User`s guide

Device Mapper

• Add Tegra AES hardware driver supporting ecb, cbc, ofb, and ansi_x9.31rng modes, and 128, 192

and 256-bit key sizes. (3.4)

• Add a slice-by-8 algorithm to the existing slice-by-4 algorithm in crc32. The BITS size is expanded from

32 to 64, tables are extended from tab[4][256] to tab[8][256], and inner-loop code is added. (3.4)

• Improve performance of aesni_intel by using parallel LRW and XTS encryption with AES-NI

hardware pipelines. (3.7)

• Add IPSec extended sequence number (ESN) support to CAAM and Talitos. (3.7)

• A x86-64/AVX assembler implementation of the Cast5 block cipher allows 16 blocks to be processed in

parallel. (3.7)

• Implement signature verification algorithms for RSA public key cryptography. At present, only the

signature verification algorithm is supported (PKCS# | RFC3447). (3.7)

• Add a crypto key parser for binary (DER) X.509 certifications, an ASN.1 decoder, and a simple ASN.1

grammar compiler. (3.7)

• Add HASH-HMAC with SHA algorithms and MD5 to CAAM. (3.6)

• Add hardware random number generator support to CAAM. (3.6)

• Add a x86-64/AVX assembler implementation of the Serpent block cipher. (3.6)

• Add x86-64/AVX assembler implementation of the Twofish block cipher. (3.6)

• Add sha224, sha384, and sha512 to the existing AEAD algorithms in Talitos so that it supports all

combinations of CBC (AES, 3DES-EDE) and HMAC (SHA-1, 224, 256, 384, and 512). (3.6)

A.5 Device Mapper

• The always writable feature indicates that a target does not support read-only mode. (3.2)

• The immutable feature indicates that a target type cannot be mixed with any other target type. Once

loaded into a device, it cannot be replaced with a table that contains a different type. (3.2)

• Add a singleton table that can contain only one target. (3.2)

• Log device dependency allows registration of a log device so that it is included in the list of device

dependencies. (3.2)

• A verity target allows a device to store cryptographic hashes of file system blocks. The device can

be used to check every read of the file system. If the hash of the block does not match that of the file

system, the read fails. (3.4)

A.6 Driver Support

• Broadcom NetXtreme II 10Gbps network adapter driver (bnx2x): Add AutogrEEEn support for

BCM84833 and 5418se, and multiple concurrent I2 traffic classes. (3.1)

• Broadcom NetXtreme II iSCSI driver (bnx2i): Add support for 57800, 57810, and 57840. (3.1)

• Brocade BFA FC SCSI driver (bfa):

• FAA support

• HBA diagnostic support