Re: Hardware crypto

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



-----BEGIN PGP SIGNED MESSAGE-----

On Wed, Sep 27, 2000 at 01:38:31PM +0000, Marc Mutz wrote:
> Peter van Hove wrote:
> > 
> <snip>
> > i was wndering if there already is support for crypto cards in the
> > kernel and if so can they be used to accelerate IPsec encryption.
> > 
> 
> Lee Cremeans <leec@xxxxxxxx> is working on a driver for a crypto card
> for Linux. He posted an unrelated question on lkml, but has not said
> anything more about it. If it is there, I'll try and make this work for
> the cryptoapi (kerneli patch). But so far, both frees/wan and (this is a
> guess) the nist implementation of ipsec for linux do not use the crypto
> api. The redcreek thing might be the better way for now.

We (FreeS/WAN) are not directly working on hardware crypto support,
but are certainly willing to morally support its development and
include well-formed unencumbered code to do so.  Bart Trojanovsky
(sp?) of Chrysalis-ITS here in Ottawa is working on linux drivers for
their hardware crypto accellerator and on integrating them into
FreeS/WAN.  We were hoping that libgcrypt from the GnuPG project could
be used for this, having options to compile it as a userspace or
kernelspace lib.  I doubt we would need and strongly hope we would not
need gmp in the kernel portions since libgcrypt would abstract all
this away so we don't care what is doing encryption/decryption.  It
would also be not only SMP-safe, but able to take advantage of
parallelism by queueing jobs.

I really need to take a serious look at the kerneli patch and see what
we can do to co-operate...

> Marc Mutz <Marc@xxxxxxxx>        http://marc.mutz.com/Encryption-HOWTO/

	slainte mhath, RGB
- -- 
Richard Guy Briggs -- PGP key available            Auto-Free Ottawa! Canada
<www.conscoop.ottawa.on.ca/rgb/>                       <www.flora.org/afo/>
Prevent Internet Wiretapping!        --        FreeS/WAN:<www.freeswan.org>
Thanks for voting Green! -- <green.ca>      Marillion:<www.marillion.co.uk>

-----BEGIN PGP SIGNATURE-----
Version: 2.6.3i
Charset: noconv

iQCVAwUBOdIDT9+sBuIhFagtAQGz6AP+OasY+eeu3F2FveHIA37Lvrk5v3SHyCry
diHiSUBZLc6bIA6v7cZ4PHC2hXXY5UhsP4VI/UWIWM7biNGXm2qDi0NSXog3/SfZ
X6u7RrxsB0KFAqpUI4iRw0ZmnXGZK+3LMeQ/5E7BlfWeoVPdTkbDFVLViH+WSSCT
vlsG3zpwqJo=
=4PcW
-----END PGP SIGNATURE-----

Linux-crypto:  cryptography in and on the Linux system
Archive:       http://mail.nl.linux.org/linux-crypto/


[Index of Archives]     [Kernel]     [Linux Crypto]     [Gnu Crypto]     [Gnu Classpath]     [Netfilter]     [Bugtraq]
  Powered by Linux