=================================================================== RCS file: /cvsrepo/anoncvs/cvs/www/crypto.html,v retrieving revision 1.68 retrieving revision 1.69 diff -u -r1.68 -r1.69 --- www/crypto.html 2000/11/08 21:24:54 1.68 +++ www/crypto.html 2000/11/08 21:57:50 1.69 @@ -282,7 +282,7 @@

  • HiFn 7751
    Cards using the HiFn 7751 - can be used as a cryptographic accelerator (ie. + can be used as a symmetric cryptographic accelerator (ie. PowerCrypt). Current performance using a single Hifn 7751 on each end of a tunnel is 63Mbit/sec for 3DES/SHA1 ESP, nearly a 600% improvement over @@ -300,11 +300,23 @@ threatened to sue us over our non-USA reverse engineering of their crypto unlock algorithm).

    + +

  • Hifn 6500
    + This device is an assymetric crypto unit. It has support for RSA, DSA, + and DH algorithms, as well as other major big number functions. It also + contains a very high performance random number generator. We have one + device, full documention, and sample code. Development has not yet + started. +

    +

  • Broadcom BCM5805 (or beta chip Bluesteelnet 5501)
    Just after the OpenBSD 2.7 release, we succeeded at adding preliminary support for these early release parts provided to us by the vendor, specifically starting with the test chip 5501. + These devices provide the highest performance symmetric cryptography + we have seen. +

    Bluesteelnet was bought by Broadcom and started making real parts. Their new BCM5805 is similar, except that they also add an asymetric engine for running DSA, RSA, and other such algorithms. With approximate @@ -312,8 +324,8 @@ hopefully this chip will become more common soon.

    The Broadcom/Bluesteelnet people have been great to deal with. They gave - us complete documentation for their chips and a sufficient number of cards - to test with. + us complete documentation and sample code for their chips and a + sufficient number of cards to test with.

  • Pijnenburg PCC-ISES
    @@ -325,33 +337,35 @@
  • IRE 2141
    We have received documentation and sample hardware for the IRE crypto - cards based on the SafeNet chipset. We would like to get started on - supporting these soon. + cards based on the SafeNet chipset. Work to support at least the + symmetric cryptography of these devices has started.

    -

  • Other cards
    - We would like to move towards supporting other chips such as: - +
  • Intel IPSEC card
    + Much like 3COM, Intel has been refusing to get us documentation. We + have talked to about five technical people who are involved in the + development of those products. They all wanted us to have documentation. + They commend us on what we have done. But their hands are tied by + management who does not perceive a benefit to themselves for providing + documentation.

    - Intel (and 3com to a lesser degree) don't yet fully understand how - they could benefit from giving us documentation for their cryptography - cards, so feel free to contact them independently and encourage them. - We have given up talking to them, since it appears to be a waste of time. -

    - If people wish to help with writing drivers, - come and help us. -

    +

  • Intel 82802AB/82802AC Firmware Hub RNG
    The 82802 FWH chip (found on i810, i820, and i840 motherboards) contains a random number generator (RNG). High-performance IPSEC requires more random number entropy. As of April 10, 2000, we support the RNG. We will add support for other RNG's found on crypto chips. -

    +

    +

  • OpenSSL
    We have grand schemes for supporting crypto cards that can do RSA or DSA, and exporting the functions of all crypto cards to OpenSSL so that @@ -361,6 +375,10 @@

    +If people wish to help with writing drivers, +come and help us. + +

    International Cryptographers Wanted

    @@ -414,7 +432,7 @@ OpenBSD www@openbsd.org
    -$OpenBSD: crypto.html,v 1.68 2000/11/08 21:24:54 deraadt Exp $ +$OpenBSD: crypto.html,v 1.69 2000/11/08 21:57:50 deraadt Exp $