Bitcoin Forum
June 21, 2018, 03:08:07 PM *
News: Latest stable version of Bitcoin Core: 0.16.1  [Torrent]. (New!)
 
   Home   Help Search Donate Login Register  
Pages: [1]
  Print  
Author Topic: Will full disk encryption make things much slower?  (Read 86 times)
cellard
Legendary
*
Offline Offline

Activity: 1050
Merit: 1083


View Profile
March 06, 2018, 05:32:53 PM
 #1

If you encrypt your whole disk with dm-crypt, LUKS, Veracrypt... and so on, will it make trying to sync the blockchain much slower? Veracrypt got some cool cascaded algorithm features, so let's say you use AES(Twofish(Serpent)) cascaded combo with SHA-512.. will it make things much slower?

I did some testing on some old harddrives. The boot time was a bit slow since it had to decrypt stuff, but once in the OS it seemed like normal performance, but I had no bitcoins on there and didn't try trying to sync the blockchain. In fact I have lost the password to these disks and now they are as useful as a footdoor.

Has anyone tried full disk encryption while running a node?

1529593687
Hero Member
*
Offline Offline

Posts: 1529593687

View Profile Personal Message (Offline)

Ignore
1529593687
Reply with quote  #2

1529593687
Report to moderator
The World's Betting Exchange

Bet with play money. Win real Bitcoin. 5BTC Prize Fund for World Cup 2018.

Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
Anti-Cen
Member
**
Offline Offline

Activity: 196
Merit: 20

High fees = low BTC price


View Profile
March 06, 2018, 07:15:35 PM
 #2

Quote
Has anyone tried full disk encryption while running a node?

Chuck in a little file compression and you can soon get back to the same performance at the cost of
a bit of CPU-Power and memory.

Disk-Drives are as slow as snails and are hardly any faster today then they were ten years ago but today
Microsoft tries to lock everyone else out from writing that kind of software and we are now at the stage
where anything they can steel, encrypt and upload they are doing.

My skills today are so good that I cannot delete index.dat files (these get hidden) on a windows 10 machine
because its no longer an OS but has become a remote terminal for Microsoft and the NSA

Mining is CPU-wars and Intel, AMD like it nearly as much as big oil likes miners wasting electricity. Is this what mankind has come too.
FL4RE
Copper Member
Newbie
*
Offline Offline

Activity: 13
Merit: 2

CIO at HODLER.TECH


View Profile WWW
March 06, 2018, 07:29:05 PM
 #3

Quote
Has anyone tried full disk encryption while running a node?

Chuck in a little file compression and you can soon get back to the same performance at the cost of
a bit of CPU-Power and memory.

Disk-Drives are as slow as snails and are hardly any faster today then they were ten years ago but today
Microsoft tries to lock everyone else out from writing that kind of software and we are now at the stage
where anything they can steel, encrypt and upload they are doing.

My skills today are so good that I cannot delete index.dat files (these get hidden) on a windows 10 machine
because its no longer an OS but has become a remote terminal for Microsoft and the NSA

I did, never get any issue with that, about performance on my highend stuff is barery feelable, or there is no difference at all.

HODLER.TECH HARDWARE WALLET TEAM
Bitcointalk thread: https://bitcointalk.org/index.php?topic=3070336.0
Anti-Cen
Member
**
Offline Offline

Activity: 196
Merit: 20

High fees = low BTC price


View Profile
March 06, 2018, 08:15:08 PM
 #4

I did, never get any issue with that, about performance on my highend stuff is barery feelable, or there is no difference at all.

I once got well paid for sorting out a 2GB MS-Access database with about seventy user and put it on RAM-Disk and this
thing flew after that so maybe if your running a cluster of rigs then this might become an option and I am not talking about
sold state disks here but full on DDR3/5

Mining is CPU-wars and Intel, AMD like it nearly as much as big oil likes miners wasting electricity. Is this what mankind has come too.
Jet Cash
Hero Member
*****
Offline Offline

Activity: 924
Merit: 924


Lets Talk Merit


View Profile WWW
March 06, 2018, 08:49:45 PM
Merited by Anti-Cen (1)
 #5

Why would you want to encrypt the blockchain?

