FreeBSD 7.1 opencrypto --> kern.cryptodevallowsoft

Patrick Lamaizière patfbsd at
Fri May 15 16:19:04 UTC 2009

Le Tue, 12 May 2009 19:14:38 +0100,
Brendan Kennedy <brendan.kennedy at>:

> Hi All,


> FreeBSD_26# sysctl -a | grep crypto
> kern.cryptodevallowsoft: 1
> However, when I try a test, I get the following:
> FreeBSD_26# /usr/src/tools/tools/crypto/cryptotest -va 3des
> cipher 3des keylen 24
> CIOCGSESSION: Invalid argument
> FreeBSD_26# /usr/src/tools/tools/crypto/cryptotest -va des
> cipher des keylen 8
> CIOCGSESSION: Invalid argument
> It seems the software crypto device is not available. Do I need to do
> any other steps to enable it? Is there another config option that
> makes sure it is build as part of Opencrypto framework? Do I need to
> build some other software driver instead?

Cryptodev fails because it checks that the requested crypto driver
provides hardware crypto. function "checkforsoftware" in cryptodev.c
And it does not take care about the sysctl kern.cryptodevallowsoft. 

Looks like a bug and not a feature. OpenBSD's cryptodev seems to take
care about the sysctl and i think you can use the cryptosoft driver
with it. 


More information about the freebsd-questions mailing list