Re: AMD Geode LX crypto accelerator (glxsb)

2008-07-10 Thread Patrick Lamaizière
Le Wed, 09 Jul 2008 15:31:30 -0400, Mike Tancsa [EMAIL PROTECTED] a écrit : Without the module loaded, I can do something simple like # sh s # cat s MEOUTSIDE=64.x.x.x MEINSIDE=192.168.5.0/24 REMOTEOUTSIDE=64.y.y.y REMOTEINSIDE=192.168.1.0/24 IPSECKEY=zxzpprlNH61N11SGfrCa8dxZ

Re: AMD Geode LX crypto accelerator (glxsb)

2008-07-10 Thread Patrick Lamaizière
Le Wed, 09 Jul 2008 15:31:30 -0400, Mike Tancsa [EMAIL PROTECTED] a écrit : Without the module loaded, I can do something simple like glxsb0: detached glxsb0: AMD Geode LX Security Block (AES-128-CBC,RNG) mem 0xa000-0xa0003fff irq 10 at device 1.2 on pci0 # sh s The result of line 1:

Re: AMD Geode LX crypto accelerator (glxsb)

2008-07-10 Thread Mike Tancsa
At 07:09 AM 7/10/2008, Patrick Lamaizière wrote: I've found, i think. The Geode handles only AES with a 128 bits key. When setkey/ipsec opens a crypto session, the driver returns an error (EINVAL) if the key length is != 128. So setkey fails. There is no way to tell to the crypto framework

Re: AMD Geode LX crypto accelerator (glxsb)

2008-07-09 Thread Mike Tancsa
At 11:05 AM 6/22/2008, Patrick Lamaizière wrote: Le Fri, 6 Jun 2008 23:41:35 +0200, Patrick Lamaizière [EMAIL PROTECTED] a écrit : Hello, I'm trying to port the glxsb driver from OpenBSD to FreeBSD 7-STABLE (via the NetBSD port). The glxsb driver supports the security block of the Geode LX

Re: AMD Geode LX crypto accelerator (glxsb)

2008-06-30 Thread Stephen Clark
Niki Denev wrote: On Fri, Jun 27, 2008 at 11:37 PM, Stephen Clark [EMAIL PROTECTED] wrote: Hi, I am trying to compile it on 6.2 and get make: don't know how to make cryptodev_if.h. Stop ??? where is this file? Thanks, Steve Have you applied the 6.2 patch included in the latest tgz that

Re: AMD Geode LX crypto accelerator (glxsb)

2008-06-27 Thread Stephen Clark
Niki Denev wrote: On Sun, Jun 22, 2008 at 6:05 PM, Patrick Lamaizière [EMAIL PROTECTED] wrote: Le Fri, 6 Jun 2008 23:41:35 +0200, Patrick Lamaizière [EMAIL PROTECTED] a écrit : Hello, I'm trying to port the glxsb driver from OpenBSD to FreeBSD 7-STABLE (via the NetBSD port). The glxsb

Re: AMD Geode LX crypto accelerator (glxsb)

2008-06-27 Thread Niki Denev
On Fri, Jun 27, 2008 at 11:37 PM, Stephen Clark [EMAIL PROTECTED] wrote: Hi, I am trying to compile it on 6.2 and get make: don't know how to make cryptodev_if.h. Stop ??? where is this file? Thanks, Steve Have you applied the 6.2 patch included in the latest tgz that Patrick posted?

Re: AMD Geode LX crypto accelerator (glxsb)

2008-06-24 Thread Michael Proto
Patrick Lamaizière wrote: Le Fri, 6 Jun 2008 23:41:35 +0200, Patrick Lamaizière [EMAIL PROTECTED] a écrit : Hello, I'm trying to port the glxsb driver from OpenBSD to FreeBSD 7-STABLE (via the NetBSD port). The glxsb driver supports the security block of the Geode LX series processors.

Re: AMD Geode LX crypto accelerator (glxsb)

2008-06-23 Thread Patrick Lamaizière
Le Sun, 22 Jun 2008 21:20:02 +0200, Ivan Voras [EMAIL PROTECTED] a écrit : Hi, The 'numbers' are in 1000s of bytes per second processed. type 16 bytes 64 bytes256 bytes 1024 bytes 8192 bytes aes-128 cbc 5359.57k 5577.49k 5654.53k 5639.81k 5679.65k

Re: AMD Geode LX crypto accelerator (glxsb)

2008-06-22 Thread Patrick Lamaizière
Le Fri, 6 Jun 2008 23:41:35 +0200, Patrick Lamaizière [EMAIL PROTECTED] a écrit : Hello, I'm trying to port the glxsb driver from OpenBSD to FreeBSD 7-STABLE (via the NetBSD port). The glxsb driver supports the security block of the Geode LX series processors. The Geode LX is a member of

Re: AMD Geode LX crypto accelerator (glxsb)

2008-06-22 Thread Ivan Voras
Patrick Lamaizière wrote: Le Fri, 6 Jun 2008 23:41:35 +0200, Patrick Lamaizière [EMAIL PROTECTED] a écrit : Hello, I'm trying to port the glxsb driver from OpenBSD to FreeBSD 7-STABLE (via the NetBSD port). The glxsb driver supports the security block of the Geode LX series processors. The

Re: AMD Geode LX crypto accelerator (glxsb)

2008-06-22 Thread Ivan Voras
Ivan Voras wrote: The results are practically the same. On the other hand: ursaminor:~/admin/glxsb dd if=/dev/zero bs=4k count=10 | openssl enc -aes-128-cbc -e -out /dev/null -nosalt -k abcdefhij 10+0 records in 10+0 records out 40960 bytes transferred in 77.653939 secs

Re: AMD Geode LX crypto accelerator (glxsb)

2008-06-22 Thread Patrick Lamaizière
Le Sun, 22 Jun 2008 19:40:04 +0200, Ivan Voras [EMAIL PROTECTED] a écrit : Ivan Voras wrote: The results are practically the same. On the other hand: ursaminor:~/admin/glxsb dd if=/dev/zero bs=4k count=10 | openssl enc -aes-128-cbc -e -out /dev/null -nosalt -k abcdefhij 10+0

Re: AMD Geode LX crypto accelerator (glxsb)

2008-06-22 Thread Niki Denev
On Sun, Jun 22, 2008 at 6:05 PM, Patrick Lamaizière [EMAIL PROTECTED] wrote: Le Fri, 6 Jun 2008 23:41:35 +0200, Patrick Lamaizière [EMAIL PROTECTED] a écrit : Hello, I'm trying to port the glxsb driver from OpenBSD to FreeBSD 7-STABLE (via the NetBSD port). The glxsb driver supports the

Re: AMD Geode LX crypto accelerator (glxsb)

2008-06-22 Thread Ivan Voras
2008/6/22 Patrick Lamaizière [EMAIL PROTECTED]: openssl speed -evp aes-128-cbc -elapsed -engine cryptodev I see the -evp parameter makes the difference in openssl speed: openssl speed -engine cryptodev -elapsed -evp aes-128-cbc aes-128-cbc engine cryptodev set. You have chosen to measure