3 ms·
This was my first thought as well. Looking through the repo [1] behind the paper the people behind it seem to have some crypto chops. A lot more can go wrong in
by colemannugent 9y ago
This was my first thought as well. Looking through the repo [1] behind the paper the people behind it seem to have some crypto chops. A lot more can go wrong in kernel space, but the performance improvements might prompt the big players (Google, FB, etc.) to invest some time into locking it down.
Also, it seems that only particular parts of the stack are handled by the kernel. Per the README:
The socket does data transmission, the handshake, re-handshaking and other control messages have to be served by user space using appropriate libs such as OpenSSL or Gnu TLS.
[1]: https://github.com/ktls/af_ktls https://github.com/ktls/af_ktls