Hacker News new | ask | show | jobs
by _joel 1833 days ago
Did you try different ciphers? Whilst there's no AES acceleration there are other ciphers that can leverage the hardware better. i.e. ChaCha20
1 comments
tcas 1833 days ago
Not really, I mostly cared about AES which was around 25x faster. Here's what a NanoPi M4 does:

  Cryptsetup
  #     Algorithm |       Key |      Encryption |      Decryption
          aes-cbc        128b       465.5 MiB/s       654.0 MiB/s
  
  OpenSSL Speed for ChaCha
  type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes  16384 bytes
  chacha20-poly1305    85242.48k   144024.55k   265936.64k   309418.33k   317977.94k   317658.45k
vs Pi4

  Cryptsetup
  #     Algorithm |       Key |      Encryption |      Decryption
          aes-cbc        128b        18.9 MiB/s        31.9 MiB/s
  
  OpenSSL Speed for ChaCha
  type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes  16384 bytes
  chacha20-poly1305    24833.53k    55555.22k    90574.34k    99022.17k   102659.41k   100592.30k
link
_joel 1832 days ago
Could always try AES-Adiantum for storage encryption. https://www.raspberrypi.org/forums/viewtopic.php?t=275542
link