Messages in this thread | | | Date | Thu, 31 Jul 2014 12:59:45 -0700 | From | Andy Lutomirski <> | Subject | Re: [PATCH 0/2] Add TLS record layer encryption module |
| |
On 07/29/2014 02:32 AM, Cristian Stoica wrote: > Hi all, > > This set of patches introduces support for TLS 1.0 record layer > encryption/decryption with a corresponding algorithm called > tls10(hmac(<hash>),cbc(<cipher>)). > > Similarly to authenc.c on which it is based, this module mixes the base > algorithms in software to produce an algorithm that does record layer > encryption and decryption for TLS1.0. > Any combination of hw and sw base algorithms is possible, but the purpose > is to take advantage of hardware acceleration for TLS record layer offloading > when hardware acceleration is present.
What is this used for? AF_ALG? I find it hard to believe that the kernel will ever want to use this internally.
--Andy
| |