On Fri, 2016-10-14 at 14:13 +0100, Ard Biesheuvel wrote: > > > But if we allocate things anyway, is it worth expending per-CPU > > buffers on these? > > Ehmm, maybe not. I could spin a v2 that allocates a bigger buffer, > and copies aad[] into it as well Copies in/out, I guess. Also there's B_0/J_0 for CCM/GCM, and the 'zero' thing that GMAC has. > That does not help the other algos though What do you mean? johannes
