topic Re: Need help in QAT/Openssl-Async in Embedded Intel® Core™ Processors

Need help in QAT/Openssl-Async

CYang50 — Tue, 12 Jan 2016 13:44:23 GMT

Hi,

I'm evaluating QAT hardware crypto card (8955 chipset)

I managed in building QAT1.6 driver and running

cpa_sample_code, both user-mode and kernel mode.

Next, I followed README to compile QAT-enabled openssl-async.

Setting environment, git clone, applying patch, making openssl lib, binary,

and qat-engine and engine driver.

However, openssl does not seem to recognize qat engine.

ENGINE_set_default() is always failed.

I used QAT driver version qatmux.l.2.5.0-80 and openssl patch file libcrypto_shim_0.4.10-011.tgz.

I would appreciate any help. Thank you.

Chul-Woong

# openssl engine

WARNING: can't open config file: /usr/local/ssl/openssl.cnf

(rsax) RSAX engine support

(rdrand) Intel RDRAND engine

(dynamic) Dynamic engine loading support

(4758cca) IBM 4758 CCA hardware engine support

(aep) Aep hardware engine support

(atalla) Atalla hardware engine support

(cswift) CryptoSwift hardware engine support

(chil) CHIL hardware engine support

(nuron) Nuron hardware engine support

(sureware) SureWare hardware engine support

(ubsec) UBSEC hardware engine support

(qat) Reference implementation of QAT crypto engine

(gost) Reference implementation of GOST engine

# openssl speed -engine qat

WARNING: can't open config file: /usr/local/ssl/openssl.cnf

can't use that engine

140354839393960:error:260B806D:engine routines:ENGINE_TABLE_REGISTER:init failed:eng_table.c:175:

Doing mdc2 for 3s on 16 size blocks: ^C

Re: Need help in QAT/Openssl-Async

CarlosAM_INTEL — Tue, 12 Jan 2016 15:15:27 GMT

Hello Chul-Woong,

Thank you for contacting the Intel Embedded Community.

In order to better understand this situation, could you please tell us the part numbers of the Intel devices associated to this problem?

Thanks in advance for your collaboration.

Best Regards,

Carlos_A.

Re: Need help in QAT/Openssl-Async

CYang50 — Tue, 12 Jan 2016 16:14:05 GMT

It's nice to hear from you.

I'm working with PE3Si2CO3X8,

Silicom Dual HW Accelerator sku3 Crypto Compression PCI E G3 Server Adapter

(Gen 3.0 X8, Based on Intel ColecoCreek SKU3 DH8955CL, Low-Profile, RoHS compliant)

Linux is CentOS6, uname -a is:

Linux r730xd 2.6.32 # 3 SMP Mon Jan 4 13:28:19 KST 2016 x86_64 x86_64 x86_64 GNU/Linux.

Thank you.

Chul-Woong

Re: Need help in QAT/Openssl-Async

CarlosAM_INTEL — Tue, 12 Jan 2016 19:20:15 GMT

Hello Chul-Woong,

Thanks for your reply.

We have tried to research information about the "PE3Si2CO3X8" that you have listed without results. Could you please give us all information related to this device?

Thanks again for your cooperation.

Best Regards,

Carlos_A.

Re: Need help in QAT/Openssl-Async

CYang50 — Wed, 13 Jan 2016 03:14:40 GMT

I attach pdf link received from our partner with which I received a physical crypto card:

http://ns.aratech.co.kr/~cwyang/temp.pdf http://ns.aratech.co.kr/~cwyang/temp.pdf

That's the only information I have now. I hope this will be helpful.

Best Regards,

Chul-Woong

Re: Need help in QAT/Openssl-Async

CarlosAM_INTEL — Wed, 13 Jan 2016 14:56:04 GMT

Hello Chul-Woong,

Thanks for your update.

We would like to help you, but you need to contact the manufacturer of the mentioned Crypto Compression PCI E G3 Server Adapter to receive the further help because they have all the information related to their products.

In order to help you, as a reference please address your problem by filling the form that you can find at the following web site:

http://www.silicom-usa.com/contactus.aspx?Item=693&Product=301&ln=en Contact Us

Please let us know if this information is useful to you.

Best Regards,

Carlos_A.

Re: Need help in QAT/Openssl-Async

CYang50 — Thu, 14 Jan 2016 05:54:48 GMT

Oh.

I understand.

I would be happy if I get an answer from here since core of the card is Intel 8255 chip.

Thanks for your kind reply.

Regards,

Chul-Woong

Re: Need help in QAT/Openssl-Async

CarlosAM_INTEL — Thu, 14 Jan 2016 16:05:16 GMT

Hello Chul-Woong,

Thanks for your update.

We would like to help you as we mentioned, but we ignore the modifications and supported conditions that the manufacturer of the third party projects know based on their tests and validations.

Due to this fact, we are unavailable to give you the suggestions that can further help you with any third party implementation.

Best Regards,

Carlos_A.