[PATCH] crypto: testmgr - block Crypto API xxhash64 in FIPS mode
Christoph Hellwig
hch at infradead.org
Wed Mar 4 05:09:25 PST 2026
On Tue, Mar 03, 2026 at 11:31:02AM -0800, Eric Biggers wrote:
> > It sounds like xxhash should be removed the crypto API entirely.
> > There's no user of it, it's not crypto, and doing xxhash through
> > the userspace crypto API socket is so stupid that I doubt anyone
> > attempted it.
>
> dm-integrity, which uses crypto_shash and accepts arbitrary hash
> algorithm strings from userspace, might be relying on "xxhash64" being
> supported in crypto_shash. The integritysetup man page specifically
> mentions xxhash64:
Oh, ok. So at least for now we need it, although it would be nice to
convert dm-integrity to lib/crypto/ and limit it to the advertised
algorithms (including xxhash).
More information about the linux-arm-kernel
mailing list