netdev
[Top] [All Lists]

Re: Asynchronous crypto layer.

To: Michal Ludvig <mludvig@xxxxxxx>
Subject: Re: Asynchronous crypto layer.
From: Michael Richardson <mcr@xxxxxxxxxxxxxxxxxxxxxx>
Date: Sun, 31 Oct 2004 10:36:10 -0500
Cc: johnpol@xxxxxxxxxxx, hadi@xxxxxxxxxx, netdev@xxxxxxxxxxx, cryptoapi@xxxxxxxxxxxxxx, Eugene Surovegin <ebs@xxxxxxxxxxx>
In-reply-to: Message from Michal Ludvig <mludvig@suse.cz> of "Sun, 31 Oct 2004 11:46:30 +0100." <4184C286.3000400@suse.cz>
References: <1099030958.4944.148.camel@uganda> <1099053738.1024.104.camel@jzny.localdomain> <20041029180652.113f0f6e@zanzibar.2ka.mipt.ru> <20041030203550.GB6256@gate.ebshome.net> <20041031010415.4c798a04@zanzibar.2ka.mipt.ru> <20041030205630.GD6256@gate.ebshome.net> <20041031012423.74b98698@zanzibar.2ka.mipt.ru> <1099179687.1041.117.camel@jzny.localdomain> <20041031121308.648e98f9@zanzibar.2ka.mipt.ru> <4184C286.3000400@suse.cz>
Sender: netdev-bounce@xxxxxxxxxxx
-----BEGIN PGP SIGNED MESSAGE-----


>>>>> "Michal" == Michal Ludvig <mludvig@xxxxxxx> writes:
    Michal> I think it won't be the programmer but the system
    Michal> administrator who will have to correctly set priorities and
    Michal> constraints for different hardware/software engines for the
    Michal> particular system. With a slow CPU it may be worth to
    Michal> offload even small blocks to hardware, with a fast one it
    Michal> may be worth to set HW and SW as equal, etc.

  yes.
  There are lots of situations where, yes, a 2Ghz CPU can do IPsec much
faster and with lower latency and with less jitter than hardware.

  However, the CPU might have other important things to do. Things that
make the owner money. 

  This will become more and more obvious as IPsec is used host-to-host
for all sorts of traffic.

- --
]     "Elmo went to the wrong fundraiser" - The Simpson         |  firewalls  [
]   Michael Richardson,    Xelerance Corporation, Ottawa, ON    |net architect[
] mcr@xxxxxxxxxxxxx      http://www.sandelman.ottawa.on.ca/mcr/ |device driver[
] panic("Just another Debian GNU/Linux using, kernel hacking, security guy"); [
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)
Comment: Finger me for keys

iQCVAwUBQYUGZoqHRg3pndX9AQED8wP/SuLbcQimL6HleUQJq/ZtFTKBqKPGyQWg
s7BrN/ZWCHPhS+9X3Pe3kioab2EC77VajHVLP45xDTX2Jb2MLyWzCGbMrJGZvmHT
ZXUNSWpyy8XZtM807ibajlbRT8J8cKgkz9/J1r4hh4JdoxQFlbxH7PmEaO/qws+g
WIcQ2cdXDOA=
=Q8L1
-----END PGP SIGNATURE-----

<Prev in Thread] Current Thread [Next in Thread>