Re: [PATCH net-next 1/2] ipv6: Switch to higher-level SHA-1 functions
From: David Ahern <dsahern@kernel.org>
Date: 2026-01-26 03:46:25
Also in:
linux-crypto
From: David Ahern <dsahern@kernel.org>
Date: 2026-01-26 03:46:25
Also in:
linux-crypto
On 1/22/26 10:16 PM, Eric Biggers wrote:
There's now a proper SHA-1 API that follows the usual conventions for hash function APIs: sha1_init(), sha1_update(), sha1_final(), sha1(). The only remaining user of the older low-level SHA-1 API, sha1_init_raw() and sha1_transform(), is ipv6_generate_stable_address(). I'd like to remove this older API, which is too low-level. Unfortunately, ipv6_generate_stable_address() does in fact skip the SHA-1 finalization for some reason. So the values it computes are not standard SHA-1 values, and it sort of does want the low-level API. Still, it's still possible to use the higher-level functions sha1_init() and sha1_update() to get the same result, provided that the resulting state is used directly, skipping sha1_final(). So, let's do that instead. This will allow removing the low-level API. Reviewed-by: Ard Biesheuvel <ardb@kernel.org> Signed-off-by: Eric Biggers <ebiggers@kernel.org> --- net/ipv6/addrconf.c | 21 +++++++++++++-------- 1 file changed, 13 insertions(+), 8 deletions(-)
Acked-by: David Ahern <dsahern@kernel.org>