aboutsummaryrefslogtreecommitdiffstats
path: root/net/tls
AgeCommit message (Expand)AuthorFilesLines
13 daystls: fix lockless read of strp->msg_ready in ->pollSabrina Dubroca2-4/+4
2024-03-26tls: get psock ref after taking rxlock to avoid leakSabrina Dubroca1-1/+1
2024-03-26tls: adjust recv return with async crypto and failed copy to userspaceSabrina Dubroca1-0/+3
2024-03-26tls: recv: process_rx_list shouldn't use an offset with kvecSabrina Dubroca1-1/+1
2024-02-29tls: fix use-after-free on failed backlog decryptionSabrina Dubroca1-7/+17
2024-02-29tls: separate no-async decryption request handling from asyncSabrina Dubroca1-5/+8
2024-02-29tls: fix peeking with sync+async decryptionSabrina Dubroca1-3/+6
2024-02-29tls: decrement decrypt_pending if no async completion will be calledSabrina Dubroca1-0/+2
2024-02-21tls: don't skip over different type records from the rx_listSabrina Dubroca1-8/+14
2024-02-21tls: stop recv() if initial process_rx_list gave us non-DATASabrina Dubroca1-1/+1
2024-02-21tls: break out of main loop when PEEK gets a non-data recordSabrina Dubroca1-0/+2
2024-02-18mptcp: fix lockless access in subflow ULP diagPaolo Abeni1-1/+1
2024-02-10net: tls: fix returned read length with async decryptJakub Kicinski1-1/+0
2024-02-10net: tls: fix use-after-free with partial reads and async decryptSabrina Dubroca1-2/+3
2024-02-10net: tls: handle backlogging of crypto requestsJakub Kicinski1-0/+22
2024-02-10tls: fix race between tx work scheduling and socket closeJakub Kicinski1-10/+6
2024-02-10tls: fix race between async notify and socket closeJakub Kicinski1-33/+10
2024-02-10net: tls: factor out tls_*crypt_async_wait()Jakub Kicinski1-51/+45
2024-01-14net: tls, fix WARNIING in __sk_msg_freeJohn Fastabend1-1/+5
2023-12-07net: tls, update curr on splice as wellJohn Fastabend1-0/+2
2023-11-23tls: fix NULL deref on tls_sw_splice_eof() with empty recordJann Horn1-0/+3
2023-10-23tls: don't reset prot->aad_size and prot->tail_size for TLS_HWSabrina Dubroca3-11/+4
2023-10-19Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski2-9/+20
2023-10-13tcp: allow again tcp_disconnect() when threads are waitingPaolo Abeni2-9/+20
2023-10-13tls: use fixed size for tls_offload_context_{tx,rx}.driver_stateSabrina Dubroca1-2/+2
2023-10-13tls: validate crypto_info in a separate helperSabrina Dubroca1-24/+27
2023-10-13tls: remove tls_context argument from tls_set_device_offloadSabrina Dubroca3-10/+10
2023-10-13tls: remove tls_context argument from tls_set_sw_offloadSabrina Dubroca4-14/+12
2023-10-13tls: add a helper to allocate/initialize offload_ctx_txSabrina Dubroca1-14/+25
2023-10-13tls: also use init_prot_info in tls_set_device_offloadSabrina Dubroca3-14/+18
2023-10-13tls: move tls_prot_info initialization out of tls_set_sw_offloadSabrina Dubroca1-28/+34
2023-10-13tls: extract context alloc/initialization out of tls_set_sw_offloadSabrina Dubroca1-35/+51
2023-10-13tls: store iv directly within cipher_contextSabrina Dubroca3-23/+5
2023-10-13tls: rename MAX_IV_SIZE to TLS_MAX_IV_SIZESabrina Dubroca4-6/+6
2023-10-13tls: store rec_seq directly within cipher_contextSabrina Dubroca3-21/+4
2023-10-13tls: drop unnecessary cipher_type checks in tls offloadSabrina Dubroca2-21/+4
2023-10-13tls: get salt using crypto_info_salt in tls_enc_skbSabrina Dubroca1-3/+1
