18c2ecf20Sopenharmony_ci# SPDX-License-Identifier: GPL-2.0-only 28c2ecf20Sopenharmony_ci# 38c2ecf20Sopenharmony_ci# TLS configuration 48c2ecf20Sopenharmony_ci# 58c2ecf20Sopenharmony_ciconfig TLS 68c2ecf20Sopenharmony_ci tristate "Transport Layer Security support" 78c2ecf20Sopenharmony_ci depends on INET 88c2ecf20Sopenharmony_ci select CRYPTO 98c2ecf20Sopenharmony_ci select CRYPTO_AES 108c2ecf20Sopenharmony_ci select CRYPTO_GCM 118c2ecf20Sopenharmony_ci select STREAM_PARSER 128c2ecf20Sopenharmony_ci select NET_SOCK_MSG 138c2ecf20Sopenharmony_ci default n 148c2ecf20Sopenharmony_ci help 158c2ecf20Sopenharmony_ci Enable kernel support for TLS protocol. This allows symmetric 168c2ecf20Sopenharmony_ci encryption handling of the TLS protocol to be done in-kernel. 178c2ecf20Sopenharmony_ci 188c2ecf20Sopenharmony_ci If unsure, say N. 198c2ecf20Sopenharmony_ci 208c2ecf20Sopenharmony_ciconfig TLS_DEVICE 218c2ecf20Sopenharmony_ci bool "Transport Layer Security HW offload" 228c2ecf20Sopenharmony_ci depends on TLS 238c2ecf20Sopenharmony_ci select SOCK_VALIDATE_XMIT 248c2ecf20Sopenharmony_ci default n 258c2ecf20Sopenharmony_ci help 268c2ecf20Sopenharmony_ci Enable kernel support for HW offload of the TLS protocol. 278c2ecf20Sopenharmony_ci 288c2ecf20Sopenharmony_ci If unsure, say N. 298c2ecf20Sopenharmony_ci 308c2ecf20Sopenharmony_ciconfig TLS_TOE 318c2ecf20Sopenharmony_ci bool "Transport Layer Security TCP stack bypass" 328c2ecf20Sopenharmony_ci depends on TLS 338c2ecf20Sopenharmony_ci default n 348c2ecf20Sopenharmony_ci help 358c2ecf20Sopenharmony_ci Enable kernel support for legacy HW offload of the TLS protocol, 368c2ecf20Sopenharmony_ci which is incompatible with the Linux networking stack semantics. 378c2ecf20Sopenharmony_ci 388c2ecf20Sopenharmony_ci If unsure, say N. 39