Re: TCFS for FreeBSD?

From: Mark Murray (markm@FreeBSD.ORG)
Date: 10/17/02 

To: Greg Lewis <glewis@eyesbeyond.com>
From: Mark Murray <markm@FreeBSD.ORG>
Date: Thu, 17 Oct 2002 16:56:56 +0100

> > Also, what did you bring in from KAME? (I would think that the
> > necessary crypto would be available through the OpenSSL libraries.)
>
> Right, except OpenSSL isn't linked into the kernel :). The kernel
> crypto parts that -STABLE doesn't have are the blowfish and DES
> block encryption code. The code itself is originally from OpenSSL
> or SSLeay by the looks of it.

There is a new (kernel) crypto susbsystem that Sam Leffler has committed
to current. He wants to commit it to stable as well, and I think he'll
be allowed to. It is the OpenBSD system, and it supports hardware crypto
accelerators. Its very good.

M 

-- 
o       Mark Murray
\_
O.\_    Warning: this .sig is umop ap!sdn
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message

Relevant Pages

  • Re: HIFN devices, crypto and userland
    ... PCI HIFN-based devices from Soekris that could be used to speed up what ... is now processor-bound crypto stuff I might be doing in the future. ... OpenSSL uses crypto ... API and ask for hardware support for a session (which then goes through ...
    (comp.unix.bsd.openbsd.misc)
  • Re: recommended SSL-friendly crypto accelerator
    ... We have a crypto cardinstalled. ... > openssl functions say mod_ssl, ... the main thing to accelerate in SSL is usually not ... In order to take advantage of the underlying hardware, ...
    (FreeBSD-Security)
  • Re: Hifn 7955/7956 crypto accelerator questions
    ... Does openssl today make correct use of the crypto hardware? ... We are usually just using 1 stream per transfer session per host, but the server could be getting multiple streams. ... Assuming two FreeBSD computers with crypto accelerators are ...
    (freebsd-current)
  • Re: Hardware accelerators and RAM/CPU guidance
    ... The first question is whether crypto accelerator cards are actually ... OpenSSL functions that provide hardware acceleration are ... On OpenBSD if you enable the kern.usercrypto sysctl then everything in userspace that uses OpenSSL, including OpenSSH, will use the hardware acceleration. ... It sounds like you intend to have relatively long-lived connections, so this probably won't represent a large overhead. ...
    (SSH)
  • Re: recommended SSL-friendly crypto accelerator
    ... > I've got a pair of HI/FN 7951 cards which gets used by SSH if I select ... We have an ssl library - openssl. ... We have a crypto cardinstalled. ... openssl functions say mod_ssl, ssh. ...
    (FreeBSD-Security)