Post #1844961
2026-04-30 01:45 UTC
I don't understand why everyone is picking on algif_aead for copy.fail. It's authencesn that's actually fucking things up.
Sure, you could keep using authencesn for IPsec if you break AF_ALG AEADs. But why? I'd rather break ESN support in IPsec and keep AF_ALG working for AEADs.
It doesn't even break IPsec, it just makes it rotate keys more often in very high bandwidth situations.
Replies (2)
-
@mirabilos@toot.mirbsd.org 2026-04-30 02:17
@equinox@chaos.social the website makes it sound as if you actually want to block the af_alg module as there will be more things to be disclosed
-
@lanodan@queer.hacktivis.me 2026-04-30 02:18
@equinox@chaos.social Well it's what CVE-2026-31431 mentions, what it's linked commits to stable modify, and what the python PoC seems to be using.