Intel EP80579 Benutzerhandbuch

Intel

®

 EP80579 Software for Security Applications on Intel

®

 QuickAssist Technology

August 2009

PG

Order Number: 320183-004US

17

configuration parameters for example number of sessions to be supported, buffer pool 

sizes, and so on. See 

 for more 

details.

The EP80579 security software release package version 1.0.3 does not support 

OpenBSD/FreeBSD Cryptographic Framework (OCF), OCF-Linux, or any open source 

projects such as Openswan*, OpenSSL*, or Racoon*. If your application requires OCF, 

you must use security software package version 1.0.2 which includes shim software to 

enable OCF support.

This layer is intended for components which adapt, or “shim”, between the API provided 

by EP80579 security software’s Acceleration API and that expected by industry-

standard frameworks.

In this release, the only component in this layer is the OCF shim, which allows the 

lookaside crypto acceleration engine to be plugged in underneath the OpenBSD*/

FreeBSD* Cryptographic Framework (OCF). OCF is a service virtualization layer that 

facilitates asynchronous access to cryptographic hardware accelerators. OCF-Linux is a 

port of this framework to Linux. It enables cryptographic acceleration in the 

Openswan* and OpenSSL* software suites. 

A driver has been created which enables the Cryptographic API features to be accessed 

via OCF. All operations supported by OCF today are accelerated. Specifically, the 

following operations provided by OCF are accelerated by the OCF shim:

• Symmetric/Secret Key Crypto

— Ciphers/Modes: NULL_CBC, DES_CBC, 3DES_CBC, AES_CBC, ARC4
— Hash/Message Digest Functions: MD5, MD5_HMAC, SHA1, SHA1_HMAC, 

SHA2_256, SHA2_256_HMAC, SHA2_384, SHA2_384_HMAC, SHA2_512, 

SHA2_512_HMAC

— Chained  Algorithms 

• Asymmetric/Public Key Crypto

— Diffie-Hellman: DH_COMPUTE_KEY
— RSA: MOD_EXP, MOD_EXP_CRT
— DSA: DSA_SIGN, DSA_VERIFY

• Random  Number  Generation

See the 

 for your operating system for detailed information.

Further information on OCF-Linux can be found here: 

 describes the mapping between the software components described in 

, and the files and directories (folders) in which 

they can be found.