On Thu, Jun 18, 2020 at 10:41:40AM +0200, Tomas Mraz wrote: > > I question the default behaviour, I think most people don't need > > that support. > > Unfortunately that would be an API break that could be very hard to > discover, so I do not think we can change this even in 3.0. But I think the old CMAC API didn't support that, and so we can change the internal calls to use the flag now (if needed). The EVP_MAC API probably supports this too, and we can consider changing the default there. Kurt
