Is it possible to speed up the disk decryption process without compromising security?

System:
  Kernel: 6.4.7-hardened1-2-hardened arch: x86_64 bits: 64 compiler: gcc
    v: 13.2.1 parameters: pti=on page_alloc.shuffle=1
    BOOT_IMAGE=/@/boot/vmlinuz-linux-hardened
    root=UUID=d16ddc96-5d12-402f-bbcb-9fa585484f0b rw rootflags=subvol=@
    cryptdevice=UUID=3c647ba3-56c7-43a5-bafc-5f6213b05312:luks-3c647ba3-56c7-43a5-bafc-5f6213b05312
    root=/dev/mapper/luks-3c647ba3-56c7-43a5-bafc-5f6213b05312
    rd.udev.log_priority=3 vt.global_cursor_default=0 loglevel=3 ibt=off
  Desktop: KDE Plasma v: 5.27.7 tk: Qt v: 5.15.10 info: latte-dock
    wm: kwin_x11 vt: 2 dm: SDDM Distro: Garuda Linux base: Arch Linux
Machine:
  Type: Laptop System: LENOVO product: 82C7 v: Lenovo V15-ADA
    serial: <superuser required> Chassis: type: 10 v: Lenovo V15-ADA
    serial: <superuser required>
  Mobo: LENOVO model: LNVNB161216 v: No DPK serial: <superuser required>
    UEFI: LENOVO v: E8CN30WW date: 07/28/2021
Battery:
  ID-1: BAT0 charge: 14.6 Wh (43.6%) condition: 33.5/35.3 Wh (94.8%)
    power: 6.9 W volts: 7.5 min: 7.6 model: CPT-COS L16C2PB1 type: Li-poly
    serial: <filter> status: discharging cycles: 173
CPU:
  Info: model: AMD Ryzen 5 3500U with Radeon Vega Mobile Gfx bits: 64
    type: MT MCP arch: Zen/Zen+ note: check gen: 1 level: v3 note: check
    built: 2019 process: GF 12nm family: 0x17 (23) model-id: 0x18 (24)
    stepping: 1 microcode: 0x8108109
  Topology: cpus: 1x cores: 4 tpc: 2 threads: 8 smt: enabled cache:
    L1: 384 KiB desc: d-4x32 KiB; i-4x64 KiB L2: 2 MiB desc: 4x512 KiB L3: 4 MiB
    desc: 1x4 MiB
  Speed (MHz): avg: 1339 high: 1400 min/max: 1400/2100 boost: enabled
    scaling: driver: acpi-cpufreq governor: schedutil cores: 1: 1223 2: 1223
    3: 1267 4: 1400 5: 1400 6: 1400 7: 1400 8: 1400 bogomips: 33546
  Flags: avx avx2 ht lm nx pae sse sse2 sse3 sse4_1 sse4_2 sse4a ssse3 svm
  Vulnerabilities: <filter>
Graphics:
  Device-1: AMD Picasso/Raven 2 [Radeon Vega Series / Radeon Mobile Series]
    vendor: Lenovo driver: amdgpu v: kernel arch: GCN-5 code: Vega
    process: GF 14nm built: 2017-20 pcie: gen: 3 speed: 8 GT/s lanes: 16
    ports: active: eDP-1 empty: HDMI-A-1 bus-ID: 03:00.0 chip-ID: 1002:15d8
    class-ID: 0300 temp: 45.0 C
  Device-2: IMC Networks Integrated Camera driver: uvcvideo type: USB
    rev: 2.0 speed: 480 Mb/s lanes: 1 mode: 2.0 bus-ID: 3-1:2 chip-ID: 13d3:5a08
    class-ID: 0e02 serial: <filter>
  Display: x11 server: X.Org v: 21.1.8 with: Xwayland v: 23.1.2
    compositor: kwin_x11 driver: X: loaded: modesetting alternate: fbdev,vesa
    dri: radeonsi gpu: amdgpu display-ID: :0 screens: 1
  Screen-1: 0 s-res: 1920x1080 s-dpi: 96 s-size: 508x285mm (20.00x11.22")
    s-diag: 582mm (22.93")
  Monitor-1: eDP-1 model: BOE Display 0x0812 built: 2018 res: 1920x1080
    hz: 60 dpi: 142 gamma: 1.2 size: 344x194mm (13.54x7.64") diag: 395mm (15.5")
    ratio: 16:9 modes: max: 1920x1080 min: 640x480
  API: OpenGL v: 4.6 Mesa 23.1.5 renderer: AMD Radeon Vega 8 Graphics
    (raven LLVM 15.0.7 DRM 3.52 6.4.7-hardened1-2-hardened) direct-render: Yes
Audio:
  Device-1: AMD Raven/Raven2/Fenghuang HDMI/DP Audio vendor: Lenovo
    driver: snd_hda_intel v: kernel pcie: gen: 3 speed: 8 GT/s lanes: 16
    bus-ID: 03:00.1 chip-ID: 1002:15de class-ID: 0403
  Device-2: AMD ACP/ACP3X/ACP6x Audio Coprocessor vendor: Lenovo
    driver: snd_pci_acp3x v: kernel alternate: snd_rn_pci_acp3x, snd_pci_acp5x,
    snd_pci_acp6x, snd_acp_pci, snd_rpl_pci_acp6x, snd_pci_ps,
    snd_sof_amd_renoir, snd_sof_amd_rembrandt pcie: gen: 3 speed: 8 GT/s
