1 # SPDX-License-Identifier: GPL-2.0-only 1 # SPDX-License-Identifier: GPL-2.0-only
2 # 2 #
3 # TLS configuration 3 # TLS configuration
4 # 4 #
5 config TLS 5 config TLS
6 tristate "Transport Layer Security sup 6 tristate "Transport Layer Security support"
7 depends on INET 7 depends on INET
8 select CRYPTO 8 select CRYPTO
9 select CRYPTO_AES 9 select CRYPTO_AES
10 select CRYPTO_GCM 10 select CRYPTO_GCM
11 select STREAM_PARSER 11 select STREAM_PARSER
12 select NET_SOCK_MSG 12 select NET_SOCK_MSG
13 default n 13 default n
14 help 14 help
15 Enable kernel support for TLS protocol 15 Enable kernel support for TLS protocol. This allows symmetric
16 encryption handling of the TLS protoco 16 encryption handling of the TLS protocol to be done in-kernel.
17 17
18 If unsure, say N. 18 If unsure, say N.
19 19
20 config TLS_DEVICE 20 config TLS_DEVICE
21 bool "Transport Layer Security HW offl 21 bool "Transport Layer Security HW offload"
22 depends on TLS 22 depends on TLS
23 select SKB_DECRYPTED <<
24 select SOCK_VALIDATE_XMIT 23 select SOCK_VALIDATE_XMIT
25 select SOCK_RX_QUEUE_MAPPING 24 select SOCK_RX_QUEUE_MAPPING
26 default n 25 default n
27 help 26 help
28 Enable kernel support for HW offload o 27 Enable kernel support for HW offload of the TLS protocol.
29 28
30 If unsure, say N. 29 If unsure, say N.
31 30
32 config TLS_TOE 31 config TLS_TOE
33 bool "Transport Layer Security TCP sta 32 bool "Transport Layer Security TCP stack bypass"
34 depends on TLS 33 depends on TLS
35 default n 34 default n
36 help 35 help
37 Enable kernel support for legacy HW of 36 Enable kernel support for legacy HW offload of the TLS protocol,
38 which is incompatible with the Linux n 37 which is incompatible with the Linux networking stack semantics.
39 38
40 If unsure, say N. 39 If unsure, say N.
Linux® is a registered trademark of Linus Torvalds in the United States and other countries.
TOMOYO® is a registered trademark of NTT DATA CORPORATION.