Also, that there is an additional issue reported in that Debian bug having to do with "unsupported algorithm 1". This looks like it is due to the kernel supporting only des-cbc-raw. It could be that the subkey setup that occurs in the context no longer smashes the enctype of the keyblock, but we need to investigate further.