safexcel(4)

safexcel4

Inside secure safexcel-ip-97 cryptographic offload engine

Usage

To compile this driver into the kernel, place the following lines in your kernel configuration file:

device crypto device cryptodev device safexcel

Alternatively, to load the driver as a module at boot time, place the following line in loader.conf(5):

safexcel_load="YES"

Overview

The safexcel driver implements crypto(4) support for the cryptographic acceleration functions of the EIP-97 device found on some Marvell systems-on-chip. The driver can accelerate the following AES modes:

  • AES-CBC

  • AES-CTR

  • AES-XTS

  • AES-GCM

  • AES-CCM

safexcel also implements SHA1 and SHA2 transforms, and can combine AES-CBC and AES-CTR with SHA1-HMAC and SHA2-HMAC for encrypt-then-authenticate operations.

Hardware

The safexcel driver supports the cryptographic acceleration functions of the Inside Secure EIP-97 device found on some Marvell systems-on-chip.

Releases

18 releases since FreeBSD 12.2-RELEASE; the text changed 5 times.

  1. 12.2
  2. 12.3
  3. 12.4
  4. 13.0–13.2
  5. 13.3–14.2
  6. 14.3–16.0

History

The safexcel driver first appeared in FreeBSD 13.0.

From base 16.0-CURRENT-20261027-61c70dc16a79 in FreeBSD 16.0-CURRENT (2026-10-27). Parsed by carta from the page's mdoc source.