xref: /linux/net/tls/Kconfig (revision da89f2e3121531804f45abd33db05b432e42606c)
1# SPDX-License-Identifier: GPL-2.0-only
2#
3# TLS configuration
4#
5config TLS
6	tristate "Transport Layer Security support"
7	depends on INET
8	select CRYPTO
9	select CRYPTO_AES
10	select CRYPTO_GCM
11	select NET_SOCK_MSG
12	default n
13	help
14	Enable kernel support for TLS protocol. This allows symmetric
15	encryption handling of the TLS protocol to be done in-kernel.
16
17	If unsure, say N.
18
19config TLS_DEVICE
20	bool "Transport Layer Security HW offload"
21	depends on TLS
22	select SKB_DECRYPTED
23	select SOCK_VALIDATE_XMIT
24	select SOCK_RX_QUEUE_MAPPING
25	default n
26	help
27	Enable kernel support for HW offload of the TLS protocol.
28
29	If unsure, say N.
30
31config TLS_TOE
32	bool "Transport Layer Security TCP stack bypass"
33	depends on TLS
34	default n
35	help
36	Enable kernel support for legacy HW offload of the TLS protocol,
37	which is incompatible with the Linux networking stack semantics.
38
39	If unsure, say N.
40