Hello,
I'am in contact with the developer of the HIFN 795x driver for
Linux, Mr. Evgeniy Polyakov.
The hifn_795x driver uses the HIFN 7955 crypto engine on the
vpn1401/1411 boards of Soekris.
In the URL
wget http://www.mathematik.uni-ulm.de/users/ag/hifn_795x.c
is the newest HIFN 795x driver (hifn_795x.c) for the
Linux kernel 2.6.27.4.
It runs also with the newest latest stable kernel 2.6.27.6
from 2008-11-13 18:42 UTC from www.kernel.org.
(I test it and use this kernel on my net5501-70 board.)
Replace the hifn_795x.c in
/usr/src/linux-2.6.27.<x>/drivers/crypto/ .
IMPORTANT: Disable the use of the geode-aes engine when you
========== make the kernel !!!
Give in "make menuconfig"
--> Cryptographic API
--> Hardware crypto devices
--> Support for the Geode LX AES engine (give "no")
--> Driver HIFN 795x crypto accelerator chips (give "m"
for module)
The two hardware crypto engines can not work parallel!!!
The default kernel loads both drivers!!!
If both drivers are loaded, you can't use the
hifn_795x!!! Instead are used the slow software
implementation of AES when you use keysize
256 bits. The geode-aes engine can only work
with keysize of 128 bits.
Short benchmarks:
-----------------
Hardware which I use: net5501-70 with vpn1401 (PCI-Card)
(Users with vpn1411 mini-pci-card, please
report it if the driver works with this card.)
Software which I use: Latest stable kernel 2.6.27.6 from
www.kernel.org.
Chiper of the crypted partition: aes-cbc-essiv:sha256, keysize: 256 bits
With hifn_795x driver:
----------------------------------------------------------------------
(/misc is mounted to the crypted partition)
piepmatz:/misc# time dd if=/dev/zero of=xxx.img bs=1024 count=700000
700000+0 Datensätze ein
700000+0 Datensätze aus
716800000 Bytes (717 MB) kopiert, 68,0707 s, 10,5 MB/s
real 1m9.206s
user 0m0.536s
sys 0m7.312s
piepmatz:/misc# time cat xxx.img >/dev/null
real 1m12.737s
user 0m0.080s
sys 0m2.596s
piepmatz:/misc#
----------------------------------------------------------------------
===========================================================================
As referece the software implementation of AES:
---------------------------------------------------------------------------
piepmatz:/misc# time dd if=/dev/zero of=xxx.img bs=1024 count=700000
700000+0 Datensätze ein
700000+0 Datensätze aus
716800000 Bytes (717 MB) kopiert, 128,616 s, 5,6 MB/s
real 2m8.711s
user 0m0.616s
sys 0m6.652s
piepmatz:/misc# time cat xxx.img >/dev/null
real 2m2.761s
user 0m0.080s
sys 0m2.368s
piepmatz:/misc#
---------------------------------------------------------------------------
With the HIFN 7955 crypto engine the throughput is 10,5 MB/s, nearly
the double of the software implementation of AES. Therefore the time
is nearly the half.
Regards
Andreas Gerlich
--
Andreas Gerlich, University of Ulm, Germany
open source project --> http://yaze-ag.de/ (Yet Another Z80 Emulator)
_______________________________________________
Soekris-tech mailing list
Soekris-tech@lists.soekris.com
http://lists.soekris.com/mailman/listinfo/soekris-tech
