Date: Wed, 14 Oct 2009 23:23:07 +0100 From: RW <rwmaillists@googlemail.com> To: freebsd-security@freebsd.org Subject: Re: FreeBSD equivalent to Sun crypto framework APIs (PKCS#11) (for hardware AES-CTR) Message-ID: <20091014232307.4f6d8479@gumby.homeunix.com> In-Reply-To: <Pine.NEB.4.64.0910141754330.12911@otaku.freeshell.org> References: <Pine.NEB.4.64.0910141754330.12911@otaku.freeshell.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, 14 Oct 2009 18:02:36 +0000 (UTC) John Case <case@sdf.lonestar.org> wrote: > > There are a number of hardware solutions for performing AES-CTR in > hardware - for example the broadcom BCM5825, which is supported by > the ubsec driver. > > The problem is that OpenSSL does not currently support hardware > acceleration of AES-CTR. The solution on a Sun system is to use the > Sun crypto framework APIs (PKCS#11) which does support AES-CTR in > hardware. > > Is there an analagous API in FreeBSD that I could implement in my > code so as to use the hardware AES-CTR of devices supported by ubsec ? Aside from crypto(3) (OpenSSL), there's also crypto(9) (kernel) and crypto(4) (userland), but they don't appear to support CTR - just CBC.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20091014232307.4f6d8479>