Comment by asymptotically2

I use Gentoo Linux so it was as easy as putting the patches in a directory, and then rebuilding the kernel with the option to enable the synchronous cipher.

For Debian it's almost as easy: https://passthroughpo.st/patch-kernel-debian/