[Soekris] vpn1411 on NET4801 - SSH: Corrupted MAC on input

[Austin Murphy]

On 10/20/06, der Mouse <mouse at rodents.montreal.qc.ca> wrote:
>     But I know that when I used NetBSD on a 4801 with a 1411, I
> got corrupted MAC on input crashes from ssh, which went away when I
> removed the 1411.  Maybe it wasn't, strictly, a hardware problem; I
> don't know.  But there definitely was a problem.
>
> This was a year or two back, back about the time I subscribed to this
> list -

I would like to add that I also get the dreaded "Corrupted MAC on
input" with my 4801 + 1411 combination, both with OpenBSD 3.9 GENERIC
and 4.0 GENERIC.

I don't have the problem when I:
- take the 1411 out of the 4801, or
- select the blowfish cipher (which doesn't use the hifn chip in the
1411) on the SSH command line.

Sometimes the error occurs only after a long session of spitting out
data, but it frequently happens just after I login or after a few key
strokes.   Having someone else login at the same time tends to make it
worse, but I can't really quantify it.

Does *anyone* have a working 4801 + 1411 combo, where SSH uses the
HiFn crypto accelerator?

The error message seems to be specific to OpenSSH-on-OpenBSD.  Does
anyone have a similar problem with SSL or VPN connections or other
OS's?

Austin