Crypto Press Kit .com ++++ > What a great domain name for anyone advising bounty or ICO managers
Click here to buy it now for Bitcoin or US dollars
RGBKey
Hero Member
*****
Offline Offline

Activity: 756
Merit: 615


rgbkey.github.io/pgp.txt


View Profile WWW
March 06, 2018, 11:25:11 PM
 #6

Veracrypt got some cool cascaded algorithm features, so let's say you use AES(Twofish(Serpent)) cascaded combo with SHA-512.. will it make things much slower?

In general, you will be limited by the weakest link. In most cases, it's going to be the write/read speed of your disk. However, if you use AES(Twofish(Serpent)), then it's possible on lower-end machines that the CPU won't be able to encrypt/decrypt the data as fast as the hard drive can read it, in which case yes, it will slow you down.

Also you should keep in mind that tasks that were disk heavy before are now disk/cpu heavy. So syncing the blockchain would probably be slower, because a lot of the time spent syncing the blockchain is your CPU verifying the transactions. If your CPU is being torn between verifying transactions and handling disk encryption for the transactions being written to disk at the same time, I would expect a slowdown.

cellard
Legendary
*
Offline Offline

Activity: 1050
Merit: 1083


View Profile
March 07, 2018, 07:20:05 PM
 #7

Why would you want to encrypt the blockchain?

No, the idea is to encrypt the entire thing. Why would you not to? By the entire thing i mean the entire OS. Why would you leave open the OS that you use for anything crypto?

Again, I think it's ideal to put a wall to the entire thing and not only your wallet.dat file. But if you do it, be sure to remember the password... like I said, on my tests, I have somehow fucked up two times in two different hard drives, the password doesn't match and Veracrypt doesn't let me in.

Anyway, I think FDE is a must to keep things away from thieves and anyone else that manages to get your hard drives physically.

HCP
Hero Member
*****
Offline Offline

Activity: 644
Merit: 814

<insert witty quote here>


View Profile
March 08, 2018, 03:58:58 AM
 #8

Given that wallet file location is somewhat configurable as of v0.16.0 (https://bitcoincore.org/en/2018/02/26/release-0.16.0/#wallets-directory-configuration), why not leave the blocks folder on an unencrypted disk? It's not exactly sensitive information Tongue

Keep your wallets on an encrypted disk (or in an encrypted container)... and block data elsewhere... that way your wallet files should be safe if the computer is physically compromised, but the encryption should not negatively effect performance when reading/writing to blockchain data.

I'm sure there will then be other gotcha's... like the ominous warning:
Quote
Care should be taken when choosing the wallets directory location, as if it becomes unavailable during operation, funds may be lost.

But as long as the FDE doesn't kick in during wallet operation... that shouldn't be an issue.

cellard
Legendary
*
Offline Offline

Activity: 1050
Merit: 1083


View Profile
March 08, 2018, 02:00:36 PM
 #9

Given that wallet file location is somewhat configurable as of v0.16.0 (https://bitcoincore.org/en/2018/02/26/release-0.16.0/#wallets-directory-configuration), why not leave the blocks folder on an unencrypted disk? It's not exactly sensitive information Tongue

Keep your wallets on an encrypted disk (or in an encrypted container)... and block data elsewhere... that way your wallet files should be safe if the computer is physically compromised, but the encryption should not negatively effect performance when reading/writing to blockchain data.

I'm sure there will then be other gotcha's... like the ominous warning:
Quote
Care should be taken when choosing the wallets directory location, as if it becomes unavailable during operation, funds may be lost.

But as long as the FDE doesn't kick in during wallet operation... that shouldn't be an issue.

Because you are supposed to hide the fact that you own any bitcoins at all, and if the thieves see that you have the bitcoin blockchain, they will assume that you have bitcoins, even if you don't, which is possible that for some reason you have the blockchain but no bitcoins, but these goons will not care and will torture your ass until you give them your coins, and if you don't have any coins, you are fucked as well with no escape.

But I will not encrypt it, because I did some tests and it's way slower than normal, at least with my HDD and older computer, I guess it would be ok with modern computers, but I cant do it.

Now I just need to wipe the disks that I encrypted with Veracrypt and lost the passwords, but I dont really need them so I will leave them like that for now, there's nothing of value inside anyway.

Pages: [1]
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!