Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 03 Sep 2010 08:07:09 +0200
From:      Andre Oppermann <andre@freebsd.org>
To:        Ricky Charlet <RCharlet@adaranet.com>
Cc:        "freebsd-security@freebsd.org" <freebsd-security@freebsd.org>, "freebsd-net@freebsd.org" <freebsd-net@freebsd.org>
Subject:   Re: seeking current supported crypto co-processors
Message-ID:  <4C80908D.9030106@freebsd.org>
In-Reply-To: <32AB5C9615CC494997D9ABB1DB12783C024C8DE03A@SJ-EXCH-1.adaranet.com>
References:  <32AB5C9615CC494997D9ABB1DB12783C024C8DE03A@SJ-EXCH-1.adaranet.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On 03.09.2010 02:35, Ricky Charlet wrote:
> Howdy, <this messages is cross posted in freebsd-security and freebsd-net>
>
> I'm seeking current cryptographic coprocessors supported in FreeBSD 8.x.  By perusing through the
> crypto-dev (and subsequently referenced) man page(s) I found this list: Hifn
> 7751/7951/7811/7955/7956 crypto accelerator SafeNet 1141/1741 Bluesteel 5501/5601 Broadcom
> bcm5801/5802/5805/5820/5821/5822/5823/5825
>
> Those are all pretty old (and in some cases, no longer existent). I'm surveying these lists to
> see if anyone knows of more modern chips working with FreeBSD 8.x. Or if you feel some chip on
> the list above is up to the task of near about 1 Gb throughput across a PCIe and has friendly
> vendor support for FreeBSD, I'd sure like to hear about that too.

What cypto algorithms do you need?  Stream encryption and/or PKI KEX?

For AES stream encrpytion there are some CPU's that directly support
the crypto primitives on the silicon.  For newer x86/amd64 CPU's see:
  http://en.wikipedia.org/wiki/AES_instruction_set

A number of VIA x86 CPU's have supported a set of crypto algorithms
inlcuding stream cyphers, cryptographic hashing and RSA for quite some
time on their silicon.
  http://www.via.com.tw/en/initiatives/padlock/hardware.jsp

Other than that there are some embedded crypto engines with their own
(mostly MIPS based) single and multi-core CPU's.  AKAIK they have a
FreeBSD API and the FreeBSD MIPS port should work on at least some of
them:
  http://www.caviumnetworks.com/

Cavium also has some plug-in crypto accelerator cards under the brand
name Nitrox.  IIRC they have some drivers for FreeBSD available.

-- 
Andre



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4C80908D.9030106>