Re: Cryptsetup -- OpenSSL Engine

Yes, engine is for data encryption. Opensource projects like OpenVPN
provides OpenSSL "engine" support as part of configuration. So, just
wondering if encryption/decryption operations can be offloaded to external
engines

https://www.netgate.com/docs/pfsense/hardware/cryptographic-accelerator-support.html


On Thu, Jan 3, 2019 at 12:18 PM Milan Broz <[email protected]> wrote:

> On 03/01/2019 20:37, Anil Reddy wrote:
> > Hi -- To configure cryptsetup -- We do see that
> /|--with-crypto_backend=openssl|/  takes OpenSSL as a default Crypto
> engine. We would like to use the -engine concept of OpenSSL where we can
> use Hardware Accelerator (for example Intel's Quick Assist Technology) as
> Crypto engine instead of Software based OpenSSL. Can you please suggest if
> we can configure cryptsetup with openssl engine?
>
> What that engine should accelerate here?
>
> Do you want it for the data encryption? If so, then it is kernel dm-crypt
> that performs it,
> so you need crypt API acceleration driver in kernel.
>
> Userspace (cryptsetup) is used only for unlocking and configuring
> encrypted device.
> I do not see much sense for such acceleration.
>
> (I have never tried to configure external OpenSSL engine for cryptsetup,
> maybe some
> code tweak is needed to load proper/default openSSL config file.)
>
> Milan
>

_______________________________________________
dm-crypt mailing list
[email protected]
https://www.saout.de/mailman/listinfo/dm-crypt