Native link encryption

A first device comprising:

• packet processing circuitry;
• and
• a cryptographic engine coupled to the packet processing circuitry, wherein the packet processing circuitry is to:
• generate a first initialization vector (IV), from a first subspace of IVs, for a first cryptographic ordered flow of a plurality of cryptographic ordered flows that share a key to secure multipath routing in a fabric between the first device and a second device;
• send, to the second device, a first packet for the first cryptographic ordered flow, the first packet comprising a first security tag with the first IV and a first payload encrypted by the cryptographic engine using the first IV and a first key derived from the shared key;
• generate a second IV, from a second subspace of IVs, for a second cryptographic ordered flow of the plurality of cryptographic ordered flows, wherein the first IV and the second IV are different, wherein the second subspace of IVs are mutually exclusive from the first subspace of IVs;
• and
• send, to the second device, a second packet for the second cryptographic ordered flow, the second packet comprising a second security tag with the second IV and a second payload encrypted by the cryptographic engine using the second IV and a second key derived from the shared key.

A computing system comprising:

• a network fabric;
• a first graphics processing unit (GPU);
• and
• a second GPU coupled to the first GPU via the network fabric, wherein the first GPU is to:
• generate a first initialization vector (IV), from a first subspace of IVs, for a first cryptographic ordered flow of a plurality of cryptographic ordered flows that share a key to secure multipath routing in a fabric between the first device and a second device;
• send, to the second device, a first packet for the first cryptographic ordered flow, the first packet comprising a first security tag with the first IV and a first payload encrypted by the cryptographic engine using the first IV and a first key derived from the shared key;
• generate a second IV, from a second subspace of IVs, for a second cryptographic ordered flow of the plurality of cryptographic ordered flows, wherein the first IV and the second IV are different, wherein the second subspace of IVs are mutually exclusive from the first subspace of IVs;
• and
• send, to the second device, a second packet for the second cryptographic ordered flow, the second packet comprising a second security tag with the second IV and a second payload encrypted by the cryptographic engine using the second IV and a second key derived from the shared key.