[GIT PULL] Crypto Update for 7.3
Herbert Xu <[email protected]>
| Newsgroups | org.kernel.vger.linux-crypto,org.kernel.vger.linux-kernel |
|---|---|
| Message-ID | <[email protected]> |
Hi Linus:
The following changes since commit 285d8204638cf8be0dc304dc40f0290ada701340:
crypto: af_alg - Allow cbc(paes) (2026-07-30 17:44:21 +1000)
are available in the Git repository at:
git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6 tags/v7.3-p1
for you to fetch changes up to 7537036a2e6fe96f8ed82034f755c54714a0e417:
crypto: lskcipher - propagate errors from unaligned crypt (2026-08-15 11:28:36 +1000)
----------------------------------------------------------------
This update includes the following changes:
API:
- Add af_alg_restrict sysctl and white list.
- Fix potential suspend/resume races in hwrng.
Algorithms:
- Optimize vli additive operations using compiler builtins in ecc.
Drivers:
- Remove unsafe/deprecated algorithms from qce.
- Mark qce as BROKEN.
- Add runtime PM and interconnect bandwidth scaling support to qce.
- Remove crypto_rng from qcom, sun8i and caam.
- Fix SG list issues in iaa.
- Fix SEV init path bugs in ccp.
----------------------------------------------------------------
Ahsan Atta (1):
crypto: qat - remove dead ADF_HEX code
Atish Patra (2):
crypto: ccp - Fix possible deadlock in SEV init failure path
crypto: ccp - Fix memory leak in SEV INIT_EX path
Bartosz Golaszewski (1):
crypto: qce - Remove unsafe/deprecated algorithms
Can Peng (2):
crypto: keembay - publish OF module alias for OCS AES/SM4
hwrng: stm32 - Fix runtime PM cleanup on registration failure
Chenghai Huang (3):
MAINTAINERS: update hisilicon zip driver maintainer
crypto: hisilicon/sec2 - fix uninitialized type_supported in sec_create_qp_ctx
crypto: hisilicon/sec2 - remove unused sec_ctx.hlf_q_num
David C.C.M. Gall (3):
crypto: sa2ul - use crypto_memneq() to compare AEAD tag
crypto: keembay - use crypto_memneq() to compare GCM AEAD tags
crypto: keembay - use crypto_memneq() to compare CCM AEAD tags
Demi Marie Obenour (1):
crypto: qce - Mark QCE as BROKEN
Eric Biggers (12):
crypto: qcom-rng - Enable clock in hwrng case
crypto: qcom-rng - Allow zero as a random number
crypto: qcom-rng - Remove crypto_rng interface
hwrng: qcom - Move qcom-rng.c into drivers/char/hw_random/
crypto: sun8i-ce - Remove crypto_rng interface
crypto: sun8i-ss - Remove crypto_rng interface
crypto: caam - Remove crypto_rng interface
crypto: af_alg - Add af_alg_restrict sysctl, defaulting to 1
crypto: af_alg - Allow additional ciphers for cryptsetup
crypto: af_alg - Make cbc(paes) privileged-only
crypto: af_alg - Replace 'bool privileged' with flags
crypto: af_alg - Stop after finding name in allowlist
Fabian Blatter (1):
crypto: ecc - Optimize vli additive operations using compiler builtins
Giovanni Cabiddu (5):
crypto: qat - cancel work on re-enable SR-IOV timeout
crypto: qat - clear AES key schedule from stack
crypto: iaa - fall back to software for multi-entry scatterlists
crypto: iaa - avoid counting fallback decompression bytes
crypto: iaa - use bounce buffer for multi-sg decompress input
Herbert Xu (2):
rhashtable: Add workqueue/irq_work header inclusions
Merge git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6
Jan Sebastian Götte (1):
crypto: krb5 - use kfree_sensitive() for derived key buffers
Jingyi Wang (3):
dt-bindings: crypto: qcom,prng: Document Maili TRNG
dt-bindings: crypto: qcom,inline-crypto-engine: Document Maili ICE
dt-bindings: crypto: qcom,ice: Fix missing power-domain and iface clk on Hawi
Karl Mehltretter (1):
crypto: lskcipher - propagate errors from unaligned crypt
Kuldeep Singh (4):
dt-bindings: crypto: qcom,inline-crypto-engine: Fix legacy/new SoC strictness split
dt-bindings: crypto: qcom,inline-crypto-engine: Document Shikra ICE
dt-bindings: crypto: qcom,prng: Document Shikra TRNG
dt-bindings: crypto: qcom-qce: Document the Shikra crypto engine
Linmao Li (1):
crypto: keembay - Initialize completion before requesting IRQ
Lothar Rubusch (1):
crypto: atmel-sha204a - fix heap info leak on I2C transfer failure
Manos Pitsidianakis (1):
hwrng: core - fix rng list on registration error
Manuel Ebner (1):
crypto: doc - Remove extra parenthesis
Md Sadre Alam (1):
crypto: qce - fix CCM AAD buffer underallocation
Miquel Raynal (Schneider Electric) (2):
dt-bindings: rng: Rename the title of the EIP-76 file
hwrng: omap - Enable on Renesas RZ/N1D
Myeonghun Pak (2):
hwrng: omap - Fix probe error path cleanup
crypto: keembay - Fix AEAD unregister count in error path
Narasimharao Vadlamudi (1):
crypto: aspeed - Propagate platform_get_irq() errors
Pan Chuang (12):
hwrng: drivers - Remove redundant dev_err()/dev_err_probe()
crypto: allwinner - Remove redundant dev_err()
crypto: amlogic - Remove redundant dev_err()
crypto: aspeed - Remove redundant dev_err()
crypto: drivers - Remove redundant dev_err()/dev_err_probe()
crypto: ccree - Remove redundant dev_err()
crypto: sl3516 - Remove redundant dev_err()
crypto: safexcel - Remove redundant dev_err()
crypto: keembay - Remove redundant dev_err()
crypto: octeontx2 - Remove redundant dev_err()
crypto: rockchip - Remove redundant dev_err()
crypto: stm32 - Remove redundant dev_err()
Paul Louvel (1):
crypto: ecdsa - Fix typo in function documentation
Pawel Zalewski (The Capable Hub) (1):
hwrng: drivers - use named initializers for acpi_device_id
Pengpeng Hou (5):
crypto: sa2ul - stop probe if context pool creation fails
hwrng: xilinx-trng - propagate timeout before any data is read
crypto: rk3288 - fail ahash requests on HASH idle timeout
crypto: ixp4xx - add missing MODULE_DEVICE_TABLE()
crypto: keembay - add missing MODULE_DEVICE_TABLE()
Pratik R. Sampat (1):
crypto: ccp - Introduce SNP_VERIFY_MITIGATION command
Randy Dunlap (2):
crypto: af_alg - clean up kernel-doc warnings
crypto: ccp - don't abuse kernel-doc comment format
Rosen Penev (10):
crypto: crypto4xx - move ioremapping up
crypto: hisilicon/sec - use devm_platform_ioremap_resource in sec_map_io
crypto: omap-aes - use devm_platform_get_and_ioremap_resource
crypto: omap-sham - use devm_platform_get_and_ioremap_resource
crypto: cesa - manage SRAM teardown with devm
crypto: talitos - Use platform_get_irq() to retrieve interrupt
crypto: cesa - clear cesa_dev on _remove
crypto: amcc - fix racy teardown with devm_request_irq
crypto: caam - simplify probe resource and IRQ handling
crypto: eip93 - use struct_size() and flexible array for ring allocation
Sang-Heon Jeon (1):
crypto: drivers - remove conditional return with no effect
Shawn Guo (1):
dt-bindings: crypto: qcom,inline-crypto-engine: Document Nord ICE
Thomas Richard (TI) (1):
hwrng: core - Stop/start hwrng_fillfn() kthread before/after suspend-resume
Thorsten Blum (30):
crypto: use 2-arg strscpy where destination size is known
crypto: cavium - use 2-arg strscpy where destination size is known
crypto: ccp - use 2-arg strscpy where destination size is known
crypto: hisilicon - use 2-arg strscpy where destination size is known
crypto: qat - use 2-arg strscpy where destination size is known
crypto: octeontx - use 2-arg strscpy where destination size is known
hwrng: atmel - drop __maybe_unused from atmel_trng_pm_ops
crypto: atmel-i2c - improve comment in atmel_i2c_init_ecdh_cmd
crypto: atmel-ecc - clean up and improve ECDH comments
crypto: atmel-tdes - use scatterlist length before DMA mapping
crypto: atmel-ecc - drop unused curve id from atmel_ecdh_ctx
crypto: atmel-ecc - reject hardware ECDH without a public key
crypto: qce - drop unused scatterlist traversal in qce_ahash_update
crypto: mxs-dcp - fix source scatterlist length access
crypto: qat - use strscpy_pad to simplify adf_service_string_to_mask
crypto: atmel-tdes - simplify fast path in crypt_start
crypto: atmel-tdes - use __get_free_page in buff_init
crypto: atmel-tdes - drop redundant return variable in crypt_pdc_stop
crypto: atmel-tdes - drop redundant if check in crypt_dma_stop
crypto: atmel-sha204a - clear RNG data from memory
crypto: atmel-ecc - avoid stale fallback key after set_secret failure
crypto: sl3516 - drop invalid sg_dma_len checks before DMA mapping
crypto: powerpc/aes - use bool for encryption/decryption flag
crypto: bcm - use memcpy_and_pad in ahash_hmac_setkey
crypto: qce - drop redundant variable in qce_skcipher_done
crypto: octeontx - simplify get_{eng,ucode}_type_str helpers
crypto: atmel-ecc - simplify control flow in atmel_ecdh_set_secret
crypto: atmel-ecc - drop redundant return variable
crypto: qce - simplify devm_qce_register_algs
crypto: qce - simplify qce_handle_request
Udit Tiwari (1):
crypto: qce - Add runtime PM and interconnect bandwidth scaling support
Vinicius Costa Gomes (1):
crypto: iaa - unmap dst before software fallback on decompress
Wenjia Zhang (1):
dt-bindings: crypto: qcom,inline-crypto-engine: Add x1e80100 support
Yuho Choi (2):
hwrng: ks-sa - Fix runtime PM cleanup on registration failure
hwrng: imx-rngc - Disable clock on registration failure
Zhushuai Yin (1):
crypto: hisilicon/sec2 - fix CCM algorithm long packet failure
.../ABI/testing/sysfs-firmware-sev-vulnerabilities | 19 ++
Documentation/admin-guide/sysctl/crypto.rst | 36 +++
Documentation/crypto/architecture.rst | 2 +-
