On Fri, 29 Oct 2004, Evgeniy Polyakov wrote:
> > I have a very preliminary driver for FastCrypt PCI board for 3DES at
> > http://www.logix.cz/michal/devel/fcrypt/
> > For now it works with some very ugly hacks in the current cryptoapi, but
> > I can give it a try with your acrypto and report the results.
>
> It would be very appreciated>
Re Hifn - you may be interested in this Linux driver:
http://kernel.ebshome.net/hifn7955-2.6-4.diff
> > I admit I haven't read your sources too deeply yet so excuse me a dumb
> > question - does acrypto replace or extend cryptoapi? Once I get it
> > running will it take over e.g. encryption for IPsec?
>
> They are both an addendum to each other,
> any crypto layer can be "tunrned into compatibility mode" -
> i.e. anyone can write bridges like attached sha1_provider.c (it is bridge
> from async into sync mode). So I can not answer - but in _current_
> implementation without any kind of bridges it is an extension.
>
> If you compile this sources then you will still have old sync behaviour,
> IPsec and any other old-style application should be rewritten(like
> attached consumer.c) to use new asynchronous crypto layer features.
This could be a bit of problem, because AFAIK the IPsec code doesn't allow
sleeping while processing the packet. It will likely need a bigger
rewrite.
Anyway, have you got any tool to measure the cipher throughput without
IPsec/dm-crypt being updated for acrypto?
Michal Ludvig
--
* A mouse is a device used to point at the xterm you want to type in.
* Personal homepage - http://www.logix.cz/michal
|