diff --git a/cfg/posix.cfg b/cfg/posix.cfg
index 83766ed12..cce1045b3 100644
--- a/cfg/posix.cfg
+++ b/cfg/posix.cfg
@@ -1729,6 +1729,20 @@ The function 'mktemp' is considered to be dangerous due to race conditions and s
     </arg>
     <warn severity="style" reason="Obsolescent" alternatives="utimensat"/>
   </function>
+  <!-- https://man7.org/linux/man-pages/man3/encrypt.3.html -->
+  <!-- void encrypt(char block[64], int edflag);-->
+  <function name="encrypt">
+    <noreturn>false</noreturn>
+    <leak-ignore/>
+    <returnValue type="void"/>
+    <arg nr="1" direction="in">
+      <not-null/>
+      <minsize type="value" value="64" baseType="char"/>
+    </arg>
+    <arg nr="2" direction="in">
+      <not-uninit/>
+    </arg>
+  </function>
   <!-- int futimens(int fd, const struct timespec times[2]);-->
   <function name="futimens">
     <noreturn>false</noreturn>
diff --git a/test/cfg/posix.c b/test/cfg/posix.c
index b1986f7ca..0ba5749b0 100644
--- a/test/cfg/posix.c
+++ b/test/cfg/posix.c
@@ -24,7 +24,6 @@
 #include <netdb.h>
 #include <regex.h>
 #include <time.h>
-#include <unistd.h>
 #include <pthread.h>
 #include <syslog.h>
 #include <stdarg.h>
@@ -32,10 +31,18 @@
 #include <stdbool.h>
 #include <mqueue.h>
 #define _XOPEN_SOURCE
+#include <unistd.h>
 #include <wchar.h>
 #include <string.h>
 #include <strings.h>
 
+void nullPointer_encrypt(char block[64], int edflag)
+{
+    // cppcheck-suppress nullPointer
+    encrypt(NULL, edflag);
+    encrypt(block, edflag);
+}
+
 int nullPointer_getopt(int argc, char* const argv[], const char* optstring)
 {
     // cppcheck-suppress nullPointer