recommended SSL-friendly crypto accelerator

Jason Stone freebsd-security at dfmm.org
Fri Apr 16 15:39:30 PDT 2004


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


> For $79, it's cheap enough that I could put a whole stack of them in a
> machine.  Can FreeBSD take advantage of multiple cards like that?

another question is, is there logic, either in the driver or in openssl,
to notice if crypto operations are getting backed up waiting for the
crypto card while the main cpu is idle and, in that case, to start doing
the crypto on the main cpu rather than on the crypto card?

in other words, if the main cpu is actually way faster than the crypto
card, is it possible that the crypto card could actually _slow_ crypto
operations on that system?

last time I checked, the stats on the cheap soekris cards were way slower
than the output of "openssl speed" run on my system during normal load....


 -Jason

 --------------------------------------------------------------------------
 Freud himself was a bit of a cold fish, and one cannot avoid the suspicion
 that he was insufficiently fondled when he was an infant.
	-- Ashley Montagu
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (FreeBSD)
Comment: See https://private.idealab.com/public/jason/jason.gpg

iD8DBQFAgGChswXMWWtptckRAsgbAJ0VkMFfr7vVmz4hYAv0Eiq4K8uKEQCfZVqE
J8GeGq8xwykfc05xGdDcZek=
=0elQ
-----END PGP SIGNATURE-----


More information about the freebsd-security mailing list