[relium]

The ones I remember most affecting performance were zeroing allocated memory and the Spectre/Meltdown fix. Also, the first launch of a new app is slow in order to check the signature. Whole disk encryption is pretty fast today, but probably is a bit slower than unencrypted. The original FileVault using disk images was even slower.

[mcculley]

> Whole disk encryption is pretty fast today, but probably is a bit slower than unencrypted.

Isn’t whole disk encryption nowadays done in hardware on the storage controller?

[astrange]

It's not whole-disk encryption, it's file-level encryption which is better. (more security guarantees)

Zeroing allocated memory is complicated because it also has performance benefits, since it improves compressed swap.