On Tue, Jul 16, 2019 at 09:09:28PM +0800, Herbert Xu wrote: > > However, I think this leads to another bug in that pcrypt doesn't > support dm-crypt properly. It never does the backlog stuff and > therefore can't guarantee reliable processing which dm-crypt requires. > > Is it intentional to only allow pcrypt for IPsec? I had a patch to support crypto backlog some years ago, but testing with dm-crypt did not show any performance improvement. So I decided to just skip that patch because it added code for no need.