aboutsummaryrefslogtreecommitdiffstats
path: root/net/tls/tls_sw.c
AgeCommit message (Expand)AuthorFilesLines
2025-10-27net/tls: support setting the maximum payload sizeWilfred Mallawa1-1/+1
2025-10-15tls: don't rely on tx_work during send()Sabrina Dubroca1-0/+13
2025-10-15tls: wait for pending async decryptions if tls_strp_msg_hold failsSabrina Dubroca1-2/+4
2025-10-15tls: wait for async encrypt in case of error during latter iterations of sendmsgSabrina Dubroca1-3/+4
2025-10-15tls: trim encrypted message to match the plaintext on short spliceSabrina Dubroca1-1/+4
2025-09-18tls: make sure to abort the stream if headers are bogusJakub Kicinski1-2/+1
2025-08-21tls: fix handling of zero-length records on the rx_listJakub Kicinski1-1/+6
2025-08-12tls: handle data disappearing from under the TLS ULPJakub Kicinski1-1/+2
2025-06-11bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktlsJiayuan Chen1-0/+13
2025-05-09ktls, sockmap: Fix missing uncharge operationJiayuan Chen1-0/+7
2025-04-09bpf: fix ktls panic with sockmapJiayuan Chen1-2/+6
2025-01-09Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski1-1/+1
2025-01-07tls: Fix tls_sw_sendmsg error handlingBenjamin Coddington1-1/+1
2024-12-16tls: add counters for rekeySabrina Dubroca1-2/+4
2024-12-16tls: implement rekey for TLS1.3Sabrina Dubroca1-34/+71
2024-12-16tls: block decryption when a rekey is pendingSabrina Dubroca1-1/+34
2024-09-06net: tls: wait for async completion on last messageSascha Hauer1-1/+1
2024-04-11tls: remove redundant assignment to variable decryptedColin Ian King1-1/+0
2024-03-26tls: get psock ref after taking rxlock to avoid leakSabrina Dubroca1-1/+1
2024-03-26tls: adjust recv return with async crypto and failed copy to userspaceSabrina Dubroca1-0/+3
2024-03-26tls: recv: process_rx_list shouldn't use an offset with kvecSabrina Dubroca1-1/+1
2024-02-29tls: fix use-after-free on failed backlog decryptionSabrina Dubroca1-7/+17
2024-02-29tls: separate no-async decryption request handling from asyncSabrina Dubroca1-5/+8
2024-02-29tls: fix peeking with sync+async decryptionSabrina Dubroca1-3/+6
2024-02-29tls: decrement decrypt_pending if no async completion will be calledSabrina Dubroca1-0/+2
2024-02-21tls: don't skip over different type records from the rx_listSabrina Dubroca1-8/+14
2024-02-21tls: stop recv() if initial process_rx_list gave us non-DATASabrina Dubroca1-1/+1
2024-02-21tls: break out of main loop when PEEK gets a non-data recordSabrina Dubroca1-0/+2
2024-02-10net: tls: fix returned read length with async decryptJakub Kicinski1-1/+0
2024-02-10net: tls: fix use-after-free with partial reads and async decryptSabrina Dubroca1-2/+3
2024-02-10net: tls: handle backlogging of crypto requestsJakub Kicinski1-0/+22
2024-02-10tls: fix race between tx work scheduling and socket closeJakub Kicinski1-10/+6
2024-02-10tls: fix race between async notify and socket closeJakub Kicinski1-33/+10
2024-02-10net: tls: factor out tls_*crypt_async_wait()Jakub Kicinski1-51/+45
2024-01-14net: tls, fix WARNIING in __sk_msg_freeJohn Fastabend1-1/+5
2023-12-07net: tls, update curr on splice as wellJohn Fastabend1-0/+2
2023-11-23tls: fix NULL deref on tls_sw_splice_eof() with empty recordJann Horn1-0/+3
2023-10-23tls: don't reset prot->aad_size and prot->tail_size for TLS_HWSabrina Dubroca1-8/+2
