David S. Miller e4bec827fe [IPSEC] esp: Defer output IV initialization to first use.
First of all, if the xfrm_state only gets used for input
packets this entropy is a complete waste.

Secondly, it is often the case that a configuration loads
many rules (perhaps even dynamically) and they don't all
necessarily ever get used.

This get_random_bytes() call was showing up in the profiles
for xfrm_state inserts which is how I noticed this.

Signed-off-by: David S. Miller <davem@davemloft.net>
2006-09-22 15:17:35 -07:00
..
2006-09-22 14:54:07 -07:00
2006-09-22 14:54:10 -07:00
2006-09-22 14:53:33 -07:00
2005-04-16 15:20:36 -07:00
2006-09-22 14:53:33 -07:00