
Zero-copy support is great for better performance and efficiency, but in kernel space it does increase the likelihood of exploiting its semantics by malicious software. The Linux AF_ALF code for exposing the Linux kernel's cryptographic API to user-space will be removing zero-copy support from the SKCIPHER and AEAD code to reduce security risks






