[lkml]   [2004]   [Jul]   [22]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
    SubjectRe: [PATCH] Delete cryptoloop
    Hello James and Andrew,

    Hopefully someone else will follow up, but I hope I'm somewhat convincing:

    Andrew Morton said:
    > James Morris <> wrote:
    >> This patch deletes cryptoloop,
    > OK - if nobody complains convincingly we'll drop cryptoloop out of 2.6.9.

    Cryptoloop is deprecated (since 2.6.4), but that doesn't mean it should be
    deleted. As is the case with many deprecated APIs, they usually hang
    around for a long time (until the next major rev) so that people have a
    chance to transition their tools. Is no one else using cryptoloop? Are 5
    minor revs really enough time (so far about 5 months)?

    >> which is buggy, unmaintained, and
    >> reportedly has mutliple security weaknesses.
    > Doesn't dm-crypt have the same security weaknesses?

    I don't doubt the superiority of dm-crypt. But most people using a
    _deprecated_ feature would know that means "buggy, unmaintained" and with
    possible weaknesses.

    Perhaps a better way to communicate deprecation, instead of pulling the
    rug out from under people by deleting so soon, is to inject warnings
    during compilation, or even during use. Or, split off the new code into a
    differently named module -- leaving a clean way to throw out the old

    From the cryptoloop HOWTO website:

    "Dm-crypt is available in the main kernel since 2.6.4. Cryptoloop will
    still be available in the main kernel for a long time, but dm-crypt will
    be the method of choice for disk encryption in the future."

    And then it goes on to say:

    "It is still very new and there are no easy-to-use userspace tools
    available yet. Dm-crypt is considered to be much cleaner code than
    Cryptoloop, but there are some important differences. For example,
    creating an ecrypted filesystem within a file will still require to go
    through a loop device, but this support is still in development."

    So it looks like dm-crypt is still up in the air on feature compatibility
    with cryptoloop.

    Deleting cryptoloop in 2.6.9 seems too soon -- even the cryptoloop HOWTO
    maintainer (Ralph Hölzer) seems to expect it to hang around.

    In February, lkml had essentially the same discussion.

    Ditching cryptoloop completely in 2.7 after dm-crypt matures would be a
    better idea.


    Dale Fountain

    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to
    More majordomo info at
    Please read the FAQ at

     \ /
      Last update: 2005-03-22 14:04    [W:0.024 / U:0.588 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site