FreeBSD equivalent to Sun crypto framework APIs (PKCS#11) (for
hardware AES-CTR)
RW
rwmaillists at googlemail.com
Wed Oct 14 22:54:43 UTC 2009
On Wed, 14 Oct 2009 18:02:36 +0000 (UTC)
John Case <case at sdf.lonestar.org> wrote:
>
> There are a number of hardware solutions for performing AES-CTR in
> hardware - for example the broadcom BCM5825, which is supported by
> the ubsec driver.
>
> The problem is that OpenSSL does not currently support hardware
> acceleration of AES-CTR. The solution on a Sun system is to use the
> Sun crypto framework APIs (PKCS#11) which does support AES-CTR in
> hardware.
>
> Is there an analagous API in FreeBSD that I could implement in my
> code so as to use the hardware AES-CTR of devices supported by ubsec ?
Aside from crypto(3) (OpenSSL), there's also crypto(9) (kernel) and
crypto(4) (userland), but they don't appear to support CTR - just CBC.
More information about the freebsd-security
mailing list