>> Why? > To avoid redundant work; there's little point memset()ing a region that's > going to be copied over the top of immediately afterwards. > The length used for memset is different from the length being copied over. I am initially memsetting the entire key struct (which contains the key + original IV + updated IV) and then copying only the key. Down the line we copy the original IV and/or the updated IV in this memory space. -- To unsubscribe from this list: send the line "unsubscribe linux-crypto" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html