[pkg-cryptsetup-devel] Bug#536415: cryptsetup: opening LUKS partitions takes several seconds

[Marcus Better]

Package: cryptsetup
Version: 2:1.0.6+20090405.svn49-1
Severity: normal

During boot, it takes around five seconds to unlock each
LUKS-encrypted LVM partition on my Thinkpad T61 with a 160 GB Western
Digital SATA disk. This is horrible for the boot time since I have six
encrypted partitions.

Oddly enough it takes around two seconds on a very similar Thinkpad
R60 with an 80 GB drive.

I also tried creating a 4 MB LVM volume and set up LUKS encryption on
the running system. Opening it takes around two seconds, and this is
without even clearing the cache between tests.

~$ time sudo cryptsetup luksOpen --key-file a /dev/vg0/test test
key slot 0 unlocked.
Kommandot lyckades.

real    0m1.854s
user    0m0.527s
sys     0m0.035s

~$ sudo cryptsetup remove test
key slot 0 unlocked.
Kommandot lyckades.

real    0m1.926s
user    0m0.490s
sys     0m0.025s

-- System Information:
Debian Release: squeeze/sid
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.30.1-melech (SMP w/2 CPU cores; PREEMPT)
Locale: LANG=sv_SE.UTF-8, LC_CTYPE=sv_SE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages cryptsetup depends on:
ii  dmsetup                      2:1.02.30-3 The Linux Kernel Device Mapper use
ii  libc6                        2.9-12      GNU C Library: Shared libraries
ii  libdevmapper1.02.1           2:1.02.30-3 The Linux Kernel Device Mapper use
ii  libpopt0                     1.14-4      lib for parsing cmdline parameters
ii  libuuid1                     1.41.7-2    Universally Unique ID library

cryptsetup recommends no packages.

Versions of packages cryptsetup suggests:
pn  dosfstools                    <none>     (no description available)
ii  initramfs-tools [linux-initra 0.93.3     tools for generating an initramfs
ii  udev                          0.141-1    /dev/ and hotplug management daemo

-- debconf-show failed