Changes between Version 6 and Version 7 of newport/encryption

Timestamp:

07/08/2020 12:32:45 PM (4 years ago)

Author:

Tim Harvey

Comment:

removed links to cpt firmware and explain where to obtain it

newport/encryption

@@ -56 +56 @@
 'ecb(aes)', 'cfb(aes)', and 'cbc(des3_ede)' algorithms with the Linux crypto subsystem via {{{crypto_register_algs}}} call.
 
-The CPT driver requires binary firmware be installed in {{{/lib/firmware}}}:
+The CPT driver requires binary firmware be installed in {{{/lib/firmware}}} which must be obtained from the Marvell SDK (which requires an NDA with Marvell):
 {{{#!bash
-cd /lib/firmware
-wget http://dev.gateworks.com/images/cpt8x-mc-ae.out
-wget http://dev.gateworks.com/images/cpt8x-mc-se.out
+# ls /lib/firmware/cpt8x*
+cpt8x-mc-ae.out
+cpt8x-mc-se.out
 }}}
+ - these are found in the OCTEONTX SDK-6.2.0 in linux/cavium-rootfs/tmp-rootfs/lib/firmware
 
 Once enabled and firmware loaded, {{{/proc/crypto}}} will list out the system cipher and algorithm support:
@@ -768 +769 @@
 }}}
 
+Note that the performance of this hardware cyprto offload is much slower than software crypto (see wiki:linux/encryption#PerformaceComparisons)
+
 For information on how to use the Linux Kernel Crypto API consult the kernel documentation:
 - https://www.kernel.org/doc/html/latest/crypto/index.html