Eric Biggers (Google) on why the Linux kernel's crypto API is hard to use and slow — dynamic allocations, indirect calls, abstraction that fits neither modern algorithms nor modern hardware.