Skip to contentSkip to conversation

Long pause when using pcrypt

DISCUSSION Nils Rennebarth 2 participants 2 messages Apr 22, 2010 – Apr 23, 2010 Crypto API

lore
Share & tools
lore
#0 lore raw

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,

As parallel encryption of ipsec is now in the official kernel, I tried to use it, and to actually make ipsec connections use it, I did

  $ modprobe tcrypt alg='pcrypt(authenc(hmac(sha1),cbc(aes)))' type=3

This works, but the computer pauses for about 60s when running the modprobe, and appears to be completely idle in the meantime. Why is that necessary?

Is there another recommended way to instantiate pcrypt, e.g. via netlink? I searched for a while, by browsing the sources, but found nothing appropriate.

- --

                                     ______
                                    (Muuuhh)

Global Village Sau ==> ^..^ |/¯¯¯¯¯
(Kann Fremdsprache) ==> (oo)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkvQD3QACgkQqgAZ+sZlgs43DgCg43ehtSAai1A+v8c2vuIuuIxO dloAn0TeB/Ur+b/mUI6dUhA1UCZpGCmp
=SLiY
-----END PGP SIGNATURE-----
--
To unsubscribe from this list: send the line "unsubscribe linux-crypto" in the body of a message to [email protected]
More majordomo info at http://vger.kernel.org/majordomo-info.html

#1 lore raw
Quoted 5 lines · Nils Rennebarth

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,

Quoted 7 lines

As parallel encryption of ipsec is now in the official kernel, I tried to use it, and to actually make ipsec connections use it, I did

  $ modprobe tcrypt alg='pcrypt(authenc(hmac(sha1),cbc(aes)))' type=3

This works, but the computer pauses for about 60s when running the modprobe, and appears to be completely idle in the meantime. Why is that necessary?

You can try to specify the drivers e.g.

modprobe tcrypt alg="pcrypt(authenc(hmac(sha1-generic),cbc(aes-asm)))" type=3

this should be faster.

Quoted 4 lines

Is there another recommended way to instantiate pcrypt, e.g. via netlink? I searched for a while, by browsing the sources, but found nothing appropriate.

Unfortunately not yet, this should change as soon as we have a generic crypto user configuration interface.

Steffen