security modifications to current PCs

[Jonathan Thornburg]

On Thu, 1 Dec 2005, Travis H. wrote:
> Is it possible to implement most block ciphers in FPGAs?  It'd be nice
> to have a bus-mastering crypto co-processor device to do, say, disk
> encryption without requiring CPU help, but I want to be able to update
> it to new algorithms as new attacks against the cipher appear.  I use
> some disk encryption stuff on a dual processor machine and it's still
> slow.  The load climbs to 10 or 12 all too easily, then stuff becomes
> unresponsive (perhaps because swap is one of the things I'm
> encrypting).

Have you tried the swap-encryption option in OpenBSD?  According to
   http://www.openbsd.org/papers/swapencrypt.ps
the performance is pretty good.

ciao,

-- 
-- Jonathan Thornburg <jthorn at aei.mpg.de>
    Max-Planck-Institut fuer Gravitationsphysik (Albert-Einstein-Institut),
    Golm, Germany, "Old Europe"     http://www.aei.mpg.de/~jthorn/home.html
    "Washing one's hands of the conflict between the powerful and the
     powerless means to side with the powerful, not to be neutral."
                                       -- quote by Freire / poster by Oxfam