On Mon, Aug 10, 2020 at 07:47:40PM +0300, Horia Geantă wrote: > > I would prefer keeping the caam rfc3686(ctr(aes)) implementation. > It's almost cost-free when compared to ctr(aes), since: > -there are no (accelerator-)external DMAs generated > -shared descriptors are constructed at .setkey time > -code complexity is manageable The reason I'm removing it is because it doesn't support chaining. We could keep it by adding chaining support which should be trivial but it's something that I can't test. Cheers, -- Email: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx> Home Page: http://gondor.apana.org.au/~herbert/ PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt