Subject: Re: [PATCH iproute2-next v2] lib/bpf_legacy: Use userspace SHA-1 code instead of AF_ALG

From: Stephen Hemminger <[email-masked]>
Date: Wed, 12 Nov 2025 12:12:12 -0800

On Mon, 29 Sep 2025 12:46:48 -0700
Eric Biggers <[email-masked]> wrote:

> diff --git a/lib/sha1.c b/lib/sha1.c
> new file mode 100644
> index 00000000..1aa8fd83
> --- /dev/null
> +++ b/lib/sha1.c
> @@ -0,0 +1,108 @@
> +// SPDX-License-Identifier: GPL-2.0-or-later
> +/*
> + * SHA-1 message digest algorithm
> + *
> + * Copyright 2025 Google LLC
> + */

Not a big fan of having actual crypto in iproute2.
It creates even more technical debt.
Is there another crypto library that could be used?

Better yet, is there a reason legacy BPF code needs to still exist
in current iproute2? When was the cut over.