Project

General

Profile

Actions
Copy link

Feature #14291

closed

Support for cryptographic acceleration using the Multi-Buffer Crypto for IPsec Library (IPsec-MB, IIMB)

Added by Jim Pingle about 1 year ago. Updated 5 months ago.

Status:
Closed
Priority:
Normal
Assignee:
Christian McDonald
Category:
Cryptographic Modules
Target version:
23.05
Start date:
Due date:
% Done:

100%

Estimated time:
Release Notes:
Default

Description

The kernel module for the Intel® Multi-Buffer Crypto for IPsec Library (a.k.a. IPsec-MB or IIMB) has been added in the FreeBSD source for Plus, and GUI/backend code has been added to enable it. Documentation is ready and staged for 23.05 as well.

IPsec-MB is not limited to accelerating IPsec, despite the name. It leverages CPU SIMD instructions to accelerate anything using kernel crypto functions for AES-GCM-128, AES-GCM-256, AES-CBC-128, AES-CBC-256, SHA1, SHA2, and ChaCha20/Poly1305. This includes IPsec, WireGuard, OpenVPN DCO and more.

This issue is for tracking purposes and to make a release notes entry, more details are on NG 10281.

Files

Screenshot 2023-12-19 at 6.09.41 PM.png (110 KB) Screenshot 2023-12-19 at 6.09.41 PM.png Jonathan Lee, 12/20/2023 02:09 AM
Actions
Copy link

Also available in: Atom PDF