Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 14 Oct 2009 23:23:07 +0100
From:      RW <rwmaillists@googlemail.com>
To:        freebsd-security@freebsd.org
Subject:   Re: FreeBSD equivalent to Sun crypto framework APIs (PKCS#11) (for hardware AES-CTR)
Message-ID:  <20091014232307.4f6d8479@gumby.homeunix.com>
In-Reply-To: <Pine.NEB.4.64.0910141754330.12911@otaku.freeshell.org>
References:  <Pine.NEB.4.64.0910141754330.12911@otaku.freeshell.org>

next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, 14 Oct 2009 18:02:36 +0000 (UTC)
John Case <case@sdf.lonestar.org> wrote:

> 
> There are a number of hardware solutions for performing AES-CTR in 
> hardware - for example the broadcom BCM5825, which is supported by
> the ubsec driver.
> 
> The problem is that OpenSSL does not currently support hardware 
> acceleration of AES-CTR.  The solution on a Sun system is to use the
> Sun crypto framework APIs (PKCS#11) which does support AES-CTR in
> hardware.
> 
> Is there an analagous API in FreeBSD that I could implement in my
> code so as to use the hardware AES-CTR of devices supported by ubsec ?

Aside from  crypto(3) (OpenSSL), there's also crypto(9) (kernel) and
crypto(4) (userland), but they don't appear to support CTR - just CBC.




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20091014232307.4f6d8479>