Re: Status of encryption hardware support in FreeBSD

2001-07-06 Thread Wes Peters
Marc wrote: On Tue, 3 Jul 2001 [EMAIL PROTECTED] wrote: In a message dated 07/03/2001 11:57:44 AM Eastern Daylight Time, [EMAIL PROTECTED] writes: Now try to imagine a whole PC on a smaller board than a PIII CPU cartridge. If you can't, get a copy of the Embedded Systems

Re: Status of encryption hardware support in FreeBSD

2001-07-06 Thread Wes Peters
Terry Lambert wrote: I think you'll find that Wes Peters has worked on a number of them as well (one of his is now called Intel InBusiness servers). My Internet Station ran VxWorks because we didn't have enough CPU budget for anything else, and because we were fighting political wars over a

Re: Status of encryption hardware support in FreeBSD

2001-07-03 Thread Terry Lambert
[EMAIL PROTECTED] wrote: Again, you are only considering your personal case. If crypto should be needed on an embedded appliance, I don't think they would need a lightning-fast processor and VGA support, when crypto is all they want. Your premise that embedded appliances are

Re: Status of encryption hardware support in FreeBSD

2001-07-03 Thread Terry Lambert
[EMAIL PROTECTED] wrote: Entire PIII MBs are available for under $60. Your concept that the delta in cost between a 486 chipset and PIII is more that that is utterly ridiculous PIII chipsets and 486 chipsets cost the same in quantity. Try using a resource other than your Radio Shack

Re: Status of encryption hardware support in FreeBSD

2001-07-03 Thread Wes Peters
Sergey Babkin wrote: [EMAIL PROTECTED] wrote: Entire PIII MBs are available for under $60. Your concept that the delta in cost between a 486 chipset and PIII is more that that is utterly ridiculous PIII chipsets and 486 chipsets cost the same in quantity. Try using a resource other

Re: Status of encryption hardware support in FreeBSD

2001-07-03 Thread Noses
In article [EMAIL PROTECTED] [EMAIL PROTECTED] (Sergey Babkin) wrote: Now try to imagine a whole PC on a smaller board than a PIII CPU cartridge. If you can't, get a copy of the Embedded Systems magazine and look at the pictures in it. Imagine a complete 80186 system with 512k RAM and 512K

Re: Status of encryption hardware support in FreeBSD

2001-07-03 Thread Bsdguru
In a message dated 07/03/2001 11:57:44 AM Eastern Daylight Time, [EMAIL PROTECTED] writes: Now try to imagine a whole PC on a smaller board than a PIII CPU cartridge. If you can't, get a copy of the Embedded Systems magazine and look at the pictures in it. Imagine a complete 80186

Re: Status of encryption hardware support in FreeBSD

2001-07-03 Thread Marc
On Tue, 3 Jul 2001 [EMAIL PROTECTED] wrote: In a message dated 07/03/2001 11:57:44 AM Eastern Daylight Time, [EMAIL PROTECTED] writes: Now try to imagine a whole PC on a smaller board than a PIII CPU cartridge. If you can't, get a copy of the Embedded Systems magazine and look

Re: Status of encryption hardware support in FreeBSD

2001-07-03 Thread Noses
In article [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: We can picture it, but such a system can't route a full 100mb/s ethernet, so its fairly useless as a network device/router as is proposed here. You're a real guru. Right. ISDN gives you about raw 192 kBit/s (144 kBit/s on the S0 bus) to

Re: Status of encryption hardware support in FreeBSD

2001-07-03 Thread Bsdguru
In a message dated 07/03/2001 12:58:04 PM Eastern Daylight Time, [EMAIL PROTECTED] writes: Imagine a complete 80186 system with 512k RAM and 512K flash disk, two serial ports, 14 digital IO lines and an Ethernet in a 32 pin DIL package. They are planning to replace the 80186

Re: Status of encryption hardware support in FreeBSD

2001-07-02 Thread Nate Williams
I think you've missed the fact that the '486 solution requires an add-on board (priced at $80.) and the faster cpu solution doesnt. That adds a lot of margin to get a faster MB, more than enough to compensate for the board. Not necessarily. The upgraded motherboard also

