diff --git a/net-misc/ktls-utils/Manifest b/net-misc/ktls-utils/Manifest
new file mode 100644
index 0000000000000..f1524673b0aa4
--- /dev/null
+++ b/net-misc/ktls-utils/Manifest
@@ -0,0 +1 @@
+DIST ktls-utils-1.3.0.tar.gz 104367 BLAKE2B 8dddc7ad199ae483ebce2dad6ac990eccc75a232c9db2261a5339a93c6cb0090eb70b342b0a082942e7640f3620f0ff61c5cc16093e76c1314d337e3fab11b8d SHA512 bee170136b8da55523095168b5616435e05c477dc4cfe8b3bf8ef5dd05bbd89377130e02277402d3b9c1ac82ff9480cee55e4cdb6597fb57a3c8a6936c135201
diff --git a/net-misc/ktls-utils/files/tlshd.initd b/net-misc/ktls-utils/files/tlshd.initd
new file mode 100644
index 0000000000000..02709b8722798
--- /dev/null
+++ b/net-misc/ktls-utils/files/tlshd.initd
@@ -0,0 +1,14 @@
+#!/sbin/openrc-run
+# Copyright 2026 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+name="tlshd daemon"
+description="Handshake service for kernel TLS consumers"
+command="/usr/sbin/tlshd"
+pidfile="/run/tlshd.pid"
+
+command_background="yes"
+
+depend() {
+    need net
+}
diff --git a/net-misc/ktls-utils/ktls-utils-1.3.0.ebuild b/net-misc/ktls-utils/ktls-utils-1.3.0.ebuild
new file mode 100644
index 0000000000000..dbcb99273bfab
--- /dev/null
+++ b/net-misc/ktls-utils/ktls-utils-1.3.0.ebuild
@@ -0,0 +1,42 @@
+# Copyright 2026 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=8
+
+inherit autotools linux-info
+
+DESCRIPTION="Kernel TLS helper utilities"
+HOMEPAGE="https://github.com/oracle/ktls-utils"
+SRC_URI="https://github.com/oracle/${PN}/archive/refs/tags/${P}.tar.gz"
+S=${WORKDIR}/${PN}-${P}
+
+LICENSE="GPL-2"
+SLOT="0"
+KEYWORDS="~amd64"
+IUSE=""
+
+DEPEND="
+	dev-libs/glib
+	dev-libs/libnl:3
+	dev-libs/libyaml
+	net-libs/gnutls
+	sys-apps/keyutils
+"
+RDEPEND="${DEPEND}"
+CONFIG_CHECK="~TLS ~KEYS ~KEYS_REQUEST_CACHE"
+
+src_prepare() {
+	default
+	eautoreconf
+}
+
+src_configure() {
+	econf --with-systemd
+}
+
+src_install() {
+	default
+	dodoc README.md
+
+	newinitd "${FILESDIR}/tlshd.initd" tlshd
+}
diff --git a/net-misc/ktls-utils/metadata.xml b/net-misc/ktls-utils/metadata.xml
new file mode 100644
index 0000000000000..14787356cbbc0
--- /dev/null
+++ b/net-misc/ktls-utils/metadata.xml
@@ -0,0 +1,20 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE pkgmetadata SYSTEM "https://www.gentoo.org/dtd/metadata.dtd">
+<pkgmetadata>
+	<maintainer type="person" proxied="yes">
+		<email>zoltan@sinustrom.info</email>
+		<name>Zoltan Puskas</name>
+	</maintainer>
+	<maintainer type="project" proxied="proxy">
+		<email>proxy-maint@gentoo.org</email>
+		<name>Proxy Maintainers</name>
+	</maintainer>
+	<longdescription>
+		Handshake service for kernel TLS consumers. The TLS handshake user agent
+		that listens for kernel requests and then materializes a user space socket
+		endpoint on which to perform these handshakes.
+	</longdescription>
+	<upstream>
+		<remote-id type="github">oracle/ktls-utils</remote-id>
+	</upstream>
+</pkgmetadata>