New IT forum
10 August 2022, 11:34:31 pm *
Welcome, %1$s. Please login or register.

: MiraBox now in stock.
 
Pages: [1]

Author Topic: kernel crypto API - hardware acceleration for SSL  (Read 5838 times)

Confusticated

  • New IT customer
  • Hero Member
  • *
  • Posts: 663
kernel crypto API - hardware acceleration for SSL
« on: 03 November 2011, 08:50:33 pm »

Here is an alternative to the BSD's cryptodev.

http://carnivore.it/2011/04/23/openssl_-_af_alg

The Pro's:
The current OpenSSL supports it, so no patching, compiling.
No non-standard package breakage on an upgrade.
It is in the kernel mainstream, and therefore officially recognised and supported.
It works on the New IT images with recent kernels (GuiPlug) without modifying them.

The Con's:
It is currenty not as fast as cryptodev (hopefully, this will change with maturity).

After playing with this for a couple of days I consider the slower speed only a minor drawback,
whereas the 'offload'ing of the CPU is a significant advantage.

Logged
Advocatus Diaboli - My agenda is not to give you the answer, but to guide your thoughts so you derive it for yourself!

Confusticated

  • New IT customer
  • Hero Member
  • *
  • Posts: 663
Re: kernel crypto API - hardware acceleration for SSL
« Reply #1 on: 25 April 2012, 04:39:23 pm »

Recently got caught out after installing a 3.3.0 kernel, hardware crypt access stopped happening for me.
I had necessarily tweaked the kernel config a little, but couldn't figure out what had gone wrong...

It seems (I had failed to realise) that the kernel module dependencies on af_alg.ko were not being picked up.
This resulted in the load failure of the cryptographic module that was dependant on it (rather than asking af_alg to be loaded).

The solution is simple...create the file (or edit /etc/modprobe.d/aliases.conf every time you upgrade) /etc/modprobe.d/alias-net-pf-38.conf
Code: [Select]
alias net-pf-38 af_alg
« Last Edit: 25 April 2012, 05:39:17 pm by Confusticated »
Logged
Advocatus Diaboli - My agenda is not to give you the answer, but to guide your thoughts so you derive it for yourself!
Pages: [1]
 
 

Powered by MySQL Powered by PHP SMF 2.0.10 | SMF © 2015, Simple Machines Valid XHTML 1.0! Valid CSS!