System and Method for Offloading Cryptographic Functions to Support a Large Number of Clients in a Wireless Access Point

摘要

The present disclosure discloses a method and network device for offloading cryptographic functions to support a large number of clients. Specifically, a network device receives a packet corresponding to a client device via an interface, and determines whether a first hardware module that performs cryptographic operations on a per-client basis overflows. If first hardware module overflows, the network device retrieves a cryptographic key for the packet, and sends the received packet with the retrieved cryptographic key to a second hardware module that performs cryptographic operations on a per-packet basis to perform one or more cryptographic operations. If not, the network device sends the packet to the first hardware module to perform the one or more cryptographic operations.

主权项

1. A method comprising:
receiving, by a network device comprising one or more processor cores, a packet corresponding to a client device via an interface, wherein one or more cryptographic operations are to be performed on the received packet; determining, by the network device, whether a first hardware module that performs cryptographic operations on a per-client basis overflows; and in response to the first hardware module overflowing, sending the received packet to a second hardware module that performs cryptographic operations on a per-packet basis.