Support for serpent in the default kernel?

[buggy]

Hi,

could you please add support for Serpent in the default kernel? There are a lot of people preferring this algorithm over the others and it also wouldn't make TC much bigger.

Thanks!

[curaga]

Are you talking about the encryption chipher for loop-aes (aka for TC 2.x)?

If so, the twofish/blowfish/serpent ciphers can only be built as modules. That means they're pretty easy to build, not requiring kernel changes, so likely would be in an extension; on the other hand, to be available in the early boot, they'd need to be in the base image.

However, adding support by default for more than AES which is considered "good enough" by the majority of the security experts, would just add in size without benefit to most. I think the three extra ciphers should thus be an extension, and to be remastered in by those who need them for cryptohome.

Politics aside, I can build them, but not sure when; if someone has time before, feel free to submit