3 ms·

Yes, but only the symmetric part. You handshake in userspace, then you pass the negotiated cipher keys/IV to the TCP socket with `setsockopt`. Last I looked, th

Yes, but only the symmetric part. You handshake in userspace, then you pass the negotiated cipher keys/IV to the TCP socket with `setsockopt`. Last I looked, the only cipher supported was AES-128-GCM.

caf 8y ago
That's right. And if anything else happens on the connection (like a renegotiation) then it is just punted back to userspace.
- alacombe 8y ago
  Which is the correct way to handle, fast data path in the kernel, slow control path in userspace.
messe 8y ago
Ah, that's a lot more reasonable then.