Crypto Hardware Accelerator

Crypto Hardware Accelerator

[Thomas Glanzmann]

Hello everyone,
I am looking for a crypto hardware accelerator which is available in the
EU in form of a PCI card which is supported by the linux kernel to do a
device mapper crypt setup using aes256. It would be also nice if it
could also be used by openssl userland applications. Also I would like
to know if there are some plans to support IDE drives which do AES
transparently for the OS. Like an ATA Command which tells the drive
which AES key to use during startup. An the rest does the device instead
of the hostos/cpu.

        Thomas

Re: Crypto Hardware Accelerator

[Professor Moriarty]

> Hello everyone,
> I am looking for a crypto hardware accelerator which is available in the
> EU in form of a PCI card which is supported by the linux kernel to do a
> device mapper crypt setup using aes256. It would be also nice if it
> could also be used by openssl userland applications. Also I would like
> to know if there are some plans to support IDE drives which do AES
> transparently for the OS. Like an ATA Command which tells the drive
> which AES key to use during startup. An the rest does the device instead
> of the hostos/cpu.
>
>         Thomas
Hello Thomas,

You might have a look at the Soekris vpn1401 card, (technical specs
here: http://www.soekris.com/vpn1401.htm). It is available in the EU
and can do AES256 without a problem.
It does have linux support, though I'm not sure if it can be used by
OpenSSL applications. Typically, you'd have to have the crypto
accelerator take over API calls to en/decrypt for OpenSSL (A crypto
accelerator is basically an FPGA with the required algos coded in), so
I'm not too sure if it is possible to do this without actually editing
OpenSSL's code directly

~ Vasily Ivanov