On Thu, Sep 14, 2023 at 04:28:24PM +0800, Herbert Xu wrote: > Add a new API type lskcipher designed for taking straight kernel > pointers instead of SG lists. Its relationship to skcipher will > be analogous to that between shash and ahash. Is lskcipher only for algorithms that can be computed incrementally? That would exclude the wide-block modes, and maybe others too. And if so, what is the model for incremental computation? Based on crypto_lskcipher_crypt_sg(), all the state is assumed to be carried forward in the "IV". Does that work for all algorithms? Note that shash has an arbitrary state struct (shash_desc) instead. - Eric