Support for SunSSH to use the UltraSPARC T2 cryptographic accelerators will be released together with Nevada 99. Initial performance analysis indicates a 2.5X+ performance improvement with AES-128-CBC. It is hoped that this enhancement will be back-ported to Solaris 10. More details can be found here.
OpenSSH can also be made to use the T2 cryptographic hardware -- it is just necessary to use a version of OpenSSL that has been modified to use the hardware. For the standard aes-128-cbc operating mode, the simplest way to achieve this is to modify aes_cbc.c to call libpkcs11.
Sign up or Log in to add a comment or watch this page.