    lanes: 16 bus-ID: 03:00.5 chip-ID: 1022:15e2 class-ID: 0480
  Device-3: AMD Family 17h/19h HD Audio vendor: Lenovo driver: snd_hda_intel
    v: kernel pcie: gen: 3 speed: 8 GT/s lanes: 16 bus-ID: 03:00.6
    chip-ID: 1022:15e3 class-ID: 0403
  API: ALSA v: k6.4.7-hardened1-2-hardened status: kernel-api tools: N/A
  Server-1: PipeWire v: 0.3.77 status: active with: 1: pipewire-pulse
    status: active 2: wireplumber status: active 3: pipewire-alsa type: plugin
    4: pw-jack type: plugin tools: pactl,pw-cat,pw-cli,wpctl
Network:
  Device-1: Qualcomm Atheros QCA6174 802.11ac Wireless Network Adapter
    vendor: Lenovo driver: ath10k_pci v: kernel pcie: gen: 1 speed: 2.5 GT/s
    lanes: 1 bus-ID: 02:00.0 chip-ID: 168c:003e class-ID: 0280 temp: 48.0 C
  IF: wlp2s0 state: up mac: <filter>
Bluetooth:
  Device-1: Qualcomm Atheros QCA61x4 Bluetooth 4.0 driver: btusb v: 0.8
    type: USB rev: 2.0 speed: 12 Mb/s lanes: 1 mode: 1.1 bus-ID: 3-2:3
    chip-ID: 0cf3:e300 class-ID: e001
  Report: bt-adapter note: tool can't run ID: hci0 rfk-id: 4 state: down
    bt-service: disabled rfk-block: hardware: no software: yes address: N/A
Drives:
  Local Storage: total: 700.51 GiB used: 292.37 GiB (41.7%)
  SMART Message: Unable to run smartctl. Root privileges required.
  ID-1: /dev/nvme0n1 maj-min: 259:0 vendor: Samsung
    model: MZALQ512HALU-000L2 size: 476.94 GiB block-size: physical: 512 B
    logical: 512 B speed: 31.6 Gb/s lanes: 4 tech: SSD serial: <filter>
    fw-rev: BL2QFXV7 temp: 24.9 C scheme: GPT
  ID-2: /dev/sda maj-min: 8:0 vendor: Crucial model: CT240BX500SSD1
    size: 223.57 GiB block-size: physical: 512 B logical: 512 B speed: 6.0 Gb/s
    tech: SSD serial: <filter> fw-rev: 041 scheme: GPT
Partition:
  ID-1: / raw-size: 467.84 GiB size: 467.84 GiB (100.00%)
    used: 292.34 GiB (62.5%) fs: btrfs dev: /dev/dm-0 maj-min: 254:0
    mapped: luks-3c647ba3-56c7-43a5-bafc-5f6213b05312
  ID-2: /home raw-size: 467.84 GiB size: 467.84 GiB (100.00%)
    used: 292.34 GiB (62.5%) fs: btrfs dev: /dev/dm-0 maj-min: 254:0
    mapped: luks-3c647ba3-56c7-43a5-bafc-5f6213b05312
  ID-3: /var/log raw-size: 467.84 GiB size: 467.84 GiB (100.00%)
    used: 292.34 GiB (62.5%) fs: btrfs dev: /dev/dm-0 maj-min: 254:0
    mapped: luks-3c647ba3-56c7-43a5-bafc-5f6213b05312
  ID-4: /var/tmp raw-size: 467.84 GiB size: 467.84 GiB (100.00%)
    used: 292.34 GiB (62.5%) fs: btrfs dev: /dev/dm-0 maj-min: 254:0
    mapped: luks-3c647ba3-56c7-43a5-bafc-5f6213b05312
Swap:
  Kernel: swappiness: 133 (default 60) cache-pressure: 100 (default)
  ID-1: swap-1 type: zram size: 17.45 GiB used: 260 KiB (0.0%) priority: 100
    dev: /dev/zram0
  ID-2: swap-2 type: partition size: 8.8 GiB used: 0 KiB (0.0%) priority: -2
    dev: /dev/dm-1 maj-min: 254:1
    mapped: luks-48d04c79-6793-4578-a7bd-b7f3baa922dc
Sensors:
  System Temperatures: cpu: 44.5 C mobo: N/A gpu: amdgpu temp: 44.0 C
  Fan Speeds (RPM): N/A
Info:
  Processes: 318 Uptime: 22m wakeups: 2 Memory: total: 20 GiB note: est.
  available: 17.45 GiB used: 3.14 GiB (18.0%) Init: systemd v: 254
  default: graphical tool: systemctl Compilers: gcc: 13.2.1 Packages: 1646
  pm: pacman pkgs: 1605 libs: 384 tools: octopi,paru pm: flatpak pkgs: 41
  Shell: Bash v: 5.1.16 running-in: konsole inxi: 3.3.28
Garuda (2.6.16-1):
  System install date:     2022-06-18
  Last full system update: 2023-08-17 ↻
  Is partially upgraded:   No
  Relevant software:       snapper NetworkManager mkinitcpio
  Windows dual boot:       Probably (Run as root to verify)
  Failed units:            

