Changes in Kconfig

17ec3e71 - crypto: lib/Kconfig - Hide arch options from user

Thu, 27 Feb 2025 07:48:39 +0000

crypto: lib/Kconfig - Hide arch options from userThe ARCH_MAY_HAVE patch missed arm64, mips and s390. But it mayalso lead to arch options being enabled but ineffective becauseof modular/built-in conflicts.As the primary user of all these options wireguard is selectingthe arch options anyway, make the same selections at the lib/cryptooption level and hide the arch options from the user.Instead of selecting them centrally from lib/crypto, simply setthe default of each arch option as suggested by Eric Biggers.Change the Crypto API generic algorithms to select the top-levellib/crypto options instead of the generic one as otherwise thereis no way to enable the arch options (Eric Biggers). Introduce aset of INTERNAL options to work around dependency cycles on theCONFIG_CRYPTO symbol.Fixes: 1047e21aecdf ("crypto: lib/Kconfig - Fix lib built-in failure when arch is modular")Reported-by: kernel test robot Reported-by: Arnd Bergmann Closes: https://lore.kernel.org/oe-kbuild-all/202502232152.JC84YDLp-lkp@intel.com/Signed-off-by: Herbert Xu List of files: /linux-6.15/arch/arm64/crypto/Kconfig

2051da85 - arm64/crc-t10dif: expose CRC-T10DIF function through lib

Mon, 02 Dec 2024 01:20:50 +0000

arm64/crc-t10dif: expose CRC-T10DIF function through libMove the arm64 CRC-T10DIF assembly code into the lib directory and wireit up to the library interface. This allows it to be used without goingthrough the crypto API. It remains usable via the crypto API too viathe shash algorithms that use the library interface. Thus all thearch-specific "shash" code becomes unnecessary and is removed.Note: to see the diff from arch/arm64/crypto/crct10dif-ce-glue.c toarch/arm64/lib/crc-t10dif-glue.c, view this commit with 'git show -M10'.Reviewed-by: Ard Biesheuvel Reviewed-by: Martin K. Petersen Link: https://lore.kernel.org/r/20241202012056.209768-7-ebiggers@kernel.orgSigned-off-by: Eric Biggers List of files: /linux-6.15/arch/arm64/crypto/Kconfig

948ffc66 - crypto: arm64/aes-ccm - Reuse existing MAC update for AAD input

Thu, 18 Jan 2024 17:06:34 +0000

crypto: arm64/aes-ccm - Reuse existing MAC update for AAD inputCCM combines the counter (CTR) encryption mode with a MAC based on thesame block cipher. This MAC construction is a bit clunky: it invokes theblock cipher in a way that cannot be parallelized, resulting in poor CPUpipeline efficiency.The arm64 CCM code mitigates this by interleaving the encryption and MACat the AES round level, resulting in a substantial speedup. But thisapproach does not apply to the additional authenticated data (AAD) whichis not encrypted.This means the special asm routine dealing with the AAD is not anybetter than the MAC update routine used by the arm64 AES blockencryption driver, so let's reuse that, and drop the special AES-CCMversion.Signed-off-by: Ard Biesheuvel Signed-off-by: Herbert Xu List of files: /linux-6.15/arch/arm64/crypto/Kconfig

29fa12e9 - crypto: arm64/sm4 - Remove cfb(sm4)

Sat, 16 Sep 2023 09:13:23 +0000

crypto: arm64/sm4 - Remove cfb(sm4)Remove the unused CFB implementation.Signed-off-by: Herbert Xu List of files: /linux-6.15/arch/arm64/crypto/Kconfig

61c581a4 - crypto: move gf128mul library into lib/crypto

Thu, 03 Nov 2022 19:22:57 +0000

crypto: move gf128mul library into lib/cryptoThe gf128mul library does not depend on the crypto API at all, so it canbe moved into lib/crypto. This will allow us to use it in other librarycode in a subsequent patch without having to depend on CONFIG_CRYPTO.While at it, change the Kconfig symbol name to align with other cryptolibrary implementations. However, the source file name is retained, asit is reflected in the module .ko filename, and changing this mightbreak things for users.Signed-off-by: Ard Biesheuvel Signed-off-by: Herbert Xu List of files: /linux-6.15/arch/arm64/crypto/Kconfig

