VIA/ACE PadLock integration with crypto(9).

From: Pawel Jakub Dawidek <pjd_at_FreeBSD.org>
Date: Fri, 12 Aug 2005 15:45:11 +0200
Hi.

This is a call for testers.
I integrated VIA/ACE PadLock with our crypto(9) subsystem, so now it can
be used with things like fast_ipsec(4) and geli(8).

I'm attaching three files:

padlock.c - should be placed in sys/crypto/via/
Makefile - should be placed in sys/modules/padlock/
Makefile.patch - is a patch against sys/modules/Makefile

You need to create sys/crypto/via and sys/modules/padlock directories
first.

This will allow to compile padlock.ko module.

It works very well with GELI:

	# kldload geom_zero
	# sysctl kern.geom.zero.clear=0
	# kldload padlock
	# geli onetime -s 16384 -a aes -l 128 gzero
	# dd if=/dev/gzero.eli of=/dev/null bs=128k count=2000
	262144000 bytes transferred in 3.614664 secs (72522368 bytes/sec)

Without padlock.ko loaded I get only 6415333 bytes/sec.

The thing which interest me the most is how it works with fast_ipsec(4).

-- 
Pawel Jakub Dawidek                       http://www.wheel.pl
pjd_at_FreeBSD.org                           http://www.FreeBSD.org
FreeBSD committer                         Am I Evil? Yes, I Am!

Received on Fri Aug 12 2005 - 11:45:30 UTC

This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:38:41 UTC