Date: Fri, 24 Jan 2003 09:11:22 -0800 From: "Sam Leffler" <sam@errno.com> To: "Mike Tancsa" <mike@sentex.net> Cc: <freebsd-stable@FreeBSD.ORG> Subject: Re: HEADS UP: fast ipsec committed Message-ID: <187f01c2c3cb$9eb22e50$52557f42@errno.com> References: <5.2.0.9.0.20030124073321.07012c88@192.168.0.12>
next in thread | previous in thread | raw e-mail | index | archive | help
> At 09:39 PM 1/23/2003 -0800, Sam Leffler wrote:
> >I just commited my "Fast IPsec" support. This is an implementation of
the
> >IPsec protocols that makes use of the kernel crypto framework. What this
> >means is that if you have a hardware crypto card it will automatically be
> >used by the protocols. If you don't have crypto hardware you will use
the
> >host cpu as before.
>
> Hi,
> Apart from FAST_IPSEC and OpenSSL 0.9.7, what parts (if any) of
> FreeBSD would currently make sure of the crypto hardware ?
With OpenSSL you get lots of applications. I'm not sure if Kerberos also
benefits. In the kernel there's nothing else at the moment but that's not
to say that things like gbde couldn't use it. I also intend to use it to do
AES for wireless security protocols.
Sam
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?187f01c2c3cb$9eb22e50$52557f42>