"Perry E. Metzger" wrote: > [ ... ] Encrypted swap should > be the default -- either using cgd or by simply encrypting the blocks as > they go in and out without using the cgd layer. You've benchmarked the effect of this, especially on older hardware? Simon.