Adrian

@adrianyyy@chaos.social
287 Followers
65 Following
1,090 Posts

Rust developer by day, Linux kernel developer and LineageOS maintainer by night. Probably porting postmarketOS to your device.

Residential cook @cccac, recipe and foodporn posts @cccac_kueche

I listen to k-pop, get over it.

Pronounsany
GitHubhttps://github.com/Gelbpunkt
GitLabhttps://gitlab.com/Adrianyyy
@adrianyyy don't do asymmetric crypto involving private keys using this interface. The kernel implementation (e.g., of RSA) isn't side-channel safe. CVE-2023-6240
@soc thanks, fixed
check /proc/crypto for supported algorithms on your system :)
@domi it's more an interface for any algorithms the kernel implements for various reasons, crypto and compression :D

TIL: Ever wanted to compress data or use cryptographic algorithms but you don't want to link to C libraries or you're just plain lazy?

The Linux kernel has you covered! Create a socket of type AF_ALG, bind to your favorite algorithm, send() in your data and recv() it back!

This seems to support deflate, SHA, RSA and some more on ppc64le and additionally even zstd, chacha, lzo, hmac and more on ARM!

https://www.kernel.org/doc/html/latest/crypto/userspace-if.html

User Space Interface — The Linux Kernel documentation

@cloudflare seems to have forgotten that GZIP exists with their new "block AI crawler" thingy by prepending text *in plaintext* in a GZIP-ed origin response, rendering the complete robots.txt response useless.

Chrome, Firefox, curl (with --compressed argument) and Golang are not happy about this, complaining about various decoding errors while NodeJS just stalls completely when trying to decode the response.

Requesting brotli or zstd seems to bypass this, not altering the response.

@0x6e6174 @famfo good luck compile fixing that :3
@0x6e6174 @famfo iirc they do
#OH: systemdm
@jn @merlin is there an activitypub server in C?
×
@adrianyyy @craftyguy what a nugget
@elly @craftyguy putting the power supplies in the front and still having the plugs in the back is such a stupid move