Hi,
The Diffe Hellman exchange consists of CPU-intensive
operations like key-pair generation and shared-secret generation. The Octeon
Core Crypto Library provides API's on Octeon for Crypto acceleration. The
following functions (provided by the Cavium) to perform the Diffie-Hellman
Operations, which are identical to the API's provided by the OpenSSL Crypto
Library.
1) DH_generate_parameters()
2) DH_generate_key()
3) DH_compute_key()
In addition, the Octeon provides the functions that perform
the Elliptical Curve Diffie-Hellman Operations.What are the modifications
should I need to do so as to use
APIs (supplied by Octeon Core Crypto Library) instead of OpenSSL's APIs? I
think, it will consume less CPU cycles and enhance the tunnel setup rate. Can
you please confirm? Note: I am using the strongswan-5.0.4 with
load-tester-plugin.
Regards,
Chinmaya