With copy.fail going around turning off extra surface area like the whole AF_ALG kernel module could be useful, this tool generates a list of pids and their fds that have a running AF_ALG socket.
Faster than using lsof | grep ALG, compiled for all the linux archs and result is an easily parsable format.
Hopefully this is helpful to folks!
