Sean Khan 24ae066757 nss-cfi: Fix crash on IPQ807x when utilizing NSS cores for crypto tasks ... This commit addresses a crash that occurs when running crypto tasks on IPQ807x devices explicitly utilizing the NSS cores. The crash was reproducible in scenarios involving cryptographic operations offloaded to the NSS cores (e.g., using cryptodev with OpenSSL or running the crypto test module). IMPORTANT: This fix should not be misunderstood as a general-purpose performance boost for all cryptographic workloads. If your goal is to accelerate AES encryption across the board (e.g., using OpenSSL for routine file encryption), this approach is **not** practical. The primary benefit of leveraging the NSS cores for cryptographic operations is within VPN-oriented use cases, such as OpenVPN or IPsec, where the offloading to NSS cores can reduce CPU load and improve throughput. It’s critical to note that this fix will **not** accelerate encryption for protocols like Wireguard. Wireguard’s design uses ChaCha20-Poly1305 rather than AES, and it cannot easily be offloaded to hardware. Additionally, Wireguard uses short-lived cryptographic keys that rotate frequently. This frequent key rotation makes it difficult to interface with hardware offloading mechanisms, which are typically optimized for long-lived sessions like those found in IPsec. Signed-off-by: Sebastian Gottschall <s.gottschall@dd-wrt.com> Signed-off-by: Sean Khan <datapronix@protonmail.com>		2024-09-21 16:45:58 -04:00
..
patches	nss-cfi: Fix crash on IPQ807x when utilizing NSS cores for crypto tasks	2024-09-21 16:45:58 -04:00
Makefile	nss-cfi: Fix crash on IPQ807x when utilizing NSS cores for crypto tasks	2024-09-21 16:45:58 -04:00