diff options
| author | Jacob McDonnell <jacob@jacobmcdonnell.com> | 2026-04-25 16:08:12 -0400 |
|---|---|---|
| committer | Jacob McDonnell <jacob@jacobmcdonnell.com> | 2026-04-25 16:08:12 -0400 |
| commit | b9cde963555b6519c5dbd34a39dee3418f593437 (patch) | |
| tree | 453accad3c3286e3416d4160de4a87223aff684c /static/freebsd/man4/safe.4 | |
| parent | 5cb84ec742fd33f78c8022863fadaa8d0d93e176 (diff) | |
feat: Added FreeBSD man pages
Diffstat (limited to 'static/freebsd/man4/safe.4')
| -rw-r--r-- | static/freebsd/man4/safe.4 | 146 |
1 files changed, 146 insertions, 0 deletions
diff --git a/static/freebsd/man4/safe.4 b/static/freebsd/man4/safe.4 new file mode 100644 index 00000000..914b2dd0 --- /dev/null +++ b/static/freebsd/man4/safe.4 @@ -0,0 +1,146 @@ +.\" +.\" SPDX-License-Identifier: BSD-2-Clause +.\" +.\" Copyright (c) 2003 Sam Leffler, Errno Consulting +.\" All rights reserved. +.\" +.\" Redistribution and use in source and binary forms, with or without +.\" modification, are permitted provided that the following conditions +.\" are met: +.\" 1. Redistributions of source code must retain the above copyright +.\" notice, this list of conditions and the following disclaimer. +.\" 2. Redistributions in binary form must reproduce the above copyright +.\" notice, this list of conditions and the following disclaimer in the +.\" documentation and/or other materials provided with the distribution. +.\" +.\" THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND +.\" ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE +.\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE +.\" ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE +.\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL +.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS +.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) +.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT +.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY +.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF +.\" SUCH DAMAGE. +.\" +.Dd October 31, 2025 +.Dt SAFE 4 +.Os +.Sh NAME +.Nm safe +.Nd SafeNet SafeXcel 1141/1741 crypto accelerator +.Sh SYNOPSIS +To compile this driver into the kernel, +place the following lines in your +kernel configuration file: +.Bd -ragged -offset indent +.Cd "device crypto" +.Cd "device cryptodev" +.Cd "device safe" +.Ed +.Pp +Alternatively, to load the driver as a +module at boot time, place the following line in +.Xr loader.conf 5 : +.Bd -literal -offset indent +safe_load="YES" +.Ed +.Pp +In +.Xr sysctl.conf 5 : +.Bd -ragged -offset indent +.Cd hw.safe.debug +.Cd hw.safe.dump +.Cd hw.safe.rnginterval +.Cd hw.safe.rngbufsize +.Cd hw.safe.rngmaxalarm +.Ed +.Sh DEPRECATION NOTICE +The +.Nm +driver is deprecated and is scheduled for removal in +.Fx 16.0 . +.Sh DESCRIPTION +The +.Nm +driver supports cards containing SafeNet crypto accelerator chips. +.Pp +The +.Nm +driver registers itself to accelerate AES, +SHA1-HMAC, and NULL operations for +.Xr ipsec 4 +and +.Xr crypto 4 . +.Pp +On all models, the driver registers itself to provide random data to the +.Xr random 4 +subsystem. +Periodically the driver will poll the hardware RNG and retrieve +data for use by the system. +If the driver detects that the hardware RNG is resonating with any local +signal, it will reset the oscillators that generate random data. +Three +.Xr sysctl 8 +settings control this procedure: +.Va hw.safe.rnginterval +specifies the time, in seconds, between polling operations, +.Va hw.safe.rngbufsize +specifies the number of 32-bit words to retrieve on each poll, +and +.Va hw.safe.rngmaxalarm +specifies the threshold for resetting the oscillators. +.Pp +When the driver is compiled with +.Dv SAFE_DEBUG +defined, two +.Xr sysctl 8 +variables are provided for debugging purposes: +.Va hw.safe.debug +can be set to a non-zero value to enable debugging messages to be sent +to the console for each cryptographic operation, +.Va hw.safe.dump +is a write-only variable that can be used to force driver state to be sent +to the console. +Set this variable to +.Dq Li ring +to dump the current state of the descriptor ring, +to +.Dq Li dma +to dump the hardware DMA registers, +or +to +.Dq Li int +to dump the hardware interrupt registers. +.Sh HARDWARE +The +.Nm +driver supports the following SafeXcel chips: +.Bl -column "SafeNet 1141" "The original chipset. Supports" -offset indent +.It SafeNet 1141 Ta The original chipset. +Supports DES, Triple-DES, AES, MD5, and SHA-1 +symmetric crypto operations, RNG, public key operations, and full IPsec +packet processing. +.It SafeNet 1741 Ta A faster version of the 1141. +.El +.Sh SEE ALSO +.Xr crypt 3 , +.Xr crypto 4 , +.Xr intro 4 , +.Xr ipsec 4 , +.Xr random 4 , +.Xr crypto 7 , +.Xr crypto 9 +.Sh HISTORY +The +.Nm +driver first appeared in +.Fx 5.2 . +It is deprecated in +.Fx 15.0 +and removed in +.Fx 16.0 . +.Sh BUGS +Public key support is not implemented. |
