Stateless cryptographic protocol-based hardware acceleration
View Patent ↗According to one embodiment of the invention, a method comprises an operation of commencing a first phrase and passing control of an authentication handshaking protocol. The first phase is commenced for establishing a secure communication path by a data path processor within a first network device. The first phrase comprises an exchange of data during an authentication handshaking protocol. The passing of control for authentication handshaking protocol by the data path processor to a control path processor is conducted to complete the authentication handshaking protocol.
1. A method comprising:
commencing, using a first processor within a first network device, a particular networking protocol;
transferring control of the particular networking protocol from the first processor to a second processor within the first network device;
completing the particular networking protocol using the second processor within the first network device.
2. The method of claim 1 , wherein the networking protocol is an authentication procedure, wherein the first processor completes a first phase of the authentication procedure, and wherein the second processor completes a second phase of the authentication procedure.
3. The method of claim 1 , wherein the particular networking protocol establishes a secure communication path between the first network device and a second device.
4. The method of claim 1 , wherein the particular networking protocol comprises one or more of: a Secure Socket Layer (SSL) Handshake or a Transport Layer Security (TLS) Handshake.
5. The method of claim 4 , wherein the control of the particular networking protocol is transferred in response to receiving a Client Key Exchange message.
6. The method of claim 4 , wherein the control of the particular networking protocol is transferred subsequent to receiving and processing a client Key Exchange message.
7. The method of claim 1 , wherein the first processor is a data path processor and the second processor is a control path processor.
8. A non-transitory computer readable storage medium comprising instructions which, when executed by at least by a first processor and a second processor in a first network device, are configured to perform operations comprising:
commencing, using the first processor within the first network device, a particular networking protocol;
transferring control of the particular networking protocol from the first processor to the second processor within the first network device;
completing the particular networking protocol using the second processor within the first network device.
9. The non-transitory computer readable storage medium of claim 8 , wherein the networking protocol is an authentication procedure, wherein the first processor completes a first phase of the authentication procedure, and wherein the second processor completes a second phase of the authentication procedure.
10. The non-transitory computer readable storage medium of claim 8 , wherein the particular networking protocol establishes a secure communication path between the first network device and a second device.
11. The non-transitory computer readable storage medium of claim 8 , wherein the particular networking protocol comprises one or more of: a Secure Socket Layer (SSL) Handshake or a Transport Layer Security (TLS) Handshake.
12. The non-transitory computer readable storage medium of claim 11 , wherein the control of the particular networking protocol is transferred in response to receiving a Client Key Exchange message.
13. The non-transitory computer readable storage medium of claim 11 , wherein the control of the particular networking protocol is transferred subsequent to receiving and processing a client Key Exchange message.
14. The non-transitory computer readable storage medium of claim 8 , wherein the first processor is a data path processor and the second processor is a control path processor.
15. A first network device comprising:
a first processor;
a second processor;
the first network device being configured for:
commencing, using the first processor, a particular networking protocol;
transferring control of the particular networking protocol from the first processor to the second processor device;
completing the particular networking protocol using the second processor within the first network device.
16. The first network device of claim 15 , wherein the networking protocol is an authentication procedure, wherein the first processor completes a first phase of the authentication procedure, and wherein the second processor completes a second phase of the authentication procedure.
17. The first network device of claim 15 , wherein the particular networking protocol establishes a secure communication path between the first network device and a second device.
18. The first network device of claim 15 , wherein the particular networking protocol comprises one or more of: a Secure Socket Layer (SSL) Handshake or a Transport Layer Security (TLS) Handshake.
19. The first network device of claim 18 , wherein the control of the particular networking protocol is transferred in response to receiving a Client Key Exchange message.
20. The first network device of claim 18 , wherein the control of the particular networking protocol is transferred subsequent to receiving and processing a client Key Exchange message.
21. The first network device of claim 15 , wherein the first processor is a data path processor and the second processor is a control path processor.