Changes in Kconfig

0fc8f6200d2313278fbf4539bbab74677c685531 - Merge drm/drm-fixes into drm-misc-fixes

Mon, 27 Apr 2026 10:26:49 +0200

Merge drm/drm-fixes into drm-misc-fixesGetting fixes and updates from v7.1-rc1.Signed-off-by: Thomas Zimmermann List of files: /linux/arch/arm64/crypto/Kconfig

f4b369c6fe0ceaba2da2daff8c9eb415f85926dd - Merge branch 'next' into for-linus

Mon, 20 Apr 2026 03:28:57 +0200

Merge branch 'next' into for-linusPrepare input updates for 7.1 merge window. List of files: /linux/arch/arm64/crypto/Kconfig

0421ccdfad0d92713a812a5aeb7d07b0ea7213c8 - Merge tag 'v7.0-rc3' into next

Thu, 12 Mar 2026 18:44:42 +0100

Merge tag 'v7.0-rc3' into nextSync up with the mainline to brig up the latest changes, specificallychanges to ALPS driver. List of files: /linux/arch/arm64/crypto/Kconfig

370c3883195566ee3e7d79e0146c3d735a406573 - Merge tag 'libcrypto-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiggers/linux

Tue, 14 Apr 2026 02:31:39 +0200

Merge tag 'libcrypto-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiggers/linuxPull crypto library updates from Eric Biggers: - Migrate more hash algorithms from the traditional crypto subsystem to lib/crypto/ Like the algorithms migrated earlier (e.g. SHA-*), this simplifies the implementations, improves performance, enables further simplifications in calling code, and solves various other issues: - AES CBC-based MACs (AES-CMAC, AES-XCBC-MAC, and AES-CBC-MAC) - Support these algorithms in lib/crypto/ using the AES library and the existing arm64 assembly code - Reimplement the traditional crypto API's "cmac(aes)", "xcbc(aes)", and "cbcmac(aes)" on top of the library - Convert mac80211 to use the AES-CMAC library. Note: several other subsystems can use it too and will be converted later - Drop the broken, nonstandard, and likely unused support for "xcbc(aes)" with key lengths other than 128 bits - Enable optimizations by default - GHASH - Migrate the standalone GHASH code into lib/crypto/ - Integrate the GHASH code more closely with the very similar POLYVAL code, and improve the generic GHASH implementation to resist cache-timing attacks and use much less memory - Reimplement the AES-GCM library and the "gcm" crypto_aead template on top of the GHASH library. Remove "ghash" from the crypto_shash API, as it's no longer needed - Enable optimizations by default - SM3 - Migrate the kernel's existing SM3 code into lib/crypto/, and reimplement the traditional crypto API's "sm3" on top of it - I don't recommend using SM3, but this cleanup is worthwhile to organize the code the same way as other algorithms - Testing improvements: - Add a KUnit test suite for each of the new library APIs - Migrate the existing ChaCha20Poly1305 test to KUnit - Make the KUnit all_tests.config enable all crypto library tests - Move the test kconfig options to the Runtime Testing menu - Other updates to arch-optimized crypto code: - Optimize SHA-256 for Zhaoxin CPUs using the Padlock Hash Engine - Remove some MD5 implementations that are no longer worth keeping - Drop big endian and voluntary preemption support from the arm64 code, as those configurations are no longer supported on arm64 - Make jitterentropy and samples/tsm-mr use the crypto library APIs* tag 'libcrypto-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiggers/linux: (66 commits) lib/crypto: arm64: Assume a little-endian kernel arm64: fpsimd: Remove obsolete cond_yield macro lib/crypto: arm64/sha3: Remove obsolete chunking logic lib/crypto: arm64/sha512: Remove obsolete chunking logic lib/crypto: arm64/sha256: Remove obsolete chunking logic lib/crypto: arm64/sha1: Remove obsolete chunking logic lib/crypto: arm64/poly1305: Remove obsolete chunking logic lib/crypto: arm64/gf128hash: Remove obsolete chunking logic lib/crypto: arm64/chacha: Remove obsolete chunking logic lib/crypto: arm64/aes: Remove obsolete chunking logic lib/crypto: Include instead of lib/crypto: aesgcm: Don't disable IRQs during AES block encryption lib/crypto: aescfb: Don't disable IRQs during AES block encryption lib/crypto: tests: Migrate ChaCha20Poly1305 self-test to KUnit lib/crypto: sparc: Drop optimized MD5 code lib/crypto: mips: Drop optimized MD5 code lib: Move crypto library tests to Runtime Testing menu crypto: sm3 - Remove 'struct sm3_state' crypto: sm3 - Remove the original "sm3_block_generic()" crypto: sm3 - Remove sm3_base.h ... List of files: /linux/arch/arm64/crypto/Kconfig

9f69f52b462cdaed83b782d0408ce9286f054f92 - lib/crypto: arm64/sm3: Migrate optimized code into library

Sat, 21 Mar 2026 05:09:30 +0100

lib/crypto: arm64/sm3: Migrate optimized code into libraryInstead of exposing the arm64-optimized SM3 code via arm64-specificcrypto_shash algorithms, instead just implement the sm3_blocks() libraryfunction. This is much simpler, it makes the SM3 library functions bearm64-optimized, and it fixes the longstanding issue where thearm64-optimized SM3 code was disabled by default. SM3 still remainsavailable through crypto_shash, but individual architectures no longerneed to handle it.Tweak the SM3 assembly function prototypes to match what the libraryexpects, including changing the block count from 'int' to 'size_t'.sm3_ce_transform() had to be updated to access 'x2' instead of 'w2',while sm3_neon_transform() already used 'x2'.Remove the CFI stubs which are no longer needed because the SM3 assemblyfunctions are no longer ever indirectly called.Remove the dependency on KERNEL_MODE_NEON. It was unnecessary, becauseKERNEL_MODE_NEON is always enabled on arm64.Acked-by: Ard Biesheuvel Link: https://lore.kernel.org/r/20260321040935.410034-8-ebiggers@kernel.orgSigned-off-by: Eric Biggers List of files: /linux/arch/arm64/crypto/Kconfig

a336c01f5b11cc158150d051d612a2f7ad9fd6a8 - lib/crypto: arm64/ghash: Migrate optimized code into library

Thu, 19 Mar 2026 07:17:10 +0100

lib/crypto: arm64/ghash: Migrate optimized code into libraryRemove the "ghash-neon" crypto_shash algorithm. Move the correspondingassembly code into lib/crypto/, and wire it up to the GHASH library.This makes the GHASH library be optimized on arm64 (though only withNEON, not PMULL; for now the goal is just parity with crypto_shash). Itgreatly reduces the amount of arm64-specific glue code that is needed,and it fixes the issue where this optimization was disabled by default.To integrate the assembly code correctly with the library, make thefollowing tweaks:- Change the type of 'blocks' from int to size_t- Change the types of 'dg' and 'h' to polyval_elem. Note that this simply reflects the format that the code was already using.- Remove the 'head' argument, which is no longer needed.- Remove the CFI stubs, as indirect calls are no longer used.Acked-by: Ard Biesheuvel Link: https://lore.kernel.org/r/20260319061723.1140720-10-ebiggers@kernel.orgSigned-off-by: Eric Biggers List of files: /linux/arch/arm64/crypto/Kconfig

42d3b66d4cdbacfc9d120d2301b8de89cc29a914 - Merge drm/drm-next into drm-xe-next

Thu, 12 Mar 2026 15:17:56 +0100

Merge drm/drm-next into drm-xe-nextBackmerging to bring in 7.00-rc3. Important ahead GPU SVM merging THPsupport.Signed-off-by: Matthew Brost List of files: /linux/arch/arm64/crypto/Kconfig

58286738b159ca93d41438a6ddcc2ea5333191b4 - lib/crypto: arm64/aes: Migrate optimized CBC-based MACs into library

Wed, 18 Feb 2026 22:34:51 +0100

lib/crypto: arm64/aes: Migrate optimized CBC-based MACs into libraryInstead of exposing the arm64-optimized CMAC, XCBC-MAC, and CBC-MAC codevia arm64-specific crypto_shash algorithms, instead just implement theaes_cbcmac_blocks_arch() library function. This is much simpler, itmakes the corresponding library functions be arm64-optimized, and itfixes the longstanding issue where this optimized code was disabled bydefault. The corresponding algorithms still remain available throughcrypto_shash, but individual architectures no longer need to handle it.Note that to be compatible with the library using 'size_t' lengths, thetype of the return value and 'blocks' parameter to the assemblyfunctions had to be changed to 'size_t', and the assembly code had to beupdated accordingly to use the corresponding 64-bit registers.Reviewed-by: Ard Biesheuvel Link: https://lore.kernel.org/r/20260218213501.136844-6-ebiggers@kernel.orgSigned-off-by: Eric Biggers List of files: /linux/arch/arm64/crypto/Kconfig

f09812b85fa6f41058bcc46e70ac406bf9b0493a - Merge drm/drm-next into drm-intel-next

Wed, 25 Feb 2026 12:23:04 +0100

Merge drm/drm-next into drm-intel-nextSync with v7.0-rc1 which contains a few treewide changes affecting i915.Signed-off-by: Jani Nikula List of files: /linux/arch/arm64/crypto/Kconfig

8b85987d3cf50178f67618122d9f3bb202f62f42 - Merge drm/drm-next into drm-misc-next

Mon, 23 Feb 2026 11:48:20 +0100

Merge drm/drm-next into drm-misc-nextLet's merge 7.0-rc1 to start the new drm-misc-next windowSigned-off-by: Maxime Ripard List of files: /linux/arch/arm64/crypto/Kconfig

c17ee635fd3a482b2ad2bf5e269755c2eae5f25e - Merge drm/drm-fixes into drm-misc-fixes

Mon, 23 Feb 2026 10:09:45 +0100

Merge drm/drm-fixes into drm-misc-fixes7.0-rc1 was just released, let's merge it to kick the new release cycle.Signed-off-by: Maxime Ripard List of files: /linux/arch/arm64/crypto/Kconfig

13d83ea9d81ddcb08b46377dcc9de6e5df1248d1 - Merge tag 'libcrypto-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiggers/linux

Tue, 10 Feb 2026 17:31:09 +0100

Merge tag 'libcrypto-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiggers/linuxPull crypto library updates from Eric Biggers: - Add support for verifying ML-DSA signatures. ML-DSA (Module-Lattice-Based Digital Signature Algorithm) is a recently-standardized post-quantum (quantum-resistant) signature algorithm. It was known as Dilithium pre-standardization. The first use case in the kernel will be module signing. But there are also other users of RSA and ECDSA signatures in the kernel that might want to upgrade to ML-DSA eventually. - Improve the AES library: - Make the AES key expansion and single block encryption and decryption functions use the architecture-optimized AES code. Enable these optimizations by default. - Support preparing an AES key for encryption-only, using about half as much memory as a bidirectional key. - Replace the existing two generic implementations of AES with a single one. - Simplify how Adiantum message hashing is implemented. Remove the "nhpoly1305" crypto_shash in favor of direct lib/crypto/ support for NH hashing, and enable optimizations by default.* tag 'libcrypto-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiggers/linux: (53 commits) lib/crypto: mldsa: Clarify the documentation for mldsa_verify() slightly lib/crypto: aes: Drop 'volatile' from aes_sbox and aes_inv_sbox lib/crypto: aes: Remove old AES en/decryption functions lib/crypto: aesgcm: Use new AES library API lib/crypto: aescfb: Use new AES library API crypto: omap - Use new AES library API crypto: inside-secure - Use new AES library API crypto: drbg - Use new AES library API crypto: crypto4xx - Use new AES library API crypto: chelsio - Use new AES library API crypto: ccp - Use new AES library API crypto: x86/aes-gcm - Use new AES library API crypto: arm64/ghash - Use new AES library API crypto: arm/ghash - Use new AES library API staging: rtl8723bs: core: Use new AES library API net: phy: mscc: macsec: Use new AES library API chelsio: Use new AES library API Bluetooth: SMP: Use new AES library API crypto: x86/aes - Remove the superseded AES-NI crypto_cipher lib/crypto: x86/aes: Add AES-NI optimization ... List of files: /linux/arch/arm64/crypto/Kconfig

cc4adab164b772a34b3340d644b7c4728498581e - Merge tag 'v6.19-rc1' into msm-next

Tue, 20 Jan 2026 23:06:55 +0100

Merge tag 'v6.19-rc1' into msm-nextMerge Linux 6.19-rc1 in order to catch up with other changes (e.g. UBWCconfig database defining UBWC_6).Signed-off-by: Dmitry Baryshkov List of files: /linux/arch/arm64/crypto/Kconfig

