> 
> I dont have time to read that draft, but it looks to me that during
> decryption you can simply spray plaintext into multiple buffers, no?

The relevant aspect of the spec is that multiple payload packets may be 
included in a single tunnel packet. These payload packets must be de-aggregated 
at the tunnel egress.

The decryption may occur on a separate device on the network, or in a crypto 
coprocessor, so we are unable to make assumptions about its implementation 
details. For this application, we must support operation on a non-encrypted 
stream as well.

thanks for your thoughts!
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#12705): https://lists.fd.io/g/vpp-dev/message/12705
Mute This Topic: https://lists.fd.io/mt/30784477/21656
Group Owner: vpp-dev+ow...@lists.fd.io
Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub  [arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-

Reply via email to