Hi, thanks for the diff!
> SipHash and ChaCha20Poly1305 are already available in the kernel. The > only modification here is add the short and simple chapoly AEAD > construction alongside the existing AE one. At first glance, I think you could use the crypto framework implementation for the chacha20-poly1305 AEAD construction (see sys/net/cryptosoft.c:swcr_authenc). An example for how it is used can be found in netinet/ip_esp.c - Tobias