Re: linux-ipsec: RE: [OFFTOPIC]Re: FW: Crypto: [PsuedoOfftopic]: Crypto Offload

[Michael T. Babcock]

That would be the idea (more or less).  After all, the kernel does not have
a crypto API at all in comparison to OpenSSL and 'everyone' is using OpenSSL
as their SSL, etc. library.  An OpenCrypt library incorporating OpenSSL and
mcrypt as well as mhash might be perfect for an all-crypto-API system which
could then do the hooks to accelerator cards.  The accelerator cards would
have kernel drivers, but the library would do the offloading calls.  There
is no reason to kernel-space this work.

----- Original Message -----
From: "Strahm, Bill" <[e-mail]>

> I do not see how Open SSL can perform this work.  What needs to happen is
an
> inline offload processing.  In otherwords, what I want to do is rather
than
> using Open SSL I want to go and pass information off to the NIC driver
that
> will tell the NIC to perform the crypto operation...
>
> I do not see how openSSL can help much with this, other than maybe write
> something into SSL that says, if the NIC supports it, don't do crypto, but
> when the packet goes out the wire, do the perscribed crypto operation
> then...