Ok, thanks Stuart. On Wed, May 20, 2009 at 9:47 PM, Stuart Henderson <s...@spacehopper.org> wrote: > On 2009-05-20, Iqigo Ortiz de Urbina <tarom...@gmail.com> wrote: >> On Wed, May 20, 2009 at 10:15 PM, Stuart Henderson <s...@spacehopper.org> wrote: >>> On 2009-05-20, Joco Salvatti <salva...@gmail.com> wrote: >>>> Hi misc, >>>> >>>> I bought a Soekris Net5501 with a cryptographic card VPN1411 >>>> (Authentication, SHA-1 and MD5, Public Key, RSA, DSA, SSL, IKE and DH, >>>> Hardware random number generator) and I would like to know if any >>>> configuration is needed in OpenBSD kernel to use this card when >>>> cryptography is necessary. >>>> >>>> eg. When a VPN IPSec is done. >>> >>> You might want to check that it's not actually slower when you use the card. >>> >>> >> >> Some basic benchmarking would be appreciated, for the sake of the >> list. As a newcomer I am really interested in understanding the >> cryptohardware framework. >> >> I would have never said accelerated hardware could perform any worse. >> Interesting point Stuart. >> >> > > also note the difference between discrete devices (PCI or PCI-like > accelerators, either discrete cards/ICs, or on-die like the AES128 > accelerator in the Geode LX cpu), and the accelerators that use > specific CPU instructions like VIA C7M and forthcoming Intel CPUs. > the latter have fewer overheads. > >
-- "Se Debugar i a arte de remover bugs, programar i a arte de inserm-los". Donald E. Knuth. -- Joco Salvatti Graduated in Computer Science Federal University of Para - UFPA - Brazil E-Mail: salva...@gmail.com
