I've put together a candidate implementation of AES-NI support in the libk5crypto builtin AES enc-provider. Here is the project writeup: http://k5wiki.kerberos.org/wiki/Projects/AES-NI_Support and here is the code (this branch will eventually go away after the code is merged into master): https://github.com/greghudson/krb5/tree/aesni Comments are appreciated.