diff --git a/src/tuntap/tun.go b/src/tuntap/tun.go
index dbba018b..8cbe537b 100644
--- a/src/tuntap/tun.go
+++ b/src/tuntap/tun.go
@@ -37,6 +37,7 @@ type TunAdapter struct {
 	log         *log.Logger
 	addr        address.Address
 	subnet      address.Subnet
+	ckr         cryptokey
 	mtu         uint64
 	iface       tun.Device
 	phony.Inbox // Currently only used for _handlePacket from the reader, TODO: all the stuff that currently needs a mutex below
@@ -141,6 +142,7 @@ func (tun *TunAdapter) _start() error {
 	}
 	tun.core.SetMTU(tun.MTU())
 	tun.isOpen = true
+	tun.ckr.init(tun)
 	tun.isEnabled = true
 	go tun.read()
 	go tun.write()