2023-10-19Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski1-6/+13
2023-10-13tcp: allow again tcp_disconnect() when threads are waitingPaolo Abeni1-6/+13
2023-10-13tls: remove tls_context argument from tls_set_sw_offloadSabrina Dubroca1-10/+8
2023-10-13tls: also use init_prot_info in tls_set_device_offloadSabrina Dubroca1-4/+10
2023-10-13tls: move tls_prot_info initialization out of tls_set_sw_offloadSabrina Dubroca1-28/+34
2023-10-13tls: extract context alloc/initialization out of tls_set_sw_offloadSabrina Dubroca1-35/+51
2023-10-13tls: store iv directly within cipher_contextSabrina Dubroca1-11/+2
2023-10-13tls: rename MAX_IV_SIZE to TLS_MAX_IV_SIZESabrina Dubroca1-3/+3
2023-10-13tls: store rec_seq directly within cipher_contextSabrina Dubroca1-11/+2
2023-09-18tls: Use size_add() in call to struct_size()Gustavo A. R. Silva1-1/+1
2023-09-12net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()Liu Jian1-2/+2
2023-08-27tls: get cipher_name from cipher_desc in tls_set_sw_offloadSabrina Dubroca1-25/+4
2023-08-27tls: use tls_cipher_desc to access per-cipher crypto_info in tls_set_sw_offloadSabrina Dubroca1-76/+13
2023-08-27tls: use tls_cipher_desc to get per-cipher sizes in tls_set_sw_offloadSabrina Dubroca1-63/+16
2023-08-08net/tls: avoid TCP window full during ->read_sock()Hannes Reinecke1-8/+5
2023-07-27net/tls: implement ->read_sock()Hannes Reinecke1-0/+99
2023-07-27net/tls: split tls_rx_reader_lockHannes Reinecke1-16/+22
2023-07-27net/tls: handle MSG_EOR for tls_sw TX flowHannes Reinecke1-1/+4
2023-06-24net: Kill MSG_SENDPAGE_NOTLASTDavid Howells1-1/+1
2023-06-24sock: Remove ->sendpage*() in favour of sendmsg(MSG_SPLICE_PAGES)David Howells1-35/+0
2023-06-08tls/sw: Convert tls_sw_sendpage() to use MSG_SPLICE_PAGESDavid Howells1-138/+35
2023-06-08tls/sw: Support MSG_SPLICE_PAGESDavid Howells1-0/+41
2023-06-08tls/sw: Use splice_eof() to flushDavid Howells1-0/+74
2023-06-08tls: Allow MSG_SPLICE_PAGES but treat it as normal sendmsgDavid Howells1-1/+1
2023-05-26tls: improve lockless access safety of tls_err_abort()Jakub Kicinski1-1/+3
2023-05-19tls: rx: strp: don't use GFP_KERNEL in softirq contextJakub Kicinski1-0/+4
2023-03-01net: tls: avoid hanging tasks on the tx_lockJakub Kicinski1-7/+19
2023-02-28tls: rx: fix return value for async cryptoJakub Kicinski1-1/+1
2023-02-21Merge tag 'net-next-6.3' of git://git.kernel.org/pub/scm/linux/kernel/git/net...Linus Torvalds1-0/+3
2023-02-21Merge tag 'v6.3-p1' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/...Linus Torvalds1-13/+29
2023-02-13tls: Pass rec instead of aead_req into tls_encrypt_doneHerbert Xu1-4/+2
2023-02-13tls: Remove completion function scaffoldingHerbert Xu1-4/+4
2023-02-13tls: Only use data field in crypto completion functionHerbert Xu1-11/+29
2023-02-02Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski1-1/+1
2023-01-30net/tls: tls_is_tx_ready() checked list_entryPietro Borrello1-1/+1
2023-01-23net/sock: Introduce trace_sk_data_ready()Peilin Ye1-0/+3
2022-12-01bpf, sockmap: Fix missing BPF_F_INGRESS flag when using apply_bytesPengcheng Yang1-2/+4
2022-09-27net: tls: Add ARIA-GCM algorithmTaehee Yoo1-0/+34
2022-08-17tls: rx: react to strparser initialization errorsJakub Kicinski1-1/+3
