owned this note   changed 2 years ago  
Linked with GitHub

KTLS —— Linux 核心內部的 TLS 實作 - 向景亘

tags:COSCUP2020 中階 TR214

歡迎來到 https://hackmd.io/@coscup/2020 共筆

Image Not Showing Possible Reasons
  • The image file may be corrupted
  • The server hosting the image is unavailable
  • The image path is incorrect
  • The image format is not supported
Learn More →

點擊本頁上方的 開始用 Markdown 一起寫筆記！
手機版請點選上方 按鈕展開議程列表。

請從這裡開始

Pros

  • Reduce overhead of sending files
  • Save crypto keys in kernel space
  • Can move to hardware in the future

Initial Implementation

AF_KTLS

  • Only support symmetry encryption
  • Need to do handshake in user space
  • Can setup key, IV, salt, using setsockopt()

Current Implementation

Upper Layer Protocol(ULP)

Load Module

sudo modprobe tls

Features

  • Still need to do handshake in user space
    • Using TLS library
      • OpenSSL (v3.0 support KTLS)
      • WolfSSL (need to expose initial values)
      • GnuSSL
      • …
  • Support system call
    • read()
    • write()
    • sendfile()
    • splice()

References

https://www.kernel.org/doc/html/latest/networking/tls-offload.html
https://www.kernel.org/doc/html/latest/networking/tls.html#kernel-tls

Select a repo