Hi Geert,
Thanks for testing this. However, I've *abandoned* this patch, due to
unacceptable performance hits, and figuring out that we can accomplish
basically the same thing without as large of a hit by modifying the
obsolete sha1 implementation.
Herbert - please do not apply this patch. Instead, later versions of
this patchset (e.g. v3 [1] and potentially later if it comes to that)
are what should be applied.
Jason
[1] https://lore.kernel.org/linux-crypto/20220111220506.742067-1-Jason@zx2c4.com/ (local)