ngtcp2_conn_set_retry_aead

Synopsis

#include <ngtcp2/ngtcp2.h>

void ngtcp2_conn_set_retry_aead(ngtcp2_conn *conn, const ngtcp2_crypto_aead *aead, const ngtcp2_crypto_aead_ctx *aead_ctx)

ngtcp2_conn_set_retry_aead() sets aead and aead_ctx for Retry integrity tag verification. aead must be AEAD_AES_128_GCM. aead_ctx must be initialized with NGTCP2_RETRY_KEY as encryption key. This function must be called if conn is initialized as client. Server does not verify the tag, and has no need to call this function.

conn takes ownership of aead_ctx. ngtcp2_callbacks.delete_crypto_aead_ctx will be called to delete this object when it is no longer used.