dca

- Crypto Accelerator device driver

Synopsis

pci108e,5454@pci-slot

pci108e,5455@pci-slot

pci108e,5456@pci-slot

pci14e4,5820@pci-slot

pci14e4,5821@pci-slot

pci14e4,5822@pci-slot

Description

The dca device driver is a multi-threaded, loadable hardware driver supporting Sun PCI-based (pci108e,5454) cryptographic accelerators, such as the Sun Crypto Accelerator 1000.

The dca driver requires the presence of Solaris Cryptographic Framework for applications and kernel clients to access the provided services.

Extended Description

The dca driver maintains the following statistics:

3desjobs

Total number of jobs submitted to the device for 3DES encryption.

3desbytes

Total number of bytes submitted to the device for 3DES encryption.

rsapublic

Total number of jobs submitted to the device for RSA public key operations.

rsaprivate

Total number of jobs submitted to the device for RSA private key operations.

dsasign

Total number of jobs submitted to the device for DSA signing.

dsaverify

Total number of jobs submitted to the device for DSA verification.

rngjobs

Total number of jobs submitted for pure entropy generation.

rngbytes

Total number of bytes of pure entropy requested from the device.

rngsha1jobs

Total number of jobs submitted for entropy generation, with SHA-1 post-processing.

rngsha1bytes

Total number of bytes of entropy requested from the device, with SHA-1 post-processing.

Additional statistics may be supplied for Sun support personnel, but are not useful to end users and are not documented here.

The dca driver can be configured by defining properties in /kernel/drv/dca.conf which override the default settings. The following properties are supported:

nostats

Disables the generation of statistics. This property may be used to help prevent traffic analysis, but this may inhibit support personnel.

rngdirect

Disables the SHA-1 post-processing of generated entropy. This may give truer random numbers, but it may also introduce the risk of external biases influencing the distribution of generated random numbers.

Files

/kernel/drv/dca.conf

dca configuration file

/kernel/drv/sparcv9/dca

64–bit ELF kernel driver (SPARC)

/kernel/drv/amd64/dca

64–bit ELF kernel driver (AMD64)

Attributes

See attributes(5) for descriptions of the following attributes:

See Also

cryptoadm(1M), kstat(1M), prtconf(1M), driver.conf(4), attributes(5)

Solaris Cryptographic Framework.