| Dave Watson | 3c4d755 | 2017-06-14 11:37:39 -0700 | [diff] [blame] | 1 | # |
| 2 | # TLS configuration |
| 3 | # |
| 4 | config TLS |
| 5 | tristate "Transport Layer Security support" |
| David S. Miller | 54144b4 | 2017-06-16 11:28:49 -0400 | [diff] [blame] | 6 | depends on INET |
| Dave Watson | d807ec6 | 2017-06-17 08:25:13 -0700 | [diff] [blame] | 7 | select CRYPTO |
| 8 | select CRYPTO_AES |
| 9 | select CRYPTO_GCM |
| Dave Watson | c46234e | 2018-03-22 10:10:35 -0700 | [diff] [blame] | 10 | select STREAM_PARSER |
| Daniel Borkmann | d829e9c | 2018-10-13 02:45:59 +0200 | [diff] [blame] | 11 | select NET_SOCK_MSG |
| Dave Watson | d807ec6 | 2017-06-17 08:25:13 -0700 | [diff] [blame] | 12 | default n |
| Dave Watson | 3c4d755 | 2017-06-14 11:37:39 -0700 | [diff] [blame] | 13 | ---help--- |
| 14 | Enable kernel support for TLS protocol. This allows symmetric |
| 15 | encryption handling of the TLS protocol to be done in-kernel. |
| 16 | |
| Dave Watson | d807ec6 | 2017-06-17 08:25:13 -0700 | [diff] [blame] | 17 | If unsure, say N. |
| Ilya Lesokhin | e8f6979 | 2018-04-30 10:16:16 +0300 | [diff] [blame] | 18 | |
| 19 | config TLS_DEVICE |
| 20 | bool "Transport Layer Security HW offload" |
| 21 | depends on TLS |
| 22 | select SOCK_VALIDATE_XMIT |
| 23 | default n |
| 24 | help |
| 25 | Enable kernel support for HW offload of the TLS protocol. |
| 26 | |
| 27 | If unsure, say N. |