At the 2026 Linux Security Summit North America, Eric Biggers presented ongoing efforts to replace the traditional Linux kernel crypto API with new library APIs that are safer and simpler to use. This modernization reduces complexity and potential security bugs in kernel cryptography, benefiting all kernel subsystems that rely on encryption, hashing, and authentication. The traditional crypto API, introduced in 2002, has become complex, slow, and poorly optimized for modern CPU-based acceleration, leading to maintenance and performance issues.
Background
The Linux kernel crypto API is a framework providing standardized interfaces for cryptographic algorithms such as ciphers, hashes, and message authentication codes. It has been part of the kernel since version 2.5.45 but its design has become outdated, prompting efforts to adopt library APIs for safer and more efficient crypto operations.