> This I didn't expect with file sharing. What's there beside the networking that consumes so
> much CPU?
Unfortunatelly CIFS or NFS protocol - they are complex CPU-hungry monsters, they are tight throat even on current X86-64 machines.
You can make lightweight sharing with local FTP or NetFS without encryption, but it not solved file sharing generally.
> Are the encryption methods offered by those 10 to 15 years old hardware engines still relevant
> in today's networking anyway?
Yes, of course. Most of inner algorithms are not changed much, main changes are in key exchange and default key length. And in the worst case TLS/SSL or IPSec devices has negotiations and fallback to most recent common protocol version.Look on X1000 CPU PA6T-1682M features:
The first one is an encryption engine. It can do 3DES, AES, ARC4 and Kasumi
(f8) for bulk encryption, MD5, SHA-1, SHA-256 and Kasumi (f9) for signatures.
Toss in packet level encryption like IPSEC and SSL, and you have a fairly
complete crypto setup. The PA6T-1682M is not only good at slinging data
around, but it slings it around privately. It can sustain 10Gbps of bulk encryption
and potentially do 3,000 public-key handshakes a second with support from the
PA6Ts, the PPC VMX extensions help out here in no small way.
The next engine is a checksum accelerator. It can go generic CRC type
checksums or more sophisticated ones like those found in TCP/IP. With a similar
accelerator, it can do XOR calculations for RAID in hardware. Between the two
engines, they can speed up TCP/IP and RAID processing. If you use them both,
you are most of the way to iSCSI acceleration, and PA Semi gets you all the way
there. These engines together mean you can do TCP/IP at wire speeds or iSCSI
with low processor utilization.
There are two separate Ethernet controllers one for 10GbE and one for GbE.
The 10GbE controller supports two separate links which talk to the world
through a XAUI interface. The GbE controller has four links and talks to the
world through a SGMII interface. If you configure the PA6T-1682M for full
network bandwidth, you can get 24Gbps out of it either over IPv4 or IPv6.
Couple this with the offload engines, and you have a potential monster network
box on your hand.X5000 P5020 SEC engine:
22.214.171.124 Security Engine (SEC 4.2)
The SEC 4.2 is QorIQ’s fourth generation crypto-acceleration engine. In addition to off-loading
cryptographic algorithms, the SEC 4.2 offers header and trailer processing for several established security
protocols. The SEC 4.2 includes several Descriptor Controllers (DECOs), which are updated versions of
the previous SEC crypto-channels. DECOs are responsible for header and trailer processing, and managing
context and data flow into the CHAs assigned to it for the length of an operation.
The DECOs can perform header and trailer processing, as well as single pass encryption/integrity checking
for the following security protocols:
• IEEE Std 802.1AE™MACSec
• IEEE 802.16e WiMax MAC layer
• 3GPP RLC encryption/decryption
In prior versions of the SEC, the individual algorithm accelerators were referred to as Execution Units
(EUs). In the SEC 4.2, these are referred to as Crypto Hardware Accelerators (CHAs) to distinguish them
from prior implementations. Specific CHAs available to the DECOs are listed below.
• Advanced encryption standard unit (AESA)
• ARC four execution unit (AFHA)
• Cyclic redundancy check accelerator (CRCA)
• Data encryption standard execution unit (DESA)
• Kasumi execution unit (KFHA)
• SNOW 3 G hardware accelerator (STHA)
• Message digest execution unit (MDHA)
• Public key execution unit (PKHA)
• Random number generator (RNGB)
Depending on the security protocol and specific algorithms, the SEC 4.2’s aggregate symmetric
encryption/integrity performance is 5 Gbps, while asymmetric encryption (RSA public key) performance
is ~5,000 1024b RSA operations per second.
AmigaOS3: Amiga 1200
AmigaOS4: Micro A1-C, AmigaOne XE, Pegasos II, Sam440ep, Sam440ep-flex, AmigaOneX1000
MorphOS: Efika 5200b, Pegasos I, Pegasos II, Powerbook G4, Mac Mini, iMac G5, Powermac G5 Quad