AMD Geode LX Security Block (was Re: NetBSD on the Soekris net5501 status report)

["Jared D. McNeill" <jmcneill%invisible.ca@localhost>]

On 16-Jun-07, at 2:02 PM, Jared D. McNeill wrote:
> FYI, I imported the glxsb(4) driver from OpenBSD for crypto assist  
> and random number generation.

[For those of you just joining us, glxsb(4) is an AES/RNG security  
block found in the AMD Geode LX family of processors]

Here's some performance numbers from openssl speed -evp aes-128-cbc,  
the first using sw crypto, the second using glxsb(4):

        The 'numbers' are in 1000s of bytes per second processed.
	type             16 bytes     64 bytes    256 bytes   1024 bytes    
8192 bytes
	aes-128-cbc       3712.69k     4057.03k     4176.33k      
4206.79k     4212.15k
	aes-128-cbc       6680.49k    40836.42k   109531.96k   421803.47k  
15572756.43k

Unfortunately, the hardware doesn't appear to do HMAC, but aes-128- 
cbc should be enough at least to do ssh acceleration.

Cheers,
Jared