summaryrefslogtreecommitdiff
path: root/net/tls/Kconfig
diff options
context:
space:
mode:
authorDave Watson <davejwatson@fb.com>2017-06-14 21:37:39 +0300
committerDavid S. Miller <davem@davemloft.net>2017-06-15 19:12:40 +0300
commit3c4d7559159bfe1e3b94df3a657b2cda3a34e218 (patch)
tree57a99de1db4ac5bb65ea9cf2ee6e7156d6c64d6d /net/tls/Kconfig
parente3b5616a347603a521fe3ac46f3194a60900e3a7 (diff)
downloadlinux-3c4d7559159bfe1e3b94df3a657b2cda3a34e218.tar.xz
tls: kernel TLS support
Software implementation of transport layer security, implemented using ULP infrastructure. tcp proto_ops are replaced with tls equivalents of sendmsg and sendpage. Only symmetric crypto is done in the kernel, keys are passed by setsockopt after the handshake is complete. All control messages are supported via CMSG data - the actual symmetric encryption is the same, just the message type needs to be passed separately. For user API, please see Documentation patch. Pieces that can be shared between hw and sw implementation are in tls_main.c Signed-off-by: Boris Pismenny <borisp@mellanox.com> Signed-off-by: Ilya Lesokhin <ilyal@mellanox.com> Signed-off-by: Aviad Yehezkel <aviadye@mellanox.com> Signed-off-by: Dave Watson <davejwatson@fb.com> Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/tls/Kconfig')
-rw-r--r--net/tls/Kconfig12
1 files changed, 12 insertions, 0 deletions
diff --git a/net/tls/Kconfig b/net/tls/Kconfig
new file mode 100644
index 000000000000..61e532964c82
--- /dev/null
+++ b/net/tls/Kconfig
@@ -0,0 +1,12 @@
+#
+# TLS configuration
+#
+config TLS
+ tristate "Transport Layer Security support"
+ depends on NET
+ default m
+ ---help---
+ Enable kernel support for TLS protocol. This allows symmetric
+ encryption handling of the TLS protocol to be done in-kernel.
+
+ If unsure, say M.