this post was submitted on 22 Oct 2023
387 points (95.3% liked)

Technology

58137 readers
5011 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 1 year ago
MODERATORS
 

Tested: Windows 11 Pro's On-By-Default Encryption Slows SSDs Up to 45%::Windows 11 Pro defaults to BitLocker being turned on, using software encryption. We've tested the Samsung 990 Pro with hardware encryption to show how the various modes impact performance, and how muc

you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 13 points 11 months ago (3 children)

You’re right, but not for the reason you’re citing. Apple has its own T2 Secure Enclave which performs encryption. Microsoft relies on the TPM for hosting the keys, but does not use AFAIK hardware encryption and thus slows down significantly.

This article: https://eclecticlight.co/2023/03/03/whats-the-overhead-of-using-apfs-encryption/ shows that for an external drive the overhead on MacOS for encryption is insignificant (less than 5%) in most cases. That’s significantly better than Microsoft.

[–] [email protected] 8 points 11 months ago* (last edited 11 months ago)

Even before Apple added custom chips, just using the intel AES instructions, their encryption performance penalty was like 3% https://archive.techarp.com/showarticle0037.html?artno=877&pgno=1

Microsoft is doing something very wrong to end up with this much overhead

[–] [email protected] 5 points 11 months ago

It's understandable that MS use software implementation for their disk encryption by default. Can't trust 3rd party hardware vendors to not messing up the hardware encryption feature.

[–] [email protected] 3 points 11 months ago

The T2 chip is only in Intel Macs. ARM Macs have the Secure Enclave too but it’s part of the main SoC, not a dedicated chip.