There's kTLS NIC offload. So in principle could splice a file into a pipe and then the pipe into a kTLS socket and have the NVMe drive DMA it to the NIC and the

There's kTLS NIC offload. So in principle could splice a file into a pipe and then the pipe into a kTLS socket and have the NVMe drive DMA it to the NIC and then NIC encrypts it and the data never touches main memory or the CPU.