Re: [Ocf-linux-users] [Fwd: Re: OCF-linux and 2.6.27.x]

[Jonathan F. <jon...@wi...>]

On Fri, 2009-03-06 at 15:17 -0600, Kim Phillips wrote:
> On Fri, 06 Mar 2009 13:25:57 -0500
> Jonathan Fournier <jon...@wi...> wrote:
> > Oh I didn't know that add support for public key ops (PKEU) was on the
> > TODO list, just saw it from the driver header.
> > 
> > I thought it did because when querying openssl with
> > 
> > % openssl engine -c
> > 
> > It was printing out the supported BSD cryptodev to be:
> > 
> > DSA RSA DH
> > 
> > What algorithm are supported on the 8548 so that I can validate that I
> > have the driver working properly?
> > 
> > I tried aes-128-cbc and got the same results with or without cryptodev
> > support, I assume I picked a wrong one randomly then? ;)
> 
> not sure (I haven't run OCF in a while), but aes was implemented and
> tested with IPSec.  I do recall having to insmod talitos prior to
> cryptosoft though, if that helps.
> 

Oh I didn't have cryptosoft loaded at the same time :( I thought they
were mutually exclusive, so I assume then that every HW drivers rely on
that layer?

> Are you using crypto on the 8548 for something other than IPSec?  If
> not, is there a reason you're not using the mainline linux kernel
> driver?

I used the 8548 because I had access to a couple of Freescale SEC
enabled target in my lab.

For now I'm trying to get up to speed on both framework (OCF and
CryptoAPI) to see the pros and cons of each other, and what isn't
available yet to try to help on a project.

At the begining my high level requirements were:

* asynchronously perform encryption when a HW crypto engine is available
* asynchronously perform IPsec Authentication Header (AH) and
Encapsulating Security Protocol (ESP) encryption when an HW crypto
engine is available
* integration with openssl (cryptodev)

I know there's some contribution coming from AMCC engineers related to
the cryptodev support with CryptoAPI, but I'm not fully up to speed on
that yet. What is that state of async support in CryptoAPI, in general
is the HW drivers are getting improved only in one of the two framework?
Are they compatible?

Cheers,

/jonathan

> 
> Kim
--
Jonathan Fournier, Senior Engineer, Wind River
direct +1.613.270.5786  mobile +1.613.263.9223  fax +1.613.592.2283
350 Terry Fox Drive, Suite 200, Ottawa, Ontario, K2K 2W5, Canada