I'm trying to understand the correct use of the key direction parameter. I read trough the manual, but I'm not sure whether I correctly understood the available parameters.
The configuration line (independent of TLS or static key encryption):
--key-direction
From what I understood it is possible to omit the key direction, which will result in bidirectional use of keys: one HMAC and one for encryption and decryption. Or explicitly use the
--key-direction with the parameter
bidirectional.
Alternatively is it possible to configure altering values between
0 and
1 on the server and the client. (e.g. on the server 0 and on the client 1, or the other way around). Which causes the use of 4 distinct keys (HMAC-send, cipher-encrypt, HMAC-receive, cipher-decrypt).
Did I interpret the manual correctly?