#Phoronix Phoronix * Articles & Reviews * News Archive * Forums * Premium Ad-Free * Contact * Popular Categories * Close * * Articles & Reviews * News Archive * Forums * Premium * Contact * Categories Computers Display Drivers Graphics Cards Linux Gaming Memory Motherboards Processors Software Storage Operating Systems Peripherals * ____________________ Search Cryptsetup 2.8.7 Released To Deal With Fallout Of Linux's Rushed AF_ALG Deprecation Written by Michael Larabel in Linux Storage on 21 July 2026 at 06:00 PM EDT. 15 Comments LINUX STORAGE Linux's cryptsetup for configuring and managing encrypted storage devices is ready with a new version as the developers work to deal with the recent deprecation of the Linux AF_ALG interface. Cryptsetup has been one of the users of AF_ALG for providing user-space applications with direct access to the Linux kernel's internal cryptography API. But various aspects of AF_ALG have been quickly removed in the name of security concerns and in Linux 7.2 AF_ALG was deprecated due to its "massive attack surface". For Linux 7.3, AF_ALG is being further optionally restricted via a new sysctl tunable. This leaves user-space software like Cryptsetup and AF_ALG with challenges as they have long relied on this interface now deemed too large of a security burden. With today's Cryptsetup 2.8.7 release, they have begun adapting the code to ensure it can survive without AF_ALG and fallback well to a user-space crypto library. There are currently some limitations in the user-space library approach as noted in the v2.8.7 release notes: "Changes related to Linux kernel AF_ALG crypto userspace interface deprecation Linux kernel maintainers decided to deprecate the AF_ALG interface, which was heavily used by cryptsetup, with the plan to remove it (or severely limit it) for security reasons. Libcryptsetup uses userspace (primarily via AF_ALG) for processing LUKS keyslots and for on-disk metadata handling for other formats. Using AF_ALG ensured that the same set of algorithms is present in userspace and later in-kernel for device activation. While libcryptsetup has a concept of fallback to userspace library, it was not used in all situations. In this version, libcryptsetup can use a userspace crypto library, AF_ALG (if present), and in some situations (LUKS keyslots), fallback to a temporary dm-crypt mapping. The last option requires root privileges. This ensures that most operations will continue to work even when AF_ALG is disabled or limited. Unfortunately, removing the AF_ALG could cause severe compatibility issues if the required algorithm (or encryption mode) is not implemented in the userspace library. A typical example is the Adiantum cipher, which is implemented only in the kernel. Also, ciphers like Serpent or Twofish (in XTS mode) are missing from several userspace libraries. The cryptsetup benchmark for ciphers is no longer available if the AF_ALG interface is unavailable." Beyond dealing with AF_ALG quickly going away, Cryptsetup 2.8.7 brings keyring handling changes, changes to deal with possible LUKS volume key digest collisions, Aria and Camellia cipher support in the libgcrypt backend, and other fixes. Linux disk encryption Cryptsetup 2.8.7 can be downloaded from GitLab. 15 Comments Tweet IFRAME: //www.facebook.com/plugins/like.php?href=https://www.phoronix.com/news/ Cryptsetup-2.8.7-Released&width=200&height=46&colorscheme=light&layout= button_count&action=like&show_faces=false&send=true Related News EFS File-System Slated For Removal With Linux 7.3 After 20+ Years Unmaintained Linux 7.3 To Overcome "Significant Bottleneck" For Small I/O With PCIe Gen5 NVMe SSDs Next Bcachefs Release Aims To Include Rust Code In The Kernel Module Linux MD RAID5 Seeing Scalability Improvements Up To 17% KSMBD Adds SMB2 Compression Support In Linux 7.2 NTFS3 Driver Sees Bug Fixes & Minor Improvements With Linux 7.2 About The Author Michael Larabel is the principal author of Phoronix.com and founded the site in 2004 with a focus on enriching the Linux hardware experience. Michael has written more than 20,000 articles covering the state of Linux hardware support, Linux performance, graphics drivers, and other topics. Michael is also the lead developer of the Phoronix Test Suite, Phoromatic, and OpenBenchmarking.org automated benchmarking software. He can be followed via Twitter, LinkedIn, or contacted via MichaelLarabel.com. Popular News This Week The Last MPEG-4 Visual Patent Has Expired FreeBSD 16 Retires The Last Of Its GPL Code From Its Base System Linus Torvalds Reaffirms That Linux Is Not "Anti-AI" & Not A "Social Warrior" Project Firefox 153 Available With Support For Vulkan Video Decoding, Experimental JPEG-XL Frame: A New X11 Server Implementation Written Entirely In x86_64 Assembly AMD Releases Lemonade 11.0 Local AI Server With Text-To-Speech, Other New Features Ubuntu Kernel Team Warns Of Temporary AMD GPU Performance Regression Up To 42x Microsoft Goes Nostalgic In Newest Open-Source Drop: Comic Chat Open-Sourced After 30 Years Latest Linux News libx11-compat Is Working To Implement Xlib Atop SDL For Wayland, macOS, Android Intel Directed Package-Level Thermal Interrupts Slated For Linux 7.3 The "New Normal" Of Audio Quirks Submitted For Linux 7.2-rc5 Raspberry Pi Touch Display 2 10-Inch Model Launches Cryptsetup 2.8.7 Released To Deal With Fallout Of Linux's Rushed AF_ALG Deprecation Three New Ubuntu Snap Vulnerabilities Made Public - One Dates Back To Ubuntu 16.04 LTS Qualcomm Posts Linux Patches For X2 Elite Extreme Powered ASUS Zenbook A16 Canonical Makes The "Enterprise Store" Official For Offline/Air-Gapped Ubuntu Usage Stratis Storage Anaconda Integration Approved For Fedora 45 AMD Ryzen AI Halo LED Driver Queued For Introduction In Linux 7.3 Intel Compute Runtime Continues Building Out Exciting "LEO" Show Your Support, Go Premium Phoronix Premium allows ad-free access to the site, multi-page articles on a single page, and other features while supporting this site's continued operations. Latest Featured Articles KDE Plasma 6.7 vs. GNOME Shell 50.3 vs. Xfce 4.20 On CachyOS With NVIDIA Graphics Linux 7.2 Improves Intel Panther Lake Xe3 Arc B390 Graphics Performance AMD Ryzen 7 7700X3D Linux Performance Ubuntu 26.04 LTS vs. Windows 11 vs. CachyOS Performance On A $5399 Laptop BOSGAME VTA-439: A Great, Linux-Friendly Mini PC Powered By AMD Ryzen AI 9 HX 470 Support Phoronix The mission at Phoronix since 2004 has centered around enriching the Linux hardware experience. In addition to supporting our site through advertisements, you can help by subscribing to Phoronix Premium. You can also contribute to Phoronix through tips/donations via PayPal or Stripe. Phoronix Media __________________________________________________________________ * Contact * Michael Larabel Phoronix Premium __________________________________________________________________ * Support Phoronix * While Having Ad-Free Browsing, * Single-Page Article Viewing Share __________________________________________________________________ * Facebook * Twitter / X * Legal Disclaimer, Privacy Policy, Cookies | (BUTTON) Privacy Manager | Contact * Copyright © 2004 - 2026 by Phoronix Media. * All trademarks used are properties of their respective owners. All rights reserved.