1. `Orum

    UFS GELI hash changes depending on if hardware or software crypto is used?

    I'm trying to set up a new system using EFI + GELI + UFS2 + encrypted root, with GELI configured to use AES-XTS 256 and HMAC/SHA256. After dding over areas of the disk (start/end, to set up initial HMACs) and then newfsing, I noticed that GELI was not using hardware crypto, but software. After...
  2. N

    Other GELI on Epyc Using Software AES Despite Saying its Using Hardware

    I have two similar systems I'm testing as database hardware. Both consist of 8x Samsung 860 Pro SSD's attached to LSI9003-8i, 256GB ram, equal chassis/backplane. The only variance is one server is an Epyc 7371, and the other a Xeon Gold 6130. Some snippets to get the lay of the land, first the...

    Solved FreeBSD 11.2 - OpenSSL without AESNI?

    user@gt:~ % openssl version OpenSSL 1.0.2k-freebsd 26 Jan 2017 user@gt:~ % openssl speed -evp aes-256-gcm -engine aesni invalid engine "aesni" 34380834184:error:25066067:DSO support routines:DLFCN_LOAD:could not load the shared...