2023-09-18tls: Use size_add() in call to struct_size()Gustavo A. R. Silva1-1/+1
2023-09-12net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()Liu Jian1-2/+2
2023-08-27tls: get cipher_name from cipher_desc in tls_set_sw_offloadSabrina Dubroca1-25/+4
2023-08-27tls: use tls_cipher_desc to access per-cipher crypto_info in tls_set_sw_offloadSabrina Dubroca1-76/+13
2023-08-27tls: use tls_cipher_desc to get per-cipher sizes in tls_set_sw_offloadSabrina Dubroca1-63/+16
2023-08-27tls: use tls_cipher_desc to simplify do_tls_getsockopt_confSabrina Dubroca1-163/+11
2023-08-27tls: get crypto_info size from tls_cipher_desc in do_tls_setsockopt_confSabrina Dubroca1-31/+8
2023-08-27tls: expand use of tls_cipher_desc in tls_sw_fallback_initSabrina Dubroca1-14/+6
2023-08-27tls: allocate the fallback aead after checking that the cipher is validSabrina Dubroca1-10/+10
2023-08-27tls: expand use of tls_cipher_desc in tls_set_device_offloadSabrina Dubroca1-18/+4
2023-08-27tls: validate cipher descriptions at compile timeSabrina Dubroca1-0/+18
2023-08-27tls: extend tls_cipher_desc to fully describe the ciphersSabrina Dubroca2-9/+64
2023-08-27tls: rename tls_cipher_size_desc to tls_cipher_descSabrina Dubroca4-52/+52
2023-08-27tls: reduce size of tls_cipher_size_descSabrina Dubroca4-9/+20
2023-08-27tls: add TLS_CIPHER_ARIA_GCM_* to tls_cipher_size_descSabrina Dubroca1-0/+2
2023-08-27tls: move tls_cipher_size_desc to net/tls/tls.hSabrina Dubroca1-0/+10
2023-08-10Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski2-34/+33
2023-08-10net: tls: set MSG_SPLICE_PAGES consistentlyJakub Kicinski1-3/+0
2023-08-08net/tls: avoid TCP window full during ->read_sock()Hannes Reinecke1-8/+5
2023-08-07net/tls: Remove unused function declarationsYue Haibing1-4/+0
2023-08-06net: tls: avoid discarding data on record closeJakub Kicinski1-31/+33
2023-07-28Merge branch 'in-kernel-support-for-the-tls-alert-protocol'Jakub Kicinski1-0/+1
2023-07-28net/tls: Move TLS protocol elements to a separate headerChuck Lever1-0/+1
2023-07-27net/tls: implement ->read_sock()Hannes Reinecke3-0/+103
2023-07-27net/tls: split tls_rx_reader_lockHannes Reinecke1-16/+22
2023-07-27net/tls: Use tcp_read_sock() instead of ops->read_sock()Hannes Reinecke1-2/+1
2023-07-27net/tls: handle MSG_EOR for tls_device TX flowHannes Reinecke1-1/+5
2023-07-27net/tls: handle MSG_EOR for tls_sw TX flowHannes Reinecke1-1/+4
2023-06-24net: Kill MSG_SENDPAGE_NOTLASTDavid Howells3-4/+3
2023-06-24sock: Remove ->sendpage*() in favour of sendmsg(MSG_SPLICE_PAGES)David Howells4-65/+0
2023-06-24tcp_bpf, smc, tls, espintcp, siw: Reduce MSG_SENDPAGE_NOTLAST usageDavid Howells1-2/+2
2023-06-22net/tls: fix comment typoYueh-Shun Li1-1/+1
2023-06-15net: tls: make the offload check helper take skb not socketJakub Kicinski1-2/+2
2023-06-08tls/device: Convert tls_device_sendpage() to use MSG_SPLICE_PAGESDavid Howells1-69/+23
2023-06-08tls/device: Support MSG_SPLICE_PAGESDavid Howells1-0/+26
2023-06-08tls/sw: Convert tls_sw_sendpage() to use MSG_SPLICE_PAGESDavid Howells1-138/+35
2023-06-08tls/sw: Support MSG_SPLICE_PAGESDavid Howells1-0/+41
2023-06-08tls/device: Use splice_eof() to flushDavid Howells3-0/+26
2023-06-08tls/sw: Use splice_eof() to flushDavid Howells3-0/+77
2023-06-08tls: Allow MSG_SPLICE_PAGES but treat it as normal sendmsgDavid Howells2-2/+3
