From owner-freebsd-arch@FreeBSD.ORG  Wed Nov 19 11:36:49 2003
Return-Path: <owner-freebsd-arch@FreeBSD.ORG>
Delivered-To: freebsd-arch@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id AB55016A4CE
	for <freebsd-arch@freebsd.org>; Wed, 19 Nov 2003 11:36:49 -0800 (PST)
Received: from ebb.errno.com (ebb.errno.com [66.127.85.87])
	by mx1.FreeBSD.org (Postfix) with ESMTP id D6FAD43F3F
	for <freebsd-arch@freebsd.org>; Wed, 19 Nov 2003 11:36:48 -0800 (PST)
	(envelope-from sam@errno.com)
Received: from 66.127.85.91 ([66.127.85.91])
	(authenticated bits=0)
	by ebb.errno.com (8.12.9/8.12.9) with ESMTP id hAJJalHQ035290
	(version=TLSv1/SSLv3 cipher=RC4-MD5 bits=128 verify=NO);
	Wed, 19 Nov 2003 11:36:48 -0800 (PST)
	(envelope-from sam@errno.com)
From: Sam Leffler <sam@errno.com>
Organization: Errno Consulting
To: Steve Kargl <sgk@troutmask.apl.washington.edu>
Date: Wed, 19 Nov 2003 11:39:10 -0800
User-Agent: KMail/1.5.3
References: <200311190947.15416.sam@errno.com>
	<20031119175105.GA16518@troutmask.apl.washington.edu>
In-Reply-To: <20031119175105.GA16518@troutmask.apl.washington.edu>
MIME-Version: 1.0
Content-Type: text/plain;
  charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
Message-Id: <200311191139.10420.sam@errno.com>
cc: freebsd-arch@freebsd.org
Subject: Re: adding crypto support to GENERIC
X-BeenThere: freebsd-arch@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Discussion related to FreeBSD architecture
	<freebsd-arch.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-arch>,
	<mailto:freebsd-arch-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-arch>
List-Post: <mailto:freebsd-arch@freebsd.org>
List-Help: <mailto:freebsd-arch-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-arch>,
	<mailto:freebsd-arch-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 19 Nov 2003 19:36:49 -0000

On Wednesday 19 November 2003 09:51 am, Steve Kargl wrote:
> On Wed, Nov 19, 2003 at 09:47:15AM -0800, Sam Leffler wrote:
> > I'd like to add the in-kernel crypto support to the GENERIC kernel
> > together with the hifn and ubsec drivers (not sure about the SafeNet
> > driver as those cards are not often encountered).  Doing this would
> > enable out-of-the-box h/w accelerated openssl on machines with h/w crypto
> > devices. This change would not affect the kernel on the floppy.  This
> > would be for the 5.2 release.
> >
> > Comments?
>
> What are the implications for individuals
> who live in countries that restrict access
> to crypto?

FWIW openbsd has shipped like this for a while and netbsd just switched over 
(but haven't shipped a system yet).  I think it's time for us to do this too 
as h/w crypto support is becoming more common.

	Sam