ae1b83c7 - crypto: arm64/sm4 - add CE implementation for GCM mode

Thu, 27 Oct 2022 06:55:05 +0000

crypto: arm64/sm4 - add CE implementation for GCM modeThis patch is a CE-optimized assembly implementation for GCM mode.Benchmark on T-Head Yitian-710 2.75 GHz, the data comes from the 224 and 224modes of tcrypt, and compared the performance before and after this patch (thedriver used before this patch is gcm_base(ctr-sm4-ce,ghash-generic)).The abscissas are blocks of different lengths. The data is tabulated and theunit is Mb/s:Before (gcm_base(ctr-sm4-ce,ghash-generic)):gcm(sm4) | 16 64 256 512 1024 1420 4096 8192-------------+--------------------------------------------------------------------- GCM enc | 25.24 64.65 104.66 116.69 123.81 125.12 129.67 130.62 GCM dec | 25.40 64.80 104.74 116.70 123.81 125.21 129.68 130.59 GCM mb enc | 24.95 64.06 104.20 116.38 123.55 124.97 129.63 130.61 GCM mb dec | 24.92 64.00 104.13 116.34 123.55 124.98 129.56 130.48After:gcm-sm4-ce | 16 64 256 512 1024 1420 4096 8192-------------+--------------------------------------------------------------------- GCM enc | 108.62 397.18 971.60 1283.92 1522.77 1513.39 1777.00 1806.96 GCM dec | 116.36 398.14 1004.27 1319.11 1624.21 1635.43 1932.54 1974.20 GCM mb enc | 107.13 391.79 962.05 1274.94 1514.76 1508.57 1769.07 1801.58 GCM mb dec | 113.40 389.36 988.51 1307.68 1619.10 1631.55 1931.70 1970.86Signed-off-by: Tianjia Zhang Signed-off-by: Herbert Xu List of files: /linux-6.15/arch/arm64/crypto/Kconfig

67fa3a7f - crypto: arm64/sm4 - add CE implementation for CCM mode

Thu, 27 Oct 2022 06:55:04 +0000

crypto: arm64/sm4 - add CE implementation for CCM modeThis patch is a CE-optimized assembly implementation for CCM mode.Benchmark on T-Head Yitian-710 2.75 GHz, the data comes from the 223 and 225modes of tcrypt, and compared the performance before and after this patch (thedriver used before this patch is ccm_base(ctr-sm4-ce,cbcmac-sm4-ce)).The abscissas are blocks of different lengths. The data is tabulated and theunit is Mb/s:Before (rfc4309(ccm_base(ctr-sm4-ce,cbcmac-sm4-ce))):ccm(sm4) | 16 64 256 512 1024 1420 4096 8192-------------+--------------------------------------------------------------- CCM enc | 35.07 125.40 336.47 468.17 581.97 619.18 712.56 736.01 CCM dec | 34.87 124.40 335.08 466.75 581.04 618.81 712.25 735.89 CCM mb enc | 34.71 123.96 333.92 465.39 579.91 617.49 711.45 734.92 CCM mb dec | 34.42 122.80 331.02 462.81 578.28 616.42 709.88 734.19After (rfc4309(ccm-sm4-ce)):ccm-sm4-ce | 16 64 256 512 1024 1420 4096 8192-------------+--------------------------------------------------------------- CCM enc | 77.12 249.82 569.94 725.17 839.27 867.71 952.87 969.89 CCM dec | 75.90 247.26 566.29 722.12 836.90 865.95 951.74 968.57 CCM mb enc | 75.98 245.25 562.91 718.99 834.76 864.70 950.17 967.90 CCM mb dec | 75.06 243.78 560.58 717.13 833.68 862.70 949.35 967.11Signed-off-by: Tianjia Zhang Signed-off-by: Herbert Xu List of files: /linux-6.15/arch/arm64/crypto/Kconfig

01f63311 - crypto: arm64/sm4 - add CE implementation for XTS mode

Thu, 27 Oct 2022 06:55:02 +0000

crypto: arm64/sm4 - add CE implementation for XTS modeThis patch is a CE-optimized assembly implementation for XTS mode.Benchmark on T-Head Yitian-710 2.75 GHz, the data comes from the 218 mode oftcrypt, and compared the performance before and after this patch (the driverused before this patch is xts(ecb-sm4-ce)). The abscissas are blocks ofdifferent lengths. The data is tabulated and the unit is Mb/s:Before:xts(ecb-sm4-ce) | 16 64 128 256 1024 1420 4096----------------+-------------------------------------------------------------- XTS enc | 117.17 430.56 732.92 1134.98 2007.03 2136.23 2347.20 XTS dec | 116.89 429.02 733.40 1132.96 2006.13 2130.50 2347.92After:xts-sm4-ce | 16 64 128 256 1024 1420 4096----------------+-------------------------------------------------------------- XTS enc | 224.68 798.91 1248.08 1714.60 2413.73 2467.84 2612.62 XTS dec | 229.85 791.34 1237.79 1720.00 2413.30 2473.84 2611.95Signed-off-by: Tianjia Zhang Signed-off-by: Herbert Xu List of files: /linux-6.15/arch/arm64/crypto/Kconfig

