NAME

ossl — driver using OpenSSL assembly routines

SYNOPSIS

To compile this driver into the kernel, place the following lines in your kernel configuration file:

Alternatively, to load the driver as a module at boot time, place the following line in loader.conf(5):

ossl_load="YES"

DESCRIPTION

The OpenSSL distribution includes architecture-specific implementations for some commonly used cryptographic algorithms. This driver adds a wrapper around these routines permitting them to be used by in-kernel cryptography consumers such as kernel TLS and IPsec.

The ossl driver includes architecture-specific implementations for the following architectures:

• arm64
• amd64
• i386

The ossl driver includes support for the following algorithms:

• AES-CBC
• AES-GCM (amd64 only)
• ChaCha20
• ChaCha20-Poly1305 (RFC 8439)
• Poly1305
• SHA1
• SHA1-HMAC
• SHA2-224
• SHA2-224-HMAC
• SHA2-256
• SHA2-256-HMAC
• SHA2-384
• SHA2-384-HMAC
• SHA2-512
• SHA2-512-HMAC

SEE ALSO

crypto(4), intro(4), ipsec(4), crypto(7), crypto(9)

HISTORY

The ossl driver first appeared in FreeBSD 13.0.