Does (LS1046A with LSDK 20.04) support DTLS?

[mamorukanou]

Hello community,

p1044 of LSDKUG_Rev20.04, it is written as follows.

According to these document, it seems to support TLS but not DTLS.

*****

The following can be offloaded in hardware in current SDK (not a complete list):
• SSL: TLS v1.1 & TLS v1.2 with one-shot cipher modes (a single ioctl for both encryption and authentication):
— AES128-SHA1
— AES256-SHA1
— AES128-SHA256
— AES256-SHA256
— Only supported on kernel version 4.19.
— Not supported on kernel version 5.4
— One shot cipher AES128-SHA1 and AES256-SHA1 for TLS1.0 is not any more supported.

*****

However, according to the LS1046A Security RM, it says:

It appears to support both TSL and DTLS here.

LS1046ASECRM　Rev. 0, 05/2017　p366

******

9.2 SSL/TLS/DTLS record encapsulation and decapsulation overview

SEC supports the following versions of the TLS family of security protocols:
• SSL 3.0
• TLS 1.0
• TLS 1.1
• TLS 1.2
• DTLS 1.0 (a variant of TLS 1.1)
• DTLS 1.2 (a variant of TLS 1.2)

*****

My question is, does LS1046A w/LSDK20.04 support DTLS?

Best Regards,

Kanou

[mamorukanou]

Hellp Wang,

Thank you for quick answer.

I understand that LSDK does not confirm DTSL.

Does the next LSDK 20.11 (Nov.2020) mean that TSL is not supported in the 5.4 kernel?
(Bug fixes and PREEMPT_RT support in 5.4 kernels)

[yipingwang · Accepted solution]

Hello Kanou,

Though DTLS is a variant of TLS, it has never been tested by LSDK testing team.

I also confirm with  LSDK development team, they don't know if DTLS is at all supported ever in LSDK.

LSDK 20.04 supports two kernel version – v4.19 and v5.3.

Moreover, do note a point that TLS is supported on Linux kernel 4.19 only.

Thanks,

Yiping