Page MenuHomeFreeBSD

Add warnings to /dev/crypto for deprecated algorithms.
ClosedPublic

Authored by jhb on Jun 7 2019, 9:17 PM.
Tags
None
Referenced Files
F166346320: D20554.id58487.diff
Thu, Aug 13, 1:12 AM
F166234088: D20554.id58487.diff
Wed, Aug 12, 12:28 PM
Unknown Object (File)
Mon, Aug 10, 11:36 PM
Unknown Object (File)
Mon, Aug 10, 4:01 PM
Unknown Object (File)
Sun, Aug 9, 11:27 PM
Unknown Object (File)
Sat, Aug 8, 11:19 PM
Unknown Object (File)
Fri, Aug 7, 3:27 AM
Unknown Object (File)
Wed, Aug 5, 3:15 PM
Subscribers

Details

Summary

These algorithms are deprecated algorithms that will have no in-kernel
consumers in FreeBSD 13. Specifically, deprecate the following algorithms:

  • ARC4
  • Blowfish
  • CAST128
  • DES
  • 3DES
  • MD5-HMAC
  • Skipjack
Test Plan
  • cryptocheck doesn't test any of these, but the python tests do run 3DES test vectors and thus do trigger the warning (and also inspired adding rate limiting since a single run of cryptotest.py generated multiple warnings without rate limiting)

Diff Detail

Repository
rS FreeBSD src repository - subversion
Lint
Lint Not Applicable
Unit
Tests Not Applicable