[Dev] [BREAKAGE][OPENSSL][FDE] OpenSSL3 deprecation of whirlpool breaking FDE on Libreboot

Wael Karram wael at waelk.tech
Mon Nov 7 14:50:59 GMT 2022


Hello,
As mentioned on issue 3368, OpenSSL upstream (issue 5118, github tracker)
deprecated the whirlpool hash algorithm (currently a compile-time option).
It seems that upstream (Arch) hasn't enabled the flag for it with OpenSSL3, this
will cause un-bootable systems on all Libreboot systems that followed the guide
on libreboot.org and/or the Parabola wiki for an FDE installation since 2018 at
least.

I've opened an issue in Libreboot's bug tracker:
https://notabug.org/libreboot/lbmk/issues/126
But I do think it is a good idea if a news item gets posted about this.

-- 
Kind Regards,
Wael Karram.


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: This is a digitally signed message part
URL: <https://lists.parabola.nu/pipermail/dev/attachments/20221107/65839aa9/attachment.sig>


More information about the Dev mailing list