Sebastian Siewior writes: > CBC has one limitiation: The IV is written back in the notification > callback. That means that it is not available for crypto requests that > depend on the previous IV (as well as crypto requests >16 KiB). Herbert Xu > pointer out, that this is currently not the case. For instance: > - IPsec brings its own IV on with every packet. A packet is usually <= > 1500 bytes. Jumbo frames should not exceed 16 KiB. > - EcryptFS changes the IV on page bassis (every enc/dec request is > PAGE_SIZE long). The page size could be 64kB. Paul. - To unsubscribe from this list: send the line "unsubscribe linux-crypto" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
