Changes in Kconfig

9739f5f9 - crypto: eip93 - Add Inside Secure SafeXcel EIP-93 crypto engine support

Tue, 14 Jan 2025 12:36:36 +0000

crypto: eip93 - Add Inside Secure SafeXcel EIP-93 crypto engine supportAdd support for the Inside Secure SafeXcel EIP-93 Crypto Engine used onMediatek MT7621 SoC and new Airoha SoC.EIP-93 IP supports AES/DES/3DES ciphers in ECB/CBC and CTR modes as well asauthenc(HMAC(x), cipher(y)) using HMAC MD5, SHA1, SHA224 and SHA256.EIP-93 provide regs to signal support for specific chipers and thedriver dynamically register only the supported one by the chip.Signed-off-by: Richard van Schagen Co-developed-by: Christian Marangi Signed-off-by: Christian Marangi Signed-off-by: Herbert Xu List of files: /linux-6.15/drivers/crypto/Kconfig

9cda46ba - crypto: n2 - remove Niagara2 SPU driver

Sat, 07 Dec 2024 19:05:02 +0000

crypto: n2 - remove Niagara2 SPU driverRemove the driver for the Stream Processing Unit (SPU) on the Niagara 2.Removing this driver allows removing the support for physical addresswalks in skcipher_walk. That is a misfeature that is used only by thisdriver and increases the overhead of the crypto API for everyone else.There is little evidence that anyone cares about this driver. TheNiagara 2, a.k.a. the UltraSPARC T2, is a server CPU released in2007. The SPU is also present on the SPARC T3, released in 2010.However, the SPU went away in SPARC T4, released in 2012, which replacedit with proper cryptographic instructions instead. These newerinstructions are supported by the kernel in arch/sparc/crypto/.This driver was completely broken from (at least) 2015 to 2022, fromcommit 8996eafdcbad ("crypto: ahash - ensure statesize is non-zero") tocommit 76a4e8745935 ("crypto: n2 - add missing hash statesize"), sinceits probe function always returned an error before registering anyalgorithms. Though, even with that obvious issue fixed, it is unclearwhether the driver now works correctly. E.g., there are no indicationsthat anyone has run the self-tests recently.One bug report for this driver in 2017(https://lore.kernel.org/r/nycvar.YFH.7.76.1712110214220.28416@n3.vanv.qr)complained that it crashed the kernel while being loaded. The reporterdidn't seem to care about the functionality of the driver, but ratherjust the fact that loading it crashed the kernel. In fact not until2022 was the driver fixed to maybe actually register its algorithms withthe crypto API. The 2022 fix does have a Reported-by and Tested-by, butthat may similarly have been just about making the error messages goaway as opposed to someone actually wanting to use the driver.As such, it seems appropriate to retire this driver in mainline.Cc: David S. Miller Signed-off-by: Eric Biggers Signed-off-by: Herbert Xu List of files: /linux-6.15/drivers/crypto/Kconfig

73dfc79c - s390/pkey: Add new pkey handler module pkey-uv

Fri, 25 Oct 2024 10:34:32 +0000

s390/pkey: Add new pkey handler module pkey-uvThis new pkey handler module supports the conversion ofUltravisor retrievable secrets to protected keys.The new module pkey-uv.ko is able to retrieve and verifyprotected keys backed up by the Ultravisor layer which isonly available within protected execution environment.The module is only automatically loaded if there is theUV CPU feature flagged as available. Additionally on moduleinit there is a check for protected execution environmentand for UV supporting retrievable secrets. Also if the kernelis not running as a protected execution guest, the moduleunloads itself with errno ENODEV.The pkey UV module currently supports these Ultravisorsecrets and is able to retrieve a protected key for theseUV secret types: - UV_SECRET_AES_128 - UV_SECRET_AES_192 - UV_SECRET_AES_256 - UV_SECRET_AES_XTS_128 - UV_SECRET_AES_XTS_256 - UV_SECRET_HMAC_SHA_256 - UV_SECRET_HMAC_SHA_512 - UV_SECRET_ECDSA_P256 - UV_SECRET_ECDSA_P384 - UV_SECRET_ECDSA_P521 - UV_SECRET_ECDSA_ED25519 - UV_SECRET_ECDSA_ED448Signed-off-by: Harald Freudenberger Reviewed-by: Holger Dengler Signed-off-by: Heiko Carstens List of files: /linux-6.15/drivers/crypto/Kconfig

b8fc70ab - Revert "crypto: spacc - Add SPAcc Skcipher support"

