Re: Enforcing the usage of crypto hardware acceleration engine

From: Darren Tucker (dtucker_at_gate.dodgy.net.au)
Date: 04/05/05

  • Next message: sebastian gregory: "Re: Problem with openssh 4.0" 
    Date: 05 Apr 2005 13:22:13 GMT

    On 2005-04-04, Harsha <harsha.hs.81@gmail.com> wrote:
    > I am trying to run ssh over hardware acceleration engine. But I am
    > finding it that by default ssh binds with software crypto algorithms.
    > Even the OpenSSL commands expect a -engine flag to use the hardware
    > engine.

    This was discussed on the OpenSSH mailing list a while back:
    http://marc.theaimsgroup.com/?l=openssh-unix-dev&m=108860967904667

    > Is there any configuration to be done either in SSH or OpenSSL to
    > enforce the usage of hardware acceleration engine by default over
    > software crypto algorithms?

    Unless something's changed recently in OpenSSL the hardware engines
    require explicit initialization which OpenSSH doesn't do. 

    -- 
Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4  37C9 C982 80C7 8FF4 FA69
    Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.
  • Next message: sebastian gregory: "Re: Problem with openssh 4.0"