Page MenuHomeFreeBSD

Add warnings to /dev/crypto for deprecated algorithms.
ClosedPublic

Authored by jhb on Jun 7 2019, 9:17 PM.
Tags
None
Referenced Files
F148646631: D20554.diff
Thu, Mar 19, 8:25 AM
Unknown Object (File)
Sun, Mar 15, 8:37 AM
Unknown Object (File)
Thu, Mar 5, 12:23 PM
Unknown Object (File)
Wed, Mar 4, 9:57 PM
Unknown Object (File)
Jan 6 2026, 5:54 PM
Unknown Object (File)
Dec 14 2025, 7:21 AM
Unknown Object (File)
Nov 29 2025, 4:29 PM
Unknown Object (File)
Nov 27 2025, 11:01 AM
Subscribers

Details

Summary

These algorithms are deprecated algorithms that will have no in-kernel
consumers in FreeBSD 13. Specifically, deprecate the following algorithms:

  • ARC4
  • Blowfish
  • CAST128
  • DES
  • 3DES
  • MD5-HMAC
  • Skipjack
Test Plan
  • cryptocheck doesn't test any of these, but the python tests do run 3DES test vectors and thus do trigger the warning (and also inspired adding rate limiting since a single run of cryptotest.py generated multiple warnings without rate limiting)

Diff Detail

Lint
Lint Skipped
Unit
Tests Skipped
Build Status
Buildable 24762
Build 23523: arc lint + arc unit