OpenBSD Journal

Comparing Encrypted Volumes in OpenBSD

Contributed by jason on from the leaning-on-the-blogosphere dept.

Nick Schmidt has written a series of blog posts on encrypted volumes in OpenBSD. He starts off by introducing our options and covering their limitations in OpenBSD Disk Encryption Options softraid and svnd. Nick demonstrates how to setup and manage an encrypted RAID drive with softraid and bioctl in Configuring OpenBSD softraid for encryption.

Next he shows how to use the old-fashioned svnd method in Configuring OpenBSD svnd for Encrypted Volumes which, by his own admission, is not officially supported, but is generally less cumbersome during the boot process. Finally, he also compiles a rough benchmark of each method's performance in OpenBSD Drive Encryption Benchmarks.

Editor's Note: Nick would like to emphasize that his benchmarks are purely informational and should be taken with a grain of salt. Any serious comparison between these two encryption techniques should be further scrutinized before making a decision for your production systems.

(Comments are closed)

  1. By Ben Calvert (flying_walrus) on

    from tfa:

    The testing was done with two identical OpenBSD 4.8 installs running in VMware Fusion 3.1 on a Mac Mini Server

    wow. just... wow.


Copyright © - Daniel Hartmeier. All rights reserved. Articles and comments are copyright their respective authors, submission implies license to publish on this web site. Contents of the archive prior to as well as images and HTML templates were copied from the fabulous original with Jose's and Jim's kind permission. This journal runs as CGI with httpd(8) on OpenBSD, the source code is BSD licensed. undeadly \Un*dead"ly\, a. Not subject to death; immortal. [Obs.]