summaryrefslogtreecommitdiff
path: root/net/Kconfig
diff options
context:
space:
mode:
authorDavid S. Miller <davem@davemloft.net>2019-02-01 15:00:55 -0800
committerDavid S. Miller <davem@davemloft.net>2019-02-01 15:00:55 -0800
commit665cf634e6d56b6864ec0e6d6c15fd5e6b8ad7e2 (patch)
tree3ab538712f5fafd8bd71afa89e459907140aa383 /net/Kconfig
parentd3a5fd3c987c5e341bf78b79ef4d81080081b7d2 (diff)
parent8debd67e79daf655820557c51222004d0c43af43 (diff)
Merge branch 'tls-1.3-support'
Dave Watson says: ==================== net: tls: TLS 1.3 support This patchset adds 256bit keys and TLS1.3 support to the kernel TLS socket. TLS 1.3 is requested by passing TLS_1_3_VERSION in the setsockopt call, which changes the framing as required for TLS1.3. 256bit keys are requested by passing TLS_CIPHER_AES_GCM_256 in the sockopt. This is a fairly straightforward passthrough to the crypto framework. 256bit keys work with both TLS 1.2 and TLS 1.3 TLS 1.3 requires a different AAD layout, necessitating some minor refactoring. It also moves the message type byte to the encrypted portion of the message, instead of the cleartext header as it was in TLS1.2. This requires moving the control message handling to after decryption, but is otherwise similar. V1 -> V2 The first two patches were dropped, and sent separately, one as a bugfix to the net tree. ==================== Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/Kconfig')
0 files changed, 0 insertions, 0 deletions