Re: ESP hardware acceleration

2009-09-15 Thread Octavian Purdila
On Tuesday 15 September 2009 20:12:52 you wrote: > > However, I think that the best results for hw accel will be obtained if > > you accelerate the AEAD interface. > > If your driver benefits from seeing both the hashing request and the > cipher request at the same time then by all means go for t

Re: ESP hardware acceleration

2009-09-15 Thread Herbert Xu
Octavian Purdila wrote: > > AFAK, the crypto interface is asynchronous but the hashing interface (as used > in IPSec) is synchronous. > > There are two patches I've recently seen on the list, one for converting to > async hashing and one for parallel crypto/ipsec which will probably get in > 2

Re: ESP hardware acceleration

2009-09-15 Thread Herbert Xu
Dimitrios Siganos wrote: > > What I would like to know is: > 1) does the xfrm/ESP implementation support asynchronous/parallel packet > operation? > 2) If yes, does it support it in both directions (tx/rx)? Yes on both counts. Cheers, -- Visit Openswan at http://www.openswan.org/ Email: Herbe

Re: ESP hardware acceleration

2009-09-15 Thread Octavian Purdila
On Tuesday 15 September 2009 16:19:27 you wrote: > Hi, > > We are using linux-2.6.28 and we would like to hardware accelerate the > NETKEY IPsec traffic. We are using strongswan for the upper layers. > > I understand that strongswan uses the Linux/NETKEY IPsec implementation, > which in turn, use

ESP hardware acceleration

2009-09-15 Thread Dimitrios Siganos
Hi, We are using linux-2.6.28 and we would like to hardware accelerate the NETKEY IPsec traffic. We are using strongswan for the upper layers. I understand that strongswan uses the Linux/NETKEY IPsec implementation, which in turn, uses the Linux Scatterlist Crypto API for all its cryptograph