On Sun, Jul 20, 2008 at 12:22:24PM -0700, Aaron Stellman wrote: > On Sat, Jul 19, 2008 at 11:58:11AM -0500, Marco Peereboom wrote: > > This might be a good time to try my giant softraid diff that makes > > crypto useful. > > > Hello Marco, > > Greatly appreciate your work on softraid(4). I've decided to play around
Thank hshoexer and djm for the crypto stuff. > with Crypto discipline w/ softraid, created 60GB partition in the > disklabel, marked it as RAID: > > n: 117194175 195382530 RAID > > then created the softraid0 device, backup by sd0n: > > scsibus2 at softraid0: 1 targets, initiator 1 > sd1 at scsibus2 targ 0 lun 0: <OPENBSD, SR CRYPTO, 002> SCSI2 0/direct > fixed > sd1: 57223MB, 7294 cyl, 255 head, 63 sec, 512 bytes/sec, 117194096 sec > total Pretty pretty :-) > > Everything seems fine, performance is not bad at all, ~4% higher than > svnd0 on the same box. (could be the difference of Blowfish_CBC vs > AES_XTS). However, when playing with tools like bonnie++, my T61 w/ > 2.4GHZ duo becomes barely responsive. But, it's perfectly understandable, > writing massive amounts of data to crypto backed device with putc() is > insane. Yes it is. It really is meant as an actual disk device that moves normal amounts of data. The putc/getc stuff doesn't prove or disprove anything anyway. > > Now, on boot, the softraid0 doesn't attach itself to sd0n, perhaps not > implemented yet? I was wondering if there were any plans to create > support for crypto devices so that they could be mounted on boot as > specified in fstab(5). Currently this is deliberate because we haven't implemented boot support yet. This in time will be implemented but not until we can get it right. For now look at the benefit that the disk is there without letting anyone now :-) > > Also, is there any plans to be able to specify which key size you'd > want to use with AES_XTS? Maybe, it is easy enough to implement and if someone can convince me of the benefit of a knob I might add it. > > Thank you.

