[PATCH net-next 0/5] Consolidate FCrypt and PCBC code into net/rxrpc/
David Howells
dhowells at redhat.com
Tue Apr 28 00:53:40 PDT 2026
Eric Biggers <ebiggers at kernel.org> wrote:
> [This series applies to v7.1-rc1 and is intended to be taken via
> net-next. Patches 4-5 could be left for later if desired.]
>
> The FCrypt "block cipher" and the PCBC mode of operation are obsolete
> and insecure. Since their only user is net/rxrpc/, they belong there,
> not in the crypto API.
>
> Therefore, this series removes these algorithms from the crypto API and
> replaces them with local implementations in net/rxrpc/.
>
> The local implementations are simpler too, as they avoid the crypto API
> boilerplate.
>
> I don't know how to test all the code in net/rxrpc/, but everything
> should still work. I added a KUnit test for the crypto functions.
It seems to work, so apart from the two points I noted, you can add:
Acked-by: David Howells <dhowells at redhat.com>
It looks like it might be slightly faster, but I think the overhead reduction
is not that visible with all the other things the filesystem and protocol do
plus I/O overhead. RxGK is a lot faster and more secure, so we should be
moving that way anyway.
David
More information about the linux-afs
mailing list