2008年2月25日 星期一

HW accelerators and Cryptographic API issues

Re: Linux 2.6 crypto API and HW accelerators

...without significant changes in current implementation, e.g. adding async crypto, adding hardware crypto is worth only for relatively slow CPUs, e.g. less than 1Ghz, and even with slow processor overhead can be so big, that short packets are better processed by software path....

...currently Linux IPSec implementation always calls Crypto layer holding BH lock, so hw crypto driver have to busy wait even when called from process context...
The Design of the OpenBSD cryptographic Framewore
...Our evaluation allowed us to determine that the limiting factor
for high-performance cryptography in modern systems is data copying and the PCI bus. Furthermore, small data-buffers should be processed in software if possible, freeing hardware accelerators to handle larger requests that better amortize the system and PCI transaction costs...

沒有留言: