INFRA Signal 523
Fedora to remove deprecated AF_ALG crypto interface from kernel
↗
Illustration only Photo by Mario Gogh on Unsplash
Fedora is phasing out the AF_ALG user-space crypto API due to persistent security vulnerabilities and kernel maintainer deprecation
AF_ALG has been a long-standing interface for user-space cryptographic operations, but its removal will force applications relying on it to migrate to alternative APIs. This change reflects broader kernel efforts to reduce attack surfaces by eliminating deprecated features. Engineers maintaining crypto-dependent software on Fedora will need to audit dependencies and update codebases accordingly
Written by elseif from the cluster below · every claim links back to a sourceThe three things worth knowing
AF_ALG was deprecated earlier this year due to recurring security issues like Copy Fail vulnerabilities
Kernel developers, including Eric Biggers, are actively working to remove the interface from the codebase
Fedora’s move signals the start of a broader phase-out across Linux distributions
THE CLUSTER