From owner-freebsd-hardware@FreeBSD.ORG Tue Jan 15 18:17:32 2008 Return-Path: Delivered-To: freebsd-hardware@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 7CA6816A469 for ; Tue, 15 Jan 2008 18:17:32 +0000 (UTC) (envelope-from sam@errno.com) Received: from ebb.errno.com (ebb.errno.com [69.12.149.25]) by mx1.freebsd.org (Postfix) with ESMTP id 51A6113C4CC for ; Tue, 15 Jan 2008 18:17:32 +0000 (UTC) (envelope-from sam@errno.com) Received: from trouble.errno.com (trouble.errno.com [10.0.0.248]) (authenticated bits=0) by ebb.errno.com (8.13.6/8.12.6) with ESMTP id m0FIHVm0045810 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Tue, 15 Jan 2008 10:17:32 -0800 (PST) (envelope-from sam@errno.com) Message-ID: <478CF8BB.3070601@errno.com> Date: Tue, 15 Jan 2008 10:17:31 -0800 From: Sam Leffler User-Agent: Thunderbird 2.0.0.9 (X11/20071125) MIME-Version: 1.0 To: Gergely CZUCZY References: <20080115093913.GA72710@harmless.hu> <478CEF78.3020808@errno.com> <20080115174452.GA70243@harmless.hu> In-Reply-To: <20080115174452.GA70243@harmless.hu> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-DCC--Metrics: ebb.errno.com; whitelist Cc: freebsd-hardware@freebsd.org Subject: Re: ubsec(4) and AES X-BeenThere: freebsd-hardware@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: General discussion of FreeBSD hardware List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 15 Jan 2008 18:17:32 -0000 Gergely CZUCZY wrote: > On Tue, Jan 15, 2008 at 09:38:00AM -0800, Sam Leffler wrote: > >> Gergely CZUCZY wrote: >> >>> Good morning, >>> >>> I'd like to ask whether there was any updates, news, anything >>> about the Broadcom cryptoaccelerators' AES support in the recent >>> past. ubsec(4)[1] tells at the BUGS section, that it's awaiting >>> some information from broadcom. It would be nice to have AES >>> support for these cards, since the hifn(4) ones don't provide >>> as much performance as the broadcom ones, according to the >>> utilities in the source tree, google, and the vendors themselves. >>> >>> [1] http://www.freebsd.org/cgi/man.cgi?query=ubsec >>> >>> >> Broadcom never gave me the ok to add the AES support; will ask again. >> >> As to performance I believe hifn 7956 parts were on a par w/ the 5823 but it's been a long time. The main issue isn't the speed of the >> crypto part but the bus+dma glue. >> > And also stability. I've experience system crashing with the soekris vpn1401. It was > kinda strange. Existing things worked (like an opened ssh connect, the box is a gateway), > but I couldn't even fork() new processes, use apache, open new ssh connections to the > box, anything. And the interrupt load was also a bit too high. Anyways, it's a different > issue. > Hifn contributed many driver fixes for the 795x parts but some are not yet in cvs. However I recently tested a Hifn reference 7956 card w/ HEAD and couldn't make it fail as it used to. I've requested help getting all the hifn changes into the tree but gotten no responses. > Silicom has drivers for both windows and linux, and they support AES. I wasn't able to > download the driver (got an empty page), so I don't know whether its opensource or not. > Sam