{sphinx.addnodesdocument)}( rawsourcechildren]( translations LanguagesNode)}(hhh](h pending_xref)}(hhh]docutils.nodesTextChinese (Simplified)}parenthsba attributes}(ids]classes]names]dupnames]backrefs] refdomainstdreftypedoc reftarget"/translations/zh_CN/networking/pspmodnameN classnameN refexplicitutagnamehhh ubh)}(hhh]hChinese (Traditional)}hh2sbah}(h]h ]h"]h$]h&] refdomainh)reftypeh+ reftarget"/translations/zh_TW/networking/pspmodnameN classnameN refexplicituh1hhh ubh)}(hhh]hItalian}hhFsbah}(h]h ]h"]h$]h&] refdomainh)reftypeh+ reftarget"/translations/it_IT/networking/pspmodnameN classnameN refexplicituh1hhh ubh)}(hhh]hJapanese}hhZsbah}(h]h ]h"]h$]h&] refdomainh)reftypeh+ reftarget"/translations/ja_JP/networking/pspmodnameN classnameN refexplicituh1hhh ubh)}(hhh]hKorean}hhnsbah}(h]h ]h"]h$]h&] refdomainh)reftypeh+ reftarget"/translations/ko_KR/networking/pspmodnameN classnameN refexplicituh1hhh ubh)}(hhh]hSpanish}hhsbah}(h]h ]h"]h$]h&] refdomainh)reftypeh+ reftarget"/translations/sp_SP/networking/pspmodnameN classnameN refexplicituh1hhh ubeh}(h]h ]h"]h$]h&]current_languageEnglishuh1h hh _documenthsourceNlineNubhcomment)}(h%SPDX-License-Identifier: GPL-2.0-onlyh]h%SPDX-License-Identifier: GPL-2.0-only}hhsbah}(h]h ]h"]h$]h&] xml:spacepreserveuh1hhhhhhdecrypted bit to 1.h](hDrivers must use }(hjAhhhNhNubj:)}(h``psp_skb_get_assoc_rcu()``h]hpsp_skb_get_assoc_rcu()}(hjIhhhNhNubah}(h]h ]h"]h$]h&]uh1j9hjAubhh to check if PSP Tx offload was requested for given skb. On Rx drivers should allocate and populate the }(hjAhhhNhNubj:)}(h``SKB_EXT_PSP``h]h SKB_EXT_PSP}(hj[hhhNhNubah}(h]h ]h"]h$]h&]uh1j9hjAubh4 skb extension, and set the skb->decrypted bit to 1.}(hjAhhhNhNubeh}(h]h ]h"]h$]h&]uh1hhhhKhjhhubeh}(h] driver-notesah ]h"] driver notesah$]h&]uh1hhjhhhhhKubh)}(hhh](h)}(hKernel implementation notesh]hKernel implementation notes}(hj~hhhNhNubah}(h]h ]h"]h$]h&]uh1hhj{hhhhhKubh)}(hPSP implementation follows the TLS offload more closely than the IPsec offload, with per-socket state, and the use of skb->decrypted to prevent clear text leaks.h]hPSP implementation follows the TLS offload more closely than the IPsec offload, with per-socket state, and the use of skb->decrypted to prevent clear text leaks.}(hjhhhNhNubah}(h]h ]h"]h$]h&]uh1hhhhKhj{hhubh)}(hPSP device is separate from netdev, to make it possible to "delegate" PSP offload capabilities to software devices (e.g. ``veth``).h](h}PSP device is separate from netdev, to make it possible to “delegate” PSP offload capabilities to software devices (e.g. }(hjhhhNhNubj:)}(h``veth``h]hveth}(hjhhhNhNubah}(h]h ]h"]h$]h&]uh1j9hjubh).}(hjhhhNhNubeh}(h]h ]h"]h$]h&]uh1hhhhKhj{hhubeh}(h]kernel-implementation-notesah ]h"]kernel implementation notesah$]h&]uh1hhjhhhhhKubeh}(h]kernel-implementationah ]h"]kernel implementationah$]h&]uh1hhhhhhhhKubeh}(h]psp-security-protocolah ]h"]psp security protocolah$]h&]uh1hhhhhhhhKubeh}(h]h ]h"]h$]h&]sourcehuh1hcurrent_sourceN current_lineNsettingsdocutils.frontendValues)}(hN generatorN datestampN source_linkN source_urlN toc_backlinksjfootnote_backlinksK sectnum_xformKstrip_commentsNstrip_elements_with_classesN strip_classesN report_levelK halt_levelKexit_status_levelKdebugNwarning_streamN tracebackinput_encoding utf-8-siginput_encoding_error_handlerstrictoutput_encodingutf-8output_encoding_error_handlerjerror_encodingutf-8error_encoding_error_handlerbackslashreplace language_codeenrecord_dependenciesNconfigN id_prefixhauto_id_prefixid dump_settingsNdump_internalsNdump_transformsNdump_pseudo_xmlNexpose_internalsNstrict_visitorN_disable_configN_sourceh _destinationN _config_files]7/var/lib/git/docbuild/linux/Documentation/docutils.confafile_insertion_enabled raw_enabledKline_length_limitM'pep_referencesN pep_base_urlhttps://peps.python.org/pep_file_url_templatepep-%04drfc_referencesN rfc_base_url&https://datatracker.ietf.org/doc/html/ tab_widthKtrim_footnote_reference_spacesyntax_highlightlong smart_quotessmartquotes_locales]character_level_inline_markupdoctitle_xform docinfo_xformKsectsubtitle_xform image_loadinglinkembed_stylesheetcloak_email_addressessection_self_linkenvNubreporterNindirect_targets]substitution_defs}substitution_names}refnames}refids}nameids}(jjjjjfjcjjjjjjjWjTj~j{jjjxjujju nametypes}(jjjfjjjjWj~jjxjuh}(jhjhjcj jjijjjjjTjj{jZjjjujjj{u footnote_refs} citation_refs} autofootnotes]autofootnote_refs]symbol_footnotes]symbol_footnote_refs] footnotes] citations]autofootnote_startKsymbol_footnote_startK id_counter collectionsCounter}Rparse_messages]transform_messages] transformerN include_log] decorationNhhub.