Re: [PATCH 29/33] bpf: crypto: Use AES-CBC and AES-ECB libraries

[Eric Biggers <ebiggers@kernel.org>]

On Wed, Jul 08, 2026 at 12:47:43PM +0100, Vadim Fedorenko wrote:
> On 08/07/2026 00:16, Eric Biggers wrote:
> > On Tue, Jul 07, 2026 at 11:50:33PM +0100, Vadim Fedorenko wrote:
> > > > Does this mean the AES-ECB support is unnecessary and can be dropped?
> > > 
> > > Let's keep it if it doesn't hurt.
> > 
> > It kind of does.  It is "bad" crypto that would have to continue to be
> > maintained, and someone might start using it accidentally.
> 
> AES-ECB was introduced as a cipher to use in QUIC-LB draft,
> draft-ietf-quic-load-balancers-21
> 
> I know it is expired draft, but it may be worth keeping this cipher
> as QUIC WG github is still active

Sigh.  We shouldn't implement Internet-Drafts that have clear issues
with how they use cryptography.  They're likely to change when they
undergo cryptography review.  We went through this same thing with
TCP-AO, where I ended up joining the tcpm working group and getting the
draft fixed.  Do I need to do the same with this one too?

- Eric