[Pkg-swan-devel] plugin aesni ?

[Arnaud Gavara]

----- Mail original -----
> De: "Yves-Alexis Perez" <corsac at debian.org>
> À: "Arnaud Gavara" <arnaud.gavara at umontpellier.fr>
> Cc: pkg-swan-devel at lists.alioth.debian.org
> Envoyé: Lundi 14 Mars 2016 16:51:14
> Objet: Re: [Pkg-swan-devel] plugin aesni ?

> On lun., 2016-03-14 at 16:47 +0100, Arnaud Gavara wrote:
>> In 5.3.1 Changelog:
>> "
>> The new aesni plugin provides CBC, CTR, XCBC, CMAC, CCM and GCM crypto
>> primitives for AES-128/192/256. The plugin requires AES-NI and PCLMULQDQ
>> instructions and works on both x86 and x64 architectures. It provides
>> superior crypto performance in userland without any external libraries.
>> "
>> I don't think that aesni plugin is using libipsec, but perhaps I'm wrong.
> 
> It's the other way around. libipsec uses aesni plugin when needed. Read the
> above paragraph, emphasis on *userland*. We don't build/use userland IPsec,
> everything is done in the kernel.

I known this but I misunderstood the place of aesni plugin.

Thanks,
Arnaud.