Forum Discussion

Magnum_IP's avatar
Magnum_IP
Icon for Nimbostratus rankNimbostratus
Jun 05, 2015

iRule CRYPTO commands

Do iRule CRYPTO commands get executed in hardware or software?   Obviously in the case of VE's I'd imagine the answer to be software but in the case of physical BIG-IPs is hardware used?   Noto...
application delivery
devops
iRules
hooleylist's avatar
hooleylist
Icon for Cirrostratus rankCirrostratus
Jun 08, 2015

Hi Chris,

 

"AES::key" and "CRYPTO::keygen -alg random" both get their random data from hardware cryptographic random number generators if the hardware is present.

 

You could open a case with F5 Support to request an enhancement (RFE) to support hardware acceleration for the bulk encryption too. I did a quick search for an existing RFE ID, but couldn't find one.

 

Please reference C1128368-1 and C1037034.

 

Thanks, Aaron