Re: [PATCH bpf-next] bpf: crypto: Use AES-CBC and AES-ECB libraries

[Eric Biggers]

On Mon, Aug 31, 2026 at 02:59:39PM -0700, Eric Biggers wrote:
> Almost every kernel has CRYPTO and CRYPTO_SKCIPHER2 enabled anyway, and
> CRYPTO_SKCIPHER2 also enables ECB support.  So the change isn't actually
> as drastic as the bot implies, but I'd be glad to give BPF_CRYPTO a
> prompt if the BPF folks are okay with that.

I don't see other examples of kfuncs with visible kconfig options.  The
convention is to automatically enable them when the parent subsystem is
enabled.

It feels like bpf crypto is a de facto standalone feature, so I'm not
sure how well that applies here.  Regardless, for now I'll use "depends
on CRYPTO_LIB_AES_CBC" and "depends on CRYPTO_LIB_AES_ECB".

- Eric