On Tue, Sep 19, 2023 at 11:25:51PM -0700, Eric Biggers wrote: > > Is lskcipher only for algorithms that can be computed incrementally? That would > exclude the wide-block modes, and maybe others too. And if so, what is the You mean things like adiantum? We could add a flag for that so the skcipher wrapper linearises the input before calling lskcipher. > model for incremental computation? Based on crypto_lskcipher_crypt_sg(), all > the state is assumed to be carried forward in the "IV". Does that work for all > algorithms? Note that shash has an arbitrary state struct (shash_desc) instead. Is there any practical difference? You could always represent one as the other, no? The only case where it would matter is if an algorithm had both an IV as well as additional state that should not be passed along as part of the IV, do you have anything in mind? Cheers, -- Email: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx> Home Page: http://gondor.apana.org.au/~herbert/ PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt
