Changes in Makefile

0fc8f6200d2313278fbf4539bbab74677c685531 - Merge drm/drm-fixes into drm-misc-fixes

Mon, 27 Apr 2026 10:26:49 +0200

Merge drm/drm-fixes into drm-misc-fixesGetting fixes and updates from v7.1-rc1.Signed-off-by: Thomas Zimmermann List of files: /linux/arch/arm64/crypto/Makefile

f4b369c6fe0ceaba2da2daff8c9eb415f85926dd - Merge branch 'next' into for-linus

Mon, 20 Apr 2026 03:28:57 +0200

Merge branch 'next' into for-linusPrepare input updates for 7.1 merge window. List of files: /linux/arch/arm64/crypto/Makefile

0421ccdfad0d92713a812a5aeb7d07b0ea7213c8 - Merge tag 'v7.0-rc3' into next

Thu, 12 Mar 2026 18:44:42 +0100

Merge tag 'v7.0-rc3' into nextSync up with the mainline to brig up the latest changes, specificallychanges to ALPS driver. List of files: /linux/arch/arm64/crypto/Makefile

370c3883195566ee3e7d79e0146c3d735a406573 - Merge tag 'libcrypto-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiggers/linux

Tue, 14 Apr 2026 02:31:39 +0200

Merge tag 'libcrypto-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiggers/linuxPull crypto library updates from Eric Biggers: - Migrate more hash algorithms from the traditional crypto subsystem to lib/crypto/ Like the algorithms migrated earlier (e.g. SHA-*), this simplifies the implementations, improves performance, enables further simplifications in calling code, and solves various other issues: - AES CBC-based MACs (AES-CMAC, AES-XCBC-MAC, and AES-CBC-MAC) - Support these algorithms in lib/crypto/ using the AES library and the existing arm64 assembly code - Reimplement the traditional crypto API's "cmac(aes)", "xcbc(aes)", and "cbcmac(aes)" on top of the library - Convert mac80211 to use the AES-CMAC library. Note: several other subsystems can use it too and will be converted later - Drop the broken, nonstandard, and likely unused support for "xcbc(aes)" with key lengths other than 128 bits - Enable optimizations by default - GHASH - Migrate the standalone GHASH code into lib/crypto/ - Integrate the GHASH code more closely with the very similar POLYVAL code, and improve the generic GHASH implementation to resist cache-timing attacks and use much less memory - Reimplement the AES-GCM library and the "gcm" crypto_aead template on top of the GHASH library. Remove "ghash" from the crypto_shash API, as it's no longer needed - Enable optimizations by default - SM3 - Migrate the kernel's existing SM3 code into lib/crypto/, and reimplement the traditional crypto API's "sm3" on top of it - I don't recommend using SM3, but this cleanup is worthwhile to organize the code the same way as other algorithms - Testing improvements: - Add a KUnit test suite for each of the new library APIs - Migrate the existing ChaCha20Poly1305 test to KUnit - Make the KUnit all_tests.config enable all crypto library tests - Move the test kconfig options to the Runtime Testing menu - Other updates to arch-optimized crypto code: - Optimize SHA-256 for Zhaoxin CPUs using the Padlock Hash Engine - Remove some MD5 implementations that are no longer worth keeping - Drop big endian and voluntary preemption support from the arm64 code, as those configurations are no longer supported on arm64 - Make jitterentropy and samples/tsm-mr use the crypto library APIs* tag 'libcrypto-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiggers/linux: (66 commits) lib/crypto: arm64: Assume a little-endian kernel arm64: fpsimd: Remove obsolete cond_yield macro lib/crypto: arm64/sha3: Remove obsolete chunking logic lib/crypto: arm64/sha512: Remove obsolete chunking logic lib/crypto: arm64/sha256: Remove obsolete chunking logic lib/crypto: arm64/sha1: Remove obsolete chunking logic lib/crypto: arm64/poly1305: Remove obsolete chunking logic lib/crypto: arm64/gf128hash: Remove obsolete chunking logic lib/crypto: arm64/chacha: Remove obsolete chunking logic lib/crypto: arm64/aes: Remove obsolete chunking logic lib/crypto: Include instead of lib/crypto: aesgcm: Don't disable IRQs during AES block encryption lib/crypto: aescfb: Don't disable IRQs during AES block encryption lib/crypto: tests: Migrate ChaCha20Poly1305 self-test to KUnit lib/crypto: sparc: Drop optimized MD5 code lib/crypto: mips: Drop optimized MD5 code lib: Move crypto library tests to Runtime Testing menu crypto: sm3 - Remove 'struct sm3_state' crypto: sm3 - Remove the original "sm3_block_generic()" crypto: sm3 - Remove sm3_base.h ... List of files: /linux/arch/arm64/crypto/Makefile

