Christian Hohnstaedt schrieb:
Hello Tomasz,
On Fri, Aug 22, 2008 at 03:04:24PM +0200, Tomasz Chmielewski wrote:
I would like to use IXP4xx NPE crypto engine on Linux with OpenSSL.
Using the hardware crypto engine was once possible via the OCF cryptodev api.
However, I have no idea if it still works with the latest kernel.
The patch applies just fine to 2.6.27-rc4.
However (perhaps it would need some changes):
CC drivers/char/random.o
drivers/char/random.c: In function 'random_input_words':
drivers/char/random.c:692: error: implicit declaration of function
'add_entropy_words'
drivers/char/random.c:694: error: implicit declaration of function
'credit_entropy_store'
Looking around the internet shows that one needs a patched version of
OpenSSL to use it; however it is hard to find up which documents are up
to date and still usable.
Could anyone point me to a working documentation about getting Linux
hardware crypto devices (like IXP4xx NPE crypto engine) working together
with OpenSSL?
There is an efford to create a new interface to the kernel,
which is ongoing work and not even in Herbert Xu's tree.
Kernel part:
http://www.mail-archive.com/[EMAIL PROTECTED]/msg02172.html
OpenSSL Patch:
http://www.mail-archive.com/[EMAIL PROTECTED]/msg02234.html
I never tested it.
The overhead of putting the data into the kernel and into the NPE
and back again was amortized by hardware speed only
above 1Kbyte of data length on the IXP4xx CPU.
In other words, it could be slower for some operations?
I was going to use it with IXP4xx CPU; and was wondering if it would be
of any help in OpenVPN traffic (which uses OpenSSL) on a loaded machine.
This was at least the result back then when I tested OCF-cryptodev
with my driver.
Do you have any benchmarks available?
--
Tomasz Chmielewski
http://wpkg.org
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [email protected]
Automated List Manager [EMAIL PROTECTED]
