Re: misc/60959: AES-CBC 512 seems to bug out sometimes during cgdconfig -V re-enter while AES-XTS 512 with same parameters doesn't

[Ellie <el%horse64.org@localhost>]

On 11/3/26 23:35, gnats-admin%netbsd.org@localhost wrote:
> Thank you very much for your problem report.
> It has the internal identification `misc/60959'.
> The individual assigned to look at your
> report is: misc-bug-people.
>
> > Category:       misc
> > Responsible:    misc-bug-people
> > Synopsis:       AES-CBC 512 seems to bug out sometimes during cgdconfig -V re-enter while AES-XTS 512 with same parameters doesn't
> > Arrival-Date:   Tue Nov 03 23:35:00 +0000 2026
Oops, seems like it was a user error in my behalf after all:

https://mail-index.netbsd.org/netbsd-users/2026/10/31/msg035138.html

Perhaps it would be useful to improve the error message? Also, cgdconfig 
-g happily produces an according config:

$ cgdconfig -g -o ./testfile.cfg aes-cbc 512
pkcs5_pbkdf2: calibrating iterations................. done
$ cat testfile.cfg
algorithm aes-cbc;
iv-method encblkno1;
keylength 512;
verify_method none;
keygen pkcs5_pbkdf2/sha1 {
        iterations 378453;
        salt AAAAgCymR3AKBAk7bnmdY+xNOp8=;
};
$

...which makes this a little harder to realize as an invalid config as a 
user. Sorry, I hope this feedback is useful!

Regards,

Ellie