Re: OpenSSL + opencrypto

[itojun%itojun.org@localhost (Jun-ichiro itojun Hagino)]

> NB: the kernel currently honours requests on /dev/crypto transforms
> which end up being handled in software. That's a
> performance-measurement hack: both FreeBSD and OpenBSD disallow
> /dev/crypto access to software operations.  I'd planned to turn them
> off just before the openssl libcrypto patches go in.

        openbsd has sysctl for this.

itojun

kern.usercrypto = 1
kern.cryptodevallowsoft = 0
kern.userasymcrypto = 1