Changes in Kconfig

beba3771 - crypto: caam: Make CRYPTO_DEV_FSL_CAAM dependent of COMPILE_TEST

Tue, 02 Jul 2024 18:55:52 +0000

crypto: caam: Make CRYPTO_DEV_FSL_CAAM dependent of COMPILE_TESTAs most of the drivers that depend on ARCH_LAYERSCAPE, makeCRYPTO_DEV_FSL_CAAM depend on COMPILE_TEST for compilation and testing. # grep -r depends.\*ARCH_LAYERSCAPE.\*COMPILE_TEST | wc -l 29Signed-off-by: Breno Leitao Link: https://patch.msgid.link/20240702185557.3699991-3-leitao@debian.orgSigned-off-by: Jakub Kicinski List of files: /linux-6.15/drivers/crypto/caam/Kconfig

2be0d806 - crypto: caam - add a test for the RNG

Mon, 12 Jun 2023 08:28:42 +0000

crypto: caam - add a test for the RNGCAAM includes a Random Number Generator. This change addsa kernel configuration option to test the RNG's capabilities via thehw_random framework.Signed-off-by: Victoria Milhoan Signed-off-by: Dan Douglass Signed-off-by: Vipul Kumar Signed-off-by: Horia Geantă Signed-off-by: Meenakshi Aggarwal Reviewed-by: Gaurav Jain Signed-off-by: Herbert Xu List of files: /linux-6.15/drivers/crypto/caam/Kconfig

007c3ff1 - crypto: caam - add in-kernel interface for blob generator

Fri, 13 May 2022 14:57:02 +0000

crypto: caam - add in-kernel interface for blob generatorThe NXP Cryptographic Acceleration and Assurance Module (CAAM)can be used to protect user-defined data across system reboot: - When the system is fused and boots into secure state, the master key is a unique never-disclosed device-specific key - random key is encrypted by key derived from master key - data is encrypted using the random key - encrypted data and its encrypted random key are stored alongside - This blob can now be safely stored in non-volatile memoryOn next power-on: - blob is loaded into CAAM - CAAM writes decrypted data either into memory or key registerAdd functions to realize encrypting and decrypting into memory alongsidethe CAAM driver.They will be used in a later commit as a source for the trusted keyseal/unseal mechanism.Reviewed-by: David Gstir Reviewed-by: Pankaj Gupta Tested-by: Tim Harvey Tested-by: Matthias Schiffer Tested-by: Pankaj Gupta Tested-by: Michael Walle # on ls1028a (non-E and E)Tested-by: John Ernberg # iMX8QXPSigned-off-by: Steffen Trumtrar Signed-off-by: Ahmad Fatoum Signed-off-by: Jarkko Sakkinen List of files: /linux-6.15/drivers/crypto/caam/Kconfig

0aa6ac77 - crypto: caam/rng - Add support for PRNG

Fri, 29 Apr 2022 11:48:08 +0000

crypto: caam/rng - Add support for PRNGAdd support for random number generation using PRNGmode of CAAM and expose the interface through crypto API.According to the RM, the HW implementation of the DRBG followsNIST SP 800-90A specification for DRBG_Hash SHA-256 functionSigned-off-by: Meenakshi Aggarwal Reviewed-by: Horia Geant Signed-off-by: Herbert Xu List of files: /linux-6.15/drivers/crypto/caam/Kconfig

36e2d7cf - crypto: caam/qi2 - add fallback for XTS with more than 8B IV

Tue, 22 Sep 2020 16:03:21 +0000

crypto: caam/qi2 - add fallback for XTS with more than 8B IVA hardware limitation exists for CAAM until Era 9 which restrictsthe accelerator to IVs with only 8 bytes. When CAAM has a lower eraa fallback is necessary to process 16 bytes IV.Fixes: 226853ac3ebe ("crypto: caam/qi2 - add skcipher algorithms")Cc: # v4.20+Signed-off-by: Andrei Botila Reviewed-by: Horia Geantă Signed-off-by: Herbert Xu List of files: /linux-6.15/drivers/crypto/caam/Kconfig

83e8aa91 - crypto: caam/qi - add fallback for XTS with more than 8B IV

Tue, 22 Sep 2020 16:03:20 +0000

crypto: caam/qi - add fallback for XTS with more than 8B IVA hardware limitation exists for CAAM until Era 9 which restrictsthe accelerator to IVs with only 8 bytes. When CAAM has a lower eraa fallback is necessary to process 16 bytes IV.Fixes: b189817cf789 ("crypto: caam/qi - add ablkcipher and authenc algorithms")Cc: # v4.12+Signed-off-by: Andrei Botila Reviewed-by: Horia Geantă Signed-off-by: Herbert Xu List of files: /linux-6.15/drivers/crypto/caam/Kconfig

9d9b14db - crypto: caam/jr - add fallback for XTS with more than 8B IV

Tue, 22 Sep 2020 16:03:19 +0000

crypto: caam/jr - add fallback for XTS with more than 8B IVA hardware limitation exists for CAAM until Era 9 which restrictsthe accelerator to IVs with only 8 bytes. When CAAM has a lower eraa fallback is necessary to process 16 bytes IV.Fixes: c6415a6016bf ("crypto: caam - add support for acipher xts(aes)")Cc: # v4.4+Signed-off-by: Andrei Botila Reviewed-by: Horia Geantă Signed-off-by: Herbert Xu List of files: /linux-6.15/drivers/crypto/caam/Kconfig

24c7bf08 - crypto: caam - fix typos

Thu, 04 Jun 2020 10:39:47 +0000

crypto: caam - fix typosFix CAAM related typos.Signed-off-by: Heinrich Schuchardt Reviewed-by: Horia Geantă Signed-off-by: Herbert Xu List of files: /linux-6.15/drivers/crypto/caam/Kconfig

358ba762 - crypto: caam - enable prediction resistance in HRWNG

Thu, 19 Mar 2020 16:12:32 +0000

crypto: caam - enable prediction resistance in HRWNGInstantiate CAAM RNG with prediction resistance enabled to improve itsquality (with PR on DRNG is forced to reseed from TRNG every timerandom data is generated).Management Complex firmware with version lower than 10.20.0doesn't provide prediction resistance support. Consider thisand only instantiate rng when mc f/w version is lower.Signed-off-by: Andrey Smirnov Signed-off-by: Andrei Botila Cc: Chris Healy Cc: Lucas Stach Cc: Horia Geantă Cc: Herbert Xu Cc: Iuliana Prodan Cc: linux-crypto@vger.kernel.orgCc: linux-kernel@vger.kernel.orgCc: linux-imx@nxp.comReviewed-by: Horia Geantă Signed-off-by: Herbert Xu List of files: /linux-6.15/drivers/crypto/caam/Kconfig

ee38767f - crypto: caam - support crypto_engine framework for SKCIPHER algorithms

Wed, 12 Feb 2020 17:55:21 +0000

crypto: caam - support crypto_engine framework for SKCIPHER algorithmsIntegrate crypto_engine into CAAM, to make use of the engine queue.Add support for SKCIPHER algorithms.This is intended to be used for CAAM backlogging support.The requests, with backlog flag (e.g. from dm-crypt) will be listedinto crypto-engine queue and processed by CAAM when free.This changes the return codes for enqueuing a request:-EINPROGRESS if OK, -EBUSY if request is backlogged (viacrypto-engine), -ENOSPC if the queue is full, -EIO if itcannot map the caller's descriptor.The requests, with backlog flag, will be listed into crypto-enginequeue and processed by CAAM when free. Only the backlog request aresent to crypto-engine since the others can be handled by CAAM, if free,especially since JR has up to 1024 entries (more than the 10 entriesfrom crypto-engine).Signed-off-by: Iuliana Prodan Signed-off-by: Franck LENORMAND Reviewed-by: Horia Geantă Signed-off-by: Herbert Xu List of files: /linux-6.15/drivers/crypto/caam/Kconfig

2452cfdf - crypto: Kconfig - Fix indentation

Thu, 21 Nov 2019 03:20:48 +0000

crypto: Kconfig - Fix indentationAdjust indentation from spaces to tab (+optional two spaces) as incoding style with command like: $ sed -e 's/^ /\t/' -i */KconfigSigned-off-by: Krzysztof Kozlowski Reviewed-by: Horia Geantă Signed-off-by: Herbert Xu List of files: /linux-6.15/drivers/crypto/caam/Kconfig

b95bba5d - crypto: skcipher - rename the crypto_blkcipher module and kconfig option

Fri, 25 Oct 2019 19:41:13 +0000

crypto: skcipher - rename the crypto_blkcipher module and kconfig optionNow that the blkcipher algorithm type has been removed in favor ofskcipher, rename the crypto_blkcipher kernel module to crypto_skcipher,and rename the config options accordingly: CONFIG_CRYPTO_BLKCIPHER => CONFIG_CRYPTO_SKCIPHER CONFIG_CRYPTO_BLKCIPHER2 => CONFIG_CRYPTO_SKCIPHER2Signed-off-by: Eric Biggers Signed-off-by: Herbert Xu List of files: /linux-6.15/drivers/crypto/caam/Kconfig

04007b0e - crypto: des - split off DES library from generic DES cipher driver

Thu, 15 Aug 2019 09:01:09 +0000

crypto: des - split off DES library from generic DES cipher driverAnother one for the cipher museum: split off DES core processing intoa separate module so other drivers (mostly for crypto accelerators)can reuse the code without pulling in the generic DES cipher itself.This will also permit the cipher interface to be made private to thecrypto API itself once we move the only user in the kernel (CIFS) tothis library interface.Signed-off-by: Ard Biesheuvel Signed-off-by: Herbert Xu List of files: /linux-6.15/drivers/crypto/caam/Kconfig

