MySQL and UltraSPARC T2 crypto
By sprack on May 21, 2008
I've started looking at how to leverage the UltraSPARC T2 hardware cryptographic accelerators to improve MySQL performance and there are a couple of interesting opportunities;
SSL is used to secure communication between a potentially remote MySQL client and the MySQL server. One option is to modify the appropriate SSL libraries to use the T2 hardware accelerators where appropriate -- pretty straight forward. Another option that I'm currently investigating is trying to use the Solaris Kernel SSL proxy (KSSL). KSSL already uses the UltraSPARC T2 HW crypto accelerators, and so could be a very elegant solution to offloading MySQL SSL processing.
A variety of operations are supported by MySQL to secure database information, such as aes_encrypt() and des_decrypt(). Support for DES and SHA1 are also provided. Again, it is fairly straight forward to modify this code to use the T2 hardware accelerators were appropriate.
More details/results to follow as I continue investigating.