Hi. This is a call for testers. I integrated VIA/ACE PadLock with our crypto(9) subsystem, so now it can be used with things like fast_ipsec(4) and geli(8). I'm attaching three files: padlock.c - should be placed in sys/crypto/via/ Makefile - should be placed in sys/modules/padlock/ Makefile.patch - is a patch against sys/modules/Makefile You need to create sys/crypto/via and sys/modules/padlock directories first. This will allow to compile padlock.ko module. It works very well with GELI: # kldload geom_zero # sysctl kern.geom.zero.clear=0 # kldload padlock # geli onetime -s 16384 -a aes -l 128 gzero # dd if=/dev/gzero.eli of=/dev/null bs=128k count=2000 262144000 bytes transferred in 3.614664 secs (72522368 bytes/sec) Without padlock.ko loaded I get only 6415333 bytes/sec. The thing which interest me the most is how it works with fast_ipsec(4). -- Pawel Jakub Dawidek http://www.wheel.pl pjd_at_FreeBSD.org http://www.FreeBSD.org FreeBSD committer Am I Evil? Yes, I Am!
This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:38:41 UTC