On Wed, Jun 26, 2019 at 10:40:47PM +0200, Ard Biesheuvel wrote: > Add an accelerated version of the 'essiv(cbc(aes),aes,sha256' > skcipher, which is used by fscrypt, and in some cases, by dm-crypt. > This avoids a separate call into the AES cipher for every invocation. This technically should say "in some cases by fscrypt and dm-crypt", since as we've discussed previously, most of the time this is not what fscrypt uses. - Eric