Thread (29 messages) flat view 29 messages, 2 authors, 2d ago
WARM2d

Revision v17 of 17 in this series.

Revisions (17)
  1. v1 [diff vs current]
  2. v2 [diff vs current]
  3. v3 [diff vs current]
  4. v4 [diff vs current]
  5. v5 [diff vs current]
  6. v6 [diff vs current]
  7. v7 [diff vs current]
  8. v8 [diff vs current]
  9. v9 [diff vs current]
  10. v10 [diff vs current]
  11. v11 [diff vs current]
  12. v12 [diff vs current]
  13. v13 [diff vs current]
  14. v14 [diff vs current]
  15. v15 [diff vs current]
  16. v16 [diff vs current]
  17. v17 current

[PATCH net-next v17 00/15] tls: Add TLS 1.3 hardware offload support

From: Rishikesh Jethwani <hidden>
Date: 2026-09-17 22:44:51

Hi all,

  This series adds TLS 1.3 hardware offload support including KeyUpdate
  (rekey) and a selftest for validation.

Changes in v17:
  - Addressed review comments

Rishikesh Jethwani (15):
  net: tls: reject TLS 1.3 offload in chcr_ktls and nfp drivers
  net/mlx5e: add TLS 1.3 hardware offload support
  tls: reject rekey attempts on an existing HW-offloaded connection
  tls: add TLS 1.3 hardware offload support
  tls: split tls_set_sw_offload into init and finalize stages
  tls: prep helpers and refactors for HW offload KeyUpdate
  net: sched: re-validate parked decrypted skbs on requeue
  tcp: fence collapse against rtx-queue tail when write queue is empty
  net: skbuff: add skb->decrypt_failed bit
  net/mlx5e: flag TLS RX records that failed device decryption
  tls: device: add TX KeyUpdate support
  tls: device: add RX KeyUpdate support
  tls: device: add tracepoints for the KeyUpdate path
  selftests: net: add TLS hardware offload test
  tls: document TLS 1.3 hardware offload rekey handling

 Documentation/networking/tls-offload.rst      |  175 ++-
 Documentation/networking/tls.rst              |   17 +
 MAINTAINERS                                   |    2 +
 .../chelsio/inline_crypto/ch_ktls/chcr_ktls.c |    3 +
 .../mellanox/mlx5/core/en_accel/ktls.h        |    8 +-
 .../mellanox/mlx5/core/en_accel/ktls_rx.c     |   13 +-
 .../mellanox/mlx5/core/en_accel/ktls_txrx.c   |   14 +-
 .../net/ethernet/netronome/nfp/crypto/tls.c   |    3 +
 include/linux/skbuff.h                        |    6 +
 include/net/tcp.h                             |    9 +
 include/net/tls.h                             |  149 +-
 include/uapi/linux/snmp.h                     |    6 +
 net/sched/sch_generic.c                       |    9 +
 net/tls/tls.h                                 |   32 +-
 net/tls/tls_device.c                          | 1381 +++++++++++++++--
 net/tls/tls_device_fallback.c                 |  186 ++-
 net/tls/tls_main.c                            |   87 +-
 net/tls/tls_proc.c                            |    6 +
 net/tls/tls_sw.c                              |  191 ++-
 net/tls/trace.h                               |  118 ++
 .../selftests/drivers/net/hw/.gitignore       |    1 +
 .../testing/selftests/drivers/net/hw/Makefile |    2 +
 tools/testing/selftests/drivers/net/hw/config |    2 +
 .../selftests/drivers/net/hw/tls_hw_offload.c | 1132 ++++++++++++++
 .../drivers/net/hw/tls_hw_offload.py          |  446 ++++++
 25 files changed, 3735 insertions(+), 263 deletions(-)
 create mode 100644 tools/testing/selftests/drivers/net/hw/tls_hw_offload.c
 create mode 100755 tools/testing/selftests/drivers/net/hw/tls_hw_offload.py

-- 
2.50.1
Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help