On Thu, Jul 16, 2020 at 03:07:50PM +0300, Horia Geantă wrote: > > So instead of tk(cbc(aes)) use paes(cbc(aes) or cbc(paes)? Well if we're following the existing paes model then it'd be cbc(paes). > How would this work for hmac(sha512), > paes(hmac(sha512)) or hmac(psha512), or even phmac(sha512)? Perhaps hmac(psha512). The point is whatever scheme you come up with has to be consistent across all drivers. Cheers, -- Email: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx> Home Page: http://gondor.apana.org.au/~herbert/ PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt