[From nobody Tue May  5 18:11:05 2026
Received: (at 1134722-done) by bugs.debian.org; 5 May 2026 17:09:42 +0000
X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02
 (2024-03-25) on buxtehude.debian.org
X-Spam-Level: 
X-Spam-Status: No, score=-7.1 required=4.0 tests=BAYES_00,DKIM_SIGNED,
 DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FOURLA,HAS_BUG_NUMBER,
 SPF_HELO_NONE,SPF_NONE autolearn=ham autolearn_force=no
 version=4.0.1-bugs.debian.org_2005_01_02
X-Spam-Bayes: score:0.0000 Tokens: new, 23; hammy, 150; neutral, 32; spammy,
 0. spammytokens: hammytokens:0.000-+--XDebbugsCc,
 0.000-+--X-Debbugs-Cc, 0.000-+--UD:gitlab.com, 0.000-+--gitlabcom,
 0.000-+--gitlab.com
Return-path: <ametzler@bebt.de>
Received: from vsrv21575.customer.vlinux.de ([31.15.64.248]:44876)
 by buxtehude.debian.org with esmtps
 (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256)
 (Exim 4.96) (envelope-from <ametzler@bebt.de>) id 1wKJHB-00Ainw-2Z
 for 1134722-done@bugs.debian.org; Tue, 05 May 2026 17:09:42 +0000
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=bebt.de;
 s=d2; h=In-Reply-To:Content-Type:MIME-Version:References:Message-ID:Subject:
 To:From:Date:From:Sender:Reply-To:Subject:Date:Message-ID:To:Cc:MIME-Version:
 Content-Type:Content-Transfer-Encoding:Content-ID:Content-Description:
 In-Reply-To:References; bh=30S7GVDYl956XLVIzC8OS1s73SGINtAQcX8FNKX/R+I=; b=fX
 MIyi3KnUK9uQyVDQ7oqW+LlqTi26YjeYaSRxV77M+rNtmPWt41FLAjQNgLXpZ8CN1T8EIjE4SYx6X
 JQNCItDhO4k1I+1PVNFzjvRZ7ID9CZQyx1eTF8ELheGQCn4nxTVVQoQs20ADSbLzw1rB7QFVvbi3p
 Rf9gQCRTNgpLi/EBJeV2V0+c+R1WfTV4K8lsnA3GwB1xxhorXf9Wjgbi1ajzImp891EGRC9eD9rxN
 ve99wCT33Kv7A9t7JdX1SYiuHwCQDcpmeOg17HIc1aRBSsjgVoBx832O7wBjbB567jE1TpULq2Qdd
 kHTfALWZxOn6fAlsTAqouE8xszytgyfg==;
Received: from [41.66.122.96] (helo=argenau.bebt.de)
 by vsrv21575.customer.vlinux.de with esmtpsa (TLS1.3) tls
 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.99.2)
 (envelope-from <ametzler@bebt.de>) id 1wKJH2-00000000hUw-3O9e
 for 1134722-done@bugs.debian.org; Tue, 05 May 2026 17:09:37 +0000
Received: from [::1] (helo=argenau.bebt.de)
 by argenau.bebt.de with esmtps (TLS1.3) tls
 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.99.2)
 (envelope-from <ametzler@bebt.de>) id 1wKJH2-000000000fp-2PzK
 for 1134722-done@bugs.debian.org; Tue, 05 May 2026 19:09:31 +0200
Date: Tue, 5 May 2026 19:09:30 +0200
From: Andreas Metzler <ametzler@bebt.de>
To: 1134722-done@bugs.debian.org
Subject: Re: Bug#1134722: Enable AF_ALG in gnutls
Message-ID: <afokSnnjJ2E-pWA4@argenau.bebt.de>
References: <CADzzt1Cqk+MFv=+jaEXkki54PNeEuZ30iYOmu20ZC5XR+cyUng@mail.gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <CADzzt1Cqk+MFv=+jaEXkki54PNeEuZ30iYOmu20ZC5XR+cyUng@mail.gmail.com>

On 2026-04-23 Wesley Hershberger via Pkg-gnutls-maint <pkg-gnutls-maint@alioth-lists.debian.net> wrote:
> Package: gnutls28
> Version: 3.8.12-4
> Severity: wishlist
> X-Debbugs-Cc: jorge.merlino@canonical.com
> X-Debbugs-Cc: pkg-gnutls-maint@lists.alioth.debian.org

> A while ago, gnutls upstream added support for AF_ALG as an
> alternative crypto backend [1]. The feature is disabled in the latest
> version of gnutls in sid:

> configure: External hardware support:

>   /dev/crypto:          no
>   AF_ALG support:       no
>   Hardware accel:       x86-64
>   Padlock accel:        yes
>   Random gen. variant:  getrandom
>   PKCS#11 support:      yes
>   TPM support:          no
>   TPM2 support:         no
>   KTLS support:         no

> It would be nice to enable this feature to allow userspace programs
> using gnutls (QEMU in my case) to use hardware-accelerated crypto
> (Intel QAT or others).
[...]

AF_ALG is going to be marked obsolete.
https://gitlab.com/gnutls/gnutls/-/work_items/1881#note_3314606699

cu Andreas
-- 
"You people are noisy," Nia said.
I made the gesture of agreement.]