On Mon, Feb 03, 2025 at 02:23:19PM +0000, David Howells wrote:

[!] Note that the net/sunrpc/auth_gss/ implementation gets a pair of
ciphers, one non-CTS and one CTS, using the former to do all the aligned
blocks and the latter to do the last two blocks if they aren't also
aligned.  It may be necessary to do this here too for performance reasons -
but there are considerations both ways:

The CTS template will take any hardware accelerated CBC implementation
and turn it into CTS.

So there is no reason to do the CTS/CBC thing by hand at all.

Cheers,
-- 
Email: Herbert Xu [off-list ref]
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt