Am Montag, 1. August 2016, 11:14:07 CEST schrieb Nicolas Brunie: Hi Nicolas, > Hi, > In my understanding, a socket is the file descriptor given as argument to > a bind call and a connection is the file descriptor returned by an accept > call. This would be an appropriate naming: The key is set on a socket. The IV is given with the connection. > > NB > > > > ----- Mail original ----- > De: "Tadeusz Struk" <tadeusz.struk@xxxxxxxxx> > À: "Stephan Mueller" <smueller@xxxxxxxxxx>, "Nicolas Brunie" > <nicolas.brunie@xxxxxxxxx> Cc: "Linux Crypto Mailing List" > <linux-crypto@xxxxxxxxxxxxxxx> > Envoyé: Mardi 26 Juillet 2016 16:37:51 > Objet: Re: a few questions on AF_ALG specification (AEAD, socket/ connection, > ...) > > Hi, > > On 07/26/2016 04:54 AM, Stephan Mueller wrote: > >> > Is it true that the key (defined via setsockopt) is common to all the > >> > connections but the IV (defined through message control header) is > >> > specific to each connection ? > > > > Yes. > > I think that's not correct. Please define a "connection". > If you think of connections as separate sockets, then you can > have different keys for each socket. The difference is that > you set a key per each socket once, and you send IV for each > operation (encrypt/decrypt). > Thanks, Ciao Stephan -- To unsubscribe from this list: send the line "unsubscribe linux-crypto" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
