Kconfig 901 B

12345678910111213141516171819202122232425262728293031323334353637383940
  1. # SPDX-License-Identifier: GPL-2.0-only
  2. #
  3. # TLS configuration
  4. #
  5. config TLS
  6. tristate "Transport Layer Security support"
  7. depends on INET
  8. select CRYPTO
  9. select CRYPTO_AES
  10. select CRYPTO_GCM
  11. select STREAM_PARSER
  12. select NET_SOCK_MSG
  13. default n
  14. help
  15. Enable kernel support for TLS protocol. This allows symmetric
  16. encryption handling of the TLS protocol to be done in-kernel.
  17. If unsure, say N.
  18. config TLS_DEVICE
  19. bool "Transport Layer Security HW offload"
  20. depends on TLS
  21. select SKB_DECRYPTED
  22. select SOCK_VALIDATE_XMIT
  23. select SOCK_RX_QUEUE_MAPPING
  24. default n
  25. help
  26. Enable kernel support for HW offload of the TLS protocol.
  27. If unsure, say N.
  28. config TLS_TOE
  29. bool "Transport Layer Security TCP stack bypass"
  30. depends on TLS
  31. default n
  32. help
  33. Enable kernel support for legacy HW offload of the TLS protocol,
  34. which is incompatible with the Linux networking stack semantics.
  35. If unsure, say N.