OpenSSL already has integration for Linux's similar kTLS support (bulk transmit encryption only; all other alerts, renegotiation etc punted back to userspace). If you wrote it to provide the same API then the OpenSSL support side would be easy.

https://github.com/openssl/openssl/blob/d6c3c1896cf3c0d69bc2...