=================/proc/sys/crypto/================= These files show up in ``/proc/sys/crypto/``, depending on thekernel configuration: .. contents:: :local: .. _af_alg_restrict: af_alg_restrict=============== Controls the level of restriction of AF_ALG. AF_ALG is a deprecated and rarely-used userspace interface that is afrequent source of vulnerabilities. It also unnecessarily exposes alarge number of kernel implementation details. For more informationabout AF_ALG, see :ref:`Documentation/crypto/userspace-if.rst<crypto_userspace_interface>`. Starting in Linux v7.3, AF_ALG supports only a limited set ofalgorithms by default. This sysctl allows the system administrator toremove this restriction when needed for compatibility reasons, or togo further and disable AF_ALG entirely. The default value is 1. ===  ==================================================================0    AF_ALG is unrestricted. 1    AF_ALG is supported with a limited list of algorithms. The list     is designed for compatibility with known users such as iwd and     bluez that haven't yet been fixed to use userspace crypto code.      Specifically, there is an allowlist for unprivileged processes     and a somewhat longer allowlist for processes that hold     CAP_SYS_ADMIN or CAP_NET_ADMIN in the initial user namespace.      Attempts to bind() an AF_ALG socket with a disallowed algorithm     fail with ENOENT. 2    AF_ALG is completely disabled. Attempts to create an AF_ALG     socket fail with EAFNOSUPPORT.===  ================================================================== fips_enabled============ Read-only flag that indicates whether FIPS mode is enabled. - ``0``: FIPS mode is disabled (default).- ``1``: FIPS mode is enabled. This value is set at boot time via the ``fips=1`` kernel command lineparameter. When enabled, the cryptographic API will restrict the useof certain algorithms and perform self-tests to ensure compliance withFIPS (Federal Information Processing Standards) requirements, such asFIPS 140-2 and the newer FIPS 140-3, depending on the kernelconfiguration and the module in use. fips_name========= Read-only file that contains the name of the FIPS module currently in use.The value is typically configured via the ``CONFIG_CRYPTO_FIPS_NAME``kernel configuration option. fips_version============ Read-only file that contains the version string of the FIPS module.If ``CONFIG_CRYPTO_FIPS_CUSTOM_VERSION`` is set, it uses the value from``CONFIG_CRYPTO_FIPS_VERSION``. Otherwise, it defaults to the kernelrelease version (``UTS_RELEASE``). Copyright (c) 2026, Shubham Chakraborty <chakrabortyshubham66@gmail.com> For general info and legal blurb, please look inDocumentation/admin-guide/sysctl/index.rst. .. See scripts/check-sysctl-docs to keep this up to date:.. scripts/check-sysctl-docs -vtable="crypto" \..         $(git grep -l register_sysctl_)