Re: [PATCH 29/33] bpf: crypto: Use AES-CBC and AES-ECB libraries

[Vadim Fedorenko]

On 09/07/2026 16:47, Eric Biggers wrote:
> On Wed, Jul 08, 2026 at 12:47:43PM +0100, Vadim Fedorenko wrote:
> > On 08/07/2026 00:16, Eric Biggers wrote:
> > > On Tue, Jul 07, 2026 at 11:50:33PM +0100, Vadim Fedorenko wrote:
> > > > > Does this mean the AES-ECB support is unnecessary and can be dropped?
> > > >
> > > > Let's keep it if it doesn't hurt.
> > >
> > > It kind of does.  It is "bad" crypto that would have to continue to be
> > > maintained, and someone might start using it accidentally.
> >
> > AES-ECB was introduced as a cipher to use in QUIC-LB draft,
> > draft-ietf-quic-load-balancers-21
> >
> > I know it is expired draft, but it may be worth keeping this cipher
> > as QUIC WG github is still active
>
> Sigh.  We shouldn't implement Internet-Drafts that have clear issues
> with how they use cryptography.  They're likely to change when they
> undergo cryptography review.  We went through this same thing with
> TCP-AO, where I ended up joining the tcpm working group and getting the
> draft fixed.  Do I need to do the same with this one too?

Looks like they need some crypto expert joining WG, but I'm not
currently following the group, unfortunately.