Tue, 03 Sep 2024 23:09:51 +0000

Revert "crypto: spacc - Add SPAcc Skcipher support"This reverts the following commits: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 were submitted with no device tree bindings.Reported-by: Rob Herring Signed-off-by: Herbert Xu List of files: /linux-6.15/drivers/crypto/Kconfig

8fcc231c - s390/pkey: Introduce pkey base with handler registry and handler modules

Thu, 22 Aug 2024 09:32:19 +0000

s390/pkey: Introduce pkey base with handler registry and handler modulesIntroduce pkey base kernel code with a simple pkey handler registry.Regroup the pkey code into these kernel modules:- pkey is the pkey api supporting the ioctls, sysfs and in-kernel api. Also the pkey base code which offers the handler registry and handler wrapping invocation functions is integrated there. This module is automatically loaded in via CPU feature if the MSA feature is available.- pkey-cca is the CCA related handler code kernel module a offering CCA specific implementation for pkey. This module is loaded in via MODULE_DEVICE_TABLE when a CEX[4-8] card becomes available.- pkey-ep11 is the EP11 related handler code kernel module offering an EP11 specific implementation for pkey. This module is loaded in via MODULE_DEVICE_TABLE when a CEX[4-8] card becomes available.- pkey-pckmo is the PCKMO related handler code kernel module. This module is loaded in via CPU feature if the MSA feature is available, but on init a check for availability of the pckmo instruction is performed.The handler modules register via a pkey_handler struct at the pkeybase code and the pkey customer (that is currently the pkey api codefetches a handler via pkey handler registry functions and calls theunified handler functions via the pkey base handler functions.As a result the pkey-cca, pkey-ep11 and pkey-pckmo modules getindependent from each other and it becomes possible to write newhandlers which offer another kind of implementation without implicitdependencies to other handler implementations and/or kernel devicedrivers.For each of these 4 kernel modules there is an individual Kconfigentry: CONFIG_PKEY for the base and api, CONFIG_PKEY_CCA for the PKEYCCA support handler, CONFIG_PKEY_EP11 for the EP11 support handler andCONFIG_PKEY_PCKMO for the pckmo support. The both CEX related handlermodules (PKEY CCA and PKEY EP11) have a dependency to the zcrypt apiof the zcrypt device driver.Signed-off-by: Harald Freudenberger Reviewed-by: Holger Dengler Signed-off-by: Vasily Gorbik List of files: /linux-6.15/drivers/crypto/Kconfig

fc61c658 - crypto: spacc - Enable Driver compilation in crypto Kconfig and Makefile

Mon, 29 Jul 2024 04:13:50 +0000

crypto: spacc - Enable Driver compilation in crypto Kconfig and MakefileSigned-off-by: Bhoomika K Signed-off-by: Pavitrakumar M Acked-by: Ruud Derwig Signed-off-by: Herbert Xu List of files: /linux-6.15/drivers/crypto/Kconfig

0880bb3b - crypto: tegra - Add Tegra Security Engine driver

Wed, 03 Apr 2024 10:00:37 +0000

crypto: tegra - Add Tegra Security Engine driverAdd support for Tegra Security Engine which can accelerate variouscrypto algorithms. The Engine has two separate instances within forAES and HASH algorithms respectively.The driver registers two crypto engines - one for AES and another forHASH algorithms and these operate independently and both uses the host1xbus. Additionally, it provides hardware-assisted key protection for upto 15 symmetric keys which it can use for the cipher operations.Signed-off-by: Akhil R Signed-off-by: Herbert Xu List of files: /linux-6.15/drivers/crypto/Kconfig

b3840c8b - s390/ap: rename ap debug configuration option

Tue, 27 Feb 2024 15:49:33 +0000

s390/ap: rename ap debug configuration optionThe configuration option ZCRYPT_DEBUG is used only in ap queue code,so rename it to AP_DEBUG. It also no longer depends on ZCRYPT but onAP. While at it, also update the help text.Signed-off-by: Holger Dengler Reviewed-by: Harald Freudenberger Signed-off-by: Alexander Gordeev List of files: /linux-6.15/drivers/crypto/Kconfig

12376084 - s390/ap: modularize ap bus

Mon, 19 Feb 2024 17:10:19 +0000

s390/ap: modularize ap busThere is no hard requirement to have the ap bus statically in thekernel, so add an option to compile it as module.Cc: Tony Krowiak Cc: Halil Pasic Signed-off-by: Holger Dengler Reviewed-by: Harald Freudenberger Reviewed-by: Anthony Krowiak Signed-off-by: Alexander Gordeev List of files: /linux-6.15/drivers/crypto/Kconfig

10930333 - crypto: vmx - Move to arch/powerpc/crypto

Tue, 02 Jan 2024 20:58:56 +0000

crypto: vmx - Move to arch/powerpc/cryptoRelocate all crypto files in vmx driver to arch/powerpc/crypto directoryand remove vmx directory.drivers/crypto/vmx/aes.c rename to arch/powerpc/crypto/aes.cdrivers/crypto/vmx/aes_cbc.c rename to arch/powerpc/crypto/aes_cbc.cdrivers/crypto/vmx/aes_ctr.c rename to arch/powerpc/crypto/aes_ctr.cdrivers/crypto/vmx/aes_xts.c rename to arch/powerpc/crypto/aes_xts.cdrivers/crypto/vmx/aesp8-ppc.h rename to arch/powerpc/crypto/aesp8-ppc.hdrivers/crypto/vmx/aesp8-ppc.pl rename to arch/powerpc/crypto/aesp8-ppc.pldrivers/crypto/vmx/ghash.c rename to arch/powerpc/crypto/ghash.cdrivers/crypto/vmx/ghashp8-ppc.pl rename to arch/powerpc/crypto/ghashp8-ppc.pldrivers/crypto/vmx/vmx.c rename to arch/powerpc/crypto/vmx.cdeleted files:drivers/crypto/vmx/Makefiledrivers/crypto/vmx/Kconfigdrivers/crypto/vmx/ppc-xlate.plThis patch has been tested has passed the selftest. The patch is also tested withCONFIG_CRYPTO_MANAGER_EXTRA_TESTS enabled.Signed-off-by: Danny Tsen Signed-off-by: Herbert Xu List of files: /linux-6.15/drivers/crypto/Kconfig

44ff4ea1 - crypto: sahara - add support for crypto_engine

Sun, 24 Dec 2023 08:21:44 +0000

crypto: sahara - add support for crypto_engineConvert sahara driver to use crypto_engine, rather than doing manual queuemanagement.Signed-off-by: Ovidiu Panait Signed-off-by: Herbert Xu List of files: /linux-6.15/drivers/crypto/Kconfig

a2786e8b - crypto: qcom-rng - Add missing dependency on hw_random

Mon, 16 Oct 2023 17:45:53 +0000

crypto: qcom-rng - Add missing dependency on hw_randomThis should fix the undefined reference:> /usr/bin/aarch64-alpine-linux-musl-ld: Unexpected GOT/PLT entries detected!> /usr/bin/aarch64-alpine-linux-musl-ld: Unexpected run-time procedure linkages detected!> /usr/bin/aarch64-alpine-linux-musl-ld: drivers/crypto/qcom-rng.o: in function `qcom_rng_probe':> qcom-rng.c:(.text+0x130): undefined reference to `devm_hwrng_register'Fixes: f29cd5bb64c2 ("crypto: qcom-rng - Add hw_random interface support")Signed-off-by: André Apitzsch Reviewed-by: Neil Armstrong Signed-off-by: Herbert Xu List of files: /linux-6.15/drivers/crypto/Kconfig

5ac8c724 - s390/zcrypt: remove CEX2 and CEX3 device drivers

Wed, 28 Jun 2023 10:36:08 +0000

s390/zcrypt: remove CEX2 and CEX3 device driversRemove the legacy device driver code for CEX2 and CEX3 cards.The last machines which are able to handle CEX2 crypto cardsare z10 EC first available 2008 and z10 BC first available 2009.The last machines able to handle a CEX3 crypto card arez196 first available 2010 and z114 first available 2011.Please note that this does not imply to drop CEX2 and CEX3support in general. With older kernels on hardware up to theaforementioned machine models these crypto cards will getsupport by IBM.The removal of the CEX2 and CEX3 device drivers code opens upsome simplifications, for example support for crypto cardswithout rng support can be removed also.Signed-off-by: Harald Freudenberger Acked-by: Heiko Carstens Signed-off-by: Heiko Carstens List of files: /linux-6.15/drivers/crypto/Kconfig

