Am Dienstag 13 Oktober 2009 schrieben Sie: Hello Wyllys and all other Solaris freaks. This thread is very interesting to me. I have some older Suns at home (E450, V480) and playing around with tor on Solaris. But I never saw a crypto hardware accelerator card for Sparc engines at Ebay or anywhere else. I would like to test this stuff. Anybody here who can give me a hint where to get such a card that would fit in my Suns? Thomas > > > > On the other hand, there are Solaris-specific routines (crypto framework > > APIs (PKCS#11)) built into Solaris that Tor can call instead of OpenSSL, > > which _will_ do AES CTR in hardware, yielding a huge gain in performance > > (you mention 25x). > > > > Do I have all of that correct ? > > > > Yes. > > > - How does the T2 (Niagara 2) compare to dedicated hardware such as the > > Sun Crypto 6000 which is currently available ? Presumably the crypto > > framework APIs will use whatever is available, whether it be a SCA-60000 > > or a Broadcom based card or ... ? > > > I don't think the SCA6000 offers AES CTR support. The N2 (T2) crypto > chips are newer and offer more algorithm support and faster performance. > You are correct, though, we (Solaris security) do strive to offer crypto > framework support for the underlying hardware devices. >
Attachment:
signature.asc
Description: This is a digitally signed message part.