9f69f52b462cdaed83b782d0408ce9286f054f92 - lib/crypto: arm64/sm3: Migrate optimized code into library

Sat, 21 Mar 2026 05:09:30 +0100

lib/crypto: arm64/sm3: Migrate optimized code into libraryInstead of exposing the arm64-optimized SM3 code via arm64-specificcrypto_shash algorithms, instead just implement the sm3_blocks() libraryfunction. This is much simpler, it makes the SM3 library functions bearm64-optimized, and it fixes the longstanding issue where thearm64-optimized SM3 code was disabled by default. SM3 still remainsavailable through crypto_shash, but individual architectures no longerneed to handle it.Tweak the SM3 assembly function prototypes to match what the libraryexpects, including changing the block count from 'int' to 'size_t'.sm3_ce_transform() had to be updated to access 'x2' instead of 'w2',while sm3_neon_transform() already used 'x2'.Remove the CFI stubs which are no longer needed because the SM3 assemblyfunctions are no longer ever indirectly called.Remove the dependency on KERNEL_MODE_NEON. It was unnecessary, becauseKERNEL_MODE_NEON is always enabled on arm64.Acked-by: Ard Biesheuvel Link: https://lore.kernel.org/r/20260321040935.410034-8-ebiggers@kernel.orgSigned-off-by: Eric Biggers List of files: /linux/arch/arm64/crypto/Makefile

a336c01f5b11cc158150d051d612a2f7ad9fd6a8 - lib/crypto: arm64/ghash: Migrate optimized code into library

Thu, 19 Mar 2026 07:17:10 +0100

lib/crypto: arm64/ghash: Migrate optimized code into libraryRemove the "ghash-neon" crypto_shash algorithm. Move the correspondingassembly code into lib/crypto/, and wire it up to the GHASH library.This makes the GHASH library be optimized on arm64 (though only withNEON, not PMULL; for now the goal is just parity with crypto_shash). Itgreatly reduces the amount of arm64-specific glue code that is needed,and it fixes the issue where this optimization was disabled by default.To integrate the assembly code correctly with the library, make thefollowing tweaks:- Change the type of 'blocks' from int to size_t- Change the types of 'dg' and 'h' to polyval_elem. Note that this simply reflects the format that the code was already using.- Remove the 'head' argument, which is no longer needed.- Remove the CFI stubs, as indirect calls are no longer used.Acked-by: Ard Biesheuvel Link: https://lore.kernel.org/r/20260319061723.1140720-10-ebiggers@kernel.orgSigned-off-by: Eric Biggers List of files: /linux/arch/arm64/crypto/Makefile

e3f473db02dae210f91e8eb8d0423232175639d6 - crypto: arm64/ghash - Move NEON GHASH assembly into its own file

Thu, 19 Mar 2026 07:17:09 +0100

crypto: arm64/ghash - Move NEON GHASH assembly into its own filearch/arm64/crypto/ghash-ce-core.S implements pmull_ghash_update_p8(),which is used only by a crypto_shash implementation of GHASH. It alsoimplements other functions, including pmull_ghash_update_p64() andothers, which are used only by a crypto_aead implementation of AES-GCM.While some code is shared between pmull_ghash_update_p8() andpmull_ghash_update_p64(), it's not very much. Sincepmull_ghash_update_p8() will also need to be migrated into lib/crypto/to achieve parity in the standalone GHASH support, let's move it into aseparate file ghash-neon-core.S.Acked-by: Ard Biesheuvel Link: https://lore.kernel.org/r/20260319061723.1140720-9-ebiggers@kernel.orgSigned-off-by: Eric Biggers List of files: /linux/arch/arm64/crypto/Makefile

42d3b66d4cdbacfc9d120d2301b8de89cc29a914 - Merge drm/drm-next into drm-xe-next

Thu, 12 Mar 2026 15:17:56 +0100

Merge drm/drm-next into drm-xe-nextBackmerging to bring in 7.00-rc3. Important ahead GPU SVM merging THPsupport.Signed-off-by: Matthew Brost List of files: /linux/arch/arm64/crypto/Makefile