2b70a119 - s390/zcrypt: remove ZCRYPT_MULTIDEVNODES kernel config option

Wed, 21 Jun 2023 14:40:41 +0000

s390/zcrypt: remove ZCRYPT_MULTIDEVNODES kernel config optionRemove ZCRYPT_MULTIDEVNODES kernel config option and makethe dependent code always build.The last years showed, that this option is enabled on all distrosand exploited by some features (for example CEX plugin for kubernetes).So remove this choice as it was never used to switch off the multipledevices support for the zcrypt device driver.Signed-off-by: Harald Freudenberger Reviewed-by: Holger Dengler Signed-off-by: Alexander Gordeev List of files: /linux-6.15/drivers/crypto/Kconfig

42ef0e94 - crypto: starfive - Add crypto engine support

Mon, 15 May 2023 12:53:53 +0000

crypto: starfive - Add crypto engine supportAdding device probe and DMA init for StarFive cryptographic module.Co-developed-by: Huan Feng Signed-off-by: Huan Feng Signed-off-by: Jia Jie Ho Signed-off-by: Herbert Xu List of files: /linux-6.15/drivers/crypto/Kconfig

a4b16dad - crypto: qat - Move driver to drivers/crypto/intel/qat

Tue, 28 Mar 2023 15:39:51 +0000

crypto: qat - Move driver to drivers/crypto/intel/qatWith the growing number of Intel crypto drivers, it makes sense togroup them all into a single drivers/crypto/intel/ directory.Signed-off-by: Tom Zanussi Signed-off-by: Herbert Xu List of files: /linux-6.15/drivers/crypto/Kconfig

1bc7fdbf - crypto: ixp4xx - Move driver to drivers/crypto/intel/ixp4xx

Tue, 28 Mar 2023 15:39:50 +0000

crypto: ixp4xx - Move driver to drivers/crypto/intel/ixp4xxWith the growing number of Intel crypto drivers, it makes sense togroup them all into a single drivers/crypto/intel/ directory.Create a separate drivers/crypto/intel/ixp4xx directory and movedrivers/crypto/ixp4xx_crypto.c to it, along with a new Kconfig andMakefile to contain the config and make bits.Also add a COMPILE_TEST dependency to CRYPTO_DEV_IXP4XX so it can bemore easily compile-tested.Signed-off-by: Tom Zanussi Acked-by: Corentin LABBE Signed-off-by: Herbert Xu List of files: /linux-6.15/drivers/crypto/Kconfig

fbf31dd5 - crypto: keembay - Move driver to drivers/crypto/intel/keembay

Tue, 28 Mar 2023 15:39:49 +0000

crypto: keembay - Move driver to drivers/crypto/intel/keembayWith the growing number of Intel crypto drivers, it makes sense togroup them all into a single drivers/crypto/intel/ directory.Signed-off-by: Tom Zanussi Acked-by: Daniele Alessandrelli Signed-off-by: Herbert Xu List of files: /linux-6.15/drivers/crypto/Kconfig

8832023e - crypto: sa2ul - Select CRYPTO_DES

Fri, 24 Mar 2023 14:58:12 +0000

crypto: sa2ul - Select CRYPTO_DESThe SA2UL Crypto driver provides support for couple ofDES3 algos "cbc(des3_ede)" and "ecb(des3_ede)", and enablingthe crypto selftest throws the following errors (as seen onK3 J721E SoCs): saul-crypto 4e00000.crypto: Error allocating fallback algo cbc(des3_ede) alg: skcipher: failed to allocate transform for cbc-des3-sa2ul: -2 saul-crypto 4e00000.crypto: Error allocating fallback algo ecb(des3_ede) alg: skcipher: failed to allocate transform for ecb-des3-sa2ul: -2Fix this by selecting CRYPTO_DES which was missed whileadding base driver support.Fixes: 7694b6ca649f ("crypto: sa2ul - Add crypto driver")Signed-off-by: Suman Anna Signed-off-by: Jayesh Choudhary Signed-off-by: Herbert Xu List of files: /linux-6.15/drivers/crypto/Kconfig

ed490503 - crypto: ccree - Depend on HAS_IOMEM

Thu, 16 Mar 2023 05:30:06 +0000

crypto: ccree - Depend on HAS_IOMEMAdd dependency on HAS_IOMEM as the build will fail without it.Reported-by: kernel test robot Link: https://lore.kernel.org/oe-kbuild-all/202303161354.T2OZFUFZ-lkp@intel.com/Signed-off-by: Herbert Xu List of files: /linux-6.15/drivers/crypto/Kconfig