www/crypto.html - diff

Return to crypto.html CVS log

Up to [local] / www

Diff for /www/crypto.html between version 1.68 and 1.69

version 1.68, 2000/11/08 21:24:54

version 1.69, 2000/11/08 21:57:50

Line 282

<li>HiFn 7751

Cards using the <a href="http://www.hifn.com/products/7751.html">HiFn 7751</a>

can be used as a cryptographic accelerator (ie.

can be used as a symmetric cryptographic accelerator (ie.

<a href="http://www.powercrypt.com">PowerCrypt</a>).

Current performance using a single Hifn 7751 on each end of a tunnel

is 63Mbit/sec for 3DES/SHA1 ESP, nearly a 600% improvement over

Line 300

threatened to sue us over our non-USA reverse engineering of their

crypto unlock algorithm).

<li>Hifn 6500

This device is an assymetric crypto unit. It has support for RSA, DSA,

and DH algorithms, as well as other major big number functions. It also

contains a very high performance random number generator. We have one

device, full documention, and sample code. Development has not yet

started.

<li>Broadcom BCM5805 (or beta chip Bluesteelnet 5501)

Just after the OpenBSD 2.7 release, we succeeded at adding preliminary

support for these early release parts provided to us by the vendor,

specifically starting with the test chip

<a href="http://www.bluesteelnet.com/product.html">5501</a>.

These devices provide the highest performance symmetric cryptography

we have seen.

Bluesteelnet was bought by Broadcom and started making real parts.

Their new BCM5805 is similar, except that they also add an asymetric

engine for running DSA, RSA, and other such algorithms. With approximate

Line 312

Line 324

hopefully this chip will become more common soon.

The Broadcom/Bluesteelnet people have been great to deal with. They gave

us complete documentation for their chips and a sufficient number of cards

us complete documentation and sample code for their chips and a

to test with.

sufficient number of cards to test with.

<li>Pijnenburg PCC-ISES

Line 325

Line 337

<li>IRE 2141

We have received documentation and sample hardware for the

<a href="http://www.ire.com/OEM/OEMTechnologyDefault.htm">IRE</a> crypto

cards based on the SafeNet chipset. We would like to get started on

cards based on the SafeNet chipset. Work to support at least the

supporting these soon.

symmetric cryptography of these devices has started.

<li>Other cards

We would like to move towards supporting other chips such as:

3com 3c990</a>

<ul>

3com don't yet fully understand how they could benefit from giving

us documentation for their cryptography cards, so feel free to contact

them independently and encourage them. We had good conversations with

them, but then the people we talked to change positions. We have given

up talking to them, since it appears to be a waste of time.

<li>Intel IPSEC card

<li>An unnamed Intel card

Much like 3COM, Intel has been refusing to get us documentation. We

<li>and others

have talked to about five technical people who are involved in the

</ul>

development of those products. They all wanted us to have documentation.

They commend us on what we have done. But their hands are tied by

management who does not perceive a benefit to themselves for providing

documentation.

Intel (and 3com to a lesser degree) don't yet fully understand how

they could benefit from giving us documentation for their cryptography

cards, so feel free to contact them independently and encourage them.

We have given up talking to them, since it appears to be a waste of time.

If people wish to help with writing drivers,

<a href=#people>come and help us</a>.

<li>Intel 82802AB/82802AC Firmware Hub RNG

The 82802 FWH chip (found on i810, i820, and i840 motherboards) contains

a random number generator (RNG). High-performance IPSEC requires more

random number entropy. As of April 10, 2000, we support the RNG. We

will add support for other RNG's found on crypto chips.

<li>OpenSSL

We have grand schemes for supporting crypto cards that can do RSA or DSA,

and exporting the functions of all crypto cards to OpenSSL so that

Line 359

Line 373

<a href="http://www.modssl.org/">apache https</a>, etc)

can benefit.

</ul>

If people wish to help with writing drivers,

<a href=#people>come and help us</a>.