Is it bad idea to use transforms from sys/crypto directly?

[Lev Serebryakov]

I need very fixed set of crypto primitives in kernel.
I could use opencrypto API, of course.

But looks like IPsec uses enc_xform_XXX directly.

Is it Ok to use enc_xform_XXX directly, or is it considered Very Bad Style?