Changes in Makefile

2051da85 - arm64/crc-t10dif: expose CRC-T10DIF function through lib

Mon, 02 Dec 2024 01:20:50 +0000

arm64/crc-t10dif: expose CRC-T10DIF function through libMove the arm64 CRC-T10DIF assembly code into the lib directory and wireit up to the library interface. This allows it to be used without goingthrough the crypto API. It remains usable via the crypto API too viathe shash algorithms that use the library interface. Thus all thearch-specific "shash" code becomes unnecessary and is removed.Note: to see the diff from arch/arm64/crypto/crct10dif-ce-glue.c toarch/arm64/lib/crc-t10dif-glue.c, view this commit with 'git show -M10'.Reviewed-by: Ard Biesheuvel Reviewed-by: Martin K. Petersen Link: https://lore.kernel.org/r/20241202012056.209768-7-ebiggers@kernel.orgSigned-off-by: Eric Biggers List of files: /linux-6.15/arch/arm64/crypto/Makefile

ac2d838f - crypto: arm64/aes - remove Makefile hack

Tue, 01 Aug 2023 10:11:46 +0000

crypto: arm64/aes - remove Makefile hackDo it more simiply. This also fixes single target builds.[before] $ make ARCH=arm64 CROSS_COMPILE=aarch64-linux-gnu- arch/arm64/crypto/aes-glue-ce.i [snip] make[4]: *** No rule to make target 'arch/arm64/crypto/aes-glue-ce.i'. Stop.[after] $ make ARCH=arm64 CROSS_COMPILE=aarch64-linux-gnu- arch/arm64/crypto/aes-glue-ce.i [snip] CPP arch/arm64/crypto/aes-glue-ce.iSigned-off-by: Masahiro Yamada Acked-by: Will Deacon Signed-off-by: Herbert Xu List of files: /linux-6.15/arch/arm64/crypto/Makefile

ae1b83c7 - crypto: arm64/sm4 - add CE implementation for GCM mode

Thu, 27 Oct 2022 06:55:05 +0000

crypto: arm64/sm4 - add CE implementation for GCM modeThis patch is a CE-optimized assembly implementation for GCM mode.Benchmark on T-Head Yitian-710 2.75 GHz, the data comes from the 224 and 224modes of tcrypt, and compared the performance before and after this patch (thedriver used before this patch is gcm_base(ctr-sm4-ce,ghash-generic)).The abscissas are blocks of different lengths. The data is tabulated and theunit is Mb/s:Before (gcm_base(ctr-sm4-ce,ghash-generic)):gcm(sm4) | 16 64 256 512 1024 1420 4096 8192-------------+--------------------------------------------------------------------- GCM enc | 25.24 64.65 104.66 116.69 123.81 125.12 129.67 130.62 GCM dec | 25.40 64.80 104.74 116.70 123.81 125.21 129.68 130.59 GCM mb enc | 24.95 64.06 104.20 116.38 123.55 124.97 129.63 130.61 GCM mb dec | 24.92 64.00 104.13 116.34 123.55 124.98 129.56 130.48After:gcm-sm4-ce | 16 64 256 512 1024 1420 4096 8192-------------+--------------------------------------------------------------------- GCM enc | 108.62 397.18 971.60 1283.92 1522.77 1513.39 1777.00 1806.96 GCM dec | 116.36 398.14 1004.27 1319.11 1624.21 1635.43 1932.54 1974.20 GCM mb enc | 107.13 391.79 962.05 1274.94 1514.76 1508.57 1769.07 1801.58 GCM mb dec | 113.40 389.36 988.51 1307.68 1619.10 1631.55 1931.70 1970.86Signed-off-by: Tianjia Zhang Signed-off-by: Herbert Xu List of files: /linux-6.15/arch/arm64/crypto/Makefile

