Samsung NC20

[Bram-NL]

Hey Barry,

Installing Openchrome from SVN is very easy so no need to wait for a newer package.
Read this guide from "Manual Installation" and proceed with the steps for 8.10:

https://help.ubuntu.com/community/Op...20Installation


[edit] @vvv: I see. That's good then

[Barry Carroll]

Cheers Bram

I meant that I was going to check for a newer revision in SVN. The packaged version doesn't work with the NC20 at the moment.

[Tobis87]

I now got Openssl working with Padlock in Amd64 Intrepid.

Read this guide:
http://www.a110wiki.de/wiki/VIA_Padlock

Download the attached new patch, apply it and recompile Openssl.

sudo apt-get install build-essential devscripts fakeroot
sudo apt-get build-dep openssl
apt-get source openssl
cd openssl-0.9.8g
wget -q -O - http://launchpadlibrarian.net/13798833/bug119295.patch | patch -p1
wget -q -O - http://www.logix.cz/michal/devel/padlock/contrib/openssl-0.9.8e-engine.diff | patch -p1
cat ../centaur-openssl-padlock-x86_64.patch | patch -p1
debchange --nmu
#type if vi :wq else if nano ctrl-o ctrl-x
sudo dpkg-buildpackage
sudo dpkg -i ../openssl_0.9.8g-10.1ubuntu2.3_amd64.deb ../libssl0.9.8_0.9.8g-10.1ubuntu2.3_amd64.deb ../libssl-dev_0.9.8g-10.1ubuntu2.3_amd64.deb

Configure Openssl to always use the Padlock engine:
http://ubuntuforums.org/showthread.php?t=710243

Note:
Openssh has already been fixed in interpid.

[Barry Carroll]

Did you look at getting the RNG working at all? I tried to modprobe via-rng but it failed with a message about a device being missing. I assumed that was /dev/hwrandom so I tried making a node there in /sys but still no joy.

Do you load the padlock-aes and padlock-sha modules at start-up now or is having OpenSSL working good enough?

[Tobis87]

For the RNG, you will need to modify the via-rng.c in order to bypass the "unnecessary sanity check", the RNG does work without this check.
Just comment it out and recompile the kernel module:

/* perhaps-unnecessary sanity check; remove after testing if
   unneeded
   rdmsr(MSR_VIA_RNG, lo, hi);
   if ((lo & VIA_RNG_ENABLE) == 0) {
   printk(KERN_ERR PFX "cannot enable VIA C3 RNG, aborting\n");
   return -ENODEV;
   }*/

But for amd64 you need to patch the kernel (>=2.6.29), as I described here: http://ubuntuforums.org/showpost.php...1&postcount=14

The modules padlock-aes and padlock-sha are only used by dm-crypt (cryptsetup). You may still need to modify and recompile Openssl if you want to use it with Openssh, Openvpn and many more.

You can follow my guide above. It still runs on i386. But I don't know if that is necessary for jaunty anymore.

But I now also managed to port the in official sha patch for Openssl to intrepid and amd64. Because it is dependend on my last patch you will need to apply them both.
For i386 you'll need to change inside eng_padlock.c:

typedef unsigned int uint32_t;
-> typedef unsigned long uint32_t;

[Barry Carroll]

Cool, thanks! I'm using the 32-bit install and openssl seems to support padlock out of the box:

barry@raptor:~/openchrome$ openssl engine
(padlock) VIA PadLock (no-RNG, ACE)
(dynamic) Dynamic engine loading support

I'll need to patch via-rng.c though so thanks for the tip!

[Tobis87]

But for SHA1 and SHA256 hardware acceleration, you still need to recompile Openssl.

[Barry Carroll]

Ah ok, will do - thanks again.

[Barry Carroll]

I might try and get some of this info into a wiki page over the weekend, I think this thread is a great resource for the nc20

[Barry Carroll]

I put up the startings of a a wiki entry here: https://help.ubuntu.com/community/NC20

I swapped out my wirless card for an intel one before I installed ubuntu so I wasn't sure if the stock card works out of the box. I also added what seems to me like a hacky way of getting the wifi button to work so if anyone knows a better way I'd be happy to learn.