HIFN(4)                   OpenBSD Programmer's Manual                  HIFN(4)

NAME
     hifn - Hifn 7751/7811/7951/7955/7956/9751 crypto accelerator

SYNOPSIS
     hifn* at pci?

DESCRIPTION
     The hifn driver supports various cards containing the Hifn 7751, Hifn
     7811, Hifn 7951, Hifn 7955, Hifn 7956, or Hifn 9751 chipsets, such as

           Invertex AEON   Comes as 128KB SRAM model, or 2MB DRAM model.

           Hifn 7751       Reference board with 512KB SRAM.

           PowerCrypt      Comes with 512KB SRAM.

           PowerCrypt 5x   Contains a 7956 and supports symmetric encryption
                           (including AES), random number, and modular expo-
                           nentiation operations.

           XL-Crypt        Only board based on 7811 (which is faster than 7751
                           and has a random number generator).

           NetSec 7751     7751 board with 1MB of SRAM.

           Soekris Engineering vpn1201 and vpn1211
                           Contains a 7951 and supports symmetric encryption
                           and random number operations.

           Soekris Engineering vpn1401 and vpn1411
                           Contains a 7955 and supports symmetric encryption
                           (including AES), random number, and modular expo-
                           nentiation operations.

           Hifn 9751       Reference board with 512KB SRAM.  This is really a
                           Hifn 7751 which only supports compression.

     The Hifn 7751, Hifn 7811, Hifn 7951, Hifn 7955, and Hifn 7956 chips all
     support acceleration of DES, Triple-DES, ARC4, MD5, MD5-HMAC, SHA1,
     SHA1-HMAC, and LZS operations for ipsec(4) and crypto(4).  The Hifn 7955
     and Hifn 7956 chips additionally support AES-CBC.  The Hifn 9751 only
     supports LZS.

     The Hifn 7811, Hifn 7951, Hifn 7955, and Hifn 7956 will also supply data
     to the kernel random(4) subsystem.

SEE ALSO
     crypt(3), crypto(4), intro(4), ipsec(4), pci(4), random(4), crypto(9)

HISTORY
     The hifn device driver appeared in OpenBSD 2.7.

BUGS
     The 7751 chip starts out at initialization by only supporting compres-
     sion.  A proprietary algorithm, which has been reverse engineered, is re-
     quired to unlock the cryptographic functionality of the chip.  It is pos-
     sible for vendors to make boards which have a lock ID not known to the
     driver, but all vendors currently just use the obvious ID which is 13
     bytes of 0.

     The 7951, 7955 and 7956 have support for public key operations which are
     not yet supported.

OpenBSD 4.7                     March 24, 2009                               1
