net/tls: export TLS per skb encryption (b9727d7f) · Commits · 戴 / test

While offloading TLS connections, drivers need to handle the case where out of order packets need to be transmitted. Other drivers obtain the entire TLS record for the specific skb to provide as context to hardware for encryption. However, other designs may also want to keep the hardware state intact and perform the out of order encryption entirely on the host. To achieve this, export the already existing software encryption fallback path so drivers could access this. Signed-off-by:

Dirk van der Merwe <dirk.vandermerwe@netronome.com> Reviewed-by:

Jakub Kicinski <jakub.kicinski@netronome.com> Signed-off-by:

David S. Miller <davem@davemloft.net>

include/net/tls.h

+1 −0

Original line number	Diff line number	Diff line
		@@ -590,6 +590,7 @@ void tls_unregister_device(struct tls_device *device);
		int tls_device_decrypted(struct sock sk, struct sk_buff skb);
		int decrypt_skb(struct sock sk, struct sk_buff skb,
		struct scatterlist *sgout);
		struct sk_buff tls_encrypt_skb(struct sk_buff skb);

		struct sk_buff tls_validate_xmit_skb(struct sock sk,
		struct net_device *dev,

net/tls/tls_device_fallback.c

+6 −0

Original line number	Diff line number	Diff line
		@@ -426,6 +426,12 @@ struct sk_buff tls_validate_xmit_skb(struct sock sk,
		}
		EXPORT_SYMBOL_GPL(tls_validate_xmit_skb);

		struct sk_buff tls_encrypt_skb(struct sk_buff skb)
		{
		return tls_sw_fallback(skb->sk, skb);
		}
		EXPORT_SYMBOL_GPL(tls_encrypt_skb);

		int tls_sw_fallback_init(struct sock *sk,
		struct tls_offload_context_tx *offload_ctx,
		struct tls_crypto_info *crypto_info)

Admin message