Network Controller Decryption

A network controller, comprising:

• a host interface;
• an interface to a network connection;
• logic to:
• receive a first request from a network driver of a host to a network controller, the first request requesting storage of at least one cryptographic key associated at least in part with a flow identified by, at least, an Internet Protocol source and Internet Protocol destination address, the host to provide a Transmission Control Protocol/Internet Protocol (TCP/IP) protocol stack;
• send to the host via the host interface ingress Internet Protocol packets having data authenticated and decrypted by the network controller in accordance with, at least, the at least one cryptographic key received in the first request, the associated Internet Protocol destination address, and security attributes stored in a field within the Internet Protocol packet;
• and
• receive a second request from the network driver of the host to the network controller to the network controller requesting deletion of the at least one cryptographic key.

A method comprising:

• sending a first request from a network driver of a host to a network controller, the first request requesting storage of at least one cryptographic key associated at least in part with a flow identified by, at least, an Internet Protocol source and Internet Protocol destination address, the host to provide a Transmission Control Protocol/Internet Protocol (TCP/IP) protocol stack;
• receiving from the network controller, ingress Internet Protocol packets having data authenticated and decrypted by the network controller in accordance with, at least, the at least one cryptographic key, the associated Internet Protocol destination address, and security attributes stored in a field within the Internet Protocol packet;
• and
• sending a second request from the network driver of the host to the network controller to the network controller requesting deletion of the at least one cryptographic key.

A method, comprising:

• receiving a first request from a network driver of a host to a network controller, the first request requesting storage of at least one cryptographic key associated at least in part with a flow identified by, at least, an Internet Protocol source and Internet Protocol destination address, the host to provide a Transmission Control Protocol/Internet Protocol (TCP/IP) protocol stack;
• sending to the host via the host interface ingress Internet Protocol packets having data authenticated and decrypted by the network controller in accordance with, at least, the at least one cryptographic key received in the first request, the associated Internet Protocol destination address, and security attributes stored in a field within the Internet Protocol packet;
• and
• receiving a second request from the network driver of the host to the network controller to the network controller requesting deletion of the at least one cryptographic key.