Re: [RFC PATCH] crypto: pcrypt - Disallow nesting of the pcrypt wrapper
From: Herbert Xu
Date: Sun Jul 12 2026 - 22:56:40 EST
On Sun, Jul 12, 2026 at 10:46:54PM -0400, Eric Biggers wrote:
>
> Could we just delete pcrypt instead of continuing to try to fix all the
> weird problems it has? A web search for pcrypt just finds CVEs and
> advice not to use it, e.g.
> https://github.com/libreswan/libreswan/wiki/Internals:-Cryptographic-Acceleration#obsoleted-ipsec-accelerations
>
> What is the rationale for keeping it? Who cares about it, other than
> people looking for vulnerabilities?
I wouldn't object. Last time I tried it the start-up time was
about 20,000 cycles, which is just pointless these days.
Please send a patch.
Thanks,
--
Email: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt