Project

General

Profile

Actions
Copy link

Todo #11426

closed

Deprecate old cryptographic accelerator hardware which is not viable on modern systems

Added by Jim Pingle 6 months ago. Updated 2 months ago.

Status:
Closed
Priority:
Normal
Assignee:
Luiz Souza
Category:
Hardware / Drivers
Target version:
2.5.2
Start date:
02/16/2021
Due date:
% Done:

100%

Estimated time:
Plus Target Version:
21.05
Release Notes:
Default

Description

We are carrying drivers for a few bits of crypto hardware which do not make sense on current systems. Either due to lack of support on non-EOL hardware or due to low bus speeds which would degrade performance should they be enabled.

These include:

  • ubsec
  • Hifn
  • VIA Padlock
  • Safe

Drivers for these should be removed, along with any code in the repo which allows them to be selected, detects them and reports their presence, etc.

Actions
Copy link
 #1

Updated by Luiz Souza 6 months ago

  • Status changed from New to Feedback
  • % Done changed from 0 to 100

The support for the old hardware was removed from kernel and from the GUI.

Actions
Copy link
 #2

Updated by Viktor Gurov 5 months ago

  • Status changed from Feedback to Resolved

Removed from 2.6.0

pfSense 2.4.5-p1:

[2.4.5-RELEASE][root@pg52.lab.int]/root: kldstat -v | grep ubsec
        360 pci/ubsec
[2.4.5-RELEASE][root@pg52.lab.int]/root: kldstat -v | grep hifn
        155 pci/hifn
[2.4.5-RELEASE][root@pg52.lab.int]/root: kldstat -v | grep padlock
        593 nexus/padlock
[2.4.5-RELEASE][root@pg52.lab.int]/root: kldstat -v | grep safe
        307 pci/safe

pfSense 2.6.0:

[2.6.0-DEVELOPMENT][root@pf41.prox.int]/root: kldstat -v | grep ubsec
[2.6.0-DEVELOPMENT][root@pf41.prox.int]/root: kldstat -v | grep hifn
[2.6.0-DEVELOPMENT][root@pf41.prox.int]/root: kldstat -v | grep padlock
[2.6.0-DEVELOPMENT][root@pf41.prox.int]/root: kldstat -v | grep safe
[2.6.0-DEVELOPMENT][root@pf41.prox.int]/root:

pfSense 2.6.0.a.20210225.0100

Actions
Copy link
 #3

Updated by Jim Pingle 3 months ago

  • Plus Target Version set to 21.05

Already done on 21.05 builds.

Actions
Copy link
 #4

Updated by Luiz Souza 3 months ago

  • Status changed from Resolved to Closed
Actions
Copy link
 #5

Updated by Jim Pingle 3 months ago

  • Subject changed from Deprecate old crypto hardware which is not viable on modern systems to Deprecate old cryptographic accelerator hardware which is not viable on modern systems

Updating subject for release notes.

Actions
Copy link
 #6

Updated by Jim Pingle 2 months ago

  • Target version changed from 2.6.0 to 2.5.2
Actions
Copy link

Also available in: Atom PDF