KRB5_MAX_BLOCKSIZE
u8 local_iv[KRB5_MAX_BLOCKSIZE] __aligned(KRB5_MAX_BLOCKSIZE) = {0};
if (crypto_sync_skcipher_ivsize(tfm) > KRB5_MAX_BLOCKSIZE)