X-Original-To: alpine-devel@lists.alpinelinux.org
Delivered-To: alpine-devel@mail.alpinelinux.org
Received: from mail-lb0-f179.google.com (mail-lb0-f179.google.com [209.85.217.179])
	(using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits))
	(No client certificate requested)
	by mail.alpinelinux.org (Postfix) with ESMTPS id B81EBDC0076
	for <alpine-devel@lists.alpinelinux.org>; Wed,  7 May 2014 15:20:14 +0000 (UTC)
Received: by mail-lb0-f179.google.com with SMTP id c11so1577377lbj.24
        for <alpine-devel@lists.alpinelinux.org>; Wed, 07 May 2014 08:20:11 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20120113;
        h=sender:date:from:to:cc:subject:message-id:in-reply-to:references
         :mime-version:content-type:content-transfer-encoding;
        bh=3dp2npQcsfnLAe65QVIuAG5H6vCiHyWGtpxD/dS1dzE=;
        b=TNvK5F6iJPeV8pQHwhsSaiSs918jqLmfQcUfa/P8vEVrEYoLz86o5X0DPvip89jUgx
         cZNhiu3QUhyg4QysNqAQG9BhEXzH7cWrSeQdkNLvqtUzPC8LjquHeH5+5TC6W5BEvToZ
         3RT4sgcY/159RePHXO9z/hoTzWKBS5NzHabIex9TsTS6V1gRjA1aGCpYsQk/uIfMWH74
         jW2y0WxJsHdbTfBJtLyrIgkM1zH10GQ0zEmVw8mhN6bE0fDmcm1lodki/G4v542w0eLF
         gTNlxY1+gQRvc+12IXF2t/XwahQZk9Zp8NwxY8hv+ehmD9AgH84yASCP0w3xPd33FMBA
         Gk9g==
X-Received: by 10.112.199.70 with SMTP id ji6mr1740691lbc.85.1399476010755;
        Wed, 07 May 2014 08:20:10 -0700 (PDT)
Received: from vostro ([83.145.235.199])
        by mx.google.com with ESMTPSA id d8sm17390425lbe.3.2014.05.07.08.20.10
        for <multiple recipients>
        (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
        Wed, 07 May 2014 08:20:10 -0700 (PDT)
Sender: =?UTF-8?Q?Timo_Ter=C3=A4s?= <timo.teras@gmail.com>
Date: Wed, 7 May 2014 18:20:19 +0300
From: Timo Teras <timo.teras@iki.fi>
To: nicolas@the-tropics.fr
Cc: alpine-devel@lists.alpinelinux.org
Subject: Re: [alpine-devel] OpenSSL / OpenVPN Cryptodev support
Message-ID: <20140507182019.42bf8445@vostro>
In-Reply-To: <ce5caa33f40de54c5c5948761ee18a1d@the-tropics.fr>
References: <ce5caa33f40de54c5c5948761ee18a1d@the-tropics.fr>
X-Mailer: Claws Mail 3.9.3 (GTK+ 2.24.23; i486-alpine-linux-musl)
X-Mailinglist: alpine-devel
Precedence: list
List-Id: Alpine Development <alpine-devel.lists.alpinelinux.org>
List-Unsubscribe: 
	<mailto:alpine-devel+unsubscribe@lists.alpinelinux.org?subject=unsubscribe>
List-Post: <mailto:alpine-devel@lists.alpinelinux.org>
List-Help: <mailto:alpine-devel+help@lists.alpinelinux.org?subject=help>
List-Subscribe: 
	<mailto:alpine-devel+subscribe@lists.alpinelinux.org?subject=subscribe>
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit

On Wed, 07 May 2014 14:58:58 +0200
nicolas@the-tropics.fr wrote:

> I'm wondering if openssl shouldn't have an addon like
> cryptodev-linux : http://cryptodev-linux.org/
> 
> As Alpine Linux is nice for routers/firewalls , a lot of embedded 
> hardware have such crypto accelarators.

Generally that will not help on "slow" boxes. The problem is that the
system call overhead will outweight any acceleration you might get. It
only helps if the crypto accel chip is asynchronous and you use it for
really large block sizes.

You really need userland openssl module using geode-aes to gain
anything.

Alternatively you can use IPsec. The kernel's geode-aes module will
automatically accelerate ipsec esp traffic.

- Timo


---
Unsubscribe:  alpine-devel+unsubscribe@lists.alpinelinux.org
Help:         alpine-devel+help@lists.alpinelinux.org
---