DTLS window check needs to happen after decrypt

ktls / af_ktls

Linux Kernel TLS/DTLS Module

GNU General Public License v2.0

159 stars 25 forks source link

DTLS window check needs to happen after decrypt #93

Open djwatson opened 8 years ago

djwatson commented 8 years ago

I think this was broken when decrypt moved in 29f38179df59926aebacffbd8fa93aad79e225a9.

Decrypt should definitely happen on recv or send if possible to avoid copying user data if crypto framework can be updated to safely copy to/from userspace.