a41b2129 - crypto: arm64/sm3 - add NEON assembly implementation

Thu, 27 Oct 2022 06:54:54 +0000

crypto: arm64/sm3 - add NEON assembly implementationThis patch adds the NEON acceleration implementation of the SM3 hashalgorithm. The main algorithm is based on SM3 NEON accelerated work ofthe libgcrypt project.Benchmark on T-Head Yitian-710 2.75 GHz, the data comes from the 326 modeof tcrypt, and compares the performance data of sm3-generic and sm3-ce.The abscissas are blocks of different lengths. The data is tabulated andthe unit is Mb/s:update-size | 16 64 256 1024 2048 4096 8192---------------+--------------------------------------------------------sm3-generic | 185.24 221.28 301.26 307.43 300.83 308.82 308.91sm3-neon | 171.81 220.20 322.94 339.28 334.09 343.61 343.87sm3-ce | 227.48 333.48 502.62 527.87 520.45 534.91 535.40Signed-off-by: Tianjia Zhang Signed-off-by: Herbert Xu List of files: /linux-6.15/arch/arm64/crypto/Kconfig

611d451e - crypto: arm64 - revert unintended config name change for CRYPTO_SHA1_ARM64_CE

Wed, 14 Sep 2022 08:36:26 +0000

crypto: arm64 - revert unintended config name change for CRYPTO_SHA1_ARM64_CECommit 3f342a23257d ("crypto: Kconfig - simplify hash entries") makesvarious changes to the config descriptions as part of some consolidationand clean-up, but among all those changes, it also accidently renamesCRYPTO_SHA1_ARM64_CE to CRYPTO_SHA1_ARM64.Revert this unintended config name change.See Link for the author's confirmation of this happening accidently.Fixes: 3f342a23257d ("crypto: Kconfig - simplify hash entries")Link: https://lore.kernel.org/all/MW5PR84MB18424AB8C095BFC041AE33FDAB479@MW5PR84MB1842.NAMPRD84.PROD.OUTLOOK.COM/Signed-off-by: Lukas Bulwahn Signed-off-by: Herbert Xu List of files: /linux-6.15/arch/arm64/crypto/Kconfig

cf514b2a - crypto: Kconfig - simplify cipher entries

Sat, 20 Aug 2022 18:41:50 +0000

crypto: Kconfig - simplify cipher entriesShorten menu titles and make them consistent:- acronym- name- architecture features in parenthesis- no suffixes like " algorithm", "support", or "hardware acceleration", or "optimized"Simplify help text descriptions, update references, and ensure thathttps references are still valid.Signed-off-by: Robert Elliott Signed-off-by: Herbert Xu List of files: /linux-6.15/arch/arm64/crypto/Kconfig

3f342a23 - crypto: Kconfig - simplify hash entries

Sat, 20 Aug 2022 18:41:48 +0000

crypto: Kconfig - simplify hash entriesShorten menu titles and make them consistent:- acronym- name- architecture features in parenthesis- no suffixes like " algorithm", "support", or "hardware acceleration", or "optimized"Simplify help text descriptions, update references, and ensure thathttps references are still valid.Signed-off-by: Robert Elliott Signed-off-by: Herbert Xu List of files: /linux-6.15/arch/arm64/crypto/Kconfig

ec84348d - crypto: Kconfig - simplify CRC entries

Sat, 20 Aug 2022 18:41:46 +0000

crypto: Kconfig - simplify CRC entriesShorten menu titles and make them consistent:- acronym- name- architecture features in parenthesis- no suffixes like " algorithm", "support", or "hardware acceleration", or "optimized"Simplify help text descriptions, update references, and ensure thathttps references are still valid.Signed-off-by: Robert Elliott Signed-off-by: Herbert Xu List of files: /linux-6.15/arch/arm64/crypto/Kconfig

9e5647eb - crypto: Kconfig - sort the arm64 entries

Sat, 20 Aug 2022 18:41:42 +0000

crypto: Kconfig - sort the arm64 entriesSort the arm64 entries so all like entries are together.Signed-off-by: Robert Elliott Signed-off-by: Herbert Xu List of files: /linux-6.15/arch/arm64/crypto/Kconfig

