Date: Mon, 15 Feb 2021 21:28:00 +0000 From: bugzilla-noreply@freebsd.org To: bugs@FreeBSD.org Subject: [Bug 253505] 13-BETA2: encrypted swap and root partition leads to software accelerated encryption Message-ID: <bug-253505-227-FR0oYIC10I@https.bugs.freebsd.org/bugzilla/> In-Reply-To: <bug-253505-227@https.bugs.freebsd.org/bugzilla/> References: <bug-253505-227@https.bugs.freebsd.org/bugzilla/>
next in thread | previous in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D253505 Jason A. Harmening <jah@FreeBSD.org> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |jah@FreeBSD.org --- Comment #2 from Jason A. Harmening <jah@FreeBSD.org> --- dmesg shows GELI advertising "accelerated software". I think this is expec= ted. aesni doesn't advertise CRYPTOCAP_F_HARDWARE. From aesni_attach(): sc->cid =3D crypto_get_driverid(dev, sizeof(struct aesni_session), CRYPTOCAP_F_SOFTWARE | CRYPTOCAP_F_SYNC | CRYPTOCAP_F_ACCEL_SOFTWARE); Since AES-NI uses special-purpose instructions on the local CPU, I think we would consider it "accelerated software": it's not a pure software scheme l= ike cryptosoft, but neither is it a separate hardware offload engine. If GELI were using cryptosoft instead, you'd just see "software" instead of "accelerated software" in dmesg. You can run 'show crypto' in ddb to double-check. --=20 You are receiving this mail because: You are the assignee for the bug.=
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-253505-227-FR0oYIC10I>