From mboxrd@z Thu Jan  1 00:00:00 1970
From: Michael Tremer <michael.tremer@ipfire.org>
To: development@lists.ipfire.org
Subject: Re: [PATCH 2/4] Tor: Use crypto hardware acceleration if available
Date: Mon, 04 Oct 2021 14:59:29 +0100
Message-ID: <F2104E33-FCEE-4261-AD9A-BA025DF2A4DE@ipfire.org>
In-Reply-To: <32b28612-0d1b-40f2-6ec7-585b49c186d2@ipfire.org>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============1408697647646647386=="
List-Id: <development.lists.ipfire.org>

--===============1408697647646647386==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

Thank you for clearing this up for me.

-Michael

> On 4 Oct 2021, at 11:49, Peter M=C3=BCller <peter.mueller(a)ipfire.org> wro=
te:
>=20
> Hello Michael,
>=20
> thanks for your reply.
>=20
> To quote from Tor's manpage (see https://2019.www.torproject.org/docs/tor-m=
anual.html.en#HardwareAccel
> for an online version of it):
>=20
>>       HardwareAccel 0|1
>>           If non-zero, try to use built-in (static) crypto hardware
>>           acceleration when available. Can not be changed while tor is
>>           running. (Default: 0)
>=20
> Even if it is available, Tor does not use hardware crypto acceleration by d=
efault. While I consider
> this a reasonable default for Tor users not trusting their hardware, we agr=
eed on doing so a while
> ago (https://git.ipfire.org/?p=3Dipfire-2.x.git;a=3Dcommit;h=3D13eab1060d04=
74ddf413386de0361e32113f8cb7).
>=20
> Therefore, this needs to be enabled explicitly, which is what this patch is=
 good for. :-)
>=20
> I hope to have your question answered.
>=20
> Thanks, and best regards,
> Peter M=C3=BCller
>=20
>=20
>> Hello,
>> Can you elaborate a little bit more on this?
>> Tor is using OpenSSL which by default should use RDRAND, AES-NI (if applic=
able) and so on.
>> What does this option change?
>> -Michael
>>> On 25 Sep 2021, at 08:08, Peter M=C3=BCller <peter.mueller(a)ipfire.org> =
wrote:
>>>=20
>>> Signed-off-by: Peter M=C3=BCller <peter.mueller(a)ipfire.org>
>>> ---
>>> html/cgi-bin/tor.cgi | 1 +
>>> 1 file changed, 1 insertion(+)
>>>=20
>>> diff --git a/html/cgi-bin/tor.cgi b/html/cgi-bin/tor.cgi
>>> index ce579aec1..2b0d93336 100644
>>> --- a/html/cgi-bin/tor.cgi
>>> +++ b/html/cgi-bin/tor.cgi
>>> @@ -731,6 +731,7 @@ sub BuildConfiguration() {
>>>=20
>>> 	# Global settings.
>>> 	print FILE "Sandbox 1\n";
>>> +	print FILE "HardwareAccel 1\n";
>>> 	print FILE "ControlPort $TOR_CONTROL_PORT\n";
>>>=20
>>> 	if ($settings{'TOR_ENABLED'} eq 'on') {
>>> --=20
>>> 2.26.2


--===============1408697647646647386==--