13-Security Configuration Guide

HomeSupportResource CenterH3C Access Points Cloud Mode Configuration Guides(E2442 R2442)-6W10013-Security Configuration Guide
13-Crypto engine configuration
Title Size Download
13-Crypto engine configuration 44.69 KB

Configuring crypto engines

About crypto engines

Crypto engines encrypt and decrypt data for service modules.

Crypto engine types

Crypto engines include the following types:

·     Hardware crypto engines—A hardware crypto engine is a coprocessor integrated on a CPU or hardware crypto card. Hardware crypto engines can accelerate encryption/decryption speed, which improves device processing efficiency. You can enable or disable hardware crypto engines globally as needed. By default, hardware crypto engines are enabled.

·     Software crypto engines—A software crypto engine is a set of software encryption algorithms. The device uses software crypto engines to encrypt and decrypt data for service modules. They are always enabled. You cannot enable or disable software crypto engines.

The device supports only software crypto engines.

Crypto engine processing mechanism

Crypto engines provide encryption/decryption services for service modules, for example, the IPsec module. When a service module requires data encryption/decryption, it sends the desired data to a crypto engine. After the crypto engine completes data encryption/decryption, it sends the data back to the service module.

Display and maintenance commands for crypto engines

Execute display commands in any view and reset commands in user view.

 

Task

Command

Display crypto engine information.

display crypto-engine

Display crypto engine statistics.

display crypto-engine statistics [ engine-id engine-id ]

Clear crypto engine statistics.

reset crypto-engine statistics [ engine-id engine-id ]