Re: IPSec AH hardware offload

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Jamie Iles <jamie.iles@xxxxxxxxxxxx> wrote:
> 
> I'm currently developing a driver for a hardware crypto offload engine that is
> capable of offloading both ESP and AH in IPSec. I've noticed that none of the
> crypto drivers in 2.6.28 do offload for ahash and that the netkey AH
> implementation both use synchronous hashes. Are the synchronous software
> versions likely to be more efficient than hardware offloading or is there an
> architectural reason for not using async hashes?

No it's just because nobody has gotten around to complete the
async hash work yet.  So we're currently half-way through the
process of converting existing algorithms to the shash interface,
which allows them to be used efficiently by IPsec through the
ahash interface.

Once that's completed we can then convert IPsec (or rather, authenc)
over to using ahash.

Cheers,
-- 
Visit Openswan at http://www.openswan.org/
Email: Herbert Xu ~{PmV>HI~} <herbert@xxxxxxxxxxxxxxxxxxx>
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt
--
To unsubscribe from this list: send the line "unsubscribe linux-crypto" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html

[Index of Archives]     [Kernel]     [Gnu Classpath]     [Gnu Crypto]     [DM Crypt]     [Netfilter]     [Bugtraq]

  Powered by Linux