Re: [PATCH] fscrypt: Use aes_ecb_encrypt() for v1 key derivation

From: Eric Biggers

Date: Thu Sep 17 2026 - 22:22:59 EST


On Mon, Aug 31, 2026 at 12:24:11PM -0700, Eric Biggers wrote:
> Now that there's a library function aes_ecb_encrypt(), use it instead of
> a loop of aes_encrypt() calls.
>
> Note that the use of AES-ECB here is purely for the key derivation
> function used by the deprecated v1 encryption policies. v2 encryption
> policies use HKDF-SHA512 instead. Nevertheless, the original version
> has to continue to be supported for backwards compatibility.
>
> Signed-off-by: Eric Biggers <ebiggers@xxxxxxxxxx>
> ---
> fs/crypto/Kconfig | 2 +-
> fs/crypto/keysetup_v1.c | 5 ++---
> 2 files changed, 3 insertions(+), 4 deletions(-)

Applied to https://git.kernel.org/pub/scm/fs/fscrypt/linux.git/log/?h=for-next

- Eric