General guidance which is applicable to many products is below. Warning: there may be performance impacts for modifying functionality that uses kernel cryptographic functions. Though the affected module cannot be blacklisted, the affected functions themselves can be using the following boot arguments: initcall_blacklist=algif_aead_init Alternatively, the af_alg interface itself can be blocked: initcall_blacklist=af_alg_init As a further alternative, the affected algorithm can be blocked: initcall_blacklist=crypto_authenc_esn_module_init