tech-crypto archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: VIA ACE patch



>>>>> "ddk" == Daniel de Kok <danieldk%pobox.com@localhost> writes:

   ddk> Just for clarity: these VIA CPUs just have additional
   ddk> instructions, so the kernel opencrypto "driver" and the
   ddk> OpenSSL padlock engine are not mutually exclusive.

right.  so, in Linux there are posts in the forums that even after
they added padlock support to OpenSSL, OpenSSL does not choose the
right ``engine'' by default.  They had to go through and modify each
individual program, ssh, apache, u.s.w., to get it to use the
padlock-based openssl-engine.

Will OpenSSL in NetBSD 4.0/-current use the additional instructions by
default?  Or will it use /dev/crypto, or regular i386 algorithms, by
default?  sounds like you almost have to do some careful performance
testing just to be reasonably sure the whole stack is glued together
and actually working.

Attachment: pgpktCrwukyTg.pgp
Description: PGP signature



Home | Main Index | Thread Index | Old Index