On Sat, 11 Mar 2023 at 10:00, Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx> wrote: > > On Sat, Mar 11, 2023 at 09:55:15AM +0100, Ard Biesheuvel wrote: > > > > That way, the implementations can remain the same, > > That's like doing a house renovation and keeping the scaffold > around forever :) > > Yes I agree that it would save a little bit of work for now but > all the implementations would have to carry this unnecessary > walking code with them forever. > > With a setup like ahash/shash the walking code disappears totally > from the underlying implementations. > So we are basically going back to ablkcipher/blkcipher then? How about aead?