Documentation/crypto/userspace-if.rst | 13 +-
.../bindings/crypto/qcom,inline-crypto-engine.yaml | 27 +-
.../devicetree/bindings/crypto/qcom,prng.yaml | 2 +
.../devicetree/bindings/crypto/qcom-qce.yaml | 1 +
.../bindings/rng/inside-secure,safexcel-eip76.yaml | 2 +-
MAINTAINERS | 2 +-
arch/arm/configs/multi_v7_defconfig | 3 +-
arch/arm/configs/qcom_defconfig | 2 +-
arch/arm64/configs/defconfig | 3 +-
arch/powerpc/crypto/aes_cbc.c | 6 +-
crypto/af_alg.c | 76 +++++-
crypto/algif_aead.c | 11 +
crypto/algif_hash.c | 24 ++
crypto/algif_rng.c | 9 +
crypto/algif_skcipher.c | 23 ++
crypto/api.c | 2 +-
crypto/crypto_user.c | 9 +-
crypto/ecc.c | 98 +++++---
crypto/hctr2.c | 3 +-
crypto/krb5/krb5_api.c | 8 +-
crypto/lrw.c | 2 +-
crypto/lskcipher.c | 4 +-
crypto/xts.c | 3 +-
drivers/char/hw_random/Kconfig | 13 +-
drivers/char/hw_random/Makefile | 1 +
drivers/char/hw_random/airoha-trng.c | 4 +-
drivers/char/hw_random/atmel-rng.c | 2 +-
drivers/char/hw_random/cctrng.c | 2 +-
drivers/char/hw_random/core.c | 105 ++++++--
drivers/char/hw_random/hisi-trng-v2.c | 2 +-
drivers/char/hw_random/imx-rngc.c | 6 +-
drivers/char/hw_random/jh7110-trng.c | 3 +-
drivers/char/hw_random/ks-sa-rng.c | 9 +-
drivers/char/hw_random/omap-rng.c | 35 +--
drivers/{crypto => char/hw_random}/qcom-rng.c | 156 ++----------
drivers/char/hw_random/stm32-rng.c | 10 +-
drivers/char/hw_random/xgene-rng.c | 4 +-
drivers/char/hw_random/xilinx-trng.c | 32 ++-
drivers/crypto/Kconfig | 18 +-
drivers/crypto/Makefile | 1 -
drivers/crypto/allwinner/Kconfig | 16 --
drivers/crypto/allwinner/sun8i-ce/Makefile | 1 -
drivers/crypto/allwinner/sun8i-ce/sun8i-ce-core.c | 67 +----
drivers/crypto/allwinner/sun8i-ce/sun8i-ce-prng.c | 159 ------------
drivers/crypto/allwinner/sun8i-ce/sun8i-ce.h | 29 ---
drivers/crypto/allwinner/sun8i-ss/Makefile | 1 -
drivers/crypto/allwinner/sun8i-ss/sun8i-ss-core.c | 49 +---
drivers/crypto/allwinner/sun8i-ss/sun8i-ss-prng.c | 177 --------------
drivers/crypto/allwinner/sun8i-ss/sun8i-ss.h | 23 --
drivers/crypto/amcc/crypto4xx_core.c | 34 +--
drivers/crypto/amlogic/amlogic-gxl-core.c | 4 +-
drivers/crypto/aspeed/aspeed-acry.c | 6 +-
drivers/crypto/aspeed/aspeed-hace.c | 6 +-
drivers/crypto/atmel-aes.c | 4 +-
drivers/crypto/atmel-ecc.c | 66 ++---
drivers/crypto/atmel-i2c.c | 5 +-
drivers/crypto/atmel-sha.c | 4 +-
drivers/crypto/atmel-sha204a.c | 16 +-
drivers/crypto/atmel-tdes.c | 70 +++---
drivers/crypto/bcm/cipher.c | 4 +-
drivers/crypto/caam/Kconfig | 9 -
drivers/crypto/caam/Makefile | 1 -
drivers/crypto/caam/caamprng.c | 241 ------------------
drivers/crypto/caam/intern.h | 15 --
drivers/crypto/caam/jr.c | 48 +---
drivers/crypto/cavium/nitrox/nitrox_hal.c | 3 +-
drivers/crypto/ccp/ccp-crypto-sha.c | 2 +-
drivers/crypto/ccp/sev-dev.c | 196 ++++++++++++++-
drivers/crypto/ccp/sev-dev.h | 3 +
drivers/crypto/ccree/cc_driver.c | 4 +-
drivers/crypto/gemini/sl3516-ce-cipher.c | 8 -
drivers/crypto/gemini/sl3516-ce-core.c | 4 +-
drivers/crypto/hisilicon/qm.c | 5 +-
drivers/crypto/hisilicon/sec/sec_drv.c | 19 +-
drivers/crypto/hisilicon/sec2/sec.h | 3 -
drivers/crypto/hisilicon/sec2/sec_crypto.c | 37 ++-
drivers/crypto/img-hash.c | 4 +-
drivers/crypto/inside-secure/eip93/eip93-main.c | 6 +-
drivers/crypto/inside-secure/eip93/eip93-main.h | 22 +-
drivers/crypto/inside-secure/safexcel.c | 4 +-
drivers/crypto/intel/iaa/iaa_crypto_main.c | 272 ++++++++++++++-------
drivers/crypto/intel/iaa/iaa_crypto_stats.c | 9 +
drivers/crypto/intel/iaa/iaa_crypto_stats.h | 2 +
drivers/crypto/intel/ixp4xx/ixp4xx_crypto.c | 1 +
.../crypto/intel/keembay/keembay-ocs-aes-core.c | 16 +-
drivers/crypto/intel/keembay/keembay-ocs-ecc.c | 5 +-
.../crypto/intel/keembay/keembay-ocs-hcu-core.c | 4 +-
drivers/crypto/intel/keembay/ocs-aes.c | 3 +-
drivers/crypto/intel/qat/qat_common/adf_aer.c | 2 +
drivers/crypto/intel/qat/qat_common/adf_cfg.c | 10 +-
.../crypto/intel/qat/qat_common/adf_cfg_common.h | 1 -
.../crypto/intel/qat/qat_common/adf_cfg_services.c | 15 +-
.../crypto/intel/qat/qat_common/adf_cfg_services.h | 2 +-
.../crypto/intel/qat/qat_common/adf_gen2_config.c | 8 +-
.../crypto/intel/qat/qat_common/adf_mstate_mgr.c | 3 +-
drivers/crypto/intel/qat/qat_common/adf_sysfs.c | 2 +-
.../intel/qat/qat_common/adf_transport_debug.c | 3 +-
drivers/crypto/intel/qat/qat_common/qat_algs.c | 1 +
.../crypto/intel/qat/qat_common/qat_compression.c | 3 +-
drivers/crypto/marvell/cesa/cesa.c | 55 ++---
drivers/crypto/marvell/cesa/cesa.h | 2 +
drivers/crypto/marvell/octeontx/otx_cptpf_ucode.c | 28 +--
.../marvell/octeontx2/otx2_cpt_mbox_common.c | 7 +-
drivers/crypto/marvell/octeontx2/otx2_cptpf_main.c | 5 +-
.../crypto/marvell/octeontx2/otx2_cptpf_ucode.c | 4 +-
drivers/crypto/mxs-dcp.c | 10 +-
drivers/crypto/omap-aes.c | 88 +------
drivers/crypto/omap-des.c | 4 +-
drivers/crypto/omap-sham.c | 109 ++-------
drivers/crypto/qce/aead.c | 58 +----
drivers/crypto/qce/common.c | 55 +----
drivers/crypto/qce/common.h | 16 +-
drivers/crypto/qce/core.c | 115 +++++++--
drivers/crypto/qce/regs-v5.h | 4 -
drivers/crypto/qce/sha.c | 61 +----
drivers/crypto/qce/sha.h | 1 -
drivers/crypto/qce/skcipher.c | 103 +-------
drivers/crypto/rockchip/rk3288_crypto.c | 4 +-
drivers/crypto/rockchip/rk3288_crypto_ahash.c | 7 +-
drivers/crypto/sa2ul.c | 9 +-
drivers/crypto/sahara.c | 3 +-
drivers/crypto/stm32/stm32-cryp.c | 4 +-
drivers/crypto/stm32/stm32-hash.c | 4 +-
drivers/crypto/talitos.c | 30 +--
drivers/gpu/drm/ci/arm64.config | 2 +-
include/crypto/aes.h | 2 +-
include/crypto/if_alg.h | 42 +++-
include/crypto/internal/ecc.h | 4 +-
include/linux/psp-sev.h | 51 ++++
include/linux/rhashtable.h | 1 -
include/uapi/linux/psp-sfs.h | 4 +-
lib/rhashtable.c | 2 +
135 files changed, 1405 insertions(+), 2019 deletions(-)
create mode 100644 Documentation/ABI/testing/sysfs-firmware-sev-vulnerabilities
rename drivers/{crypto => char/hw_random}/qcom-rng.c (53%)
delete mode 100644 drivers/crypto/allwinner/sun8i-ce/sun8i-ce-prng.c
delete mode 100644 drivers/crypto/allwinner/sun8i-ss/sun8i-ss-prng.c
delete mode 100644 drivers/crypto/caam/caamprng.c
Thanks,
--
Email: Herbert Xu <[email protected]>
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt