Ok. Apparently this broke longer ago than I thought. esp_* used to set klen and key on the crypto op structure, but now apparently expects those to be saved as part of the crypto session structure (which is device specific, and apparently does not always save these). Not sure if the fix is to have hifn preserve or to have esp repopulate them 🤔