Linux Cryptographic Acceleration on an i.MX6
Talkat Embedded Linux Conference + OpenIoT Summit North America 2017 · on Tuesday, 2017-02-21· at 14:00· Broadway III/IV·
summary
Enables the i.MX6 CAAM via kernel crypto_dev and AF_ALG and plugs it into OpenSSL + crypto_dev/AF_ALG; measures with openssl speed (elapsed) on a quad‑core i.MX6 running a 4.1-era kernel. Finding: offload reduces CPU usage but performs worse than pure software AES for small block sizes — kernel interrupts, context switches and bus overhead dominate; throughput only improves as block sizes grow, so hardware acceleration isn’t a slam‑dunk without tuning.
AI-written summary · about
chapters (22)
- 0:00Intro
- 0:23Welcome
- 0:56Wade Farnsworth
- 1:53Presentation Overview
- 3:16Cryptography Basics
- 6:08Basic Encryption
- 9:17Cryptographic Acceleration
- 12:41The iMX6
- 13:29Random Number Generator
- 14:27Basic Enablement
- 15:43Different implementations
- 20:51Crypto API
- 22:09CryptoDev
- 23:55Enable CryptoDev
- 25:00Enable Socket Interface
- 25:44Building the Stack
- 26:57Paths
- 28:11OpenSSL
- 31:56Building a plugin
- 33:43Comparing performance
- 34:17Software implementation
- 40:19CPU utilization
related talks
30mFacing Extinction: The Fight To Keep Hardware Crypto Engines in Embedded Linux
51mAn Overview of the Linux Kernel Crypto Subsystem
51mThe Linux Crypto API
28mModernizing Kernel Cryptography: From Complex APIs To Streamlined Libraries
27mSpeeding Up Linux Disk Encryption
13mBest UADK Acceleration Practice on Ceph Storage
13mEnabling Crypto Agility by Immunizing Processors Against the Exploitation of Software Bugs
20mConfidential Computing within an AI Accelerator