On Tue, Aug 18, 2020 at 10:31:39AM +0200, Ard Biesheuvel wrote: > > What do you mean? You cannot implement cbcmac using a cbc skcipher > unless you provide a scratch buffer of arbitrary size as the > destination, in order to capture the skcipher output IV as the MAC. Please have a look at patch 6. The trick is to use an SG list chained to itself. Cheers, -- Email: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx> Home Page: http://gondor.apana.org.au/~herbert/ PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt