search

microsoft / net-offloads

Specs for new networking hardware offloads.
MIT License
27 stars 3 forks source link

Specify Decrypt Failure Action #38

Closed nibanks closed 1 year ago

nibanks commented 1 year ago

Closes #32.

maolson-msft commented 1 year ago

In #32 you said: "since the stateless reset token is the end of the packet, which is where the authentication tag is, I think it should be unmodified". What do you mean by this?

nibanks commented 1 year ago

In #32 you said: "since the stateless reset token is the end of the packet, which is where the authentication tag is, I think it should be unmodified". What do you mean by this?

The tag is the hash you compare to the result of your decryption. So you read it, not write it. So it should be unmodified.