From owner-freebsd-security Fri Feb 7 9:29:13 2003 Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 6BE4C37B401 for ; Fri, 7 Feb 2003 09:29:12 -0800 (PST) Received: from hotmail.com (oe66.pav1.hotmail.com [64.4.30.201]) by mx1.FreeBSD.org (Postfix) with ESMTP id 20B4843F93 for ; Fri, 7 Feb 2003 09:29:12 -0800 (PST) (envelope-from jack_xiao99@hotmail.com) Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC; Fri, 7 Feb 2003 09:29:12 -0800 X-Originating-IP: [129.100.182.136] From: "Jack Xiao" To: Subject: hardware encryption under freebsd Date: Fri, 7 Feb 2003 12:29:05 -0500 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2720.3000 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000 Message-ID: X-OriginalArrivalTime: 07 Feb 2003 17:29:12.0024 (UTC) FILETIME=[6DC88D80:01C2CECE] Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Hi All, It's said "A new in-kernel cryptographic framework (see crypto(4) and crypto(9)) has been imported from OpenBSD. It provides a consistent interface to hardware and software implementations of cryptographic algorithms for use by the kernel and access to cryptographic hardware for user-mode applications. Hardware device drivers are provided to support hifn-based cards ( hifn(4)) and Broadcom-based cards ( ubsec(4))." "A FAST_IPSEC kernel option now allows the IPsec implementation to use the kernel crypto(4) framework, along with its support for hardware cryptographic acceleration. More information can be found in the fast_ipsec(4) manual page." In this case, if I want to use hardware encryption/decryption, should I use fast_ipsec instead of ipsec in the kenerl option? By the way, I am using FreeBSD 4.7 Release. I am also curious if anybody has such experience in this group before my trial. How's the performance? Thanks. Jack To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message