[RFC] Secure TCP (STCP): Rust-based encrypted transport protocol for kernel integration

[RFC] Secure TCP (STCP): Rust-based encrypted transport protocol for kernel integration

[Lauri Jakku, CEO Of Paxsudos IT]

Hello all,

I have been developing a new Secure TCP (STCP) implementation written 
primarily in Rust, designed for kernel-space integration. It provides an 
authenticated and encrypted transport layer that can operate alongside 
or replace traditional TCP, and is implemented as a loadable kernel 
module with Rust userspace hooks.

The project includes:
   - Kernel-side Rust module (out-of-tree)
   - Fully static userspace Rust library
   - Secure handshake and AES-GCM transport
   - C ABI bridge for compatibility

Repository: https://github.com/MiesSuomesta/STCP/tree/main/kernel-module

I would appreciate feedback from the Rust-for-Linux and netdev 
communities on integration strategy and long-term direction.

Regards,
Lauri Jakku / Paxsudos IT

.---<[ Paxsudos IT / Security Screening ]>---------------------------------------------------------------->
| Known viruses: 8708706
| Engine version: 1.4.3
| Scanned directories: 0
| Scanned files: 1
| Infected files: 0
| Data scanned: 0.00 MB
| Data read: 0.00 MB (ratio 0.00:1)
| Time: 19.142 sec (0 m 19 s)
| Start Date: 2025:11:10 19:24:17
| End Date:   2025:11:10 19:24:36
| SPAM hints: []
| SPAM hints: []
| Message not from DMARC.
`-------------------------------------------------------------------->

Re: [RFC] Secure TCP (STCP): Rust-based encrypted transport protocol for kernel integration

[Greg KH]

On Mon, Nov 10, 2025 at 05:24:12PM +0200, Lauri Jakku, CEO Of Paxsudos IT wrote:
> Hello all,
> 
> I have been developing a new Secure TCP (STCP) implementation written
> primarily in Rust, designed for kernel-space integration. It provides an
> authenticated and encrypted transport layer that can operate alongside or
> replace traditional TCP, and is implemented as a loadable kernel module with
> Rust userspace hooks.
> 
> The project includes:
>   - Kernel-side Rust module (out-of-tree)
>   - Fully static userspace Rust library
>   - Secure handshake and AES-GCM transport
>   - C ABI bridge for compatibility
> 
> Repository: https://github.com/MiesSuomesta/STCP/tree/main/kernel-module
> 
> I would appreciate feedback from the Rust-for-Linux and netdev communities
> on integration strategy and long-term direction.

Why not just submit patches like any other normal kernel feature/submission?

thanks,

greg k-h

Re: [RFC] Secure TCP (STCP): Rust-based encrypted transport protocol for kernel integration

[Miguel Ojeda]

On Mon, Nov 10, 2025 at 11:27 PM Lauri Jakku, CEO Of Paxsudos IT
<lauri.jakku@paxsudos.fi> wrote:
>
> I would appreciate feedback from the Rust-for-Linux and netdev
> communities on integration strategy and long-term direction.

Sounds good -- I would suggest Cc'ing netdev, since they are the ones
that will decide if they want this. I would also suggest Cc'ing the
relevant maintainers directly, not just the list.

In general, as Greg said, you will likely want to have at least
patches for a prototype that can be applied upstream, i.e. to the
mainline kernel.

Cheers,
Miguel

Re: [RFC] Secure TCP (STCP): Rust-based encrypted transport protocol for kernel integration

[Lauri Jakku, CEO Of Paxsudos IT]

Hi,

   Nice, I'll do just that then. I'll clean up the code for patch 
submission.

--Lauri

Miguel Ojeda kirjoitti 11.11.2025 klo 23.25:
> On Mon, Nov 10, 2025 at 11:27 PM Lauri Jakku, CEO Of Paxsudos IT
> <lauri.jakku@paxsudos.fi> wrote:
>> I would appreciate feedback from the Rust-for-Linux and netdev
>> communities on integration strategy and long-term direction.
> Sounds good -- I would suggest Cc'ing netdev, since they are the ones
> that will decide if they want this. I would also suggest Cc'ing the
> relevant maintainers directly, not just the list.
>
> In general, as Greg said, you will likely want to have at least
> patches for a prototype that can be applied upstream, i.e. to the
> mainline kernel.
>
> Cheers,
> Miguel
> .---<[ Paxsudos IT / Security Screening ]>---------------------------------------------------------------->
> | Known viruses: 8708713
> | Engine version: 1.4.3
> | Scanned directories: 0
> | Scanned files: 1
> | Infected files: 0
> | Data scanned: 0.00 MB
> | Data read: 0.00 MB (ratio 1.00:1)
> | Time: 18.996 sec (0 m 18 s)
> | Start Date: 2025:11:11 22:26:09
> | End Date:   2025:11:11 22:26:28
> | SPAM hints: []
> | SPAM hints: []
> | Message not from DMARC.
> `-------------------------------------------------------------------->
.---<[ Paxsudos IT / Security Screening ]>---------------------------------------------------------------->
| Known viruses: 8708713
| Engine version: 1.4.3
| Scanned directories: 0
| Scanned files: 1
| Infected files: 0
| Data scanned: 0.00 MB
| Data read: 0.00 MB (ratio 1.00:1)
| Time: 22.838 sec (0 m 22 s)
| Start Date: 2025:11:12 06:04:13
| End Date:   2025:11:12 06:04:36
| SPAM hints: []
| SPAM hints: []
| Message not from DMARC.
`-------------------------------------------------------------------->