From owner-freebsd-geom@FreeBSD.ORG  Wed May 27 11:03:07 2009
Return-Path: <owner-freebsd-geom@FreeBSD.ORG>
Delivered-To: freebsd-geom@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id A69F41065673
	for <freebsd-geom@freebsd.org>; Wed, 27 May 2009 11:03:07 +0000 (UTC)
	(envelope-from ac@belngo.info)
Received: from ey-out-2122.google.com (ey-out-2122.google.com [74.125.78.27])
	by mx1.freebsd.org (Postfix) with ESMTP id 464768FC22
	for <freebsd-geom@freebsd.org>; Wed, 27 May 2009 11:03:07 +0000 (UTC)
	(envelope-from ac@belngo.info)
Received: by ey-out-2122.google.com with SMTP id 9so936565eyd.7
	for <freebsd-geom@freebsd.org>; Wed, 27 May 2009 04:03:06 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.210.91.7 with SMTP id o7mr1564846ebb.79.1243420309521; Wed, 27 
	May 2009 03:31:49 -0700 (PDT)
In-Reply-To: <gvj1de$jcr$1@ger.gmane.org>
References: <cf9b1ee00905261637h248ae118i60068ab434e115be@mail.gmail.com>
	<gvj1de$jcr$1@ger.gmane.org>
Date: Wed, 27 May 2009 13:31:49 +0300
Message-ID: <5709ce310905270331t38952f66uf872a85b3e799596@mail.gmail.com>
From: Alaksiej C <ac@belngo.info>
To: freebsd-geom@freebsd.org
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Subject: Re: GELI encryption - CPU requirements?
X-BeenThere: freebsd-geom@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: GEOM-specific discussions and implementations
	<freebsd-geom.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-geom>,
	<mailto:freebsd-geom-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-geom>
List-Post: <mailto:freebsd-geom@freebsd.org>
List-Help: <mailto:freebsd-geom-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-geom>,
	<mailto:freebsd-geom-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 27 May 2009 11:03:08 -0000

Ivan Voras <ivoras@freebsd.org>:
> Except if you're really paranoid, you might want to relax your security
> requirements and use aes-128 without essentially reducing your practical
> security.


It's true.

Also, sector size option (-s) could help you. Larger its value -
faster ciphering, for the price of less optimal disk space usage, of
course.