2022-08-08iov_iter: advancing variants of iov_iter_get_pages{,_alloc}()Al Viro1-3/+1
2022-07-28tls: rx: fix the false positive warningJakub Kicinski1-1/+1
2022-07-28tls: rx: don't consider sock_rcvtimeo() cumulativeJakub Kicinski1-18/+19
2022-07-26tls: rx: do not use the standard strparserJakub Kicinski1-45/+35
2022-07-26tls: rx: device: keep the zero copy status with offloadJakub Kicinski1-5/+25
2022-07-26tls: rx: don't free the output in case of zero-copyJakub Kicinski1-13/+13
2022-07-26tls: rx: factor SW handling out of tls_rx_one_record()Jakub Kicinski1-36/+57
2022-07-26tls: rx: wrap recv_pkt accesses in helpersJakub Kicinski1-5/+6
2022-07-21tls: rx: release the sock lock on locking timeoutJakub Kicinski1-4/+13
2022-07-18tls: rx: decrypt into a fresh skbJakub Kicinski1-37/+69
2022-07-18tls: rx: async: don't put async zc on the listJakub Kicinski1-21/+19
2022-07-18tls: rx: async: hold onto the input skbJakub Kicinski1-9/+17
2022-07-18tls: rx: async: adjust record geometry immediatelyJakub Kicinski1-39/+10
2022-07-18tls: rx: return the decrypted skb via dargJakub Kicinski1-10/+39
2022-07-18tls: rx: read the input skb from ctx->recv_pktJakub Kicinski1-19/+18
2022-07-18tls: rx: factor out device darg updateJakub Kicinski1-19/+41
2022-07-18tls: rx: remove the message decrypted trackingJakub Kicinski1-10/+0
2022-07-18tls: rx: don't keep decrypted skbs on ctx->recv_pktJakub Kicinski1-21/+28
2022-07-18tls: rx: don't try to keep the skbs always on the listJakub Kicinski1-11/+12
2022-07-18tls: rx: allow only one reader at a timeJakub Kicinski1-7/+54
2022-07-11tls: rx: add counter for NoPad violationsJakub Kicinski1-0/+2
2022-07-11tls: fix spelling of MIBJakub Kicinski1-1/+1
2022-07-08tls: rx: make tls_wait_data() return an recvmsg retcodeJakub Kicinski1-27/+26
2022-07-08tls: create an internal headerJakub Kicinski1-4/+18
2022-07-08tls: rx: coalesce exit paths in tls_decrypt_sg()Jakub Kicinski1-9/+5
2022-07-08tls: rx: wrap decrypt params in a structJakub Kicinski1-30/+30
2022-07-08tls: rx: always allocate max possible aad size for decryptJakub Kicinski1-9/+10
2022-07-07Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski1-4/+4
2022-07-06Revert "tls: rx: move counting TlsDecryptErrors for sync"Gal Pressman1-4/+4
2022-07-06tls: rx: periodically flush socket backlogJakub Kicinski1-0/+23
2022-07-06tls: rx: add sockopt for enabling optimistic decrypt with TLS 1.3Jakub Kicinski1-7/+14
2022-07-06tls: rx: support optimistic decrypt to user buffer with TLS 1.3Jakub Kicinski1-9/+29
2022-07-06tls: rx: don't include tail size in data_lenJakub Kicinski1-4/+4
2022-05-19net: tls: fix messing up lists when bpf enabledJakub Kicinski1-1/+3
2022-04-26net: tls: fix async vs NIC crypto offloadJakub Kicinski1-0/+2
2022-04-26net: generalize skb freeing deferral to per-cpu listsEric Dumazet1-2/+0
2022-04-13tls: rx: only copy IV from the packet for TLS 1.2Jakub Kicinski1-10/+10
2022-04-13tls: rx: use MAX_IV_SIZE for allocationsJakub Kicinski1-1/+1
2022-04-13tls: rx: use async as an in-out argumentJakub Kicinski1-15/+16
2022-04-13tls: rx: return the already-copied data on crypto errorJakub Kicinski1-6/+10
2022-04-13tls: rx: treat process_rx_list() errors as transientJakub Kicinski1-12/+8
