[Openswan dev] IPsec HW Offload Engine support

[remy.gauguey at mindspeed.com]

Hello,

I'm currently working on a CPE SoC based on ARM11 with an IPSec offload 
engine.
This engine performs crypto operations (cipher + digest) but also ESP/AH 
protocols offload (ESP/AH header and trailer insertion, IPv4 (only) header 
modification...).
This engine manages SA database, with TTL and anti-replay checks.
I'm currently working on the integration of this HW accelerator into the 
26sec (based on a patch written for 3Com crypto NICs : 
http://oss.sgi.com/archives/netdev/2005-01/msg00360.html ), but I would 
like to know how feasible would it be to integrate such a IPSec Offload 
Engine into OpenSwan KLIPS architecture.
It sounds like to me the IPsecX interface would allow to do this easier 
than on 26sec...

Any ideas or comments are welcome

Thanks a lot

Remy Gauguey
System Engineer
MINDSPEED Technologies

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.openswan.org/pipermail/dev/attachments/20060529/bbdd7f9e/attachment.htm