Skip to content

Commit

Permalink
enabled the support for TLS1.1 - AES128-SHA1 - AES256-SHA1
Browse files Browse the repository at this point in the history
& TLS1.2 offloads for:
    - AES128-SHA256
    - AES256-SHA256

It requires kernel support for algorithms:

    - tls11(hmac(sha1),cbc(aes))
    - tls12(hmac(sha256),cbc(aes))

to be provided either in software or accelerated by hardware
such as NXP B*, P* and T* platforms.

Signed-off-by: Pankaj Gupta <[email protected]>
  • Loading branch information
pangupta committed Jan 22, 2020
1 parent 98b163a commit 7e72f67
Show file tree
Hide file tree
Showing 2 changed files with 12 additions and 0 deletions.
2 changes: 2 additions & 0 deletions crypto/cryptodev.h
Original file line number Diff line number Diff line change
Expand Up @@ -51,6 +51,8 @@ enum cryptodev_crypto_op_t {
CRYPTO_SHA2_384,
CRYPTO_SHA2_512,
CRYPTO_SHA2_224_HMAC,
CRYPTO_TLS11_AES_CBC_HMAC_SHA1,
CRYPTO_TLS12_AES_CBC_HMAC_SHA256,
CRYPTO_ALGORITHM_ALL, /* Keep updated - see below */
};

Expand Down
10 changes: 10 additions & 0 deletions ioctl.c
Original file line number Diff line number Diff line change
Expand Up @@ -159,6 +159,16 @@ crypto_create_session(struct fcrypt *fcr, struct session_op *sop)
stream = 1;
aead = 1;
break;
case CRYPTO_TLS11_AES_CBC_HMAC_SHA1:
alg_name = "tls11(hmac(sha1),cbc(aes))";
stream = 0;
aead = 1;
break;
case CRYPTO_TLS12_AES_CBC_HMAC_SHA256:
alg_name = "tls12(hmac(sha256),cbc(aes))";
stream = 0;
aead = 1;
break;
case CRYPTO_NULL:
alg_name = "ecb(cipher_null)";
stream = 1;
Expand Down

0 comments on commit 7e72f67

Please sign in to comment.