Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.kernel > #1376708

Re: [PATCH 0/3] crypto: af_alg - add TLS type encryption

From Fridolin Pokorny <fpokorny@redhat.com>
Newsgroups linux.kernel
Subject Re: [PATCH 0/3] crypto: af_alg - add TLS type encryption
Date 2016-04-12 13:20 +0200
Message-ID <rn4wp-6yV-3@gated-at.bofh.it> (permalink)
References <r9vG9-6nu-5@gated-at.bofh.it> <rkxlf-2sv-5@gated-at.bofh.it> <rl03U-7Xy-11@gated-at.bofh.it> <rluOl-5uW-3@gated-at.bofh.it> <rluOl-5uW-1@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw



On 08.04.2016 04:58, Tom Herbert wrote:
> On Thu, Apr 7, 2016 at 11:52 PM, Herbert Xu <herbert@gondor.apana.org.au> wrote:
>> On Wed, Apr 06, 2016 at 10:56:12AM -0700, Tadeusz Struk wrote:
>>>
>>> The intend is to enable HW acceleration of the TLS protocol.
>>> The way it will work is that the user space will send a packet of data
>>> via AF_ALG and HW will authenticate and encrypt it in one go.
>>
>> There have been suggestions to implement TLS data-path within
>> the kernel.  So we should decide whether we pursue that or go
>> with your approach before we start adding algorithms.
>>
> Yes, please see Dave Watson's patches on this.
> 


Hi Tadeusz,

we were experimenting with this. We have a prove of concept of a kernel
TLS type socket, so called AF_KTLS, which is based on Dave Watson's
RFC5288 patch. It handles both TLS and DTLS, unfortunately it is not
ready now to be proposed here. There are still issues which should be
solved (but mostly user space API design) [1]. If you are interested, we
could combine efforts.

Regards,
Fridolin Pokorny

[1] https://github.com/fridex/af_ktls

Back to linux.kernel | Previous | NextPrevious in thread | Next in thread | Find similar | Unroll thread


Thread

Re: [PATCH 0/3] crypto: af_alg - add TLS type encryption Herbert Xu <herbert@gondor.apana.org.au> - 2016-04-05 13:30 +0200
  Re: [PATCH 0/3] crypto: af_alg - add TLS type encryption Tadeusz Struk <tadeusz.struk@intel.com> - 2016-04-06 20:10 +0200
    Re: [PATCH 0/3] crypto: af_alg - add TLS type encryption Tom Herbert <tom@herbertland.com> - 2016-04-08 05:00 +0200
      Re: [PATCH 0/3] crypto: af_alg - add TLS type encryption Fridolin Pokorny <fpokorny@redhat.com> - 2016-04-12 13:20 +0200
        Re: [PATCH 0/3] crypto: af_alg - add TLS type encryption Tadeusz Struk <tadeusz.struk@intel.com> - 2016-04-14 01:00 +0200
          Re: [PATCH 0/3] crypto: af_alg - add TLS type encryption Nikos Mavrogiannopoulos <nmav@gnutls.org> - 2016-04-14 08:50 +0200
    Re: [PATCH 0/3] crypto: af_alg - add TLS type encryption Herbert Xu <herbert@gondor.apana.org.au> - 2016-04-08 05:00 +0200

csiph-web