here's another output that may help:

[ash@enigma ~]$ cryptsetup benchmark
# Tests are approximate using memory only (no storage IO).
PBKDF2-sha1       985503 iterations per second for 256-bit key
PBKDF2-sha256    1839607 iterations per second for 256-bit key
PBKDF2-sha512     780190 iterations per second for 256-bit key
PBKDF2-ripemd160  433295 iterations per second for 256-bit key
PBKDF2-whirlpool  347210 iterations per second for 256-bit key
argon2i       4 iterations, 708000 memory, 4 parallel threads (CPUs) for 256-bit key (requested 2000 ms time)
argon2id      4 iterations, 692768 memory, 4 parallel threads (CPUs) for 256-bit key (requested 2000 ms time)
#     Algorithm |       Key |      Encryption |      Decryption
aes-cbc        128b       570,5 MiB/s      1435,5 MiB/s
serpent-cbc        128b        58,9 MiB/s       221,8 MiB/s
twofish-cbc        128b       115,9 MiB/s       217,1 MiB/s
aes-cbc        256b       458,5 MiB/s      1417,0 MiB/s
serpent-cbc        256b        63,1 MiB/s       220,1 MiB/s
twofish-cbc        256b       129,4 MiB/s       218,9 MiB/s
aes-xts        256b      1158,9 MiB/s      1273,8 MiB/s
serpent-xts        256b       194,6 MiB/s       206,5 MiB/s
twofish-xts        256b       200,5 MiB/s       203,9 MiB/s
aes-xts        512b      1065,4 MiB/s      1281,3 MiB/s
serpent-xts        512b       313,1 MiB/s       226,9 MiB/s
twofish-xts        512b       210,8 MiB/s       202,6 MiB/s

edit: i forgot to mention, i used luks to encrypt my disk

What information about this is available on the Internet?

1 Like

i did not find an solution, that's why i tried my luck here, maybe someone here knows what to do?

Please ask the developer about.

1 Like

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.