version 1.126, 2004/02/19 03:30:52 |
version 1.127, 2004/03/24 23:36:26 |
|
|
inside the kernel to feed the entropy pool. |
inside the kernel to feed the entropy pool. |
<p> |
<p> |
|
|
|
<li><b>VIA C3 AES instructions</b><br> |
|
VIA C3 cpus with a step 8 or later Nehemiah core contains an AES |
|
implementation accessible via simple instructions. As of <a |
|
href="34.html">3.4</a> the kernel supports them to be used in an |
|
IPsec context and exported by <tt>/dev/crypto</tt>. As of <a |
|
href="35.html">3.5</a> performances have been greatly improved |
|
and OpenSSL now uses the new instruction directly when available |
|
without the need to enter the kernel, resulting in vastly |
|
improved speed (AES-128 measured at 780MByte/sec) for applications |
|
using OpenSSL to perform AES encryption. |
|
<p> |
|
|
<li><b>OpenSSL</b><br> |
<li><b>OpenSSL</b><br> |
Years ago, we had a grand scheme to support crypto cards that can do |
Years ago, we had a grand scheme to support crypto cards that can do |
RSA/DH/DSA automatically via OpenSSL calls. As of OpenBSD 3.2, that |
RSA/DH/DSA automatically via OpenSSL calls. As of OpenBSD 3.2, that |