| Home | Downloads | Hardware | Benchmarks | TODO | Links |
OCF-Linux is a Linux port of the OpenBSD/FreeBSD Cryptographic Framework (OCF). This port aims to bring full asynchronous HW/SW crypto acceleration to the Linux kernel and applications running under Linux. Results have shown improvements of up to 7 times that of software crypto for bulk crypto throughput using OpenSSL.
At this point in time OCF-Linux provides acceleration for OpenSwan, OpenSSL, OpenSSH (scp, ssh, ...) and also supports the BSD crypto testing applications. It can accelerate DES, 3DES, AES, MD5, SHA, and Public Key operations and adds randomness to the kernels /dev/random by utilising the RNG hardware. This project is being actively developed as a high performance crypto solution for embedded devices but also applies equally well to any linux based server or desktop.
OCF-Linux was based directly on the FreeBSD port of the OCF framework. The FreeBSD versions contained several performance improvements that were desired. There is some good reference material on the changes and why they were needed that is worth reading for a background.
The current version supports most 2.4 and 2.6 kernels up to and including 2.4.35 and 2.6.39. It also supports all 3.x kernels.