iRule CRYPTO commands

Do iRule CRYPTO commands get executed in hardware or software?   Obviously in the case of VE's I'd imagine the answer to be software but in the case of physical BIG-IPs is hardware used?   Noto...