Control: clone -1 -2 Control: reassign -2 src:util-linux Control: retitle -2 util-linux: drop AF_ALG support Control: forwarded -2 https://github.com/util-linux/util-linux/issues/4329
On Wed, May 06, 2026 at 08:22:26AM +0200, Salvatore Bonaccorso wrote: > On Tue, May 05, 2026 at 11:20:17AM +0200, Chris Hofstädtler wrote: > > people claim that the crypto API is a source of security issues when > > (mis-)used by user space. LWN commenters on the recent algif_aead > > issue have some more notes: > > https://lwn.net/Articles/1070682/ [..] > > So it appears there are some tradeoffs to be made. Please take a > > look and consider turning the crypto user api off. > > That will be up for further discussion in the kernel-team meeting. I > wonder if we already can do that. There was the following follup as > well from Eric: > https://www.openwall.com/lists/oss-security/2026/05/06/5 Thanks, that is indeed useful commentary. > Will iwd still work if we disable i now? Needs to be seen, I think. For u-l I've asked upstream to drop the AF_ALG stuff, as it seems completely non-critical. Best, Chris