Re: Status of encryption hardware support in FreeBSD

2001-07-02 Thread Bsdguru
In a message dated 07/02/2001 12:16:47 PM Eastern Daylight Time, [EMAIL PROTECTED] writes: You are way off on your pricing. Way off. A 633 Celeron is under 50. Q1 for petes sake. The cost difference would be less than $20. in quantity. It would be less than $80. Q1. That's

Re: Status of encryption hardware support in FreeBSD

2001-07-02 Thread Wilko Bulte
On Mon, Jul 02, 2001 at 06:08:31PM -0400, [EMAIL PROTECTED] wrote: In a message dated 07/02/2001 12:16:47 PM Eastern Daylight Time, [EMAIL PROTECTED] writes: You are way off on your pricing. Way off. A 633 Celeron is under 50. Q1 for petes sake. The cost difference would be less than

Re: Status of encryption hardware support in FreeBSD

2001-07-02 Thread Sergey Babkin
[EMAIL PROTECTED] wrote: Entire PIII MBs are available for under $60. Your concept that the delta in cost between a 486 chipset and PIII is more that that is utterly ridiculous PIII chipsets and 486 chipsets cost the same in quantity. Try using a resource other than your Radio Shack

Re: Status of encryption hardware support in FreeBSD

2001-06-30 Thread Bsdguru
In a message dated 06/29/2001 11:01:16 AM Eastern Daylight Time, [EMAIL PROTECTED] writes: Really? Have you even looked at the net4501 board which was mentioned? It's a single-board computer constructed for some specific communication applications, with no VGA or keyboard

Re: Status of encryption hardware support in FreeBSD

2001-06-30 Thread Nate Williams
Really? Have you even looked at the net4501 board which was mentioned? It's a single-board computer constructed for some specific communication applications, with no VGA or keyboard support, or spinning fans, and is pretty inexpensive and in a very small form

Re: Status of encryption hardware support in FreeBSD

2001-06-30 Thread Bsdguru
In a message dated 06/30/2001 3:44:04 PM Eastern Daylight Time, [EMAIL PROTECTED] writes: Your premise that embedded appliances are somehow doomed to use pitifully outdated processors is simply wrong. Who said anything about pitifully outdated processors. I can buy a heck of

Re: Status of encryption hardware support in FreeBSD

2001-06-30 Thread Nate Williams
Your premise that embedded appliances are somehow doomed to use pitifully outdated processors is simply wrong. Who said anything about pitifully outdated processors. I can buy a heck of alot of CPU horsepower w/out buying the latest/greatest CPU. As a matter of

Re: Status of encryption hardware support in FreeBSD

2001-06-30 Thread Soren Kristensen
Hi, Bryan, again you're missing the point :-) You're working out from just processing power, in the embedded world you usually start from somewhere else In the case of my products, the requirement are small size, low cost, no moving parts (no fans or disks), long life, low power, meaning a

Re: Status of encryption hardware support in FreeBSD

2001-06-29 Thread Peter Pentchev
On Fri, Jun 29, 2001 at 10:55:39AM -0400, [EMAIL PROTECTED] wrote: In a message dated 6/28/01 11:16:31 PM Eastern Daylight Time, [EMAIL PROTECTED] writes: Really? Have you even looked at the net4501 board which was mentioned? It's a single-board computer constructed for some

Re: Status of encryption hardware support in FreeBSD

2001-06-28 Thread Bsdguru
In a message dated 06/27/2001 11:06:12 PM Eastern Daylight Time, [EMAIL PROTECTED] writes: That's not really the point here, I was talking about lowest end hardware compared to high end CPU. If we compare with high end hardware, then we're talking about factor 50 faster than software

Re: Status of encryption hardware support in FreeBSD

2001-06-28 Thread Louis A. Mamakos
In a message dated 06/27/2001 11:06:12 PM Eastern Daylight Time, [EMAIL PROTECTED] writes: That's not really the point here, I was talking about lowest end hardware compared to high end CPU. If we compare with high end hardware, then we're talking about factor 50 faster than

Re: Status of encryption hardware support in FreeBSD

2001-06-28 Thread Soren Kristensen
Hi, Btw, did I say that I'm planning to sell the 7951 based crypto board for around $80 in single unnit volume, both for the PCI and MiniPCI version And Mike, if my answer is just a sentence, I like to keep it on top, so people don't have to scroll all the way down to see what I'm

