OpenSSL with hifn(4) (cryptodev)

[Sam Leffler]

On Tuesday 03 August 2004 11:16 am, Doug White wrote:
> On Tue, 3 Aug 2004, Mike Tancsa wrote:
> > At 08:41 AM 03/08/2004, Norikatsu Shigemura wrote:
> > >Hi sam!
> > >
> > >         I have two Soekris vpn1401 crypto accelerator cards.  I
> > > installed these to 4-stable machine and 5-current machine.
> >
> > Hi,
> >          Not all things are accelerated in openssl.  Also depending on
> > the CPU you use, it wont be faster and might even be slower.  Where you
> > really win is with concurrent jobs.  In our app, our backup server takes
> > several ssh streams of dump and tar. The P4 2.4 keeps up just fine even
> > when 50Mb/s of traffic is coming in with the card, but is too taxed
> > without it.
>
> Also, your app has to ask for the acceleration if they want it, by
> requesting the 'cryptodev' engine.  And that requires OpenSSL 0.9.7, which
> you probably have since the 'openssl engine' command exists.
>
> nork, which app(s) are you trying to accelerate?

I don't believe this is correct.  Unless something has changed libcrypto (from 
openssl) will check for /dev/crypto, query what algorithms are supported, and 
then use h/w acceleration if it exists.

	Sam