On Wed, Jan 26, 2011 at 11:20:22AM +0330, Hamid Nassiby wrote: > > Do you mean that different IP packets fit into one single Block Cipher tfm? > Would you please explain expansively? We allocate one tfm per SA. So as long as ordering is guaranteed per SA then it's guaranteed per SA which is all that's needed. Cheers, -- Email: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx> Home Page: http://gondor.apana.org.au/~herbert/ PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt -- To unsubscribe from this list: send the line "unsubscribe linux-crypto" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html