Re: Status of encryption hardware support in FreeBSD

2001-06-27 Thread Soren Kristensen
[EMAIL PROTECTED] wrote: In a message dated 06/24/2001 2:53:32 PM Eastern Daylight Time, [EMAIL PROTECTED] writes: And btw, hardware beats software anytime. The fastest PC processor right now is about the same speed as the slowest hardware. what are the numbers? Are you accounting

Re: Status of encryption hardware support in FreeBSD

2001-06-27 Thread Mike Meyer
Soren Kristensen [EMAIL PROTECTED] types: I'm not claiming any specific numbers, just that the chip I'm using, the lowest end hi/fn 7951, is said to be faster than your typical highend 1Ghz CPU doing 3-DES. [ ... ] I'm only talking about this specific case of doing computing intensive

Re: Status of encryption hardware support in FreeBSD

2001-06-27 Thread Soren Kristensen
Hi, That's not really the point here, I was talking about lowest end hardware compared to high end CPU. If we compare with high end hardware, then we're talking about factor 50 faster than software There are chips out that can do 1Gbit 3-DES, given a 64bit/66Mhz PCI bus. I'm just starting

Re: Status of encryption hardware support in FreeBSD

2001-06-27 Thread Steve Ames
On Wed, Jun 27, 2001 at 09:51:47PM -0500, Mike Meyer wrote: The crucial bottleneck for this kind of thing is the doubling time. Unless your special purpose hardware doubles in speed as fast or faster than general purpose CPUs, then eventually it's going to be slow, then expensive, and finally

Re: Status of encryption hardware support in FreeBSD

2001-06-27 Thread Mike Meyer
Steve Ames [EMAIL PROTECTED] types: On Wed, Jun 27, 2001 at 09:51:47PM -0500, Mike Meyer wrote: The crucial bottleneck for this kind of thing is the doubling time. Unless your special purpose hardware doubles in speed as fast or faster than general purpose CPUs, then eventually it's going

Re: Status of encryption hardware support in FreeBSD

2001-06-25 Thread Bsdguru
In a message dated 06/24/2001 2:53:32 PM Eastern Daylight Time, [EMAIL PROTECTED] writes: And btw, hardware beats software anytime. The fastest PC processor right now is about the same speed as the slowest hardware. what are the numbers? Are you accounting for the overhead in accessing the

Re: Status of encryption hardware support in FreeBSD

2001-06-24 Thread Dag-Erling Smorgrav
Soren Kristensen [EMAIL PROTECTED] writes: As I now has prototypes avaliable of low cost PCI and MiniPCI boards, moving to production in a couple of weeks, I would like to check up on the work, as I would really like to see FreeBSD support. The boards are now supported in OpenBSD 2.9. OK, so

Re: Status of encryption hardware support in FreeBSD

2001-06-24 Thread Karsten W. Rohrbach
Dag-Erling Smorgrav([EMAIL PROTECTED])@2001.06.24 17:48:47 +: Soren Kristensen [EMAIL PROTECTED] writes: As I now has prototypes avaliable of low cost PCI and MiniPCI boards, moving to production in a couple of weeks, I would like to check up on the work, as I would really like to see

Re: Status of encryption hardware support in FreeBSD

2001-06-24 Thread Dag-Erling Smorgrav
Karsten W. Rohrbach [EMAIL PROTECTED] writes: i think ipsec crypto abstraction into hardware is one side of the medal, but the other side -- to be polished first -- ist getting openssl onto the iron. What you're basically trying to say is that you want a userland interface to the crypto

Re: Status of encryption hardware support in FreeBSD

2001-06-24 Thread Karsten W. Rohrbach
Dag-Erling Smorgrav([EMAIL PROTECTED])@2001.06.24 18:20:53 +: Karsten W. Rohrbach [EMAIL PROTECTED] writes: i think ipsec crypto abstraction into hardware is one side of the medal, but the other side -- to be polished first -- ist getting openssl onto the iron. What you're basically

Re: Status of encryption hardware support in FreeBSD

2001-06-24 Thread Dag-Erling Smorgrav
Karsten W. Rohrbach [EMAIL PROTECTED] writes: yup, exactly. to me it seems to be a major problem to get some unified api out of openssl adressing fucnctions on the hardware -- i simply do not know how other crypto chipsets do it, i just investigated the rainbow board. they got a patch against

