recommended SSL-friendly crypto accelerator
Mike Tancsa
mike at sentex.net
Tue Apr 13 11:45:44 PDT 2004
At 02:19 PM 13/04/2004, Michael W. Lucas wrote:
>OK, for the record I asked sam at . He says that the VPN1401 has issues
>for (at a minimum) symmetric crypto ops, but he hasn't had time to
>investigate and doesn't own a 1401, so...
>
>So, it looks like my choices are rapidly narrowing. It seems that the
>powercrypt cards are well-supported, perhaps I'll give them a call.
I think the powercrypt is based on the same HiFn chip and uses the same
driver, so it might be hit by the same bug that I am running into both on
FreeBSD and OpenBSD. Then again, it could be some issue with openssl as to
how it talks to the card. Still, there were reports by one ipsec user on
OpenBSD that they had problems with the card and IPSEC.
I would love to hear from any FreeBSD or OpenBSD user with the 1401 to see
if they can reproduce this bug.
---Mike
More information about the freebsd-security
mailing list