On Thu, 30 May 2019 at 17:06, Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx> wrote: > > On Thu, May 30, 2019 at 05:04:51PM +0200, Ard Biesheuvel wrote: > > > > But given your remark regarding CBC being the only algo that has this > > requirement, I wonder if this might be sufficient as well. > > It's not that CBC is the only one with the requirement. It's just > that this is the wrong output IV for CTR. > Are there any generic templates relying on this for other algos than CBC?