@moonman I had a quick look into dropbear, but I couldn't find it mentioned anywhere it would actually be able to make use of cryptodev. My testing with dropbear seems to show not, as dropbear both doesn't accept/recognize the aes128-cbc cipher and at no time interrupts are added to f1030000.crypto in /proc/interupts. I could be missing something as the documentation is pretty limited.
@technofs On 5.8.13-1-ARCH (dt-kernel) and cryptodev-dkms-1.11-1 (open)sshd fails with a similar message to yours.
$this->bbcode_second_pass_code('', '$ sudo /usr/bin/sshd -D -d
debug1: sshd version OpenSSH_8.4, OpenSSL 1.1.1h 22 Sep 2020
debug1: Unable to load host key "/etc/ssh/ssh_host_rsa_key": error in libcrypto
debug1: Unable to load host key: /etc/ssh/ssh_host_rsa_key
debug1: Unable to shield host key "/etc/ssh/ssh_host_ecdsa_key": error in libcrypto
debug1: Unable to load host key: /etc/ssh/ssh_host_ecdsa_key
debug1: Unable to shield host key "/etc/ssh/ssh_host_ed25519_key": error in libcrypto
debug1: Unable to load host key: /etc/ssh/ssh_host_ed25519_key
accumulate_host_timing_secret: ssh_digest_start')
openssl-cyptodev-1.1.1.h-1 works just fine.
$this->bbcode_second_pass_code('', '$ openssl engine devcrypto -t -c
(devcrypto) /dev/crypto engine
[DES-CBC, DES-EDE3-CBC, BF-CBC, AES-128-CBC, AES-192-CBC, AES-256-CBC, AES-128-CTR, AES-192-CTR, AES-256-CTR, AES-128-ECB, AES-192-ECB, AES-256-ECB, CAMELLIA-128-CBC, CAMELLIA-192-CBC, CAMELLIA-256-CBC, MD5, SHA1, RIPEMD160, SHA224, SHA256, SHA384, SHA512]
[ available ]')
During some web searching I came across a post somewhere that suggested some issue with openssh forking and the kernel not duplicating the in-kernel crytodev context, making it not available to the forked child ...
Eitherway, OpenSSH connections cannot be accelerated because the latest versions of OpenSSH enforce usage of the seccomp sandbox, which forbids some syscalls required to use devcrypto.
As for moving your system to the dt-kernel, did you mean to say you have a NSA
325
? If so, there are some related topics on the forum, e.g.,
https://archlinuxarm.org/forum/viewtopic.php?f=47&t=13688&p=61281&hilit=nsa325+device+tree#p61281.
Good luck
!