===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/crypto.html,v
retrieving revision 1.68
retrieving revision 1.69
diff -u -r1.68 -r1.69
--- www/crypto.html 2000/11/08 21:24:54 1.68
+++ www/crypto.html 2000/11/08 21:57:50 1.69
@@ -282,7 +282,7 @@
HiFn 7751
Cards using the HiFn 7751
- can be used as a cryptographic accelerator (ie.
+ can be used as a symmetric cryptographic accelerator (ie.
PowerCrypt).
Current performance using a single Hifn 7751 on each end of a tunnel
is 63Mbit/sec for 3DES/SHA1 ESP, nearly a 600% improvement over
@@ -300,11 +300,23 @@
threatened to sue us over our non-USA reverse engineering of their
crypto unlock algorithm).
+
+
Hifn 6500
+ This device is an assymetric crypto unit. It has support for RSA, DSA,
+ and DH algorithms, as well as other major big number functions. It also
+ contains a very high performance random number generator. We have one
+ device, full documention, and sample code. Development has not yet
+ started.
+
+
Broadcom BCM5805 (or beta chip Bluesteelnet 5501)
Just after the OpenBSD 2.7 release, we succeeded at adding preliminary
support for these early release parts provided to us by the vendor,
specifically starting with the test chip
5501.
+ These devices provide the highest performance symmetric cryptography
+ we have seen.
+
Bluesteelnet was bought by Broadcom and started making real parts.
Their new BCM5805 is similar, except that they also add an asymetric
engine for running DSA, RSA, and other such algorithms. With approximate
@@ -312,8 +324,8 @@
hopefully this chip will become more common soon.
The Broadcom/Bluesteelnet people have been great to deal with. They gave
- us complete documentation for their chips and a sufficient number of cards
- to test with.
+ us complete documentation and sample code for their chips and a
+ sufficient number of cards to test with.
Pijnenburg PCC-ISES
@@ -325,33 +337,35 @@
IRE 2141
We have received documentation and sample hardware for the
IRE crypto
- cards based on the SafeNet chipset. We would like to get started on
- supporting these soon.
+ cards based on the SafeNet chipset. Work to support at least the
+ symmetric cryptography of these devices has started.
-
Other cards
- We would like to move towards supporting other chips such as:
-
+-
+ 3com 3c990
+ 3com don't yet fully understand how they could benefit from giving
+ us documentation for their cryptography cards, so feel free to contact
+ them independently and encourage them. We had good conversations with
+ them, but then the people we talked to change positions. We have given
+ up talking to them, since it appears to be a waste of time.
+
-
- 3com 3c990
-
- An unnamed Intel card
-
- and others
-
+Intel IPSEC card
+ Much like 3COM, Intel has been refusing to get us documentation. We
+ have talked to about five technical people who are involved in the
+ development of those products. They all wanted us to have documentation.
+ They commend us on what we have done. But their hands are tied by
+ management who does not perceive a benefit to themselves for providing
+ documentation.
- Intel (and 3com to a lesser degree) don't yet fully understand how
- they could benefit from giving us documentation for their cryptography
- cards, so feel free to contact them independently and encourage them.
- We have given up talking to them, since it appears to be a waste of time.
-
- If people wish to help with writing drivers,
- come and help us.
-
+
Intel 82802AB/82802AC Firmware Hub RNG
The 82802 FWH chip (found on i810, i820, and i840 motherboards) contains
a random number generator (RNG). High-performance IPSEC requires more
random number entropy. As of April 10, 2000, we support the RNG. We
will add support for other RNG's found on crypto chips.
-
+
+
OpenSSL
We have grand schemes for supporting crypto cards that can do RSA or DSA,
and exporting the functions of all crypto cards to OpenSSL so that
@@ -361,6 +375,10 @@
+If people wish to help with writing drivers,
+come and help us.
+
+
International Cryptographers Wanted
@@ -414,7 +432,7 @@
www@openbsd.org
-$OpenBSD: crypto.html,v 1.68 2000/11/08 21:24:54 deraadt Exp $
+$OpenBSD: crypto.html,v 1.69 2000/11/08 21:57:50 deraadt Exp $