[PATCH 0/3] crypto: af_alg_restrict cleanups

- Make cbc(paes) privileged-only for now, as previously discussed
- Make it more explicit when unprivileged use is allowed
- Avoid some redundant work during allowlist checking

Eric Biggers (3):
  crypto: af_alg - Make cbc(paes) privileged-only
  crypto: af_alg - Replace 'bool privileged' with flags
  crypto: af_alg - Stop after finding name in allowlist

 crypto/af_alg.c         | 10 +++++++---
 crypto/algif_aead.c     |  2 +-
 crypto/algif_hash.c     | 28 ++++++++++++++--------------
 crypto/algif_skcipher.c | 28 ++++++++++++++--------------
 include/crypto/if_alg.h |  6 +++++-
 5 files changed, 41 insertions(+), 33 deletions(-)


base-commit: 947d62c094367ef6064907d570b47612cd579df6
-- 
2.55.0