Linux crypto?

Myrddin Ambrosius
2002-05-22T18:03:55Z

I noticed that Motorola has published a set of tech
docs for their S1-range of crypto co-processors, which
look pretty comprehensive. (The 190 looks to be a very
nice chip, which -as best as I can tell- just plugs
straight onto a PCI bus.) Other co-pro manufacturers
(such as HIFN) seem to also have humungous tech
manuals for their crypto chips.

Is anyone working on drivers for these beasties?

Alongside that, I also noticed that many manufacturers
(again, Motorola and HIFN seem to top the list)
working on network accelerator chips - some h/w
L2/L3/L4 queueing/filtering, rudimentary packet
mangling, etc. Linux already has most of the
interesting stuff from the chips I've looked at, and
in most places is way more advanced in what it can do/
Given the ipfilter design, would there be any way to
use those chips as an additional networking layer?
(And, just as importantly, would there be any point?)

Secondly, I've taken a look at the "International
Kernel Patch" for Linux. I have finally found a
(fairly) mainstream kernel patch that is updated less
frequently than my own FOLK patch! Also, nobody seems
to use it. Packages that use crypto seem to steer
towards openssl, rsa-ref, mcrypt/mhash/gcrypt, gnutls,
and/or or private implementations. Even FreeS/WAN and
USAGI take no advantage of anything in the IKP.

Ignoring, for a second, the US export laws (which are
no longer an issue, anyway), is there some fundamental
reason why the IKP seems to be ignored? If there is,
then does anyone know of any re-design/re-write
effort?

__________________________________________________
Do You Yahoo!?
LAUNCH - Your Yahoo! Music Experience