2022-04-13tls: rx: assume crypto always calls our callbackJakub Kicinski1-3/+0
2022-04-13tls: rx: don't handle TLS 1.3 in the async crypto callbackJakub Kicinski1-10/+5
2022-04-13tls: rx: move counting TlsDecryptErrors for syncJakub Kicinski1-2/+2
2022-04-13tls: rx: reuse leave_on_list label for psockJakub Kicinski1-8/+4
2022-04-13tls: rx: consistently use unlocked accessors for rx_listJakub Kicinski1-5/+5
2022-04-12net: remove noblock parameter from recvmsg() entitiesOliver Hartkopp1-3/+0
2022-04-10tls: rx: jump out for cases which need to leave skb on listJakub Kicinski1-21/+22
2022-04-10tls: rx: clear ctx->recv_pkt earlierJakub Kicinski1-9/+7
2022-04-10tls: rx: inline consuming the skb at the end of the loopJakub Kicinski1-24/+5
2022-04-10tls: rx: pull most of zc check out of the loopJakub Kicinski1-4/+5
2022-04-10tls: rx: don't track the async countJakub Kicinski1-7/+5
2022-04-10tls: rx: don't handle async in tls_sw_advance_skb()Jakub Kicinski1-13/+9
2022-04-10tls: rx: factor out writing ContentType to cmsgJakub Kicinski1-55/+36
2022-04-10tls: rx: simplify async waitJakub Kicinski1-12/+2
2022-04-10tls: rx: wrap decryption arguments in a structureJakub Kicinski1-22/+27
2022-04-10tls: rx: don't report text length from the bowels of decryptJakub Kicinski1-19/+14
2022-04-10tls: rx: drop unnecessary arguments from tls_setup_from_iter()Jakub Kicinski1-8/+6
2022-04-08tls: hw: rx: use return value of tls_device_decrypted() to carry statusJakub Kicinski1-3/+2
2022-04-08tls: rx: refactor decrypt_skb_update()Jakub Kicinski1-33/+33
2022-04-08tls: rx: don't issue wake ups when data is decryptedJakub Kicinski1-2/+0
2022-04-08tls: rx: replace 'back' with 'offset'Jakub Kicinski1-5/+4
2022-04-08tls: rx: use a define for tag lengthJakub Kicinski1-2/+2
2022-04-08tls: rx: init decrypted status in tls_read_size()Jakub Kicinski1-4/+1
2022-04-08tls: rx: don't store the decryption status in socket contextJakub Kicinski1-4/+6
2022-04-08tls: rx: don't store the record type in socket contextJakub Kicinski1-21/+17
2022-04-08tls: rx: drop pointless else after gotoJakub Kicinski1-2/+1
2022-04-08tls: rx: jump to a more appropriate labelJakub Kicinski1-3/+4
2022-04-01net/tls: fix slab-out-of-bounds bug in decrypt_internalZiyang Xuan1-1/+1
2022-02-04tls: cap the output scatter list to something reasonableJakub Kicinski1-1/+2
2022-01-17net/tls: Fix another skb memory leak when running kTLS trafficGal Pressman1-0/+1
2022-01-07net/tls: Fix skb memory leak when running kTLS trafficGal Pressman1-0/+1
2021-12-02Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski1-2/+2
2021-11-30net/tls: simplify the tls_set_sw_offload functionTianjia Zhang1-19/+17
2021-11-29net/tls: Fix authentication failure in CCM modeTianjia Zhang1-2/+2
2021-11-25tls: splice_read: fix accessing pre-processed recordsJakub Kicinski1-8/+25
2021-11-25tls: splice_read: fix record type checkJakub Kicinski1-13/+10
2021-10-28Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski1-6/+15
2021-10-28net/tls: Fix flipped sign in async_wait.err assignmentDaniel Jordan1-1/+1
2021-10-28net/tls: Fix flipped sign in tls_err_abort() callsDaniel Jordan1-4/+13
2021-10-26net: Rename ->stream_memory_read to ->sock_is_readableCong Wang1-1/+1
2021-09-28net/tls: support SM4 CCM algorithmTianjia Zhang1-4/+16
