[Swan] NetKey vs KLIPS

[Nick Howitt]

On 2014-09-11 16:43, Paul Wouters wrote:
> On Thu, 11 Sep 2014, Thomas Geulig wrote:
> 
>> Subject: Re: [Swan] NetKey vs KLIPS
>> 
>> Am 11.09.2014 um 17:04 schrieb Lennart Sorensen:
>>> Certainly simple with netkey.  Also netkey can use the kernel crypto
>>> drivers for hardware crypto which I don't think klips can.
>> 
>> KLIPS is able to use the kernel crypto drivers and other crypto 
>> hardware modules via OCF (see Paul's mail).
> 
> There are some "native" crypto hardware drivers in the kernel, but I
> believe it is missing the cards deployed by many vendors (HiFn, 
> safenet,
> intel). But I have not looked at the current state for netkey and those
> drivers in a while.
> 

A bit o/t, but are the processor AES-NI instructions used, if available 
and assuming the kernel was compiled with them?

Nick