An Analysis of TLS Sockets in Linux Kernel

TLS is a widely used protocol used to protect TCP connections on the modern Internet. TLS is also required by HTTP / 2, the latest web standard. Implementation of this protocol in the Linux kernel will reduce the load on the processor and increase the encryption speed, and using the new version of the TLS 1.3 protocol will make the transport layer more secure and potentially increase the speed by rebuilding the TLS version 1.3 architecture. For the domestic implementation of TLS in the Linux kernel, the standardization recommendations «Use of Russian cryptographic algorithms in the transport layer security protocol (TLS 1.3)» were taken as a basis and the methods and approaches of the existing implementation of TLS sockets of the Linux kernel were investigated. This implementation complies with the RFC and recommendations of TK26, it will allow you to safely exchange information and speed up the time of cryptographic operations due to the encryption mode used in TLS 1.3 with authentication and reduction of copying from / to the user space, which carry additional load on the CPU.