Intel AES-NI dmcrypt benchmark with i7-620M on Debian Squeeze
A benchmarks showing how awesome fast dmcrypt is with AES-NI.
A benchmarks showing how awesome fast dmcrypt is with AES-NI. AES-NI was the main-cause I choose an i7-620M dualcore instead of an i7-720QM quadcore, since there are no quadcores with aes-ni yet, the only more than 2-core cpus with AES-NI are 6-core XEONs.
1021944+0 records in 1021944+0 records out 523235328 bytes (523 MB) copied, 0.915509 s, 572 MB/s 1021944+0 records in 1021944+0 records out 523235328 bytes (523 MB) copied, 0.917671 s, 570 MB/s 1021944+0 records in 1021944+0 records out 523235328 bytes (523 MB) copied, 0.90225 s, 580 MB/s 1021944+0 records in 1021944+0 records out 523235328 bytes (523 MB) copied, 0.920597 s, 568 MB/s 1021944+0 records in 1021944+0 records out 523235328 bytes (523 MB) copied, 0.915225 s, 572 MB/s 1021944+0 records in 1021944+0 records out 523235328 bytes (523 MB) copied, 0.915535 s, 572 MB/s 1021944+0 records in 1021944+0 records out 523235328 bytes (523 MB) copied, 0.912177 s, 574 MB/s 1021944+0 records in 1021944+0 records out 523235328 bytes (523 MB) copied, 0.919594 s, 569 MB/s 1021944+0 records in 1021944+0 records out 523235328 bytes (523 MB) copied, 0.900472 s, 581 MB/s 1021944+0 records in 1021944+0 records out 523235328 bytes (523 MB) copied, 0.919543 s, 569 MB/s
About 570mb/s ... should be enough for a SSD and having some power for work :)
Run tests are based on the test-setup described here in the german debianforum-wiki:
Debian Forum Wiki - BenchmarkFestplattenverschlüsselung
using a ramdrive to copy a 500mb file.
With deactivated AES-NI I only have tested on an old Kubuntu 8.04 with 32bit kernel, because running a completely encrypted system I can't unload aes-ni while running, and the newer live-cd's (grml64, ubuntu 10.04) I had lying around didn't boot on my new notebook. So the comparision isn't really fair, the values I got on my first test-installation of squeeze without aes-ni (but didn't save before reinstalling) where between 95 and 120mb/s with a running gnome and stuff.
1021944+0 Datensätze ein 1021944+0 Datensätze aus 523235328 Bytes (523 MB) kopiert, 5,21284 s, 100 MB/s 1021944+0 Datensätze ein 1021944+0 Datensätze aus 523235328 Bytes (523 MB) kopiert, 5,26647 s, 99,4 MB/s 1021944+0 Datensätze ein 1021944+0 Datensätze aus 523235328 Bytes (523 MB) kopiert, 5,37728 s, 97,3 MB/s 1021944+0 Datensätze ein 1021944+0 Datensätze aus 523235328 Bytes (523 MB) kopiert, 5,26647 s, 99,4 MB/s 1021944+0 Datensätze ein 1021944+0 Datensätze aus 523235328 Bytes (523 MB) kopiert, 5,23903 s, 99,9 MB/s 1021944+0 Datensätze ein 1021944+0 Datensätze aus 523235328 Bytes (523 MB) kopiert, 5,22523 s, 100 MB/s 1021944+0 Datensätze ein 1021944+0 Datensätze aus 523235328 Bytes (523 MB) kopiert, 5,10732 s, 102 MB/s 1021944+0 Datensätze ein 1021944+0 Datensätze aus 523235328 Bytes (523 MB) kopiert, 5,12601 s, 102 MB/s 1021944+0 Datensätze ein 1021944+0 Datensätze aus 523235328 Bytes (523 MB) kopiert, 4,94373 s, 106 MB/s 1021944+0 Datensätze ein 1021944+0 Datensätze aus 523235328 Bytes (523 MB) kopiert, 5,13347 s, 102 MB/s
Running Kubuntu 8.04 (Linux ubuntu 2.6.24-16-generic #1 SMP Thu Apr 10 13:23:42 UTC 2008 i686 GNU/Linux)
Compared with truecrypt which is able to use multiple processors/cores on one drive (dmcrypt only allows 1 thread per drive) but does not support AES-NI (yet?) dmcrypt with AES-NI is still faster.
Running the Truecrypt-Benchmarks under Windows 7 I got about 250mb/s for AES
More on the Screenshot I took:
In practice i really don't feel the encryption, not like on my old p4 which could only get about 44mb/s and where copying data from disk to disk was really limited by the cpu.
On the Wiki of the german debianforum you can find more benchmarks of other cpus and systems, some featuring AES-NI too:
Benchmark Festplattenverschlüsselung
Trackbacks (0)
Trackbackurl: http://www.robo47.net/trackback/blogentry/198Es sind keine Trackbacks vorhanden.
You liked it ? Link it on your homepage or blog:
Benjamin Steininger ist Webentwickler auf der Suche nach einem neuen Job und
photographiert sehr gerne. Er beschäftigt sich viel mit dem Internet, PHP, Symfony, Testing und hat einen
Kommentare (5)
Note: when using other ciphers (i.e. aes-xts-plain or aes-xts-essiv or aes-cbc-benbi or aes-xts-benbi) the performance drops over 50% to around 250MB/sec.
aes-cbc-essiv seems to be the fastest.
it drops further (5-10%) for aes-xts-plain when you use wp512 instead of sha256
thx for the info, good to know
Is there a way to deactivate AES-NI for the benchmark ? Would like to compare the result with and without...
If you use an unecrypted system and don't have any thing which uses aes, you can unload aesni_intel with modprobe and load the normal aes-driver of your system instead.
If you are running an encrypted system already you need a bios where you can turn it off so that on boot-time the normal aes-driver is loaded, or you need to recompile your kernel without aes-ni support so that the default aes-driver for your system gets loaded.
Actually, dm-crypt does most work in one thread even for operations on multiple drives at once. I'm running a stock 2.6.32.25 kernel now, and it adds some limited SMP support over my old 2.6.25.6 (it was introduced with 2.6.30).. doesn't help much though, speed improved by maybe 10 or 15%.
Die Kommentare zu diesem Beitrag sind gesperrt.