Am 07.02.16 um 20:47 schrieb Steffan Karger: > Moving crypto_options into key_state enables us to stop using the global > context for each packet encrypt/decrypt operation. Decoupling the crypto > from the global context removes the need to copy the relevant parts of > crypto_options for each processed packet, but instead enables us to just > pass along a pointer to the related crypto_options. > > This paves the way for an efficient GCM cipher mode implementation, but is > probably fruitful too for threading and/or cipher negotiation.
ACK from me. Arne