Anonymous | Login | Signup for a new account | 11-10-2008 11:19 PST |
Main | My View | View Issues | Change Log | Docs |
Viewing Issue Simple Details [ Jump to Notes ] | [ View Advanced ] [ Issue History ] [ Print ] | |||||||||||
ID | Category | Severity | Reproducibility | Date Submitted | Last Update | |||||||
0001487 | [buildroot] New Features | minor | always | 09-05-07 06:34 | 09-05-07 06:34 | |||||||
Reporter | bradmssw | View Status | public | |||||||||
Assigned To | buildroot | |||||||||||
Priority | normal | Resolution | open | |||||||||
Status | assigned | Product Version | ||||||||||
Summary | 0001487: [patch] OCF cryptodev patchset (hardware crypto acceleration for userland) | |||||||||||
Description |
This is a patchset to provide userland access to kernel cryptographic interfaces. This means that hardware crypto accelerators supported by the kernel can now be utilized by userland applications and libraries such as OpenSSL, OpenSwan, and OpenSSH. Reference: http://ocf-linux.sourceforge.net [^] The patchset also provides support for these additional hardware crypto devices (which are not currently part of the linux kernel): Hifn 7951 Hifn 7956 SafeNet SafeXcel 1741 SafeNet SafeXcel 1142 Intel IXP465 Intel IXP425 Intel IXP422 Freescale SEC Note: to take advantage of hardware crypto accelerators already in the kernel (such as GeodeLX AES, or Via Padlock) you must, counter-intuitively, enable the 'cryptosoft' feature of OCF. Also, don't forget to enable 'cryptodev' for userland support. The kernel patchset is from the 20070727 release, but had to be re-diffed to apply cleanly to 2.6.22.1. The openssl patchset included here is from the 20051110 release, which is the last release supporting the 0.9.7 series of OpenSSL which is what buildroot currently provides. Some minor manual patching was needed to make this apply cleanly to 0.9.7m. Since hardware cryptographic acceleration is becoming common in embedded devices, it makes sense for buildroot to support this natively. On a Soekris net5501-60 (433MHz GeodeLX), with the built-in GeodeLX AES accelerator, using openssl's speed test with and without cryptodev, here are some statistics on my hardware: software, single-threaded: openssl speed -evp aes128 -elapsed type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes aes-128-cbc 3823.26k 4329.37k 4467.63k 4510.92k 4527.16k hardware, single-threaded: openssl speed -evp aes128 -engine cryptodev -elapsed type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes aes-128-cbc 1359.10k 4837.19k 13548.04k 25759.01k 34166.10k software, multi-threaded: openssl speed -evp aes128 -elapsed -multi 10 type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes aes-128-cbc 3921.08k 4247.58k 4483.26k 4539.02k 5722.35k hardware, multi-threaded: openssl speed -evp aes128 -engine cryptodev -elapsed -multi 10 type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes aes-128-cbc 4058.10k 16153.17k 26851.91k 74207.78k 123592.85k Obviously the hardware acceleration is a huge win for large block sizes. I've bzip2'd the entire patch for size. Please make sure the toolchain/kernel-headers/ocf and package/openssl/ocf directory and contents get committed. This has been sent to the mailing list without reply... |
|||||||||||
Additional Information | ||||||||||||
Attached Files | ocf-linux.patch.bz2 [^] (103,598 bytes) 09-05-07 06:34 | |||||||||||
|
There are no notes attached to this issue. |
Copyright © 2000 - 2006 Mantis Group |