836d8f43 - crypto: caam - check key length

Wed, 31 Jul 2019 13:08:05 +0000

crypto: caam - check key lengthCheck key length to solve the extra tests that expect -EINVAL to bereturned when the key size is not valid.Validated AES keylen for skcipher, ahash and aead.Signed-off-by: Iuliana Prodan Reviewed-by: Horia Geanta Signed-off-by: Herbert Xu List of files: /linux-6.15/drivers/crypto/caam/Kconfig

1b46c90c - crypto: caam - convert top level drivers to libraries

Fri, 03 May 2019 14:17:39 +0000

crypto: caam - convert top level drivers to librariesCurrently we allow top level code, i.e. that which sits between thelow level (HW-specific) drivers and crypto API, to be built as severaldrivers: caamalg, caamhash, caam_pkc, caamrng, caamalg_qi.There is no advantage in this, more it interferes with adding supportfor deferred probing (there are no corresponding devices and thusno bus).Convert these drivers and call init() / exit() manually at the righttime.Move algorithms initialization at JR probe / remove time:-the first probed JR registers the crypto algs-the last removed JR unregisters the crypto algsNote: caam_qi_init() is called before JR platform devices creation(of_populate_bus()), such that QI interface is initialized whenthe caam/qi algorithms are registered in the JR driver (by callingcaam_qi_algapi_init().While here, fix the Kconfig entries under CRYPTO_DEV_FSL_CAAM_JRto be aligned.Signed-off-by: Horia Geantă Signed-off-by: Herbert Xu List of files: /linux-6.15/drivers/crypto/caam/Kconfig

eaed71a4 - crypto: caam - add ecb(*) support

Fri, 08 Feb 2019 13:50:09 +0000

crypto: caam - add ecb(*) supportAdd ecb mode support for aes, des, 3des and arc4 ciphers.ecb(*) reuses existing skcipher implementation, updating it with supportfor no IV.Signed-off-by: Iuliana Prodan Reviewed-by: Horia Geantă Signed-off-by: Herbert Xu List of files: /linux-6.15/drivers/crypto/caam/Kconfig

618b5dc4 - crypto: caam - add SPDX license identifier to all files

Wed, 10 Oct 2018 11:26:48 +0000

crypto: caam - add SPDX license identifier to all filesPreviously, a tree-wide change added SPDX license identifiers tofiles lacking licensing information:b24413180f56 ("License cleanup: add SPDX GPL-2.0 license identifier to files with no license")To be consistent update the rest of the files:-files with license specified by means of MODULE_LICENSE()-files with complete license text-KconfigSigned-off-by: Horia Geantă Signed-off-by: Herbert Xu List of files: /linux-6.15/drivers/crypto/caam/Kconfig

96808c59 - crypto: caam/qi2 - add CONFIG_NETDEVICES dependency

Wed, 26 Sep 2018 13:00:34 +0000

crypto: caam/qi2 - add CONFIG_NETDEVICES dependencyThis driver implements a (part of a) network driver, and fails tobuild if we have turned off networking support:drivers/crypto/caam/caamalg_qi2.o: In function `dpaa2_caam_fqdan_cb':caamalg_qi2.c:(.text+0x577c): undefined reference to `napi_schedule_prep'caamalg_qi2.c:(.text+0x578c): undefined reference to `__napi_schedule_irqoff'drivers/crypto/caam/caamalg_qi2.o: In function `dpaa2_dpseci_poll':caamalg_qi2.c:(.text+0x59b8): undefined reference to `napi_complete_done'drivers/crypto/caam/caamalg_qi2.o: In function `dpaa2_caam_remove':caamalg_qi2.c:(.text.unlikely+0x4e0): undefined reference to `napi_disable'caamalg_qi2.c:(.text.unlikely+0x4e8): undefined reference to `netif_napi_del'drivers/crypto/caam/caamalg_qi2.o: In function `dpaa2_dpseci_setup':caamalg_qi2.c:(.text.unlikely+0xc98): undefined reference to `netif_napi_add'From what I can tell, CONFIG_NETDEVICES is the correct dependency here,and adding it fixes the randconfig failures.Fixes: 8d818c105501 ("crypto: caam/qi2 - add DPAA2-CAAM driver")Signed-off-by: Arnd Bergmann Acked-by: Horia Geantă Signed-off-by: Herbert Xu List of files: /linux-6.15/drivers/crypto/caam/Kconfig

3f16f6c9 - crypto: caam/qi2 - add support for ahash algorithms

Wed, 12 Sep 2018 08:59:36 +0000

crypto: caam/qi2 - add support for ahash algorithmsAdd support for unkeyed and keyed (hmac) md5, sha algorithms.Signed-off-by: Horia Geantă Signed-off-by: Herbert Xu List of files: /linux-6.15/drivers/crypto/caam/Kconfig

0efa7579 - crypto: caam - export ahash shared descriptor generation

Wed, 12 Sep 2018 08:59:35 +0000

crypto: caam - export ahash shared descriptor generationcaam/qi2 driver will support ahash algorithms,thus move ahash descriptors generation in a shared location.Signed-off-by: Horia Geantă Signed-off-by: Herbert Xu List of files: /linux-6.15/drivers/crypto/caam/Kconfig