FileVault 2 Benchmarks Show Full Disk Encryption is Faster Than Ever in OS X Lion
FileVault 2 is the all new disk encryption method that comes with Lion, and it’s more secure than ever, using XTS-AES 128 encryption on your entire disk, as opposed to just the user directory as in past versions. The other huge change that came with FileVault 2 is the significant performance boost, where using full disk encryption barely makes a dent on system performance.
Just how fast is FileVault 2? See for yourself with these benchmark charts on a variety of SSD and traditional hard drive configurations.
Impressively, overall read and write performance is barely effected despite the drive being completely encrypted. Your data is truly safe, without much performance sacrifice.
If you want to read more from a hands on example, take a gander at ThePracticeOfCode’s FileVault 2 comparison on a 2011 MacBook Air vs a 2010 MacBook Air, which also the source of the two upmost graphs. That link is via Shawn Blanc, who sums it up nicely:
it’s likely you won’t even notice that [FileVault is] on. The truth is, the benefits of Lion’s disk encryption far outweigh the nearly insignificant drawbacks, especially if you’re talking about a new laptop with an SSD in it.
Those top two examples are SSD’s though, what about traditional spinning drives? Looking around, I came across Max Cho’s benchmarks, comparing the performance on a standard spinning 320GB Hitachi drive, and with the exception of a slower boot time, the results are practically identical, showing FileVault 2 is extremely fast on a traditional hard drive as well.
Max’s results are also on a Core i7 MacBook Pro, showing that Intels AES encryption instructions built directly into the 2010+ Intel Core CPU lineup are extremely effective at handling on-the-fly decryption and encryption while barely impacting performance.
Bottom line: if you have a Core i3, Core i5, or Core i7 processor, you’ll barely notice the impact of disk encryption, regardless of whether you’re using an SSD or traditional platter drive. Is a tiny performance hit worth the peace of mind of total data security? You’ll have to decide, but if you have sensitive data and a newer CPU on your Mac, it probably is.
If you want to enable FileVault 2 yourself, you can do so in the “Security & Privacy” panel of System Preferences. You can even store the key with Apple which can be retrieved by answering some standard security questions, making it virtually impossible to accidentally lose access to your own data if you forget a password or lose the encryption key.