesperrt.

You liked it ? Link it on your homepage or blog: