Re: [PATCH RFC v1 2/3] ipv6: move from sha1 to blake2s in address calculation

From: Jason A. Donenfeld
Date: Thu Jan 13 2022 - 08:54:25 EST


On Thu, Jan 13, 2022 at 2:50 PM Ard Biesheuvel <ardb@xxxxxxxxxx> wrote:
> > Then, at some point down the road, we can talk about removing
> > CONFIG_NET_OBSOLETE_INSECURE_ADDRCONF_HASH too.
> >
>
> What is the point of having CONFIG_OLD_N_CRUSTY if all distros are
> going to enable it indefinitely?

I think there's probably some combination of
CONFIG_NET_OBSOLETE_INSECURE_ADDRCONF_HASH and CONFIG_OLD_N_CRUSTY and
maybe even a CONFIG_GOD_MURDERS_KITTENS that might be sufficiently
disincentivizing? Or this ties into other general ideas on a gradual
obsolescence->removal flow for things.