You are not logged in.
Hello I'm a relatively new user trying to do a new install of Arch using whole-drive encyption on root and swap where I hope to run ZFS with the encryption. Well I haven't gotten very far for when I run `cryptsetup benchmark` I get a message telling me I haven't loaded the right module for crypto.
root@archiso ~ # cryptsetup benchmark
# Tests are approximate using memory only (no storage IO).
PBKDF2-sha1 436906 iterations per second
PBKDF2-sha256 271089 iterations per second
PBKDF2-sha512 202584 iterations per second
PBKDF2-ripemd160 262144 iterations per second
PBKDF2-whirlpool 88922 iterations per second
Required kernel crypto interface not available.
Ensure you have algif_skcipher kernel module loaded.
cryptsetup benchmark 5.30s user 0.00s system 99% cpu 5.306 total
1 root@archiso ~ # :(
Checking `lsmod` tells me dm_mod is loaded. Not sure if that includes dm_crypt or not.
root@archiso ~ # lsmod | grep mod
dm_mod 93484 4 dm_bufio,dm_snapshot
sd_mod 44356 2
sr_mod 21903 0
crc_t10dif 12431 1 sd_mod
cdrom 47479 1 sr_mod
scsi_mod 142915 5 uas,usb_storage,libata,sd_mod,sr_mod
I am trying to use serpent as my cipher if it matters.
1 root@archiso ~ # cryptsetup -c serpent-xts-plain64 -h sha512 -i 2500 --use-random -s 512 luksFormat /dev/sda6
Does nothing, however. Any hints?
Last edited by JJMckay (2014-09-24 18:28:27)
Offline
If you don't intend to use that cipher, you can just as well specify directly what you want.
> cryptsetup benchmark -c aes-xts-plain64 -s 256
# Tests are approximate using memory only (no storage IO).
# Algorithm | Key | Encryption | Decryption
aes-xts 256b 2614.4 MiB/s 2721.1 MiB/s
> cryptsetup benchmark -c aes-xts-plain64 -s 512
# Tests are approximate using memory only (no storage IO).
# Algorithm | Key | Encryption | Decryption
aes-xts 512b 1934.3 MiB/s 2048.5 MiB/s
Offline
Seems for whatever reason the dm_crypt module wasn't loaded. Upon reboot and making sure it was loaded (with `modprobe dm_mod` and `modprobe dm_crypt`) I was able to benchmark them and encrypt my disk partition.
root@archiso ~ # cryptsetup benchmark
# Tests are approximate using memory only (no storage IO).
PBKDF2-sha1 434733 iterations per second
PBKDF2-sha256 271933 iterations per second
PBKDF2-sha512 200415 iterations per second
PBKDF2-ripemd160 264791 iterations per second
PBKDF2-whirlpool 90269 iterations per second
# Algorithm | Key | Encryption | Decryption
aes-cbc 128b 87.3 MiB/s 101.5 MiB/s
serpent-cbc 128b 33.1 MiB/s 123.1 MiB/s
twofish-cbc 128b 85.3 MiB/s 112.7 MiB/s
aes-cbc 256b 68.7 MiB/s 77.0 MiB/s
serpent-cbc 256b 33.1 MiB/s 123.3 MiB/s
twofish-cbc 256b 85.3 MiB/s 112.6 MiB/s
aes-xts 256b 101.5 MiB/s 101.9 MiB/s
serpent-xts 256b 110.5 MiB/s 115.6 MiB/s
twofish-xts 256b 104.1 MiB/s 105.0 MiB/s
aes-xts 512b 76.8 MiB/s 76.8 MiB/s
serpent-xts 512b 110.5 MiB/s 115.5 MiB/s
twofish-xts 512b 104.1 MiB/s 104.9 MiB/s
cryptsetup benchmark 4.79s user 23.94s system 99% cpu 28.954 total
root@archiso ~ # cryptsetup -c serpent-xts-plain64 -h sha512 -i 2500 --use-random -s 512 luksFormat /dev/sda4
WARNING!
========
This will overwrite data on /dev/sda4 irrevocably.
Are you sure? (Type uppercase yes): YES
Enter passphrase:
Verify passphrase:
root@archiso ~ #
Offline
Please remember to mark your thread as [Solved] by editing your first post and prepending it to the title.
Offline