[ Content contribution] V23使用AES进行全盘加密的安装方法
Tofloor
poster avatar
Red54
deepin
2024-08-16 10:36
Author

深度V23正式版已发布,但其深度安装器(deepin-installer)仍然使用SM4进行磁盘加密。在旧版V20中,有AES无SM4硬件加速的机器,AES加解密速度是SM4的30倍(https://bbs.deepin.org/post/262216 )。我给深度内核提交启用通过AES加速SM4配置的补丁后(https://github.com/deepin-community/kernel/pull/22 ),现在V23的SM4加解密速度已经提高4倍,但与AES仍有很大差距:
Screenshot_virt-manager_20240816095148.png

鉴于此,现在提供V23用AES进行全盘加密的安装方法,与旧版V20的方法仅修改命令有区别(https://bbs.deepin.org/post/262223 ):

1、用深度ISO安装映像启动进入安装界面后:
Screenshot_virt-manager_20240815193650.png

2、按Ctrl+Alt+F2进入tty2:
Screenshot_virt-manager_20240815193953.png

3、输入以下命令把深度安装器磁盘加密方法从SM4改成AES:

sudo sed -i 's/sm4-xts/aes-xts/g' /usr/share/deepin-installer/configs/settings/default_settings.ini

Screenshot_virt-manager_20240815194303.png

4、输入以下命令重启图形管理器:

sudo systemctl restart lightdm

Screenshot_virt-manager_20240815194325.png

5、进行全盘加密安装即可:
Screenshot_virt-manager_20240816095626.png

Reply Favorite View the author
All Replies

No replies yet