man/man7d/dca.7d

         te
 Copyright (c) 2005, Sun Microsystems, Inc. All Rights Reserved
 The contents of this file are subject to the terms of the Common Development and Distribution License (the "License"). You may not use this file except in compliance with the License.
 You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE or http://www.opensolaris.org/os/licensing. See the License for the specific language governing permissions and limitations under the License.
 When distributing Covered Code, include this CDDL HEADER in each file and include the License file at usr/src/OPENSOLARIS.LICENSE. If applicable, add the following below this CDDL HEADER, with the fields enclosed by brackets "[]" replaced with your own identifying information: Portions Copyright [yyyy] [name of copyright owner]
 DCA 7D "Aug 14, 2005"
 NAME
dca - Crypto Accelerator device driver
 SYNOPSIS

pci108e,5454@pci-slot


pci108e,5455@pci-slot


pci108e,5456@pci-slot


pci14e4,5820@pci-slot


pci14e4,5821@pci-slot


pci14e4,5822@pci-slot


 DESCRIPTION

The dca device driver is a multi-threaded, loadable hardware driver
supporting Sun PCI-based (pci108e,5454) cryptographic accelerators, such
as the Sun Crypto Accelerator 1000.

The dca driver requires the presence of Solaris Cryptographic Framework
for applications and kernel clients to access the provided services.
 EXTENDED DESCRIPTION

The dca driver maintains the following statistics:
3desjobs

Total number of jobs submitted to the device for 3DES encryption.


3desbytes

Total number of bytes submitted to the device for 3DES encryption.


rsapublic

Total number of jobs submitted to the device for RSA public key operations.


rsaprivate

Total number of jobs submitted to the device for RSA private key operations.


dsasign

Total number of jobs submitted to the device for DSA signing.


dsaverify

Total number of jobs submitted to the device for DSA verification.


rngjobs

Total number of jobs submitted for pure entropy generation.


rngbytes

Total number of bytes of pure entropy requested from the device.


rngsha1jobs

Total number of jobs submitted for entropy generation, with SHA-1
post-processing.


rngsha1bytes

Total number of bytes of entropy requested from the device, with SHA-1
post-processing.


Additional statistics may be supplied for Sun support personnel, but are not
useful to end users and are not documented here.

The dca driver can be configured by defining properties in
/kernel/drv/dca.conf which override the default settings. The following
properties are supported:
nostats

Disables the generation of statistics. This property may be used to help
prevent traffic analysis, but this may inhibit support personnel.


rngdirect

Disables the SHA-1 post-processing of generated entropy. This may give "truer"
random numbers, but it may also introduce the risk of external biases
influencing the distribution of generated random numbers.


 ATTRIBUTES

See attributes(5) for descriptions of the following attributes:


ATTRIBUTE TYPE ATTRIBUTE VALUE
Architecture SPARC
Interface Stability Unstable


 FILES
/kernel/drv/dca.conf

dca configuration file


/kernel/drv/sparcv9/dca

64-bit ELF kernel driver (SPARC)


/kernel/drv/dca

32-bit ELF kernel driver (x86)


/kernel/drv/amd64/dca

64-bit ELF kernel driver (AMD64)


 SEE ALSO

cryptoadm(1M), kstat(1M), prtconf(1M), driver.conf(4),
attributes(5)

Solaris Cryptographic Framework.