PLX7820 hardware security engine support?

This forum is for all other ARMv5 devices

PLX7820 hardware security engine support?

Postby firefoxPL » Tue Feb 07, 2012 2:34 pm

Hi, I was wondering whether ALARM takes advantage of hardware security engine built into the SoC, it is supposed to support hardware acceleration of AES128, AES256 and some hash function (probably SHA1) calucations. For me it would be really great if those engines were used by openssl. My Pogo sometimes needs to handle some 5-6 Mbps encrypted traffic and it seems to handle the load, but during that time (tens of minutes sometimes few hours) I can't do anything with the pogo, not even ssh into it or view a simple web page that runs on it. Seems to me that openssl is completely taking over CPU (and possibly RAM) therefore I'm afraid that it does all the crypto calculations with CPU instead of using dedicated resources.
Could anyone confirm (built-in or lack of) support for the cryptographic resources of PLX7820?
Last edited by firefoxPL on Tue Feb 07, 2012 4:48 pm, edited 1 time in total.
Pogo-P24 (new Pogoplug Classic) - ALARM on SATA (mediatomb, netatalk, avahi, time machine, swap, openvpn)
Pogo-E02 (v2 Pink) - ALARM on USB (netatalk, avahi, cryptodev-linux, getting ready for L2TP)
firefoxPL
 
Posts: 65
Joined: Thu Dec 08, 2011 1:49 pm

Re: PLX7820 hardware security engine support?

Postby WarheadsSE » Tue Feb 07, 2012 2:46 pm

We're working on the driver for it for 3.1, as it was essentially missing.

Despite that: openssl has to be compiled to make use of the logic.
Core Developer
Remember: Arch Linux ARM is entirely community donation supported!
WarheadsSE
Developer
 
Posts: 6807
Joined: Mon Oct 18, 2010 2:12 pm

Re: PLX7820 hardware security engine support?

Postby firefoxPL » Tue Feb 07, 2012 2:49 pm

Thanks for quick reply, in that case I have one more feature to look forward to in 3.1 :)
Pogo-P24 (new Pogoplug Classic) - ALARM on SATA (mediatomb, netatalk, avahi, time machine, swap, openvpn)
Pogo-E02 (v2 Pink) - ALARM on USB (netatalk, avahi, cryptodev-linux, getting ready for L2TP)
firefoxPL
 
Posts: 65
Joined: Thu Dec 08, 2011 1:49 pm

Re: PLX7820 hardware security engine support?

Postby WarheadsSE » Tue Feb 07, 2012 2:52 pm

openssl will still have to be compiled to use it.
Core Developer
Remember: Arch Linux ARM is entirely community donation supported!
WarheadsSE
Developer
 
Posts: 6807
Joined: Mon Oct 18, 2010 2:12 pm

Re: PLX7820 hardware security engine support?

Postby firefoxPL » Tue Feb 07, 2012 3:21 pm

Ok I get it :), that shouldn't be a problem, I'd just compile it on the pogo or cross-compile on my laptop
Pogo-P24 (new Pogoplug Classic) - ALARM on SATA (mediatomb, netatalk, avahi, time machine, swap, openvpn)
Pogo-E02 (v2 Pink) - ALARM on USB (netatalk, avahi, cryptodev-linux, getting ready for L2TP)
firefoxPL
 
Posts: 65
Joined: Thu Dec 08, 2011 1:49 pm

Re: PLX7820 hardware security engine support?

Postby Geoff » Tue Feb 07, 2012 6:41 pm

I am hoping that rsync will be able to take advantage of this module for its file-block digesting/hashing needs. That's where my PPPro is spending the most cycles at present.
Geoff
 
Posts: 231
Joined: Wed Mar 09, 2011 5:14 pm

Re: PLX7820 hardware security engine support?

Postby xenoxaos » Tue Feb 07, 2012 10:07 pm

$this->bbcode_second_pass_quote('firefoxPL', ' ')it is supposed to support hardware acceleration of AES128, AES256 and some hash function (probably SHA1) calucations.


The hashing algorithms are SHA1 and SHA256
Arch Linux ARM exists and continues to grow through community support, please donate today!
xenoxaos
Developer
 
Posts: 323
Joined: Thu Jan 06, 2011 1:45 am

Re: PLX7820 hardware security engine support?

Postby firefoxPL » Wed Feb 08, 2012 9:48 am

Good to know, for personal use AES128+SHA1 is sufficient, and should get best performance, SHA2 has some drawbacks to its algorithm that make it harder to implement in hardware where all calculations are parellel.
Pogo-P24 (new Pogoplug Classic) - ALARM on SATA (mediatomb, netatalk, avahi, time machine, swap, openvpn)
Pogo-E02 (v2 Pink) - ALARM on USB (netatalk, avahi, cryptodev-linux, getting ready for L2TP)
firefoxPL
 
Posts: 65
Joined: Thu Dec 08, 2011 1:49 pm


Return to Community Supported

Who is online

Users browsing this forum: No registered users and 2 guests