version 1.52, 2000/04/13 12:58:59 |
version 1.53, 2000/04/13 13:10:58 |
|
|
performance even for the software case. |
performance even for the software case. |
<p> |
<p> |
<li><b>HiFn 7751</b><br> |
<li><b>HiFn 7751</b><br> |
Cards using the 7751 can be used as a cryptographic accelerator (ie. |
Cards using the <a href="http://www.hifn.com/products/7751.htm">HiFn 7751</a> |
|
can be used as a cryptographic accelerator (ie. |
<a href="http://www.powercrypt.com">PowerCrypt</a>). |
<a href="http://www.powercrypt.com">PowerCrypt</a>). |
Current performance using a single Hifn 7751 on each end of a tunnel |
Current performance using a single Hifn 7751 on each end of a tunnel |
is 63Mbit/sec for 3DES/SHA1 ESP, nearly a 600% improvement over |
is 63Mbit/sec for 3DES/SHA1 ESP, nearly a 600% improvement over |
using a P3/550 cpu. Further improvements are under way to resolve a |
using a P3/550 cpu. Further improvements are under way to resolve a |
few more issues, but as of April 13, 2000 the code is considered |
few more issues, but as of April 13, 2000 the code is considered |
stable.<p> |
stable. We wrote our own driver for supporting this chip, rather |
The 7751 is considered slow by industry standards and many vendors have |
than using the (USA-written) |
faster chips (even HiFn now has a faster but much more expensive chip). |
<a href="http://www.powercrypt.com">powercrypt</a> driver, as well |
We are already looking at supporting other chips such as |
our driver links in properly to the IPSEC stack<p> |
<a href="http://www.ire.com/OEM/OEMTechnologyDefault.htm">IRE 2141</a>, |
The 7751 is now considered slow by industry standards and many vendors |
<a href="http://www.bluesteelnet.com/product.html">Bluesteelnet 5501</a>, |
have faster chips (even HiFn now has a faster but more expensive |
<a href="http://www.pcc.pijnenburg.nl/pcc-ises.htm">Pijnenburg PCC-ISES</a>, |
chip). We are moving towards supporting other chips such as: |
perhaps the |
<p> |
<a href="http://www.3com.com/promotions/3c990promo/index.html">3com 3c990</a>, |
<ul> |
and others. IRE and Bluesteelnet in particular have already been very |
<li><a href="http://www.ire.com/OEM/OEMTechnologyDefault.htm">IRE 2141</a> |
|
<li><a href="http://www.bluesteelnet.com/product.html">Bluesteelnet 5501</a> |
|
<li><a href="http://www.pcc.pijnenburg.nl/pcc-ises.htm">Pijnenburg PCC-ISES</a> |
|
<li>perhaps the |
|
<a href="http://www.3com.com/promotions/3c990promo/index.html">3com 3c990</a> |
|
<li>and others |
|
</ul> |
|
<p> |
|
IRE and Bluesteelnet in particular have already been very |
friendly, and have given us all the information we need to support their |
friendly, and have given us all the information we need to support their |
hardware. |
hardware. Other vendors are on our list, but we are focusing on the |
|
fast+cheap solutions first. |
Intel (and 3com to a lesser degree) don't yet fully understand how |
Intel (and 3com to a lesser degree) don't yet fully understand how |
they could benefit from giving us documentation for their cryptography |
they could benefit from giving us documentation for their cryptography |
cards, so feel free to contact them independently and encourage them. |
cards, so feel free to contact them independently and encourage them. |