Skip to main content
USENIX
  • Conferences
  • Students
Sign in

connect with us


  •  Twitter
  •  Facebook
  •  LinkedIn
  •  Google+
  •  YouTube

twitter

Tweets by @usenix

usenix conference policies

  • Event Code of Conduct
  • Conference Network Policy
  • Statement on Environmental Responsibility Policy

You are here

Home ยป Cryptographic Device Support for FreeBSD
Tweet

connect with us

Cryptographic Device Support for FreeBSD

Abstract: 

FreeBSD recently adopted the OpenBSD Cryptographic Framework [Keromytis et al, 2003]. In doing so it was necessary to convert the core framework to function correctly in a fully-preemptive/multiprocessor operating system environment. In addition several issues with the basic design were found to cause significant performance loss. After addressing these issues we found that FreeBSD outperformed OpenBSD on identical hardware by as much as 100% in tests that exercise only the cryptographic framework. These optimizations result in similar performance improvements for facilities like IPsec that make heavy use of the cryptographic framework. We observed that FreeBSD's Fast IPsec [Leffler, 2003] typically outperforms OpenBSD's IPsec implementation [Miltchev et al, 2002] by more than 50% on identical hardware.

We conclude that the OCF cryptographic API can be optimized and re-tuned to deliver substantially better performance than the original OCF implementation with large gains in both throughput and latency. Moreover these changes can be made with no impact on clients of the cryptographic framework: both user and kernel sofware designed for the original OCF is easily ported to the FreeBSD implementation of OCF.

Samuel J. Leffler, Errno Consulting

BibTeX
@inproceedings {270119,
author = {Samuel J. Leffler},
title = {Cryptographic Device Support for FreeBSD},
booktitle = {BSDCon 2003 (BSDCon 2003)},
year = {2003},
address = {San Mateo, CA},
url = {https://www.usenix.org/conference/bsdcon-2003/cryptographic-device-support-freebsd},
publisher = {{USENIX} Association},
month = sep,
}
Download

Links

Paper (HTML): 
http://www.usenix.org/events/bsdcon03/tech/leffler_crypto/leffler_crpto_html/ind...
Paper: 
http://www.usenix.org/events/bsdcon03/tech/leffler_crypto/leffler_crypto.pdf
Award: 
Best Paper
  • Log in or    Register to post comments

© USENIX

  • Privacy Policy
  • Conference Policies
  • Contact Us