Re: [PATCH] crypto: testmgr - block Crypto API xxhash64 in FIPS mode

From: Christoph Hellwig

Date: Wed Mar 04 2026 - 08:10:36 EST


On Tue, Mar 03, 2026 at 11:31:02AM -0800, Eric Biggers wrote:
> > It sounds like xxhash should be removed the crypto API entirely.
> > There's no user of it, it's not crypto, and doing xxhash through
> > the userspace crypto API socket is so stupid that I doubt anyone
> > attempted it.
>
> dm-integrity, which uses crypto_shash and accepts arbitrary hash
> algorithm strings from userspace, might be relying on "xxhash64" being
> supported in crypto_shash. The integritysetup man page specifically
> mentions xxhash64:

Oh, ok. So at least for now we need it, although it would be nice to
convert dm-integrity to lib/crypto/ and limit it to the advertised
algorithms (including xxhash).