On Wed, Apr 22, 2015 at 06:36:59AM +0200, Stephan Mueller wrote: > > + if (req->iv) > + ret = crypto_memneq(block.A, req->iv, SEMIBSIZE); > + else > + ret = crypto_memneq(block.A, default_iv, SEMIBSIZE); No we don't allow variable-sized IVs. Either you should always have an IV, or never have one (i.e., make it zero-sized). If you want to accomodate both, then provide kw(aes) as the full IV version and then add a rfc3394(kw(aes)) on top of it. Cheers, -- Email: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx> Home Page: http://gondor.apana.org.au/~herbert/ PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt -- To unsubscribe from this list: send the line "unsubscribe linux-crypto" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html