4a329fec - crypto: Kconfig - submenus for arm and arm64

Sat, 20 Aug 2022 18:41:41 +0000

crypto: Kconfig - submenus for arm and arm64Move ARM- and ARM64-accelerated menus into a submenu underthe Crypto API menu (paralleling all the architectures).Make each submenu always appear if the corresponding architectureis supported. Get rid of the ARM_CRYPTO and ARM64_CRYPTO symbols.The "ARM Accelerated" or "ARM64 Accelerated" entry disappears from: General setup ---> Platform selection ---> Kernel Features ---> Boot options ---> Power management options ---> CPU Power Management --->[*] ACPI (Advanced Configuration and Power Interface) Support --->[*] Virtualization --->[*] ARM Accelerated Cryptographic Algorithms ---> (or)[*] ARM64 Accelerated Cryptographic Algorithms ---> ...-*- Cryptographic API ---> Library routines ---> Kernel hacking --->and moves into the Cryptographic API menu, which now contains: ... Accelerated Cryptographic Algorithms for CPU (arm) ---> (or) Accelerated Cryptographic Algorithms for CPU (arm64) --->[*] Hardware crypto devices ---> ...Suggested-by: Eric Biggers Signed-off-by: Robert Elliott Signed-off-by: Herbert Xu List of files: /linux-6.15/arch/arm64/crypto/Kconfig

fac76f22 - crypto: arm64/gcm - Select AEAD for GHASH_ARM64_CE

Fri, 24 Jun 2022 11:13:38 +0000

crypto: arm64/gcm - Select AEAD for GHASH_ARM64_CEOtherwise, we could fail to compile.ld: arch/arm64/crypto/ghash-ce-glue.o: in function 'ghash_ce_mod_exit':ghash-ce-glue.c:(.exit.text+0x24): undefined reference to 'crypto_unregister_aead'ld: arch/arm64/crypto/ghash-ce-glue.o: in function 'ghash_ce_mod_init':ghash-ce-glue.c:(.init.text+0x34): undefined reference to 'crypto_register_aead'Fixes: 537c1445ab0b ("crypto: arm64/gcm - implement native driver using v8 Crypto Extensions")Signed-off-by: Qian Cai Signed-off-by: Herbert Xu List of files: /linux-6.15/arch/arm64/crypto/Kconfig

9d2c0b48 - crypto: arm64/polyval - Add PMULL accelerated implementation of POLYVAL

Fri, 20 May 2022 18:15:00 +0000

crypto: arm64/polyval - Add PMULL accelerated implementation of POLYVALAdd hardware accelerated version of POLYVAL for ARM64 CPUs withCrypto Extensions support.This implementation is accelerated using PMULL instructions to performthe finite field computations. For added efficiency, 8 blocks of themessage are processed simultaneously by precomputing the first 8powers of the key.Karatsuba multiplication is used instead of Schoolbook multiplicationbecause it was found to be slightly faster on ARM64 CPUs. Montgomeryreduction must be used instead of Barrett reduction due to thedifference in modulus between POLYVAL's field and other finite fields.More information on POLYVAL can be found in the HCTR2 paper:"Length-preserving encryption with HCTR2":https://eprint.iacr.org/2021/1441.pdfSigned-off-by: Nathan Huckleberry Reviewed-by: Ard Biesheuvel Reviewed-by: Eric Biggers Signed-off-by: Herbert Xu List of files: /linux-6.15/arch/arm64/crypto/Kconfig

23a251cc - crypto: arm64/aes-xctr - Add accelerated implementation of XCTR

Fri, 20 May 2022 18:14:57 +0000

crypto: arm64/aes-xctr - Add accelerated implementation of XCTRAdd hardware accelerated version of XCTR for ARM64 CPUs with ARMv8Crypto Extension support. This XCTR implementation is based on the CTRimplementation in aes-modes.S.More information on XCTR can be found inthe HCTR2 paper: "Length-preserving encryption with HCTR2":https://eprint.iacr.org/2021/1441.pdfSigned-off-by: Nathan Huckleberry Reviewed-by: Ard Biesheuvel Reviewed-by: Eric Biggers Signed-off-by: Herbert Xu List of files: /linux-6.15/arch/arm64/crypto/Kconfig

b45b0a12 - crypto: arm64/sm4 - Fix wrong dependency of NEON/CE implementation

Mon, 11 Apr 2022 03:13:13 +0000

crypto: arm64/sm4 - Fix wrong dependency of NEON/CE implementationCommit d2825fa9365d ("crypto: sm3,sm4 - move into crypto directory")moved the sm4 library implementation from the lib/crypto directory tothe crypto directory and configured the name as CRYPTO_SM4. The arm64SM4 NEON/CE implementation depends on this and needs to be modifieduniformly.Fixes: 4f1aef9b806f ("crypto: arm64/sm4 - add ARMv8 NEON implementation")Fixes: 5b33e0ec881c ("crypto: arm64/sm4 - add ARMv8 Crypto Extensions implementation")Signed-off-by: Tianjia Zhang Signed-off-by: Herbert Xu List of files: /linux-6.15/arch/arm64/crypto/Kconfig

5b33e0ec - crypto: arm64/sm4 - add ARMv8 Crypto Extensions implementation

Tue, 15 Mar 2022 09:44:54 +0000

crypto: arm64/sm4 - add ARMv8 Crypto Extensions implementationThis adds ARMv8 implementations of SM4 in ECB, CBC, CFB and CTRmodes using Crypto Extensions, also includes key expansion operationsbecause the Crypto Extensions instruction is much faster than softwareimplementations.The Crypto Extensions for SM4 can only run on ARMv8 implementationsthat have support for these optional extensions.Benchmark on T-Head Yitian-710 2.75 GHz, the data comes from the 218mode of tcrypt. The abscissas are blocks of different lengths. Thedata is tabulated and the unit is Mb/s:sm4-generic | 16 64 128 256 1024 1420 4096 ECB enc | 80.05 91.42 93.66 94.77 95.69 95.77 95.86 ECB dec | 79.98 91.41 93.64 94.76 95.66 95.77 95.85 CBC enc | 78.55 86.50 88.02 88.77 89.36 89.42 89.48 CBC dec | 76.82 89.06 91.52 92.77 93.75 93.83 93.96 CFB enc | 77.64 86.13 87.62 88.42 89.08 88.83 89.18 CFB dec | 77.57 88.34 90.36 91.45 92.34 92.00 92.44 CTR enc | 77.80 88.28 90.23 91.22 92.11 91.81 92.25 CTR dec | 77.83 88.22 90.22 91.22 92.04 91.82 92.28sm4-neon ECB enc | 28.31 112.77 203.03 209.89 215.49 202.11 210.59 ECB dec | 28.36 113.45 203.23 210.00 215.52 202.13 210.65 CBC enc | 79.32 87.02 88.51 89.28 89.85 89.89 89.97 CBC dec | 28.29 112.20 203.30 209.82 214.99 201.51 209.95 CFB enc | 79.59 87.16 88.54 89.30 89.83 89.62 89.92 CFB dec | 28.12 111.05 202.47 209.02 214.21 210.90 209.12 CTR enc | 28.04 108.81 200.62 206.65 211.78 208.78 206.74 CTR dec | 28.02 108.82 200.45 206.62 211.78 208.74 206.70sm4-ce-cipher ECB enc | 336.79 587.13 682.70 747.37 803.75 811.52 818.06 ECB dec | 339.18 584.52 679.72 743.68 798.82 803.83 811.54 CBC enc | 316.63 521.47 597.00 647.14 690.82 695.21 700.55 CBC dec | 291.80 503.79 585.66 640.82 689.86 695.16 701.72 CFB enc | 294.79 482.31 552.13 594.71 631.60 628.91 638.92 CFB dec | 293.09 466.44 526.56 563.17 594.41 592.26 601.97 CTR enc | 309.61 506.13 576.86 620.47 656.38 654.51 665.10 CTR dec | 306.69 505.57 576.84 620.18 657.09 654.52 665.32sm4-ce ECB enc | 366.96 1329.81 2024.29 2755.50 3790.07 3861.91 4051.40 ECB dec | 367.30 1323.93 2018.72 2747.43 3787.39 3862.55 4052.62 CBC enc | 358.09 682.68 807.24 885.35 958.29 963.60 973.73 CBC dec | 366.51 1303.63 1978.64 2667.93 3624.53 3683.41 3856.08 CFB enc | 351.51 681.26 807.81 893.10 968.54 969.17 985.83 CFB dec | 354.98 1266.61 1929.63 2634.81 3614.23 3611.59 3841.68 CTR enc | 324.23 1121.25 1689.44 2256.70 2981.90 3007.79 3060.74 CTR dec | 324.18 1120.44 1694.31 2258.32 2982.01 3010.09 3060.99Signed-off-by: Tianjia Zhang Signed-off-by: Herbert Xu List of files: /linux-6.15/arch/arm64/crypto/Kconfig