[PATCH net-next v17 00/15] tls: Add TLS 1.3 hardware offload support
From: Rishikesh Jethwani <hidden>
Date: 2026-09-17 22:44:51
Hi all, This series adds TLS 1.3 hardware offload support including KeyUpdate (rekey) and a selftest for validation. Changes in v17: - Addressed review comments Rishikesh Jethwani (15): net: tls: reject TLS 1.3 offload in chcr_ktls and nfp drivers net/mlx5e: add TLS 1.3 hardware offload support tls: reject rekey attempts on an existing HW-offloaded connection tls: add TLS 1.3 hardware offload support tls: split tls_set_sw_offload into init and finalize stages tls: prep helpers and refactors for HW offload KeyUpdate net: sched: re-validate parked decrypted skbs on requeue tcp: fence collapse against rtx-queue tail when write queue is empty net: skbuff: add skb->decrypt_failed bit net/mlx5e: flag TLS RX records that failed device decryption tls: device: add TX KeyUpdate support tls: device: add RX KeyUpdate support tls: device: add tracepoints for the KeyUpdate path selftests: net: add TLS hardware offload test tls: document TLS 1.3 hardware offload rekey handling Documentation/networking/tls-offload.rst | 175 ++- Documentation/networking/tls.rst | 17 + MAINTAINERS | 2 + .../chelsio/inline_crypto/ch_ktls/chcr_ktls.c | 3 + .../mellanox/mlx5/core/en_accel/ktls.h | 8 +- .../mellanox/mlx5/core/en_accel/ktls_rx.c | 13 +- .../mellanox/mlx5/core/en_accel/ktls_txrx.c | 14 +- .../net/ethernet/netronome/nfp/crypto/tls.c | 3 + include/linux/skbuff.h | 6 + include/net/tcp.h | 9 + include/net/tls.h | 149 +- include/uapi/linux/snmp.h | 6 + net/sched/sch_generic.c | 9 + net/tls/tls.h | 32 +- net/tls/tls_device.c | 1381 +++++++++++++++-- net/tls/tls_device_fallback.c | 186 ++- net/tls/tls_main.c | 87 +- net/tls/tls_proc.c | 6 + net/tls/tls_sw.c | 191 ++- net/tls/trace.h | 118 ++ .../selftests/drivers/net/hw/.gitignore | 1 + .../testing/selftests/drivers/net/hw/Makefile | 2 + tools/testing/selftests/drivers/net/hw/config | 2 + .../selftests/drivers/net/hw/tls_hw_offload.c | 1132 ++++++++++++++ .../drivers/net/hw/tls_hw_offload.py | 446 ++++++ 25 files changed, 3735 insertions(+), 263 deletions(-) create mode 100644 tools/testing/selftests/drivers/net/hw/tls_hw_offload.c create mode 100755 tools/testing/selftests/drivers/net/hw/tls_hw_offload.py -- 2.50.1