2b1ef7aeeb184ee78523f3d24e221296574c6f2d - lib/crypto: arm64/aes: Migrate optimized code into library

Mon, 12 Jan 2026 20:20:09 +0100

lib/crypto: arm64/aes: Migrate optimized code into libraryMove the ARM64 optimized AES key expansion and single-block AESen/decryption code into lib/crypto/, wire it up to the AES library API,and remove the superseded crypto_cipher algorithms.The result is that both the AES library and crypto_cipher APIs are nowoptimized for ARM64, whereas previously only crypto_cipher was (and theoptimizations weren't enabled by default, which this fixes as well).Note: to see the diff from arch/arm64/crypto/aes-ce-glue.c tolib/crypto/arm64/aes.h, view this commit with 'git show -M10'.Acked-by: Ard Biesheuvel Link: https://lore.kernel.org/r/20260112192035.10427-12-ebiggers@kernel.orgSigned-off-by: Eric Biggers List of files: /linux/arch/arm64/crypto/Kconfig

5be8dcc1d0dd5b4bd431d1d052e79f01dd2e33c4 - crypto: arm64/aes - Select CRYPTO_LIB_SHA256 from correct places

Mon, 12 Jan 2026 20:20:04 +0100

crypto: arm64/aes - Select CRYPTO_LIB_SHA256 from correct placesThe call to sha256() occurs in code that is built when eitherCRYPTO_AES_ARM64_CE_BLK or CRYPTO_AES_ARM64_NEON_BLK. The optionCRYPTO_AES_ARM64 is unrelated, notwithstanding its documentation. I'llbe removing CRYPTO_AES_ARM64 soon anyway, but before doing that, fixwhere CRYPTO_LIB_SHA256 is selected from.Fixes: 01834444d972 ("crypto: arm64/aes - use SHA-256 library instead of crypto_shash")Acked-by: Ard Biesheuvel Link: https://lore.kernel.org/r/20260112192035.10427-7-ebiggers@kernel.orgSigned-off-by: Eric Biggers List of files: /linux/arch/arm64/crypto/Kconfig

b4a8528d17fbcd9027290c168efd6ba7ac4d4cd2 - lib/crypto: arm64/nh: Migrate optimized code into library

Thu, 11 Dec 2025 02:18:36 +0100

lib/crypto: arm64/nh: Migrate optimized code into libraryMigrate the arm64 NEON implementation of NH into lib/crypto/. Thismakes the nh() function be optimized on arm64 kernels.Note: this temporarily makes the adiantum template not utilize the arm64optimized NH code. This is resolved in a later commit that converts theadiantum template to use nh() instead of "nhpoly1305".Link: https://lore.kernel.org/r/20251211011846.8179-5-ebiggers@kernel.orgSigned-off-by: Eric Biggers List of files: /linux/arch/arm64/crypto/Kconfig

5add3c3c280a35f7e258e9cef7607db5a2e56fdc - Merge drm/drm-next into drm-xe-next

Fri, 19 Dec 2025 11:51:22 +0100

Merge drm/drm-next into drm-xe-nextBackmerging to bring in 6.19-rc1. An important upstream bugfix andto help unblock PTL CI.Signed-off-by: Thomas Hellström List of files: /linux/arch/arm64/crypto/Kconfig

b8304863a3990d0f18c38e5b94191830a63ee1af - Merge drm/drm-next into drm-intel-next

Mon, 15 Dec 2025 14:24:02 +0100

Merge drm/drm-next into drm-intel-nextSync-up some display code needed for Async flips refactor.Signed-off-by: Rodrigo Vivi List of files: /linux/arch/arm64/crypto/Kconfig

7f790dd21a931c61167f7bdc327aecf2cebad327 - Merge drm/drm-next into drm-misc-next

Mon, 15 Dec 2025 09:27:39 +0100

Merge drm/drm-next into drm-misc-nextLet's kickstart the v6.20 (7.0?) release cycle.Signed-off-by: Maxime Ripard List of files: /linux/arch/arm64/crypto/Kconfig

a4a508df2aa34f8650afde54ea804321c618f45f - Merge tag 'v6.18' into next

Sat, 13 Dec 2025 10:18:20 +0100

Merge tag 'v6.18' into nextSync up with the mainline to bring in the latest APIs. List of files: /linux/arch/arm64/crypto/Kconfig