Subject: AMD Geode LX Security Block (was Re: NetBSD on the Soekris net5501 status report)
To: None <current-users@NetBSD.org>
From: Jared D. McNeill <jmcneill@invisible.ca>
List: tech-crypto
Date: 06/18/2007 07:49:43
On 16-Jun-07, at 2:02 PM, Jared D. McNeill wrote:
> FYI, I imported the glxsb(4) driver from OpenBSD for crypto assist
> and random number generation.
[For those of you just joining us, glxsb(4) is an AES/RNG security
block found in the AMD Geode LX family of processors]
Here's some performance numbers from openssl speed -evp aes-128-cbc,
the first using sw crypto, the second using glxsb(4):
The 'numbers' are in 1000s of bytes per second processed.
type 16 bytes 64 bytes 256 bytes 1024 bytes
8192 bytes
aes-128-cbc 3712.69k 4057.03k 4176.33k
4206.79k 4212.15k
aes-128-cbc 6680.49k 40836.42k 109531.96k 421803.47k
15572756.43k
Unfortunately, the hardware doesn't appear to do HMAC, but aes-128-
cbc should be enough at least to do ssh acceleration.
Cheers,
Jared