Re: [PATCH 0/3] crypto: Remove arch-optimized des and des3_ede code

Harald Freudenberger
2026-04-08T13:35:24Z

On 2026-03-26 21:20, John Paul Adrian Glaubitz wrote:
> On Thu, 2026-03-26 at 13:12 -0700, Eric Biggers wrote:
>> DES and 3DES are cryptographically obsolete and insecure by modern
>> standards. Continuing to maintain highly specific, complex assembly
>> and
>> glue code for them, especially when the code isn't testable in QEMU
>> (s390 and sparc), is unnecessary and risky.
>
> We're working on getting crypto instructions added to QEMU though.
>
> Adrian

Hi Adrian

I am about to implement some of the cpacf instructions for qemu.
Eric and others complained about being unable to test the s390 in-kernel
crypto
implementations and thus I am about to improve this. As soon as my patch
series
is in a good shape I'll forward it to you. As of now my main focus is on
AES (ECB,
CTR, CBC, XTS) with and without protected key support.
Please let us not do this work twice - so get in contact with me and
Holger
about possible s390 specific crypto implementations for qemu.

Harald Freudenberger