Sebastian Siewior writes:

> CBC has one limitiation: The IV is written back in the notification
> callback. That means that it is not available for crypto requests that
> depend on the previous IV (as well as crypto requests >16 KiB). Herbert Xu
> pointer out, that this is currently not the case. For instance:
> - IPsec brings its own IV on with every packet. A packet is usually <=
>       1500 bytes. Jumbo frames should not exceed 16 KiB.
> - EcryptFS changes the IV on page bassis (every enc/dec request is
>       PAGE_SIZE long).

The page size could be 64kB.

Paul.
-
To unsubscribe from this list: send the line "unsubscribe linux-crypto" in
the body of a message to [EMAIL PROTECTED]
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Reply via email to