AF_KTLS - TLS/DTLS Linux kernel module

624 views · Published 11 March 2018 · 23:18 · Indexed 20 September 2026

Channel: FOSDEM · 2018 · Science & Technology

Watch on YouTube

by Fridolín Pokorný

At: FOSDEM 2017

A Linux kernel module that introduces an AF _KTLS socket. AF_ KTLS socket canbe used to transmit data over TLS 1.2 using TCP or DTLS 1.2 using UDP.Currently, there is supported only AES GCM cipher.

AF _KTLS kernel module introduces an AF_ KTLS socket. AF_KTLS socket can beused to transmit data over TLS 1.2 using TCP or DTLS 1.2 using UDP. Currently,there is supported AES GCM cipher.

The socket does data transmission, the handshake, re-handshaking and othercontrol messages have to be served by user space using appropriate librariessuch as OpenSSL or Gnu TLS. AF_KTLS socket is suitable for CPU offloading anduse cases where can be omitted user space (buffered-copy) interaction (usingsendfile(2) or splice(2)).


Room: H.1308 (Rolin)
Scheduled start: 2017-02-05 14:00:00

More from this channel