Upcoming changes to crypto(9) and dm_target_crypt(4)

Aaron LI aly at aaronly.me
Thu Apr 3 18:45:00 PDT 2025


On 4/4/25 3:35 AM, Michael Neumann wrote:
> Hi,
> 
> I've been working on this for a while. Now it is fairly stable -
> I am running this since a few days on my laptop with sensible data.
> 
> The patch is massive mainly because it gets rid of plenty of legacy
> code!

Hi Michael, great job. Thanks.

> The patch is here:
> 
> https://leaf.dragonflybsd.org/~mneumann/0001-Retire-crypto-9-and-tcplay-8-and-refactor-dm_target_.patch
> 
> Summarising the changes:
> 
> * crypto(9) (opencrypto) is gone
> 
> * /dev/crypto is gone

Will this change require modifications to OpenSSL/LibreSSL/OpenSSH etc. 
software?

> * tcplay(8) is gone

Hmm, I'd not just remove tcplay(8). As alexh said (in 
https://github.com/bwalex/tc-play ) it's quite robust and mature. And 
the upstream also added VeraCrypt support.

> Feel free to comment and test. If there are no objections, I'd love
> to commit this in the coming weeks, either as one huge commit, or
> maybe splitting it up into more digestable changes?

I'd like separate commits.  Easy to reason and blame in the future.


Cheers,
Aaron



More information about the Users mailing list