Hi, In my understanding, a socket is the file descriptor given as argument to a bind call and a connection is the file descriptor returned by an accept call. NB ----- Mail original ----- De: "Tadeusz Struk" <tadeusz.struk@xxxxxxxxx> À: "Stephan Mueller" <smueller@xxxxxxxxxx>, "Nicolas Brunie" <nicolas.brunie@xxxxxxxxx> Cc: "Linux Crypto Mailing List" <linux-crypto@xxxxxxxxxxxxxxx> Envoyé: Mardi 26 Juillet 2016 16:37:51 Objet: Re: a few questions on AF_ALG specification (AEAD, socket/connection, ...) Hi, On 07/26/2016 04:54 AM, Stephan Mueller wrote: >> > Is it true that the key (defined via setsockopt) is common to all the >> > connections but the IV (defined through message control header) is >> > specific to each connection ? > Yes. I think that's not correct. Please define a "connection". If you think of connections as separate sockets, then you can have different keys for each socket. The difference is that you set a key per each socket once, and you send IV for each operation (encrypt/decrypt). Thanks, -- TS -- To unsubscribe from this list: send the line "unsubscribe linux-crypto" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html