[Bug 253505] 13-BETA2: encrypted swap and root partition leads to software accelerated encryption

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=253505

Jason A. Harmening <jah at FreeBSD.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |jah at FreeBSD.org

--- Comment #2 from Jason A. Harmening <jah at FreeBSD.org> ---
dmesg shows GELI advertising "accelerated software".  I think this is expected.

aesni doesn't advertise CRYPTOCAP_F_HARDWARE.  From aesni_attach():

        sc->cid = crypto_get_driverid(dev, sizeof(struct aesni_session),
            CRYPTOCAP_F_SOFTWARE | CRYPTOCAP_F_SYNC |
            CRYPTOCAP_F_ACCEL_SOFTWARE);

Since AES-NI uses special-purpose instructions on the local CPU, I think we
would consider it "accelerated software": it's not a pure software scheme like
cryptosoft, but neither is it a separate hardware offload engine.

If GELI were using cryptosoft instead, you'd just see "software" instead of
"accelerated software" in dmesg.
You can run 'show crypto' in ddb to double-check.

-- 
You are receiving this mail because:
You are the assignee for the bug.