Re: Enabling Talitos kills all IPsec traffic

2008-10-29 Thread Herbert Xu
Kim Phillips <[EMAIL PROTECTED]> wrote: > On Thu, 23 Oct 2008 16:12:22 -0700 > "Barry G" <[EMAIL PROTECTED]> wrote: > >> Also, is it correct that Talitos only accelerates AEAD connections, not >> ESP/AH >> protocols so there will be no performance increase for me until Strongswan >> adds rfc5282

Re: [PATCH] ixp4xx_crypto: avoid firmware loading during module initialisation

2008-10-29 Thread Herbert Xu
On Thu, Oct 23, 2008 at 02:28:32PM +0200, Christian Hohnstaedt wrote: > > atomic_set(&ctx->configuring, 0); > + switch ((image_id>>16) & 0xff) { > + case 3: > + if (cipher_cfg_enc(tfm) & MOD_AES) { > + printk(KERN_ERR "Firmware o

Re: Enabling Talitos kills all IPsec traffic

2008-10-29 Thread Kim Phillips
On Wed, 29 Oct 2008 10:33:39 -0700 "Barry G" <[EMAIL PROTECTED]> wrote: > >> Also, is it correct that Talitos only accelerates AEAD connections, not > >> ESP/AH > >> protocols so there will be no performance increase for me until Strongswan > >> adds rfc5282 support? > > > > I'm not sure what you

Re: [PATCH] AMCC Crypto4xx Device Driver v2

2008-10-29 Thread James Hsiao
I think the patch format in the email is incorrect, so the one go to linux-crypto was filtered out. And the one directly to Kim was received and Kim kindly reviewed Thanks for review. James On Wed, 2008-10-29 at 14:14 +0100, Sebastian Andrzej Siewior wrote: > * James Hsiao | 2008-10-27 18:55

Re: Enabling Talitos kills all IPsec traffic

2008-10-29 Thread Barry G
>> CONFIG_CRYPTO_DEV_TALITOS set to y, strongswan still successfully negotiates >> an IPsec SA, but no traffic flows. > > does no traffic flow at all or is it all getting dropped? Unencrypted traffic still flows fine. Sniffing traffic on the encrypted link, I see the ISAKMP SA init, but no ESP tr

Re: [PATCH] AMCC Crypto4xx Device Driver v2

2008-10-29 Thread Sebastian Andrzej Siewior
* James Hsiao | 2008-10-27 18:55:32 [-0700]: >Kim suggest us submit this to linuxppc-dev for more review. so do I >> >> diff --git a/arch/powerpc/boot/dts/kilauea.dts >> b/arch/powerpc/boot/dts/kilauea.dts >> index dececc4..58b48a0 100644 >> --- a/arch/powerpc/boot/dts/kilauea.dts >> +++ b/arch/