The Linux 7.2 kernel merge window includes significant cryptographic subsystem changes. The AF_ALG interface is being deprecated due to its large attack surface, recent security vulnerabilities (including the Copy Fail root access vulnerability), and limited maintenance. Hardware offload and zero-copy support for AF_ALG have already been removed. AIO on sockets support is also removed as it was only used by AF_ALG. Several insecure or unused crypto components are being cleaned up: crypto4xx_rng, CTR_DRBG, HASH_GRBG, Samsung exynos-rng, and Allwinner sun4i_ss_rng drivers. On the additions side, Intel QuickAssist (QAT) gains sysfs PCI reset support and Key Protection Technology (KPT) for next-gen GEN6 hardware.
116 Impressions