- Cards using the 7751 can be used as a cryptographic accelerator (ie. + Cards using the HiFn 7751 + can be used as a cryptographic accelerator (ie. PowerCrypt). Current performance using a single Hifn 7751 on each end of a tunnel is 63Mbit/sec for 3DES/SHA1 ESP, nearly a 600% improvement over using a P3/550 cpu. Further improvements are under way to resolve a few more issues, but as of April 13, 2000 the code is considered - stable.
- The 7751 is considered slow by industry standards and many vendors have - faster chips (even HiFn now has a faster but much more expensive chip). - We are already looking at supporting other chips such as - IRE 2141, - Bluesteelnet 5501, - Pijnenburg PCC-ISES, - perhaps the - 3com 3c990, - and others. IRE and Bluesteelnet in particular have already been very + stable. We wrote our own driver for supporting this chip, rather + than using the (USA-written) + powercrypt driver, as well + our driver links in properly to the IPSEC stack
+ The 7751 is now considered slow by industry standards and many vendors + have faster chips (even HiFn now has a faster but more expensive + chip). We are moving towards supporting other chips such as: +
+
-
+
- IRE 2141 +
- Bluesteelnet 5501 +
- Pijnenburg PCC-ISES +
- perhaps the + 3com 3c990 +
- and others +
+ IRE and Bluesteelnet in particular have already been very
friendly, and have given us all the information we need to support their
- hardware.
+ hardware. Other vendors are on our list, but we are focusing on the
+ fast+cheap solutions first.
Intel (and 3com to a lesser degree) don't yet fully understand how
they could benefit from giving us documentation for their cryptography
cards, so feel free to contact them independently and encourage them.
@@ -335,7 +345,7 @@
www@openbsd.org
-$OpenBSD: crypto.html,v 1.52 2000/04/13 12:58:59 deraadt Exp $
+$OpenBSD: crypto.html,v 1.53 2000/04/13 13:10:58 deraadt Exp $