OpenSSL hardware acceleration exploration...

[Lou Picciano]

Some parts of this message have been removed. Learn more about Nabble's security policy.

OpenSSL Friends:

We're looking at implementing hardware acceleration for our OpenSSL environment.  Hardware would probably be PCI bus x86, though SPARC is not out of the question...

Does anyone have any strong opinions, recommendations, success/horror stories, preferred hardware sources they can share?

[Michael S. Zick-4]

On Wed November 4 2009, Lou Picciano wrote:
> OpenSSL Friends:
>
> We're looking at implementing hardware acceleration for our OpenSSL environment. Hardware would probably be PCI bus x86, though SPARC is not out of the question...
>
> Does anyone have any strong opinions, recommendations, success/horror stories, preferred hardware sources they can share?
>

I have machines with the VIA hardware crypto engine enabled in the kernel,
with that enabled (and engine discovery enabled, a default), OpenSSL "just works" -
no measurements, but it is even faster on the human subjective scale.

*) log on with ssh (which uses the OpenSSL libraries)
*) load the hardware engine modules
*) log out
*) log back in
You *will* notice the difference without bothering to measure anything.

Mike
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@...
Automated List Manager                           majordomo@...