Re: Status of encryption hardware support in FreeBSD

2001-06-24 Thread Jonathan Lemon
In article local.mail.freebsd-hackers/[EMAIL PROTECTED] you write: sure. my impression with the rainbow guys was, that they are very open to the opensource community. they supplied a board, (user) docs and the unreleased driver/openssl code to us and i was very impressed about their attitude

Re: Status of encryption hardware support in FreeBSD

2001-06-24 Thread Bsdguru
In a message dated 6/24/01 12:33:25 PM Eastern Daylight Time, [EMAIL PROTECTED] writes: A 3.x driver *could* be ported forward to 4.x and 5.x, but the required changes are not trivial (newbus, SMPng...) and you'd still need sample boards for testing and debugging, and docs for reference

Re: Status of encryption hardware support in FreeBSD

2001-06-24 Thread Karsten W. Rohrbach
Dag-Erling Smorgrav([EMAIL PROTECTED])@2001.06.24 18:38:31 +: Karsten W. Rohrbach [EMAIL PROTECTED] writes: yup, exactly. to me it seems to be a major problem to get some unified api out of openssl adressing fucnctions on the hardware -- i simply do not know how other crypto chipsets

Re: Status of encryption hardware support in FreeBSD

2001-06-24 Thread Soren Kristensen
Hi, Thanks for the responses so far. First, let me say that I'm a hardware guy, and don't know all the details of FreeBSD's network stack. There is two common kind of hardware encryption acceleration, and I think they're being mixed a little here. SSL is for secure web access, and the main

Re: Status of encryption hardware support in FreeBSD

2001-06-24 Thread Eric Masson
Bsdguru == Bsdguru [EMAIL PROTECTED] writes: Bsdguru I'd suggest doing a study on the benefits as well. With 1+Ghz Bsdguru processors, the advantages of doing this in hardware become Bsdguru less than in the old days. Think about the embedded market, where 486 class processors are still

Re: Status of encryption hardware support in FreeBSD

2001-06-24 Thread Kris Kennaway
On Sun, Jun 24, 2001 at 06:38:31PM +0200, Dag-Erling Smorgrav wrote: Karsten W. Rohrbach [EMAIL PROTECTED] writes: yup, exactly. to me it seems to be a major problem to get some unified api out of openssl adressing fucnctions on the hardware -- i simply do not know how other crypto

Re: Status of encryption hardware support in FreeBSD

2001-06-24 Thread Jonathan Lemon
In article local.mail.freebsd-hackers/[EMAIL PROTECTED] you write: Hi, Thanks for the responses so far. First, let me say that I'm a hardware guy, and don't know all the details of FreeBSD's network stack. There is two common kind of hardware encryption acceleration, and I think they're being

Re: Status of encryption hardware support in FreeBSD

2001-06-24 Thread Dag-Erling Smorgrav
Soren Kristensen [EMAIL PROTECTED] writes: SSL is for secure web access, and the main need is for Public Key generating. This don't really have anything to do with the IP stack. Afaik, OpenSSL is more like a extension to the web server software. Try 'man openssl', or just 'openssl -help'.

Status of encryption hardware support in FreeBSD

2001-06-22 Thread Soren Kristensen
Hi, There has been some talks earlier about importing the OpenBSD code for encryption hardware support. As I now has prototypes avaliable of low cost PCI and MiniPCI boards, moving to production in a couple of weeks, I would like to check up on the work, as I would really like to see FreeBSD

Re: Status of encryption hardware support in FreeBSD

2001-06-22 Thread Hajimu UMEMOTO
On Fri, 22 Jun 2001 13:20:33 -0700 Soren Kristensen [EMAIL PROTECTED] said: soren There has been some talks earlier about importing the OpenBSD code for soren encryption hardware support. soren As I now has prototypes avaliable of low cost PCI and MiniPCI boards, soren moving to production in

Re: Status of encryption hardware support in FreeBSD

2001-06-22 Thread Jonathan Lemon
In article local.mail.freebsd-hackers/[EMAIL PROTECTED] you write: Hi, There has been some talks earlier about importing the OpenBSD code for encryption hardware support. As I now has prototypes avaliable of low cost PCI and MiniPCI boards, moving to production in a couple of weeks, I would