Re: [PATCH] crypto: af_alg - Allow additional ciphers for cryptsetup
Herbert Xu <[email protected]>
| Newsgroups | org.kernel.vger.linux-hardening,org.kernel.vger.linux-crypto,org.kernel.vger.linux-kernel |
|---|---|
| Message-ID | <[email protected]> |
On Sun, Jul 05, 2026 at 11:44:19AM -0700, Eric Biggers wrote: > Add "xts(camellia)", "xts(serpent)", and "xts(twofish)" to the allowlist > for af_alg_restrict=1. These niche AES alternatives have continued to > see rare but persistent use via cryptsetup, which has historically > relied on the AF_ALG support for these ciphers in XTS mode for > performing the keyslot encryption. (cryptsetup v2.8.7 and later fall > back to a temporary dm-crypt mapping, but that requires root.) > > Signed-off-by: Eric Biggers <[email protected]> > --- > crypto/algif_skcipher.c | 3 +++ > 1 file changed, 3 insertions(+) Patch applied. Thanks. -- Email: Herbert Xu <[email protected]> Home Page: http://gondor.apana.org.au/~herbert/ PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt