While trying to convert some 3rd party code from direct calls to libcrypto functions to using the EVP API, I have run into a problem. I cannot find the EVP call to change the IV without changing (and reexpanding) the key. If the code should stay in the old (non-EVP) API, I similarly lack a way to call the CPU optimized AES functions (AESNI, HWAES, BSAES, VPAES) in the shared libcrypto.so . Seems there is no way to win? But I thought TLS 1.2 still needed the ability to efficiently change IV mid-stream? P.S. This is not GCM with its strange TLS specific IV formulas. Enjoy Jakob -- Jakob Bohm, CIO, Partner, WiseMo A/S. https://www.wisemo.com Transformervej 29, 2860 S?borg, Denmark. Direct +45 31 13 16 10 This public discussion message is non-binding and may contain errors. WiseMo - Remote Service Management for PCs, Phones and Embedded