0001 # SPDX-License-Identifier: GPL-2.0-only
0002 #
0003 # TLS configuration
0004 #
0005 config TLS
0006 tristate "Transport Layer Security support"
0007 depends on INET
0008 select CRYPTO
0009 select CRYPTO_AES
0010 select CRYPTO_GCM
0011 select STREAM_PARSER
0012 select NET_SOCK_MSG
0013 default n
0014 help
0015 Enable kernel support for TLS protocol. This allows symmetric
0016 encryption handling of the TLS protocol to be done in-kernel.
0017
0018 If unsure, say N.
0019
0020 config TLS_DEVICE
0021 bool "Transport Layer Security HW offload"
0022 depends on TLS
0023 select SOCK_VALIDATE_XMIT
0024 select SOCK_RX_QUEUE_MAPPING
0025 default n
0026 help
0027 Enable kernel support for HW offload of the TLS protocol.
0028
0029 If unsure, say N.
0030
0031 config TLS_TOE
0032 bool "Transport Layer Security TCP stack bypass"
0033 depends on TLS
0034 default n
0035 help
0036 Enable kernel support for legacy HW offload of the TLS protocol,
0037 which is incompatible with the Linux networking stack semantics.
0038
0039 If unsure, say N.
