On Thu, Sep 14, 2023 at 11:18:00AM +0200, Ard Biesheuvel wrote: > > So this means that the base name will be aes, not ecb(aes), right? > What about cbc and ctr? It makes sense for a single lskcipher to > implement all three of those at least, so that algorithms like XTS and > GCM can be implemented cheaply using generic templates, without the > need to call into the lskcipher for each block of input. You can certainly implement all three with arch-specific code but I didn't think there was a need to do this for the generic version. Cheers, -- Email: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx> Home Page: http://gondor.apana.org.au/~herbert/ PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt