]> git.ipfire.org Git - thirdparty/linux.git/commit
crypto: af_alg - Allow cbc(paes)
authorRichard Weinberger <richard@nod.at>
Sun, 26 Jul 2026 19:27:16 +0000 (21:27 +0200)
committerHerbert Xu <herbert@gondor.apana.org.au>
Thu, 30 Jul 2026 07:44:21 +0000 (17:44 +1000)
commit285d8204638cf8be0dc304dc40f0290ada701340
treea8b03b16cf06a033118b57485f74984d958b044f
parent6b36f13891ab4709b7d60023005176cdd5c368cf
crypto: af_alg - Allow cbc(paes)

Commit 7524070f26d8 ("crypto: af_alg - Drop support for off-CPU cryptography")
breaks a special use case.  The cbc-paes-caam driver implements the
algorithm cbc(paes), it offers a way to use AES in CBC mode with key
material unknown to userspace.  Instead of an AES key a CAAM BLOB is
passed to the kernel.  So, this crypto operation cannot be
implemented in a userspace library and needs always help from the
kernel.

Explicitly allow this use case.

Cc: Demi Marie Obenour <demiobenour@gmail.com>
Suggested-by: Eric Biggers <ebiggers@kernel.org>
Fixes: 7524070f26d8 ("crypto: af_alg - Drop support for off-CPU cryptography")
Signed-off-by: Richard Weinberger <richard@nod.at>
Reviewed-by: Eric Biggers <ebiggers@kernel.org>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
crypto/algif_skcipher.c