version 1.59, 2000/07/06 17:16:54 |
version 1.60, 2000/07/20 17:54:59 |
|
|
stable. We wrote our own driver for supporting this chip, rather |
stable. We wrote our own driver for supporting this chip, rather |
than using the (USA-written) |
than using the (USA-written) |
<a href="http://www.powercrypt.com">powercrypt</a> driver, as well |
<a href="http://www.powercrypt.com">powercrypt</a> driver, as well |
our driver links in properly to the IPSEC stack<p> |
our driver links in properly to the IPSEC stack. |
The 7751 is now considered slow by industry standards and many vendors |
The 7751 is now considered slow by industry standards and many vendors |
have faster chips (even HiFn now has a faster but more expensive |
have faster chips (even HiFn now has a faster but more expensive |
chip). |
chip). Peak performance with 3DES SHA1 ESP is around 63MBit/sec. |
<p> |
<p> |
|
(As an aside, HiFn was a difficult company to deal with; they even |
|
threatened to sue us over our non-USA reverse engineering of their |
|
crypto unlock algorithm). |
|
<p> |
<li><b>Broadcom BCM5805 (or beta chip Bluesteelnet 5501)</b><br> |
<li><b>Broadcom BCM5805 (or beta chip Bluesteelnet 5501)</b><br> |
Just after the OpenBSD 2.7 release, we succeeded at adding support |
Just after the OpenBSD 2.7 release, we succeeded at adding preliminary support |
for these early release parts provided to us by the vendor, specifically |
for these early release parts provided to us by the vendor, specifically |
starting with the test chip |
starting with the test chip |
<a href="http://www.bluesteelnet.com/product.html">5501</a>. |
<a href="http://www.bluesteelnet.com/product.html">5501</a>. |
|
|
The new BCM5805 is similar, except that they also add an asymetric engine |
The new BCM5805 is similar, except that they also add an asymetric engine |
for running DSA, RSA, and other such algorithms. With approximate |
for running DSA, RSA, and other such algorithms. With approximate |
performance starting at more than twice as fast as the HiFn, hopefully |
performance starting at more than twice as fast as the HiFn, hopefully |
this chip will become more common soon. We have not fully optimized our |
this chip will become more common soon. Our driver still has bugs, so |
driver yet, so performance figures will be forthcoming. |
we do not yet have performance figures. |
<p> |
<p> |
|
The Broadcom/Bluesteelnet people have been great to deal with. They gave |
|
us complete documentation for their chips and a sufficient number of cards |
|
to test with. |
|
<p> |
|
|
|
<li><b>Pijnenburg PCC-ISES</b><br> |
|
The <a href="http://www.pcc.pijnenburg.nl/pcc-ises.htm">PCC-ISES</a> is a |
|
new chipset from the Netherlands. We have received sample hardware and |
|
documentation, and work to support this should start fairly soon. |
|
<p> |
|
|
|
<li><b>IRE 2141</b><br> |
|
We have received documentation and sample hardware for the |
|
<a href="http://www.ire.com/OEM/OEMTechnologyDefault.htm">IRE</a> crypto |
|
cards based on the SafeNet chipset. We would like to get started on |
|
supporting these soon. |
|
<p> |
|
|
<li><b>Other cards</b><br> |
<li><b>Other cards</b><br> |
We are moving towards supporting other chips such as: |
We are moving towards supporting other chips such as: |
<ul> |
<ul> |
<li><a href="http://www.ire.com/OEM/OEMTechnologyDefault.htm">IRE 2141</a> |
|
<li><a href="http://www.pcc.pijnenburg.nl/pcc-ises.htm">Pijnenburg PCC-ISES</a> |
<li><a href="http://www.3com.com/promotions/3c990promo/index.html">3com 3c990</a> |
<li>perhaps the |
|
<a href="http://www.3com.com/promotions/3c990promo/index.html">3com 3c990</a> |
|
<li>and others |
<li>and others |
</ul> |
</ul> |
<p> |
<p> |
Of these, IRE in particular has already been very friendly, and have given |
|
us all the information we need to support their hardware. Other vendors |
|
are on our list, but we are focusing on the fast+cheap solutions first. |
|
Intel (and 3com to a lesser degree) don't yet fully understand how |
Intel (and 3com to a lesser degree) don't yet fully understand how |
they could benefit from giving us documentation for their cryptography |
they could benefit from giving us documentation for their cryptography |
cards, so feel free to contact them independently and encourage them. |
cards, so feel free to contact them independently and encourage them. |
|
We have given up talking to them, since it appears to be a waste of time. |
<p> |
<p> |
If people wish to help with writing drivers, |
<b>If people wish to help with writing drivers, |
<a href=#people>come and help us</a>. |
<a href=#people>come and help us</a>.</b> |
<p> |
<p> |
<li><b>Intel 82802AB/82802AC Firmware Hub RNG</b><br> |
<li><b>Intel 82802AB/82802AC Firmware Hub RNG</b><br> |
The 82802 FWH chip (found on i810, i820, and i840 motherboards) contains |
The 82802 FWH chip (found on i810, i820, and i840 motherboards) contains |