> At 09:11 AM 24/01/2003 -0800, Sam Leffler wrote:
> > > At 09:39 PM 1/23/2003 -0800, Sam Leffler wrote:
> > > >I just commited my "Fast IPsec" support. This is an implementation
of
> >the
> > > >IPsec protocols that makes use of the kernel crypto framework. What
this
> > > >means is that if you have a hardware crypto card it will
automatically be
> > > >used by the protocols. If you don't have crypto hardware you will
use
> >the
> > > >host cpu as before.
> > >
> > > Hi,
> > > Apart from FAST_IPSEC and OpenSSL 0.9.7, what parts (if any)
of
> > > FreeBSD would currently make sure of the crypto hardware ?
> >
> >With OpenSSL you get lots of applications. I'm not sure if Kerberos also
> >benefits. In the kernel there's nothing else at the moment but that's
not
> >to say that things like gbde couldn't use it. I also intend to use it to
do
> >AES for wireless security protocols.
>
>
> Thanks for the info! Just to confirm/clarify, without FAST_IPSEC enabled,
> none of the crypto hardware is used in IPSEC, correct ?
Correct. Also, you can control the use of h/w crypto with the
net.inet.ipsec.crypto_support sysctl: set it -1 to get s/w only, 1 for h/w
only, or 0 (default) to take the best available crypto support.
Sam
To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-stable" in the body of the message
