W dniu 28.08.2025 o 22:18, salva pisze:
Under no circumstances will Crypto Copressors be used for Ciphers and
Macs.
But, what about Crypto as accelerator? AFAIK, Openssh use SystemSSL, and
System SSL can use crypto accelerators.
Crypto Accelerators support very few services related to SSL/TLS
handshaking process, especially asymmetric functions (very cpu
intensive), like CSNDPKD, CSNDPKE and CSNDDSV.
It is also worth to mention the CryptoExpress engines (working in
Coprocessor or Accelerator mode) are *cards*. That mean I/O process
(undocumented). It is much slower than use of CPACF which resides in PU
directly. The smaller data chunks the more it is important.
To complement, the card in coprocessor mode is not for cpu offload. It
is for *secure* key cryptography. For those services which do require
high security of the key (read EMV PCI-DSS, etc.).
--
Radoslaw Skorupka
Lodz, Poland
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN
