File Share Encryption

 View Only
  • 1.  Mac PGP WDE 10.1.1 and SSD - still no good :-(

    Posted Mar 12, 2011 07:31 AM

    I have a new SSD in my Macbook Pro. Running OS X 10.6.6

    Installed PGP 10.1.1(build 18) and installed WDE.

    Using Xbench here is the before and after:

    Sequential No Encryption PGP WDE  
    write 170.72 91.25 -47%
    write 180.71 46.55 -74%
    read 39.79 18.59 -53%
    read 226.28 58.64 -74%
           
    Random      
    write 139.75 67.67 -52%
    write 188.41 49.41 -74%
    Read 21.48 12.56 -42%
    Read 210.89 57.66 -73%

    Rubbish!! Guess I will have to wait for OS X 10.7 and hope they have a encryption solution for SSD. Back to FileVault in the meantime, which is not very good but at least it is useable.

    (I have seen people moan about using Xbench, so if people can suggest another test I will gladly repeat)



  • 2.  RE: Mac PGP WDE 10.1.1 and SSD - still no good :-(

    Posted Mar 12, 2011 01:55 PM

    That's quite the performance hit. My understanding of FileVault under Snow Leopard is that it's a container-based approach -- so once you're logged in, there shouldn't be much of a handicap on drive performance at all. Is that the case?

    This is also telling: http://anthonyvance.com/blog/security/ssd_encryption/

    Not sure if you know, but 10.7 is apparently turning FileVault into a WDE form of encryption instead of what it is now, so hopefully it'll work well with SSDs. See here -- http://www.appleinsider.com/articles/11/02/28/inside_mac_os_x_10_7_lion_file_vault_full_disk_encryption_and_cloud_key_storage.html -- FMI.

    As for me: I currently use PGP WDE under 10.6.6 on a 5400 rpm drive. Suppose it's still upgrading to an SSD?



  • 3.  RE: Mac PGP WDE 10.1.1 and SSD - still no good :-(

    Posted Mar 13, 2011 08:13 PM

    I'd be curious to see what a real-world test is like (e.g. copying a 2 GB file) both with and without WDE.  That's different than the reports I've seen in my internal forum.

     

    But regarding 10.7, I would expect that it'd be a lot more friendly to SSDs, since the OS can notify the disk which encrypted blocks are free and can be TRIM'd.



  • 4.  RE: Mac PGP WDE 10.1.1 and SSD - still no good :-(

    Posted Mar 14, 2011 12:19 PM

    From what I read on the web, an upgrade to SSD and PGP WDE would give you something like 7200rpm HD performance. eg; not worth it in my opinion!



  • 5.  RE: Mac PGP WDE 10.1.1 and SSD - still no good :-(

    Posted Mar 14, 2011 12:33 PM

    I have uninstalled PGP WDE but if anyone else has it installed they can chip in. By the way, these are with FileVault which makes very little as far as I can tell.

    Here is the copy of a 2GB file :

     

    $ ls -al  Windows-s001.vmdk
    -rw-r--r--@ 1 root root  2146762752 Mar 14 14:42 Windows-s001.vmdk
     
    $ time cp Windows-s001.vmdk test
    real    0m51.242s
    user    0m0.007s
    sys     0m4.385s

     

    $ sync; time cp Windows-s001.vmdk test
    real    0m49.169s
    user    0m0.007s
    sys     0m3.708s
     
    $ sync; time (cp Windows-s001.vmdk test; sync)
    real    0m47.942s
    user    0m0.007s
    sys     0m3.742s
     
    If anyone has PGP WDE with an SSD, can they give it a try?