Thread (55 messages) 55 messages, 8 authors, 2004-12-14

Re: Asynchronous crypto layer.

From: Michal Ludvig <hidden>
Date: 2004-10-29 14:03:06

Evgeniy Polyakov told me that:
On 29 Oct 2004 08:42:18 -0400
jamal [off-list ref] wrote:
quoted
quoted
I am very curious if you see perfomance improvements over old scheme
in the case of a single crypto chip in a fast CPU.
It has been shown in the past that with a xeon in the range of 2Ghz the
context setup and the big lock (and lack of async) implied that
performance enhancement using a crypto chip was negligible.
IIRC, the only time it started showing anything useful was when a
compute intensive alg like 3DES was chewing packets >= 1000 bytes.

My suspicion is you will show it is better to use a crypto chip with
async;-> In the minimal you should show some improvement.

If we have a hardware accelerator chip, than we _already_ have improvements 
with even the worst async crypto layer, since software and hardware 
will work in parrallel.
I agree that multigigahertz box will beat my HIFN card, 
but I doubt it can beat 1gghz VIA.
I have a very preliminary driver for FastCrypt PCI board for 3DES at
http://www.logix.cz/michal/devel/fcrypt/
For now it works with some very ugly hacks in the current cryptoapi, but
I can give it a try with your acrypto and report the results.

I admit I haven't read your sources too deeply yet so excuse me a dumb
question - does acrypto replace or extend cryptoapi? Once I get it
running will it take over e.g. encryption for IPsec?

Michal Ludvig
-- 
* A mouse is a device used to point at the xterm you want to type in.
* Personal homepage - http://www.logix.cz/michal
Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help