static/freebsd/man4/ossl.4 4.html


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82

<table class="head">
  <tr>
    <td class="head-ltitle">OSSL(4)</td>
    <td class="head-vol">Device Drivers Manual</td>
    <td class="head-rtitle">OSSL(4)</td>
  </tr>
</table>
<div class="manual-text">
<section class="Sh">
<h1 class="Sh" id="NAME"><a class="permalink" href="#NAME">NAME</a></h1>
<p class="Pp"><code class="Nm">ossl</code> &#x2014; <span class="Nd">driver
    using OpenSSL assembly routines</span></p>
</section>
<section class="Sh">
<h1 class="Sh" id="SYNOPSIS"><a class="permalink" href="#SYNOPSIS">SYNOPSIS</a></h1>
<p class="Pp">To compile this driver into the kernel, place the following lines
    in your kernel configuration file:</p>
<div class="Bd Pp Bd-indent"><code class="Cd">device crypto</code>
<br/>
<code class="Cd">device cryptodev</code>
<br/>
<code class="Cd">device ossl</code></div>
<p class="Pp">Alternatively, to load the driver as a module at boot time, place
    the following line in <a class="Xr">loader.conf(5)</a>:</p>
<div class="Bd Pp Bd-indent Li">
<pre>ossl_load=&quot;YES&quot;</pre>
</div>
</section>
<section class="Sh">
<h1 class="Sh" id="DESCRIPTION"><a class="permalink" href="#DESCRIPTION">DESCRIPTION</a></h1>
<p class="Pp">The OpenSSL distribution includes architecture-specific
    implementations for some commonly used cryptographic algorithms. This driver
    adds a wrapper around these routines permitting them to be used by in-kernel
    cryptography consumers such as kernel TLS and IPsec.</p>
<p class="Pp">The <code class="Nm">ossl</code> driver includes
    architecture-specific implementations for the following architectures:</p>
<p class="Pp"></p>
<ul class="Bl-bullet Bl-compact">
  <li>arm64</li>
  <li>amd64</li>
  <li>i386</li>
</ul>
<p class="Pp">The <code class="Nm">ossl</code> driver includes support for the
    following algorithms:</p>
<p class="Pp"></p>
<ul class="Bl-bullet Bl-compact">
  <li>AES-CBC</li>
  <li>AES-GCM (amd64 only)</li>
  <li>ChaCha20</li>
  <li>ChaCha20-Poly1305 (RFC 8439)</li>
  <li>Poly1305</li>
  <li>SHA1</li>
  <li>SHA1-HMAC</li>
  <li>SHA2-224</li>
  <li>SHA2-224-HMAC</li>
  <li>SHA2-256</li>
  <li>SHA2-256-HMAC</li>
  <li>SHA2-384</li>
  <li>SHA2-384-HMAC</li>
  <li>SHA2-512</li>
  <li>SHA2-512-HMAC</li>
</ul>
</section>
<section class="Sh">
<h1 class="Sh" id="SEE_ALSO"><a class="permalink" href="#SEE_ALSO">SEE
  ALSO</a></h1>
<p class="Pp"><a class="Xr">crypto(4)</a>, <a class="Xr">intro(4)</a>,
    <a class="Xr">ipsec(4)</a>, <a class="Xr">crypto(7)</a>,
    <a class="Xr">crypto(9)</a></p>
</section>
<section class="Sh">
<h1 class="Sh" id="HISTORY"><a class="permalink" href="#HISTORY">HISTORY</a></h1>
<p class="Pp">The <code class="Nm">ossl</code> driver first appeared in
    <span class="Ux">FreeBSD 13.0</span>.</p>
</section>
</div>
<table class="foot">
  <tr>
    <td class="foot-date">May 4, 2023</td>
    <td class="foot-os">FreeBSD 15.0</td>
  </tr>
</table>