Re: [PATCH bpf-next v3] bpf: crypto: Use AES-CBC and AES-ECB libraries

From: Alexei Starovoitov

Date: Tue Sep 22 2026 - 00:49:43 EST


On Mon, Sep 21, 2026 at 09:04 PM Eric Biggers <ebiggers@xxxxxxxxxx> wrote:
> +config BPF_CRYPTO
> + def_bool y
> + depends on BPF_SYSCALL
> + depends on CRYPTO_LIB_AES_CBC
> + depends on CRYPTO_LIB_AES_ECB

This will break the build with CRYPTO_AES=m.

> struct bpf_crypto_ctx {
> - const struct bpf_crypto_type *type;
> - void *tfm;
> - u32 siv_len;
> + enum bpf_crypto_algo_id algo;
> + void *key;

No need for this. The bot was wrong.
Reading any field of struct bpf_crypto_ctx requires CAP_PERFMON.

pw-bot: cr