Cryptographic filesystem benchmark

[alphazo]

I wrote about encFS many years ago on this forum and wanted to provide an update. A number of new alternatives have emerged and unRAID architecture has changed quite a bit.

Block device encryption remain the fastest way to protect a hard drive especially if the CPU provides AES-NI instructions.

Will unRAID be ever able to mount external dm-crypt encrypted USB drive used for backups?

Now for NAS/unRAID storage and also Cloud storage a per file encryption is prefered and encFS has been around for quite some time but has never been perfect security and performance wise.

I recently cam across a couple of new projects that aim to be an alternative to encFS such as :

gocryptfs https://github.com/rfjakob/gocryptfs

securefs https://github.com/netheril96/securefs

 

I ran a simple benchmark on a desktop and a SSD and wanted to share it with the unRAID community.

https://gist.github.com/alphazo/09a2e523e22e7aa00d491ab67678dd80

[boof]

There is also ecryptfs which has some level of kernel adoption.

 

It's what ubuntu (perhaps others?) use to provide encrypted homedirs etc I believe.

 

It can behave in the same way as encfs (normal user, single directory)

 

https://en.wikipedia.org/wiki/ECryptfs