From 61da203324125f1969da086cb297c1ecd76350a6 Mon Sep 17 00:00:00 2001 From: Rouven Czerwinski Date: Sun, 12 Apr 2020 15:04:02 +0200 Subject: boot.initrd.luks: remove x86_64/i586 AES modules Commit 1d2c3279311e4f03fcf164e1366f2fda9f4bfccf in the upstream kernel repository removed support for the scalar x86_64 and i586 AES assembly implementations, since the generic AES implementation generated by the compiler is faster for both platforms. Remove the modules from the cryptoModules list. This causes a regression for kernel versions >=5.4 which include the removal. This should have no negative impact on AES performance on older kernels since the generic implementation should be faster there as well since the implementation was hardly touched from its initial submission. Fixes #84842 --- nixos/modules/system/boot/luksroot.nix | 2 -- 1 file changed, 2 deletions(-) (limited to 'nixos/modules/system/boot/luksroot.nix') diff --git a/nixos/modules/system/boot/luksroot.nix b/nixos/modules/system/boot/luksroot.nix index 31f1e22cda3..7e406f37c13 100644 --- a/nixos/modules/system/boot/luksroot.nix +++ b/nixos/modules/system/boot/luksroot.nix @@ -467,8 +467,6 @@ in [ "aes" "aes_generic" "blowfish" "twofish" "serpent" "cbc" "xts" "lrw" "sha1" "sha256" "sha512" "af_alg" "algif_skcipher" - - (if pkgs.stdenv.hostPlatform.system == "x86_64-linux" then "aes_x86_64" else "aes_i586") ]; description = '' A list of cryptographic kernel modules needed to decrypt the root device(s). -- cgit 1.4.1