67fa3a7f - crypto: arm64/sm4 - add CE implementation for CCM mode

Thu, 27 Oct 2022 06:55:04 +0000

crypto: arm64/sm4 - add CE implementation for CCM modeThis patch is a CE-optimized assembly implementation for CCM mode.Benchmark on T-Head Yitian-710 2.75 GHz, the data comes from the 223 and 225modes of tcrypt, and compared the performance before and after this patch (thedriver used before this patch is ccm_base(ctr-sm4-ce,cbcmac-sm4-ce)).The abscissas are blocks of different lengths. The data is tabulated and theunit is Mb/s:Before (rfc4309(ccm_base(ctr-sm4-ce,cbcmac-sm4-ce))):ccm(sm4) | 16 64 256 512 1024 1420 4096 8192-------------+--------------------------------------------------------------- CCM enc | 35.07 125.40 336.47 468.17 581.97 619.18 712.56 736.01 CCM dec | 34.87 124.40 335.08 466.75 581.04 618.81 712.25 735.89 CCM mb enc | 34.71 123.96 333.92 465.39 579.91 617.49 711.45 734.92 CCM mb dec | 34.42 122.80 331.02 462.81 578.28 616.42 709.88 734.19After (rfc4309(ccm-sm4-ce)):ccm-sm4-ce | 16 64 256 512 1024 1420 4096 8192-------------+--------------------------------------------------------------- CCM enc | 77.12 249.82 569.94 725.17 839.27 867.71 952.87 969.89 CCM dec | 75.90 247.26 566.29 722.12 836.90 865.95 951.74 968.57 CCM mb enc | 75.98 245.25 562.91 718.99 834.76 864.70 950.17 967.90 CCM mb dec | 75.06 243.78 560.58 717.13 833.68 862.70 949.35 967.11Signed-off-by: Tianjia Zhang Signed-off-by: Herbert Xu List of files: /linux-6.15/arch/arm64/crypto/Makefile

a41b2129 - crypto: arm64/sm3 - add NEON assembly implementation

Thu, 27 Oct 2022 06:54:54 +0000

crypto: arm64/sm3 - add NEON assembly implementationThis patch adds the NEON acceleration implementation of the SM3 hashalgorithm. The main algorithm is based on SM3 NEON accelerated work ofthe libgcrypt project.Benchmark on T-Head Yitian-710 2.75 GHz, the data comes from the 326 modeof tcrypt, and compares the performance data of sm3-generic and sm3-ce.The abscissas are blocks of different lengths. The data is tabulated andthe unit is Mb/s:update-size | 16 64 256 1024 2048 4096 8192---------------+--------------------------------------------------------sm3-generic | 185.24 221.28 301.26 307.43 300.83 308.82 308.91sm3-neon | 171.81 220.20 322.94 339.28 334.09 343.61 343.87sm3-ce | 227.48 333.48 502.62 527.87 520.45 534.91 535.40Signed-off-by: Tianjia Zhang Signed-off-by: Herbert Xu List of files: /linux-6.15/arch/arm64/crypto/Makefile

9d2c0b48 - crypto: arm64/polyval - Add PMULL accelerated implementation of POLYVAL

Fri, 20 May 2022 18:15:00 +0000

crypto: arm64/polyval - Add PMULL accelerated implementation of POLYVALAdd hardware accelerated version of POLYVAL for ARM64 CPUs withCrypto Extensions support.This implementation is accelerated using PMULL instructions to performthe finite field computations. For added efficiency, 8 blocks of themessage are processed simultaneously by precomputing the first 8powers of the key.Karatsuba multiplication is used instead of Schoolbook multiplicationbecause it was found to be slightly faster on ARM64 CPUs. Montgomeryreduction must be used instead of Barrett reduction due to thedifference in modulus between POLYVAL's field and other finite fields.More information on POLYVAL can be found in the HCTR2 paper:"Length-preserving encryption with HCTR2":https://eprint.iacr.org/2021/1441.pdfSigned-off-by: Nathan Huckleberry Reviewed-by: Ard Biesheuvel Reviewed-by: Eric Biggers Signed-off-by: Herbert Xu List of files: /linux-6.15/arch/arm64/crypto/Makefile

