Re: [Ipsec-tools-devel] Cryptography

[Matthew G. <mg...@sh...>]

Marcelo Marleta wrote:
> Thanks for the answers.
> But I think I was not very clear.
> I have an AES implemented in hardware and I call it using C.  I just 
> want to make a branch in the ipsec-tools to call my AES instead of the 
> one that comes with ipsec-tools.
> I'm changing the parser and I want to know what all the things I have to 
> change in setkey and racoon.
> For example: which function calls the cryptographyc algorithm?
> I'm looking at the struct m_sa. I have to use it to make the branch?
> 

Marcelo,

	What do you need to accelerate using your AES hardware? The ipsec-tools 
package only includes an internet key exchange daemon and the pfkey 
utilities. If you want to accelerate ipsec packet processing, you need 
to look at the kernel sources as Emmanuel suggested. If you want to 
accelerate key exchange, racoon uses the openssl libcrypto which has a 
framework for hardware acceleration.

-Matthew