OpenBSD manual page server

Manual Page Search Parameters
HIFN(4) Device Drivers Manual HIFN(4)

hifn — Hifn 7751/7811/7951/7955/7956/9751 crypto accelerator

hifn* at pci?

The hifn driver supports various cards containing the Hifn 7751, Hifn 7811, Hifn 7951, Hifn 7955, Hifn 7956, or Hifn 9751 chipsets, such as:

Invertex AEON
Comes as 128KB SRAM model, or 2MB DRAM model.
Hifn 7751
Reference board with 512KB SRAM.
PowerCrypt
Comes with 512KB SRAM.
PowerCrypt 5x
Contains a 7956 and supports symmetric encryption (including AES), random number, and modular exponentiation operations.
XL-Crypt
Only board based on 7811 (which is faster than 7751 and has a random number generator).
NetSec 7751
7751 board with 1MB of SRAM.
Soekris Engineering vpn1201 and vpn1211
Contains a 7951 and supports symmetric encryption and random number operations.
Soekris Engineering vpn1401 and vpn1411
Contains a 7955 and supports symmetric encryption (including AES), random number, and modular exponentiation operations.
Hifn 9751
Reference board with 512KB SRAM. This is really a Hifn 7751 which only supports compression.

The Hifn 7751, Hifn 7811, Hifn 7951, Hifn 7955, and Hifn 7956 chips all support acceleration of Triple-DES, MD5-HMAC, SHA1-HMAC, and LZS operations for ipsec(4). The Hifn 7955 and Hifn 7956 chips additionally support AES-CBC. The Hifn 9751 only supports LZS.

The Hifn 7811, Hifn 7951, Hifn 7955, and Hifn 7956 will also supply data to the kernel random(4) subsystem.

crypt(3), intro(4), ipsec(4), pci(4), random(4), crypto(9)

The hifn device driver appeared in OpenBSD 2.7.

The 7751 chip starts out at initialization by only supporting compression. A proprietary algorithm, which has been reverse engineered, is required to unlock the cryptographic functionality of the chip. It is possible for vendors to make boards which have a lock ID not known to the driver, but all vendors currently just use the obvious ID which is 13 bytes of 0.

The 7951, 7955 and 7956 have support for public key operations which are not yet supported.

September 27, 2016 OpenBSD-6.6