On Mon, Nov 11, 2024 at 01:13:34PM +0100, Ingo Franzki wrote: > > There is no need to perform the (possibly time consuming) key conversation at every init. The key is converted not just at init, but multiple times during each update operation. Remember the API is multi-threaded, so at any time there could be multiple tfm's, each with a different key being operated on in parallel. If the hardware is such that you can only have one converted key, then I'm afraid you're stuck with having to do the conversion before each use. However, since we are converting the key during each update, why is it even stored in the tfm_ctx? Cheers, -- Email: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx> Home Page: http://gondor.apana.org.au/~herbert/ PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt