Cryptography settings

[furfix]

Hello therel,
I've trying to determine if there is a way to check if my hardware is capable of using any option under "Hardware Acceleration" drop box, and so far, I couldn't find anything out there.

Anybody knows if there is way to check that, maybe running a CLI command?

Thanks in advance!!

[bartjsmit]

Check your CPU to see what it supports. Open a shell and run 'sysctl hw.model' then look up the model:

https://ark.intel.com/content/www/us/en/ark.html
https://www.amd.com/en/products/specifications

Bart...

[furfix]

This is the CPU of my appliance

https://ark.intel.com/content/www/us/en/ark/products/212328/intel-celeron-processor-n5105-4m-cache-up-to-2-90-ghz.html

but there is no references about:
- hifn, padlock, qat nor safe there...

I will keep googling it to see if I find the answer, but thanks for replying!

[Taunt9930]

This is the CPU of my appliance

https://ark.intel.com/content/www/us/en/ark/products/212328/intel-celeron-processor-n5105-4m-cache-up-to-2-90-ghz.html

but there is no references about:
- hifn, padlock, qat nor safe there...

I will keep googling it to see if I find the answer, but thanks for replying!

You've found your answer - your CPU does not support any of those.

[furfix]

You've found your answer - your CPU does not support any of those.

 

[bimbar]

 Intel® AES New Instructions Yes

Intel® AES New Instructions

Intel® AES New Instructions (Intel® AES-NI) are a set of instructions that enable fast and secure data encryption and decryption. AES-NI are valuable for a wide range of cryptographic applications, for example: applications that perform bulk encryption/decryption, authentication, random number generation, and authenticated encryption.

[SeeGee]

I know it's an old thread, but a google search lead me here, so I thought I'd chime in:
I am also looking to verify that OPNsense is using this instruction set, using the exact same processor, and yes. I can confirm that the Celeron n5105 does in fact support Intel's AES-NI instruction set.
Now if only I could figure out how to verify it's being used under FreeBSD...

[meyergru]

How about "dmesg | fgrep -i aesni" on the CLI?

[newsense]

Indeed, confirmed for N5105

Code: [Select]

dmesg | fgrep -i aesni
  Features2=0x4ff8ebbf<SSE3,PCLMULQDQ,DTES64,MON,DS_CPL,VMX,EST,TM2,SSSE3,SDBG,CX16,xTPR,PDCM,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,TSCDLT,AESNI,XSAVE,OSXSAVE,RDRAND>
aesni0: <AES-CBC,AES-CCM,AES-GCM,AES-ICM,AES-XTS,SHA1,SHA256>