Retry Packet (server → client)
1111xxxx
1 byte
Version
4 bytes
Dest CID
len + data
Src CID
len + data
Retry Token
opaque to client
Integrity Tag
16 bytes
← not encrypted, no packet number →