On Fri, Aug 26, 2016 at 05:13:42PM +0300, Horia Geantă wrote: > > In terms of optimizations, would it be safe to assume all "geniv" authenc > algorithms - {echainiv, seqiv}(authenc) - get assoc,iv,ciphertext in > req->src for decryption? Yes. They all get the raw IPsec packet, apart from the ESN munging. Cheers, -- Email: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx> Home Page: http://gondor.apana.org.au/~herbert/ PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt -- To unsubscribe from this list: send the line "unsubscribe linux-crypto" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html