On 2009-05-20, Iqigo Ortiz de Urbina <[email protected]> wrote: > On Wed, May 20, 2009 at 10:15 PM, Stuart Henderson <[email protected]> > wrote: >> On 2009-05-20, Joco Salvatti <[email protected]> wrote: >>> Hi misc, >>> >>> I bought a Soekris Net5501 with a cryptographic card VPN1411 >>> (Authentication, SHA-1 and MD5, Public Key, RSA, DSA, SSL, IKE and DH, >>> Hardware random number generator) and I would like to know if any >>> configuration is needed in OpenBSD kernel to use this card when >>> cryptography is necessary. >>> >>> eg. When a VPN IPSec is done. >> >> You might want to check that it's not actually slower when you use the card. >> >> > > Some basic benchmarking would be appreciated, for the sake of the > list. As a newcomer I am really interested in understanding the > cryptohardware framework. > > I would have never said accelerated hardware could perform any worse. > Interesting point Stuart. > >
also note the difference between discrete devices (PCI or PCI-like accelerators, either discrete cards/ICs, or on-die like the AES128 accelerator in the Geode LX cpu), and the accelerators that use specific CPU instructions like VIA C7M and forthcoming Intel CPUs. the latter have fewer overheads.
