Re: a few questions on AF_ALG specification (AEAD, socket/connection, ...)

[Nicolas Brunie <nbrunie@kalray.eu>]

Hi,
  In my understanding, a socket is the file descriptor given as argument to a bind call and a connection is the file descriptor returned by an accept call. 

NB



----- Mail original -----
De: "Tadeusz Struk" <tadeusz.struk@intel.com>
À: "Stephan Mueller" <smueller@chronox.de>, "Nicolas Brunie" <nicolas.brunie@kalray.eu>
Cc: "Linux Crypto Mailing List" <linux-crypto@vger.kernel.org>
Envoyé: Mardi 26 Juillet 2016 16:37:51
Objet: Re: a few questions on AF_ALG specification (AEAD, socket/connection, ...)

Hi,
On 07/26/2016 04:54 AM, Stephan Mueller wrote:
>> > Is it true that the key (defined via setsockopt) is common to all the
>> > connections but the IV (defined through message control header) is
>> > specific to each connection ?
> Yes.

I think that's not correct. Please define a "connection".
If you think of connections as separate sockets, then you can
have different keys for each socket. The difference is that
you set a key per each socket once, and you send IV for each
operation (encrypt/decrypt).
Thanks,
-- 
TS