git: 074a91f746bd - main - Enable accelerated AES-XTS software crypto in GENERIC.

John Baldwin jhb at FreeBSD.org
Wed Jan 13 21:13:26 UTC 2021


The branch main has been updated by jhb:

URL: https://cgit.FreeBSD.org/src/commit/?id=074a91f746bd80498a4c815aa795e5dc51b12121

commit 074a91f746bd80498a4c815aa795e5dc51b12121
Author:     John Baldwin <jhb at FreeBSD.org>
AuthorDate: 2021-01-13 21:13:01 +0000
Commit:     John Baldwin <jhb at FreeBSD.org>
CommitDate: 2021-01-13 21:13:01 +0000

    Enable accelerated AES-XTS software crypto in GENERIC.
    
    In particular, using GELI on a root filesystem will only use
    accelerated software crypto drivers if they are available before the
    root filesystem is mounted.  While these modules can be loaded from
    the loader, including them in GENERIC provides a better out-of-the-box
    experience for users.
    
    Both aesni(4) and armv8crypto(4) provide accelerated implementations
    of the default cipher used by GELI (AES-XTS) in addition to other
    ciphers.
    
    Reviewed by:    mhorne, allanjude, markj
    Differential Revision:  https://reviews.freebsd.org/D28100
---
 sys/amd64/conf/GENERIC | 1 +
 sys/arm64/conf/GENERIC | 1 +
 sys/i386/conf/GENERIC  | 1 +
 3 files changed, 3 insertions(+)

diff --git a/sys/amd64/conf/GENERIC b/sys/amd64/conf/GENERIC
index 1ccd06669951..393fec26d423 100644
--- a/sys/amd64/conf/GENERIC
+++ b/sys/amd64/conf/GENERIC
@@ -315,6 +315,7 @@ device		wpi			# Intel 3945ABG wireless NICs.
 
 # Pseudo devices.
 device		crypto			# core crypto support
+device		aesni			# AES-NI OpenCrypto module
 device		loop			# Network loopback
 device		padlock_rng		# VIA Padlock RNG
 device		rdrand_rng		# Intel Bull Mountain RNG
diff --git a/sys/arm64/conf/GENERIC b/sys/arm64/conf/GENERIC
index 463271d1db26..d1ad101975de 100644
--- a/sys/arm64/conf/GENERIC
+++ b/sys/arm64/conf/GENERIC
@@ -217,6 +217,7 @@ device		aw_rtc		# Allwinner Real-time Clock
 device		mv_rtc		# Marvell Real-time Clock
 
 # Crypto accelerators
+device		armv8crypto	# ARMv8 OpenCrypto module
 device		safexcel	# Inside Secure EIP-97
 
 # Watchdog controllers
diff --git a/sys/i386/conf/GENERIC b/sys/i386/conf/GENERIC
index eac3a0af6c82..b65235ca9668 100644
--- a/sys/i386/conf/GENERIC
+++ b/sys/i386/conf/GENERIC
@@ -287,6 +287,7 @@ device		wpi			# Intel 3945ABG wireless NICs.
 
 # Pseudo devices.
 device		crypto			# core crypto support
+device		aesni			# AES-NI OpenCrypto module
 device		loop			# Network loopback
 device		padlock_rng		# VIA Padlock RNG
 device		rdrand_rng		# Intel Bull Mountain RNG


More information about the dev-commits-src-all mailing list