Network device with datagram transport layer security

A host device, comprising:

• a processor to run software to:
• establish a DTLS connection with a remote host device using a DTLS handshake;
• and
• offload cryptographic material of the DTLS connection to a local networking device;
• and
• an interface to provide the cryptographic material to the local networking device.

A method, comprising:

• receiving packets from a local host device;
• receiving cryptographic material offloaded from the local host device over a host interface;
• performing cryptographic operations on the packets based on the cryptographic material;
• generating datagram transport layer security (DTLS) headers including respective DTLS sequence numbers in hardware;
• encapsulating the packets with the DTLS headers in hardware;
• and
• a network interface to send the packets with the DTLS headers to a remote networking device over a packet data network.