5b33e0ec - crypto: arm64/sm4 - add ARMv8 Crypto Extensions implementation

Tue, 15 Mar 2022 09:44:54 +0000

crypto: arm64/sm4 - add ARMv8 Crypto Extensions implementationThis adds ARMv8 implementations of SM4 in ECB, CBC, CFB and CTRmodes using Crypto Extensions, also includes key expansion operationsbecause the Crypto Extensions instruction is much faster than softwareimplementations.The Crypto Extensions for SM4 can only run on ARMv8 implementationsthat have support for these optional extensions.Benchmark on T-Head Yitian-710 2.75 GHz, the data comes from the 218mode of tcrypt. The abscissas are blocks of different lengths. Thedata is tabulated and the unit is Mb/s:sm4-generic | 16 64 128 256 1024 1420 4096 ECB enc | 80.05 91.42 93.66 94.77 95.69 95.77 95.86 ECB dec | 79.98 91.41 93.64 94.76 95.66 95.77 95.85 CBC enc | 78.55 86.50 88.02 88.77 89.36 89.42 89.48 CBC dec | 76.82 89.06 91.52 92.77 93.75 93.83 93.96 CFB enc | 77.64 86.13 87.62 88.42 89.08 88.83 89.18 CFB dec | 77.57 88.34 90.36 91.45 92.34 92.00 92.44 CTR enc | 77.80 88.28 90.23 91.22 92.11 91.81 92.25 CTR dec | 77.83 88.22 90.22 91.22 92.04 91.82 92.28sm4-neon ECB enc | 28.31 112.77 203.03 209.89 215.49 202.11 210.59 ECB dec | 28.36 113.45 203.23 210.00 215.52 202.13 210.65 CBC enc | 79.32 87.02 88.51 89.28 89.85 89.89 89.97 CBC dec | 28.29 112.20 203.30 209.82 214.99 201.51 209.95 CFB enc | 79.59 87.16 88.54 89.30 89.83 89.62 89.92 CFB dec | 28.12 111.05 202.47 209.02 214.21 210.90 209.12 CTR enc | 28.04 108.81 200.62 206.65 211.78 208.78 206.74 CTR dec | 28.02 108.82 200.45 206.62 211.78 208.74 206.70sm4-ce-cipher ECB enc | 336.79 587.13 682.70 747.37 803.75 811.52 818.06 ECB dec | 339.18 584.52 679.72 743.68 798.82 803.83 811.54 CBC enc | 316.63 521.47 597.00 647.14 690.82 695.21 700.55 CBC dec | 291.80 503.79 585.66 640.82 689.86 695.16 701.72 CFB enc | 294.79 482.31 552.13 594.71 631.60 628.91 638.92 CFB dec | 293.09 466.44 526.56 563.17 594.41 592.26 601.97 CTR enc | 309.61 506.13 576.86 620.47 656.38 654.51 665.10 CTR dec | 306.69 505.57 576.84 620.18 657.09 654.52 665.32sm4-ce ECB enc | 366.96 1329.81 2024.29 2755.50 3790.07 3861.91 4051.40 ECB dec | 367.30 1323.93 2018.72 2747.43 3787.39 3862.55 4052.62 CBC enc | 358.09 682.68 807.24 885.35 958.29 963.60 973.73 CBC dec | 366.51 1303.63 1978.64 2667.93 3624.53 3683.41 3856.08 CFB enc | 351.51 681.26 807.81 893.10 968.54 969.17 985.83 CFB dec | 354.98 1266.61 1929.63 2634.81 3614.23 3611.59 3841.68 CTR enc | 324.23 1121.25 1689.44 2256.70 2981.90 3007.79 3060.74 CTR dec | 324.18 1120.44 1694.31 2258.32 2982.01 3010.09 3060.99Signed-off-by: Tianjia Zhang Signed-off-by: Herbert Xu List of files: /linux-6.15/arch/arm64/crypto/Makefile

4f1aef9b - crypto: arm64/sm4 - add ARMv8 NEON implementation

Tue, 15 Mar 2022 09:44:53 +0000

crypto: arm64/sm4 - add ARMv8 NEON implementationThis adds ARMv8 NEON implementations of SM4 in ECB, CBC, CFB and CTRmodes. This implementation uses the plain NEON instruction set, AllS-BOX substitutions uses the tbl/tbx instructions of ARMv8, combinedwith the out-of-order execution in CPU, this optimization supportsencryption of up to 8 blocks at the same time.The performance of encrypting one block is not as good as softwareimplementation, so the encryption operations of CBC and CFB stilluse pure software algorithms.Benchmark on T-Head Yitian-710 2.75 GHz, the data comes from the 218mode of tcrypt. The abscissas are blocks of different lengths. Thedata is tabulated and the unit is Mb/s:sm4-generic | 16 64 128 256 1024 1420 4096 ECB enc | 80.05 91.42 93.66 94.77 95.69 95.77 95.86 ECB dec | 79.98 91.41 93.64 94.76 95.66 95.77 95.85 CBC enc | 78.55 86.50 88.02 88.77 89.36 89.42 89.48 CBC dec | 76.82 89.06 91.52 92.77 93.75 93.83 93.96 CFB enc | 77.64 86.13 87.62 88.42 89.08 88.83 89.18 CFB dec | 77.57 88.34 90.36 91.45 92.34 92.00 92.44 CTR enc | 77.80 88.28 90.23 91.22 92.11 91.81 92.25 CTR dec | 77.83 88.22 90.22 91.22 92.04 91.82 92.28sm4-neon ECB enc | 28.31 112.77 203.03 209.89 215.49 202.11 210.59 ECB dec | 28.36 113.45 203.23 210.00 215.52 202.13 210.65 CBC enc | 79.32 87.02 88.51 89.28 89.85 89.89 89.97 CBC dec | 28.29 112.20 203.30 209.82 214.99 201.51 209.95 CFB enc | 79.59 87.16 88.54 89.30 89.83 89.62 89.92 CFB dec | 28.12 111.05 202.47 209.02 214.21 210.90 209.12 CTR enc | 28.04 108.81 200.62 206.65 211.78 208.78 206.74 CTR dec | 28.02 108.82 200.45 206.62 211.78 208.74 206.70Signed-off-by: Tianjia Zhang Signed-off-by: Herbert Xu List of files: /linux-6.15/arch/arm64/crypto/Makefile

02436762 - crypto: arm64/sm4-ce - rename to sm4-ce-cipher

Tue, 15 Mar 2022 09:44:52 +0000

crypto: arm64/sm4-ce - rename to sm4-ce-cipherThe subsequent patches of the series will have an implementationof SM4-ECB/CBC/CFB/CTR accelerated by the CE instruction set, whichconflicts with the current module name. In order to keep the namingrules of the AES algorithm consistent, the sm4-ce algorithm isrenamed to sm4-ce-cipher.In addition, the speed of sm4-ce-cipher is better than that of SM4NEON. By the way, the priority of the algorithm is adjusted to 300,which is also to leave room for the priority of SM4 NEON.Signed-off-by: Tianjia Zhang Signed-off-by: Herbert Xu List of files: /linux-6.15/arch/arm64/crypto/Makefile

2063257d - crypto: arm64 - use a pattern rule for generating *.S files

Sun, 25 Apr 2021 17:57:34 +0000

crypto: arm64 - use a pattern rule for generating *.S filesUnify similar build rules.sha256-core.S opts out it because it is generated from sha512-armv8.pl.Signed-off-by: Masahiro Yamada Signed-off-by: Herbert Xu List of files: /linux-6.15/arch/arm64/crypto/Makefile

12dd461e - crypto: arm64 - generate *.S by Perl at build time instead of shipping them

Sun, 25 Apr 2021 17:57:33 +0000

crypto: arm64 - generate *.S by Perl at build time instead of shipping themGenerate *.S by Perl like arch/{mips,x86}/crypto/Makefile.Signed-off-by: Masahiro Yamada Signed-off-by: Herbert Xu List of files: /linux-6.15/arch/arm64/crypto/Makefile

f569ca16 - crypto: arm64/poly1305 - incorporate OpenSSL/CRYPTOGAMS NEON implementation

Fri, 08 Nov 2019 12:22:24 +0000

crypto: arm64/poly1305 - incorporate OpenSSL/CRYPTOGAMS NEON implementationThis is a straight import of the OpenSSL/CRYPTOGAMS Poly1305 implementationfor NEON authored by Andy Polyakov, and contributed by him to the OpenSSLproject. The file 'poly1305-armv8.pl' is taken straight from this upstreamGitHub repository [0] at commit ec55a08dc0244ce570c4fc7cade330c60798952f,and already contains all the changes required to build it as part of aLinux kernel module.[0] https://github.com/dot-asm/cryptogamsCo-developed-by: Andy Polyakov Signed-off-by: Andy Polyakov Signed-off-by: Ard Biesheuvel Signed-off-by: Herbert Xu List of files: /linux-6.15/arch/arm64/crypto/Makefile

d2912cb1 - treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500

Tue, 04 Jun 2019 08:11:33 +0000

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500Based on 2 normalized pattern(s): this program is free software you can redistribute it and or modify it under the terms of the gnu general public license version 2 as published by the free software foundation this program is free software you can redistribute it and or modify it under the terms of the gnu general public license version 2 as published by the free software foundation #extracted by the scancode license scanner the SPDX license identifier GPL-2.0-onlyhas been chosen to replace the boilerplate/reference in 4122 file(s).Signed-off-by: Thomas Gleixner Reviewed-by: Enrico Weigelt Reviewed-by: Kate Stewart Reviewed-by: Allison Randal Cc: linux-spdx@vger.kernel.orgLink: https://lkml.kernel.org/r/20190604081206.933168790@linutronix.deSigned-off-by: Greg Kroah-Hartman List of files: /linux-6.15/arch/arm64/crypto/Makefile

95a34b77 - crypto: arm64/chacha20 - refactor to allow varying number of rounds

Tue, 04 Dec 2018 03:52:51 +0000

crypto: arm64/chacha20 - refactor to allow varying number of roundsIn preparation for adding XChaCha12 support, rename/refactor the ARM64NEON implementation of ChaCha20 to support different numbers of rounds.Reviewed-by: Ard Biesheuvel Signed-off-by: Eric Biggers Signed-off-by: Herbert Xu List of files: /linux-6.15/arch/arm64/crypto/Makefile

a00fa0c8 - crypto: arm64/nhpoly1305 - add NEON-accelerated NHPoly1305

Tue, 04 Dec 2018 03:52:49 +0000

crypto: arm64/nhpoly1305 - add NEON-accelerated NHPoly1305Add an ARM64 NEON implementation of NHPoly1305, an ε-almost-∆-universalhash function used in the Adiantum encryption mode. For now, only theNH portion is actually NEON-accelerated; the Poly1305 part is lessperformance-critical so is just implemented in C.Reviewed-by: Ard Biesheuvel Tested-by: Ard Biesheuvel # big-endianSigned-off-by: Eric Biggers Signed-off-by: Herbert Xu List of files: /linux-6.15/arch/arm64/crypto/Makefile

8e9b61b2 - kbuild: move .SECONDARY special target to Kbuild.include

Sat, 01 Dec 2018 00:27:15 +0000

kbuild: move .SECONDARY special target to Kbuild.includeIn commit 54a702f70589 ("kbuild: mark $(targets) as .SECONDARY andremove .PRECIOUS markers"), I missed one important feature of the.SECONDARY target: .SECONDARY with no prerequisites causes all targets to be treated as secondary.... which agrees with the policy of Kbuild.Let's move it to scripts/Kbuild.include, with no prerequisites.Note:If an intermediate file is generated by $(call if_changed,...), youstill need to add it to "targets" so its .*.cmd file is included.The arm/arm64 crypto files are generated by $(call cmd,shipped),so they do not need to be added to "targets", but need to be addedto "clean-files" so "make clean" can properly clean them away.Signed-off-by: Masahiro Yamada List of files: /linux-6.15/arch/arm64/crypto/Makefile

598b7d41 - crypto: arm64/crc32 - remove PMULL based CRC32 driver

Mon, 27 Aug 2018 11:02:45 +0000

crypto: arm64/crc32 - remove PMULL based CRC32 driverNow that the scalar fallbacks have been moved out of this driver intothe core crc32()/crc32c() routines, we are left with a CRC32 crypto APIdriver for arm64 that is based only on 64x64 polynomial multiplication,which is an optional instruction in the ARMv8 architecture, and is lessand less likely to be available on cores that do not also implement theCRC32 instructions, given that those are mandatory in the architectureas of ARMv8.1.Since the scalar instructions do not require the special handling thatSIMD instructions do, and since they turn out to be considerably fasteron some cores (Cortex-A53) as well, there is really no point in keepingthis code around so let's just remove it.Signed-off-by: Ard Biesheuvel Signed-off-by: Herbert Xu List of files: /linux-6.15/arch/arm64/crypto/Makefile

578bdaab - crypto: speck - remove Speck

Tue, 07 Aug 2018 06:22:25 +0000

crypto: speck - remove SpeckThese are unused, undesired, and have never actually been used byanybody. The original authors of this code have changed their mind aboutits inclusion. While originally proposed for disk encryption on low-enddevices, the idea was discarded [1] in favor of something else beforethat could really get going. Therefore, this patch removes Speck.[1] https://marc.info/?l=linux-crypto-vger&m=153359499015659Signed-off-by: Jason A. Donenfeld Acked-by: Eric Biggers Cc: stable@vger.kernel.orgAcked-by: Ard Biesheuvel Signed-off-by: Herbert Xu List of files: /linux-6.15/arch/arm64/crypto/Makefile

e99ce921 - crypto: arm64 - add support for SM4 encryption using special instructions

Wed, 25 Apr 2018 12:20:46 +0000

crypto: arm64 - add support for SM4 encryption using special instructionsAdd support for the SM4 symmetric cipher implemented using the specialSM4 instructions introduced in ARM architecture revision 8.2.Signed-off-by: Ard Biesheuvel Signed-off-by: Herbert Xu List of files: /linux-6.15/arch/arm64/crypto/Makefile

54a702f7 - kbuild: mark $(targets) as .SECONDARY and remove .PRECIOUS markers

Fri, 23 Mar 2018 13:04:39 +0000

kbuild: mark $(targets) as .SECONDARY and remove .PRECIOUS markersGNU Make automatically deletes intermediate files that are updatedin a chain of pattern rules.Example 1) %.dtb.o <- %.dtb.S <- %.dtb <- %.dtsExample 2) %.o <- %.c <- %.c_shippedA couple of makefiles mark such targets as .PRECIOUS to prevent Makefrom deleting them, but the correct way is to use .SECONDARY. .SECONDARY Prerequisites of this special target are treated as intermediate files but are never automatically deleted. .PRECIOUS When make is interrupted during execution, it may delete the target file it is updating if the file was modified since make started. If you mark the file as precious, make will never delete the file if interrupted.Both can avoid deletion of intermediate files, but the difference isthe behavior when Make is interrupted; .SECONDARY deletes the target,but .PRECIOUS does not.The use of .PRECIOUS is relatively rare since we do not want to keeppartially constructed (possibly corrupted) targets.Another difference is that .PRECIOUS works with pattern rules whereas.SECONDARY does not. .PRECIOUS: $(obj)/%.lex.cworks, but .SECONDARY: $(obj)/%.lex.chas no effect. However, for the reason above, I do not want to use.PRECIOUS which could cause obscure build breakage.The targets specified as .SECONDARY must be explicit. $(targets)contains all targets that need to include .*.cmd files. So, theintermediates you want to keep are mostly in there. Therefore, mark$(targets) as .SECONDARY. It means primary targets are also markedas .SECONDARY, but I do not see any drawback for this.I replaced some .SECONDARY / .PRECIOUS markers with 'targets'. Thiswill make Kbuild search for non-existing .*.cmd files, but this isnot a noticeable performance issue.Signed-off-by: Masahiro Yamada Acked-by: Frank Rowand Acked-by: Ingo Molnar List of files: /linux-6.15/arch/arm64/crypto/Makefile