Is it bad idea to use transforms from sys/crypto directly?

[Lev Serebryakov]

 I need very fixed set of crypto primitives in kernel.
 I could use opencrypto API, of course.

 But looks like IPsec uses enc_xform_XXX directly.

 Is it Ok to use enc_xform_XXX directly, or is it considered Very Bad Style?

-- 
// Lev Serebryakov