[Pkg-openssl-devel] OpenSSL OCF HW acceleration (AMD LX800)

Teco Boot teco at inf-net.nl
Tue Jul 24 10:29:53 UTC 2012


Hi,

I'm using OpenVPN, but struggling with performance on Alix embedded systems, with AMD LX800 CPU.
The CPU has crypto HW acceleration, and this is supported by recent Linux, with OCF.
I use Voyage Linux, which is Debian with some tools for embedded devices.

Links with info on OCF /OpenSSL-with-OCF:
> http://www.twam.info/hardware/alix/using-geodes-aes-engine-on-alix3d3
> http://www.3open.org/d/voyage/enable_hardware_encryption?&#for_voyage_075
The Voyage Linux maintainer patched OpenSSL/SSHD before, but he stopped doing this.
> http://www.voyage.hk/dists/0.6/openssl/
> http://list.voyage.hk/pipermail/voyage-linux/2011-September/014109.html
> http://list.voyage.hk/pipermail/voyage-linux/2011-June/013660.html

OCF is on my system:
> root at voyage:~# modprobe ocf ; modprobe cryptodev ; modprobe cryptosoft
> root at voyage:~# lsmod | grep "crypto"    
> cryptosoft             10371  0 
> cryptodev               8782  0 
> ocf                    16698  2 cryptosoft,cryptodev


The patch from ocf-linux doesn't work for 1.0.1c. I tried patch for 0.9.8r.
> root at voyage:~/openssl-src/openssl-1.0.1c# patch -p1 < openssl-0.9.8r.patch 

This didn't work.

Q:
Is there any effort on OpenSSL for HW acceleration (so I don't need OCF-linux provided patches)?
If OCF is the way to go, why not adopt it?

I guess the questions are for OpenSSL development. I try you as Debian maintainers first. Feel free to forward.

Thanks,
Teco




More information about the Pkg-openssl-devel mailing list