Hi,
We are using linux-2.6.28 and we would like to hardware accelerate the
NETKEY IPsec traffic. We are using strongswan for the upper layers.
I understand that strongswan uses the Linux/NETKEY IPsec implementation,
which in turn, uses the Linux Scatterlist Crypto API for all its
cryptographic work. To hardware accelerate IPsec, I need to write a
"Linux Scatterlist Crypto API" driver for my hardware accelerator and
register it with the linux kernel.
What I would like to know is:
1) does the xfrm/ESP implementation support asynchronous/parallel packet
operation?
2) If yes, does it support it in both directions (tx/rx)?
Our hardware supports a queue packets for processing and we would like
to utilise that, to keep the hardware as busy as possible i.e. we would
like to be able to send multiple packets to the hardware engine for
encryption/hashing and then receive multiple acknowledgements that the
packets are ready.
Regards,
Dimitrios Siganos
--
To unsubscribe from this list: send the line "unsubscribe linux-crypto" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