2023-06-02tls: suppress wakeups unless we have a full recordJakub Kicinski1-0/+35
2023-06-01Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski2-2/+6
2023-05-26tls: improve lockless access safety of tls_err_abort()Jakub Kicinski2-2/+6
2023-05-25Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski4-50/+166
2023-05-23tls: Inline do_tcp_sendpages()David Howells1-9/+15
2023-05-19tls: rx: strp: don't use GFP_KERNEL in softirq contextJakub Kicinski1-0/+4
2023-05-19tls: rx: strp: preserve decryption status of skbs when neededJakub Kicinski3-31/+113
2023-05-19tls: rx: strp: factor out copying skb dataJakub Kicinski1-10/+23
2023-05-19tls: rx: strp: fix determining record length in copy modeJakub Kicinski1-6/+15
2023-05-19tls: rx: strp: force mixed decrypted records into copy modeJakub Kicinski1-5/+11
2023-05-19tls: rx: strp: set the skb->len of detached / CoW'ed skbsJakub Kicinski1-0/+2
2023-05-19tls: rx: device: fix checking decryption statusJakub Kicinski1-1/+1
2023-05-13net: introduce and use skb_frag_fill_page_desc()Yunsheng Lin1-6/+4
2023-05-10net: deal with most data-races in sk_wait_event()Eric Dumazet1-1/+2
2023-03-06net: tls: fix device-offloaded sendpage straddling recordsJakub Kicinski1-0/+2
2023-03-01net: tls: avoid hanging tasks on the tx_lockJakub Kicinski1-7/+19
2023-03-01net: tls: fix possible race condition between do_tls_getsockopt_conf() and do...Hangyu Hua1-18/+5
2023-02-28tls: rx: fix return value for async cryptoJakub Kicinski1-1/+1
2023-02-21Merge tag 'net-next-6.3' of git://git.kernel.org/pub/scm/linux/kernel/git/net...Linus Torvalds1-0/+3
2023-02-21Merge tag 'v6.3-p1' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/...Linus Torvalds2-13/+31
2023-02-13tls: Pass rec instead of aead_req into tls_encrypt_doneHerbert Xu1-4/+2
2023-02-13tls: Remove completion function scaffoldingHerbert Xu1-4/+4
2023-02-13tls: Only use data field in crypto completion functionHerbert Xu2-11/+31
2023-02-02Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski1-1/+1
2023-01-30net/tls: tls_is_tx_ready() checked list_entryPietro Borrello1-1/+1
2023-01-23net/sock: Introduce trace_sk_data_ready()Peilin Ye1-0/+3
2022-12-13Merge tag 'net-next-6.2' of git://git.kernel.org/pub/scm/linux/kernel/git/net...Linus Torvalds1-2/+4
2022-12-01bpf, sockmap: Fix missing BPF_F_INGRESS flag when using apply_bytesPengcheng Yang1-2/+4
2022-11-25use less confusing names for iov_iter direction initializersAl Viro1-2/+2
2022-11-11net/tls: Fix memory leak in tls_enc_skb() and tls_sw_fallback_init()Yu Liao1-2/+3
2022-10-14tls: strp: make sure the TCP skbs do not have overlapping dataJakub Kicinski1-4/+28
2022-09-27net: tls: Add ARIA-GCM algorithmTaehee Yoo2-0/+96
2022-09-22net/tls: Support 256 bit keys with TX device offloadGal Pressman2-0/+13
2022-09-22net/tls: Use cipher sizes structsGal Pressman2-51/+76
2022-09-22net/tls: Describe ciphers sizes by const structsTariq Toukan1-0/+17
2022-08-17tls: rx: react to strparser initialization errorsJakub Kicinski1-1/+3
2022-08-11Merge tag 'net-6.0-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/netd...Linus Torvalds3-12/+39
2022-08-10net/tls: Use RCU API to access tls_ctx->netdevMaxim Mikityanskiy2-10/+31
2022-08-10tls: rx: device: don't try to copy too much on detachJakub Kicinski1-1/+1
