Re: OCF Support on linux 2.6.
From: Nawang Chhetan <hidden>
Date: 2007-07-18 03:37:56
Hi David,
Thanks for the reply. Since there is no proper API
documentation for the OCF-Linux, can we refer to original OpenBsd
Cryptographic Documentaton . Like the one in the following link:
http://www.digipedia.pl/man/crypto.9.html
I just cross checked few API's and realized they are almost the same.
On 7/18/07, David McCullough [off-list ref] wrote:Jivin Nawang Chhetan lays it down ...quoted
Hi David, Thanks for the reply. I have been using the SafeXcel 1141 card on x86 platform. Need to investigate this further as suggested by you.Make sure you have the latest safenet driver from the 2007 tarball, there are some bus width fixes in there IIRC for all the PCI drivers. Other than that, it's debug time.quoted
I have a question, I have noticed that list of hardware accelerators are supported with OCF-Linux is a bit unclear, even though these hardware accelerators are mentioned clearly: 1. Hifn-7751hifn 7751, 7956 safenet 1141, 1741 Intel IXP (465 425 and 422) Freescale SEC (talitos) There is also a Via padlock driver in freebsd that would be trivial to port. Software (using linux kernel crypto API, which may also use hardware :-)quoted
Is this the exhaustive list ?The list above is, Cheers, Davidmquoted
On 7/17/07, David McCullough [off-list ref] wrote:quoted
Jivin Nawang Chhetan lays it down ...quoted
Hi All, I am trying to integrate OCF-linux with Quicksec on linux 2.6 kernels. Many versions of OCF-Linux have been released but wtihout clear demarcation of 2.6 kernel versions they support. All they mention is support for kernel verison 2.6.11 and later and the README within the distributions states it can be easily modified to support recent version of kernels( which is true, I did it for 2.6.17.7 ) My Question here is that: Is there any good OCF-Linux documentation available ?Only whats on the website. Your best bet is to ask. The current releases work for kernels up to 2.6.18 without any major issues. I should be doing a release this week with everything up to 2.6.22 supported fully. Just finishing off the testing.quoted
What is/are the version of 2.6 kernel, the OCF-Linux is most stable/tested/developed for ? Further I tried to use SafeXcel-1141 hardware accelerator ( which is claimed to be supported) with OCF-Linux, but inserting the module safe.ko (after ocf.ko and cryptodev.ko ) hangs the machine (Kernel version 2.6.17.6 .). Do I need to insmod the SafeXcel-1141 driver too ?I have used the safenet driver on SuperH and ARM platforms. It works fine there. I don't have any way to test it on x86 though. It should work fine on 2.6.17, load everything with debug enabled and see what happens. If you are running on an x86_64 system, disable all the code in "random.c" however, it was broken on 64bits arches in older versions. Cheers, Davidm -- David McCullough, david_mccullough@securecomputing.com, Ph:+61 734352815 Secure Computing - SnapGear http://www.uCdot.org http://www.cyberguard.com-- Nawang Chhetan Software Engineer SafeNet India.-- David McCullough, david_mccullough@securecomputing.com, Ph:+61 734352815 Secure Computing - SnapGear http://www.uCdot.org http://www.cyberguard.com
-- Nawang Chhetan Software Engineer SafeNet India.