linux-kernel - Re: [PATCH net-next] docs: tls: Enhance TLS resync async process documentation

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <aSZKCZkUnllzyydN@archie.me>
Date: Wed, 26 Nov 2025 07:30:01 +0700
From: Bagas Sanjaya <bagasdotme@...il.com>
To: Tariq Toukan <tariqt@...dia.com>, Eric Dumazet <edumazet@...gle.com>,
	Jakub Kicinski <kuba@...nel.org>, Paolo Abeni <pabeni@...hat.com>,
	Andrew Lunn <andrew+netdev@...n.ch>,
	"David S. Miller" <davem@...emloft.net>
Cc: Jonathan Corbet <corbet@....net>, netdev@...r.kernel.org,
	linux-doc@...r.kernel.org, linux-kernel@...r.kernel.org,
	Mark Bloch <mbloch@...dia.com>, Gal Pressman <gal@...dia.com>,
	Sabrina Dubroca <sd@...asysnail.net>,
	Shahar Shitrit <shshitrit@...dia.com>
Subject: Re: [PATCH net-next] docs: tls: Enhance TLS resync async process
 documentation

On Tue, Nov 25, 2025 at 09:00:37AM +0200, Tariq Toukan wrote:
> +When the kernel processes an RX segment that begins a new TLS record, it
> +examines the current status of the asynchronous resynchronization request.
> +- If the device is still waiting to provide its guessed TCP sequence number
> +  (the async state), the kernel records the sequence number of this segment
> +  so that it can later be compared once the device's guess becomes available.
> +- If the device has already submitted its guessed sequence number (the non-async
> +  state), the kernel now tries to match that guess against the sequence numbers
> +  of all TLS record headers that have been logged since the resync request
> +  started.
> +

You need to separate the status list:

---- >8 ----
diff --git a/Documentation/networking/tls-offload.rst b/Documentation/networking/tls-offload.rst
index 6d276931669979..a41d02d72e1ee6 100644
--- a/Documentation/networking/tls-offload.rst
+++ b/Documentation/networking/tls-offload.rst
@@ -338,6 +338,7 @@ Cancels any in-progress resync attempt, clearing the request state.
 
 When the kernel processes an RX segment that begins a new TLS record, it
 examines the current status of the asynchronous resynchronization request.
+
 - If the device is still waiting to provide its guessed TCP sequence number
   (the async state), the kernel records the sequence number of this segment
   so that it can later be compared once the device's guess becomes available.

Thanks.

-- 
An old man doll... just what I always wanted! - Clara

Download attachment "signature.asc" of type "application/pgp-signature" (229 bytes)