228 	struct noise_keypair *keypair;  in keep_key_fresh()  local
235 	keypair = rcu_dereference_bh(peer->keypairs.current_keypair);  in keep_key_fresh()
236 	send = keypair && READ_ONCE(keypair->sending.is_valid) &&  in keep_key_fresh()
237 	       keypair->i_am_the_initiator &&  in keep_key_fresh()
238 	       wg_birthdate_has_expired(keypair->sending.birthdate,  in keep_key_fresh()
248 static bool decrypt_packet(struct sk_buff *skb, struct noise_keypair *keypair)  in decrypt_packet()  argument
255 	if (unlikely(!keypair))  in decrypt_packet()
258 	if (unlikely(!READ_ONCE(keypair->receiving.is_valid) ||  in decrypt_packet()
259 		  wg_birthdate_has_expired(keypair->receiving.birthdate, REJECT_AFTER_TIME) ||  in decrypt_packet()
260 		  keypair->receiving_counter.counter >= REJECT_AFTER_MESSAGES)) {  in decrypt_packet()
261 		WRITE_ONCE(keypair->receiving.is_valid, false);  in decrypt_packet()
286 						 keypair->receiving.key))  in decrypt_packet()
352 						    PACKET_CB(skb)->keypair))) {  in wg_packet_consume_data_done()
448 	struct noise_keypair *keypair;  in wg_packet_rx_poll()  local
463 		keypair = PACKET_CB(skb)->keypair;  in wg_packet_rx_poll()
469 		if (unlikely(!counter_validate(&keypair->receiving_counter,  in wg_packet_rx_poll()
474 					    keypair->receiving_counter.counter);  in wg_packet_rx_poll()
486 		wg_noise_keypair_put(keypair, false);  in wg_packet_rx_poll()
509 			likely(decrypt_packet(skb, PACKET_CB(skb)->keypair)) ?  in wg_packet_decrypt_worker()
524 	PACKET_CB(skb)->keypair =  in wg_packet_consume_data()
528 	if (unlikely(!wg_noise_keypair_get(PACKET_CB(skb)->keypair)))  in wg_packet_consume_data()
545 	wg_noise_keypair_put(PACKET_CB(skb)->keypair, false);  in wg_packet_consume_data()