2021-09-16net/tls: support SM4 GCM/CCM algorithmTianjia Zhang1-0/+34
2021-06-29Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski1-1/+1
2021-06-21tls: prevent oversized sendfile() hangs by ignoring MSG_MOREJakub Kicinski1-1/+1
2021-05-27Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski1-5/+6
2021-05-14tls splice: check SPLICE_F_NONBLOCK instead of MSG_DONTWAITJim Ma1-5/+6
2021-05-12tls splice: remove inappropriate flags checking for MSG_PEEKJim Ma1-2/+1
2021-04-01skmsg: Extract __tcp_bpf_recvmsg() and tcp_bpf_wait_data()Cong Wang1-2/+2
2020-11-27Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski1-0/+6
2020-11-27net/tls: add CHACHA20-POLY1305 configurationVadim Fedorenko1-0/+16
2020-11-27net/tls: add CHACHA20-POLY1305 specific behaviorVadim Fedorenko1-2/+4
2020-11-27net/tls: make inline helpers protocol-awareVadim Fedorenko1-7/+5
2020-11-20net/tls: missing received data after fast remote closeVadim Fedorenko1-0/+6
2020-11-16net/tls: fix corrupted data in recvmsgVadim Fedorenko1-1/+1
2020-09-24net/tls: race causes kernel panicRohit Maheshwari1-2/+7
2020-08-07net/tls: allow MSG_CMSG_COMPAT in sendmsgRouven Czerwinski1-1/+2
2020-07-16treewide: Remove uninitialized_var() usageKees Cook1-1/+1
2020-06-01bpf: Fix running sk_skb program types with ktlsJohn Fastabend1-2/+18
2020-05-25net/tls: fix race condition causing kernel panicVinay Kumar Yadav1-6/+27
2020-05-21net/tls: free record only on encryption errorVadim Fedorenko1-2/+4
2020-05-21net/tls: fix encryption error checkingVadim Fedorenko1-5/+6
2020-04-27net/tls: Fix sk_psock refcnt leak when in tls_data_ready()Xiyu Yang1-2/+3
2020-04-27net/tls: Fix sk_psock refcnt leak in bpf_exec_tx_verdict()Xiyu Yang1-0/+2
2020-01-16Merge git://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpfDavid S. Miller1-4/+27
2020-01-15bpf: Sockmap/tls, fix pop data with SK_DROP return codeJohn Fastabend1-4/+1
2020-01-15bpf: Sockmap/tls, skmsg can have wrapped skmsg that needs extra chainingJohn Fastabend1-0/+6
2020-01-15bpf: Sockmap/tls, tls_sw can create a plaintext buf > encrypt bufJohn Fastabend1-0/+20
2020-01-10net/tls: fix async operationJakub Kicinski1-2/+2
2020-01-10net/tls: avoid spurious decryption error with HW resyncJakub Kicinski1-3/+3
2019-12-06net/tls: Fix return values to avoid ENOTSUPPValentin Vidic1-4/+4
2019-11-28net/tls: use sg_next() to walk sg entriesJakub Kicinski1-1/+2
2019-11-28net/tls: remove the dead inplace_crypto codeJakub Kicinski1-5/+1
2019-11-28net/tls: free the record on encryption errorJakub Kicinski1-2/+8
2019-11-28net/tls: take into account that bpf_exec_tx_verdict() may free the recordJakub Kicinski1-5/+8
2019-11-22Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski1-0/+11
2019-11-19net/tls: enable sk_msg redirect to tls socket egressWillem de Bruijn1-0/+11
2019-11-09Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netDavid S. Miller1-20/+10
2019-11-06net/tls: add a TX lockJakub Kicinski1-14/+7
2019-11-06net/tls: don't pay attention to sk_write_pending when pushing partial recordsJakub Kicinski1-6/+3
2019-10-07net/tls: store decrypted on a single bitJakub Kicinski1-3/+3
2019-10-07net/tls: store async_capable on a single bitJakub Kicinski1-2/+3
2019-10-07net/tls: pass context to tls_device_decrypted()Jakub Kicinski1-1/+1