On 8/11/2020 3:59 AM, Herbert Xu wrote: > On Mon, Aug 10, 2020 at 07:47:40PM +0300, Horia Geantă wrote: >> >> I would prefer keeping the caam rfc3686(ctr(aes)) implementation. >> It's almost cost-free when compared to ctr(aes), since: >> -there are no (accelerator-)external DMAs generated >> -shared descriptors are constructed at .setkey time >> -code complexity is manageable > > The reason I'm removing it is because it doesn't support chaining. > We could keep it by adding chaining support which should be trivial > but it's something that I can't test. > Would it be possible in the meantime to set final_chunksize = -1, then I'd follow-up with chaining support? Thanks, Horia