UBSEC(4)                  OpenBSD Programmer's Manual                 UBSEC(4)

NAME
     ubsec - Broadcom and BlueSteel uBsec 5x0x crypto accelerator

SYNOPSIS
     ubsec* at pci?

DESCRIPTION
     The ubsec driver supports cards containing any of the following chips:

           Bluesteel 5501    The original chipset, no longer made.  This ex-
                             tremely rare unit was not very fast, lacked an
                             RNG, and had a number of other bugs.

           Bluesteel 5601    A faster and fixed version of the original, with
                             a random number unit and large number engine
                             added.

           Broadcom BCM5801  A BCM5805 without public key engine or random
                             number generator.

           Broadcom BCM5802  A slower version of the BCM5805.

           Broadcom BCM5805  Faster version of Bluesteel 5601.

           Broadcom BCM5820  64 bit version of the chip, and significantly
                             more advanced.

           Broadcom BCM5821  Faster version of the BCM5820.  This is the chip
                             found on the Sun Crypto Accelerator 1000.

           Broadcom BCM5822  Faster version of the BCM5820.

           Broadcom BCM5823  Faster version of the BCM5822 that also supports
                             AES.

           Broadcom BCM5825  Faster PCI Express or PCI-X version of the chip.

           Broadcom BCM5860  IPSec/SSL Security Processor that is faster and
                             has more features.

           Broadcom BCM5861  Faster version of the BCM5860.

           Broadcom BCM5862  Faster version of the BCM5861.

     The ubsec driver registers itself to accelerate DES, Triple-DES,
     MD5-HMAC, and SHA1-HMAC operations for ipsec(4) and crypto(4).  The driv-
     er also supports acceleration of AES-CBC with the BCM5823 or newer.

     On those models which contain a public key engine (almost all of the more
     recent ones), this feature is registered with the crypto(4) subsystem.

     On all models except the Bluesteel 5501 and Broadcom 5801, the driver
     registers itself to provide random data to the random(4) subsystem.

SEE ALSO
     crypt(3), crypto(4), intro(4), ipsec(4), pci(4), random(4), crypto(9)

HISTORY
     The ubsec device driver appeared in OpenBSD 2.8.

BUGS
     The BCM5801 and BCM5802 have not actually been tested.  Also, some of the
     newer chips support AES-CTR (AES Counter Mode) but it is not supported by
     the driver.  The advanced SSL/TLS acceleration features of the BCM5860 or
     newer are not supported by the driver and the crypto(4) subsystem.

OpenBSD 4.7                     March 27, 2009                               2
