1. Computers
  2. Display Drivers
  3. Graphics Cards
  4. Memory
  5. Motherboards
  6. Processors
  7. Software
  8. Storage
  9. Operating Systems


Facebook RSS Twitter Twitter Google Plus


Phoronix Test Suite

OpenBenchmarking.org

The Performance Impact Of Linux Disk Encryption On Ubuntu 14.04 LTS

Michael Larabel

Published on 10 March 2014
Written by Michael Larabel
Page 1 of 5 - 30 Comments

For any Linux laptop users or those concerned about their data's safety on production systems, I highly recommend utilizing disk encryption for safeguarding the data. However, what's the performance impact like these days? In this article with the current development snapshot of Ubuntu 14.04 LTS on a modern Intel ultrabook we're looking at the impact (including CPU utilization) of using an eCryptfs-based home directory encryption and LUKS-based full-disk encryption on Ubuntu Linux.

There have been many Phoronix articles over the years looking at disk encryption performance on Linux. With time the cost of using disk encryption has lowered with modern CPUs and encryption implementations supporting AES-NI plus modern systems being faster so the overhead of encrypting the disk is lessened. For our first disk encryption tests of Ubuntu 14.04, which is an important release given that it is a Long-Term Support release and will end up on enterprise systems where encryption is often mandated, we're looking at the disk encryption costs from an Intel ultrabook.

The ultrabook used for this testing was an ASUS Zenbook Prime UX32VDA. This 2013 ASUS Zenbook model features an Intel Core i7 3517U (Ivy Bridge) processor with 4GB of RAM and dual 128GB SanDisk SSDs, but for this article only one of the solid-state drives was used. On the Ubuntu side was a clean 14.04 daily snapshot install using the Linux 3.13.0-16-generic x86_64 kernel.

Besides testing the Ubuntu 14.04 LTS install with its stock install options (no disk encryption), we also tested it with the full disk-encryption method using LUKS on LVM. On modern versions of Ubuntu Linux the option to do the full-disk encryption using LUKS on LVM is provided from the standard Ubiquity LiveCD-based installer and you no longer have to use any alternate CD for having easy access to this option.

The other option that was tested following another clean install on the Zenbook ultrabook was the eCryptfs-based home directory encryption. With this option eCryptfs is used to encrypt the home directory but only the home directory and not the rest of the file-system or temporary storage area. In general, I personally always go for full-disk encryption regardless of the associated performance penalties.

<< Previous Page
1
Latest Linux Hardware Reviews
  1. NVIDIA GeForce GTX 980: The Best GPU For Linux Gamers
  2. ROCCAT LUA: A Linux-Friendly Gaming Mouse
  3. Cheetah Mounts: The Affordable Way To Put Your TV On The Wall
  4. Scythe Mugen MAX
Latest Linux Articles
  1. Preview: Radeon Gallium3D Performance For CS:GO On Linux
  2. XWayland Linux Gaming Performance With GNOME Wayland On Fedora 21
  3. EXT4/Btrfs/XFS/F2FS Benchmarks On Linux 3.17
  4. Fedora 21 Alpha First Impressions: It's Great
Latest Linux News
  1. KDE Plasma 5.1 Now In Beta
  2. Systemd & Debian Were Most Popular In September
  3. Microsoft Announces... Windows 10 With A Start Menu
  4. Borderlands 2 Launches On Steam For Linux
  5. Debian Jessie Might Get Rid Of The kFreeBSD Port
  6. Fedora Might Try A New Scheduling Strategy For Its Releases
  7. AMD's Catalyst Working On A GLSL Shader Cache
  8. OpenMP 4.0 Offloading Is Closer For GCC 5
  9. Wayland Presentation Extension Added To Weston
  10. Intel Skylake Support Rolls Out To Mesa's DRM
Latest Forum Discussions
  1. Updated and Optimized Ubuntu Free Graphics Drivers
  2. Nero CD/DVD Burning Software On Linux Is Dead
  3. New Group Calls For Boycotting Systemd
  4. FSF Issues Statement On Shellshock Bash Vulnerability
  5. X.Org Women Outreach Program Only Turns Up Two Applicants So Far
  6. X.Org Is Looking For Some Female Help
  7. Advertisements On Phoronix
  8. NVIDIA Alerts Nouveau: They're Starting To Sign/Validate GPU Firmware Images