Re: [PATCH 2/3] AF_ALG: Drop support for off-CPU cryptography

[Eric Biggers]

On Sat, Jul 25, 2026 at 12:35:55AM +0900, Dominique Martinet wrote:
> The tool source is available here:
> https://github.com/nxp-imx/crypto_af_alg
> (which now fails with:
> bind(3, {sa_family=AF_ALG, salg_type="skcipher", salg_feat=0, salg_mask=0, salg_name="tk(cbc(aes))"}, 88) = -1 ENOENT (No such file or directory)
> )
> 
> 
> I don't particularily care for the API used as long as we can keep using
> the hardware key, but as far as I can see there's no alternative API --
> what's the path forward?

There's no "tk(cbc(aes))" algorithm in the upstream kernel.  So, it's
not possible that this ever worked with upstream.  Given that, there's
no regression in upstream for this program, and it wouldn't be
appropriate to consider a sysctl knob in upstream at this time.

- Eric