TPMs and the Linux Kernel: unlocking a better path to hardware security - Ignat Korchagin

[@MarekKnapek]

Authenticated symmetric encryption (for example AES-GCM) is not needed to be done all at once. The kernel would need to hold small amount of state between chunk encryption request (like 16 or 32 bytes or so).