2022-08-10tls: rx: device: bound the frag walkJakub Kicinski1-1/+7
2022-08-08iov_iter: advancing variants of iov_iter_get_pages{,_alloc}()Al Viro1-3/+1
2022-08-01net/tls: Remove redundant workqueue flush before destroyTariq Toukan1-1/+0
2022-07-28net/tls: Multi-threaded calls to TX tls_dev_delTariq Toukan1-32/+31
2022-07-28net/tls: Perform immediate device ctx cleanup when possibleTariq Toukan1-8/+18
2022-07-28tls: rx: Fix unsigned comparison with less than zeroYang Li1-1/+2
2022-07-28tls: rx: fix the false positive warningJakub Kicinski1-1/+1
2022-07-28tls: strp: rename and multithread the workqueueJakub Kicinski1-1/+1
2022-07-28tls: rx: don't consider sock_rcvtimeo() cumulativeJakub Kicinski1-18/+19
2022-07-28Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski1-1/+6
2022-07-26tls: rx: do not use the standard strparserJakub Kicinski4-67/+541
2022-07-26tls: rx: device: add input CoW helperJakub Kicinski3-10/+21
2022-07-26tls: rx: device: keep the zero copy status with offloadJakub Kicinski3-5/+35
2022-07-26tls: rx: don't free the output in case of zero-copyJakub Kicinski1-13/+13
2022-07-26tls: rx: factor SW handling out of tls_rx_one_record()Jakub Kicinski1-36/+57
2022-07-26tls: rx: wrap recv_pkt accesses in helpersJakub Kicinski2-5/+11
2022-07-24net/tls: Remove the context from the list in tls_device_downMaxim Mikityanskiy1-1/+6
2022-07-21tls: rx: release the sock lock on locking timeoutJakub Kicinski1-4/+13
2022-07-21Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski1-3/+5
2022-07-18net/tls: Fix race in TLS device down flowTariq Toukan1-3/+5
2022-07-18tls: rx: decrypt into a fresh skbJakub Kicinski2-37/+72
2022-07-18tls: rx: async: don't put async zc on the listJakub Kicinski1-21/+19
2022-07-18tls: rx: async: hold onto the input skbJakub Kicinski4-10/+38
2022-07-18tls: rx: async: adjust record geometry immediatelyJakub Kicinski1-39/+10
2022-07-18tls: rx: return the decrypted skb via dargJakub Kicinski1-10/+39
2022-07-18tls: rx: read the input skb from ctx->recv_pktJakub Kicinski3-34/+42
2022-07-18tls: rx: factor out device darg updateJakub Kicinski1-19/+41
2022-07-18tls: rx: remove the message decrypted trackingJakub Kicinski1-10/+0
2022-07-18tls: rx: don't keep decrypted skbs on ctx->recv_pktJakub Kicinski1-21/+28
2022-07-18tls: rx: don't try to keep the skbs always on the listJakub Kicinski1-11/+12
2022-07-18tls: rx: allow only one reader at a timeJakub Kicinski1-7/+54
2022-07-14Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski3-5/+10
2022-07-14net/tls: Check for errors in tls_device_initTariq Toukan2-3/+8
2022-07-11tls: rx: fix the NoPad getsockoptJakub Kicinski1-5/+4
2022-07-11tls: rx: add counter for NoPad violationsJakub Kicinski2-0/+3
2022-07-11tls: fix spelling of MIBJakub Kicinski2-2/+2
2022-07-08tls: rx: make tls_wait_data() return an recvmsg retcodeJakub Kicinski1-27/+26
2022-07-08tls: create an internal headerJakub Kicinski7-7/+337
2022-07-08tls: rx: coalesce exit paths in tls_decrypt_sg()Jakub Kicinski1-9/+5
2022-07-08tls: rx: wrap decrypt params in a structJakub Kicinski1-30/+30
2022-07-08tls: rx: always allocate max possible aad size for decryptJakub Kicinski1-9/+10
2022-07-07Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski1-4/+4
2022-07-06Revert "tls: rx: move counting TlsDecryptErrors for sync"Gal Pressman1-4/+4
