Comment 1 for bug 994813

Revision history for this message
Tyler Hicks (tyhicks) wrote : Re: kernel cipher support detection lags behindkernel crypto api changes

Rather than try to keep up with the kernel crypto api changes, I'd like to remove the unnessarily complicated kerner cipher detection code. It is over-engineered, does things that it probably shouldn't do, makes assumptions that it shouldn't, etc.

The eCryptfs kernel code behind the mount() syscall already checks to make sure that the kernel supports the cipher and keysize specified in the mount options. Lets just let that do the checking. ecryptfs-utils will just have to maintain a list of ciphers that the eCryptfs kernel code may support, prompt the user for all of those, and then let the kernel handle the error checking.