[PATCH 0/3] crypto: af_alg_restrict cleanups

From: Eric Biggers

Date: Sun Aug 02 2026 - 19:02:22 EST


- Make cbc(paes) privileged-only for now, as previously discussed
- Make it more explicit when unprivileged use is allowed
- Avoid some redundant work during allowlist checking

Eric Biggers (3):
crypto: af_alg - Make cbc(paes) privileged-only
crypto: af_alg - Replace 'bool privileged' with flags
crypto: af_alg - Stop after finding name in allowlist

crypto/af_alg.c | 10 +++++++---
crypto/algif_aead.c | 2 +-
crypto/algif_hash.c | 28 ++++++++++++++--------------
crypto/algif_skcipher.c | 28 ++++++++++++++--------------
include/crypto/if_alg.h | 6 +++++-
5 files changed, 41 insertions(+), 33 deletions(-)


base-commit: 947d62c094367ef6064907d570b47612cd579df6
--
2.55.0