2022-07-06tls: rx: periodically flush socket backlogJakub Kicinski1-0/+23
2022-07-06tls: rx: add sockopt for enabling optimistic decrypt with TLS 1.3Jakub Kicinski3-7/+90
2022-07-06tls: rx: support optimistic decrypt to user buffer with TLS 1.3Jakub Kicinski1-9/+29
2022-07-06tls: rx: don't include tail size in data_lenJakub Kicinski1-4/+4
2022-07-02net: add skb_[inner_]tcp_all_headers helpersEric Dumazet1-3/+3
2022-06-23sock: redo the psock vs ULP protection checkJakub Kicinski1-0/+2
2022-06-23Revert "net/tls: fix tls_sk_proto_close executed repeatedly"Jakub Kicinski1-3/+0
2022-06-20net/tls: fix tls_sk_proto_close executed repeatedlyZiyang Xuan1-0/+3
2022-06-09tls: Rename TLS_INFO_ZC_SENDFILE to TLS_INFO_ZC_TXMaxim Mikityanskiy1-4/+4
2022-05-19net: tls: fix messing up lists when bpf enabledJakub Kicinski1-1/+3
2022-05-19tls: Add opt-in zerocopy mode of sendfile()Boris Pismenny2-13/+95
2022-05-12Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski1-0/+3
2022-05-12tls: Fix context leak on tls_device_downMaxim Mikityanskiy1-0/+3
2022-04-28Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski1-5/+7
2022-04-27tls: Skip tls_append_frag on zero copy sizeMaxim Mikityanskiy1-5/+7
2022-04-26net: tls: fix async vs NIC crypto offloadJakub Kicinski1-0/+2
2022-04-26net: generalize skb freeing deferral to per-cpu listsEric Dumazet1-2/+0
2022-04-13tls: rx: only copy IV from the packet for TLS 1.2Jakub Kicinski1-10/+10
2022-04-13tls: rx: use MAX_IV_SIZE for allocationsJakub Kicinski1-1/+1
2022-04-13tls: rx: use async as an in-out argumentJakub Kicinski1-15/+16
2022-04-13tls: rx: return the already-copied data on crypto errorJakub Kicinski1-6/+10
2022-04-13tls: rx: treat process_rx_list() errors as transientJakub Kicinski1-12/+8
2022-04-13tls: rx: assume crypto always calls our callbackJakub Kicinski1-3/+0
2022-04-13tls: rx: don't handle TLS 1.3 in the async crypto callbackJakub Kicinski1-10/+5
2022-04-13tls: rx: move counting TlsDecryptErrors for syncJakub Kicinski1-2/+2
2022-04-13tls: rx: reuse leave_on_list label for psockJakub Kicinski1-8/+4
2022-04-13tls: rx: consistently use unlocked accessors for rx_listJakub Kicinski1-5/+5
2022-04-12net: remove noblock parameter from recvmsg() entitiesOliver Hartkopp1-3/+0
2022-04-10tls: rx: jump out for cases which need to leave skb on listJakub Kicinski1-21/+22
2022-04-10tls: rx: clear ctx->recv_pkt earlierJakub Kicinski1-9/+7
2022-04-10tls: rx: inline consuming the skb at the end of the loopJakub Kicinski1-24/+5
2022-04-10tls: rx: pull most of zc check out of the loopJakub Kicinski1-4/+5
2022-04-10tls: rx: don't track the async countJakub Kicinski1-7/+5
2022-04-10tls: rx: don't handle async in tls_sw_advance_skb()Jakub Kicinski1-13/+9
2022-04-10tls: rx: factor out writing ContentType to cmsgJakub Kicinski1-55/+36
2022-04-10tls: rx: simplify async waitJakub Kicinski1-12/+2
2022-04-10tls: rx: wrap decryption arguments in a structureJakub Kicinski1-22/+27
2022-04-10tls: rx: don't report text length from the bowels of decryptJakub Kicinski1-19/+14
2022-04-10tls: rx: drop unnecessary arguments from tls_setup_from_iter()Jakub Kicinski1-8/+6
2022-04-08tls: hw: rx: use return value of tls_device_decrypted() to carry statusJakub Kicinski2-8/+4
2022-04-08tls: rx: refactor decrypt_skb_update()Jakub Kicinski1-33/+33