Hugo Osvaldo Barrera <[email protected]> wrote: > Sadly, my hardware doesn't support AESNI. > Would something like a Soekris 1401(hifn) make up for that, or am I mixing > stuff up?
Crypto devices outside the CPU aren't that great. For each en-/decryption, the device needs to be set up, the data moved to and the result back from the device. That's cumbersome and slow. Userland can't directly access such devices, it needs to go through a kernel driver, crypto(9). That's still slower. crypto(9) access in userland is now disabled by default, because it rarely provides any gain, even on slow machines. So, no, a vpn1401 would not be helpful. What I don't know is if OpenSSL uses the VIA Padlock encryption support in your CPU. -- Christian "naddy" Weisgerber [email protected]
