On Tue, Jan 27, 2015 at 2:24 PM, Stuart Henderson <s...@spacehopper.org> wrote:
> On 2015-01-27, Adam Thompson <athom...@athompso.net> wrote: > > On 2015-01-27 02:58 AM, Stuart Henderson wrote: > >> On 2015-01-26, Christian Weisgerber <na...@mips.inka.de> wrote: > >> I don't think we support Quick Assist, whatever that is. > >> correct. > >> [...] > >> It doesn't look like something we can use easily. > > > > FWIW, I just read that Netgate (i.e. pfSense) committed QuickAssist > > crypto accel support into FreeBSD 10.2 [possibly a private branch??] for > > some ciphers. Apologies, but I'm completely failing to find the message > > that mentioned it on the pfSense mailing list, right now. > > > > I don't know enough about FreeBSD's cryptodev engine to know if any of > > that work can be used here. > > One problem with that codebase is that it's US crypto. > > This pdf from Intel makes reference to OCF-Linux, a Linux port of the OpenBSD/FreeBSD Cryptographic Framework (OCF) as it relates to QuickAssist. http://www.intel.com/content/dam/www/public/us/en/documents/white-papers/communications-quick-assist-paper.pdf >From what I am seeing, there is a Kernel module and userland pieces available for Linux and FreeBSD to support this capability. In addition to Stuart's point on the US crypto code base as it relates to export restrictions, it is also hardware designed by a US company for strong crypto. Axton