4b908403209252e59ecad4c068bf967fa3f07525 - lib/crypto: arm64/aes: Move assembly code for AES modes into libaes

Wed, 18 Feb 2026 22:34:50 +0100

lib/crypto: arm64/aes: Move assembly code for AES modes into libaesTo migrate the support for CBC-based MACs into libaes, the correspondingarm64 assembly code needs to be moved there. However, the arm64 AESassembly code groups many AES modes together; individual modes aren'teasily separable. (This isn't unique to arm64; other architecturesorganize their AES modes similarly.)Since the other AES modes will be migrated into the library eventuallytoo, just move the full assembly files for the AES modes into thelibrary. (This is similar to what I already did for PowerPC and SPARC.)Specifically: move the assembly files aes-ce.S, aes-modes.S, andaes-neon.S and their build rules; declare the assembly functions in; and export the assembly functions from libaes.Note that the exports and public declarations of the assembly functionsare temporary. They exist only to keep arch/arm64/crypto/ working untilthe AES modes are fully moved into the library.Reviewed-by: Ard Biesheuvel Link: https://lore.kernel.org/r/20260218213501.136844-5-ebiggers@kernel.orgSigned-off-by: Eric Biggers List of files: /linux/arch/arm64/crypto/Makefile

f09812b85fa6f41058bcc46e70ac406bf9b0493a - Merge drm/drm-next into drm-intel-next

Wed, 25 Feb 2026 12:23:04 +0100

Merge drm/drm-next into drm-intel-nextSync with v7.0-rc1 which contains a few treewide changes affecting i915.Signed-off-by: Jani Nikula List of files: /linux/arch/arm64/crypto/Makefile

8b85987d3cf50178f67618122d9f3bb202f62f42 - Merge drm/drm-next into drm-misc-next

Mon, 23 Feb 2026 11:48:20 +0100

Merge drm/drm-next into drm-misc-nextLet's merge 7.0-rc1 to start the new drm-misc-next windowSigned-off-by: Maxime Ripard List of files: /linux/arch/arm64/crypto/Makefile

c17ee635fd3a482b2ad2bf5e269755c2eae5f25e - Merge drm/drm-fixes into drm-misc-fixes

Mon, 23 Feb 2026 10:09:45 +0100

Merge drm/drm-fixes into drm-misc-fixes7.0-rc1 was just released, let's merge it to kick the new release cycle.Signed-off-by: Maxime Ripard List of files: /linux/arch/arm64/crypto/Makefile

13d83ea9d81ddcb08b46377dcc9de6e5df1248d1 - Merge tag 'libcrypto-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiggers/linux

Tue, 10 Feb 2026 17:31:09 +0100

Merge tag 'libcrypto-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiggers/linuxPull crypto library updates from Eric Biggers: - Add support for verifying ML-DSA signatures. ML-DSA (Module-Lattice-Based Digital Signature Algorithm) is a recently-standardized post-quantum (quantum-resistant) signature algorithm. It was known as Dilithium pre-standardization. The first use case in the kernel will be module signing. But there are also other users of RSA and ECDSA signatures in the kernel that might want to upgrade to ML-DSA eventually. - Improve the AES library: - Make the AES key expansion and single block encryption and decryption functions use the architecture-optimized AES code. Enable these optimizations by default. - Support preparing an AES key for encryption-only, using about half as much memory as a bidirectional key. - Replace the existing two generic implementations of AES with a single one. - Simplify how Adiantum message hashing is implemented. Remove the "nhpoly1305" crypto_shash in favor of direct lib/crypto/ support for NH hashing, and enable optimizations by default.* tag 'libcrypto-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiggers/linux: (53 commits) lib/crypto: mldsa: Clarify the documentation for mldsa_verify() slightly lib/crypto: aes: Drop 'volatile' from aes_sbox and aes_inv_sbox lib/crypto: aes: Remove old AES en/decryption functions lib/crypto: aesgcm: Use new AES library API lib/crypto: aescfb: Use new AES library API crypto: omap - Use new AES library API crypto: inside-secure - Use new AES library API crypto: drbg - Use new AES library API crypto: crypto4xx - Use new AES library API crypto: chelsio - Use new AES library API crypto: ccp - Use new AES library API crypto: x86/aes-gcm - Use new AES library API crypto: arm64/ghash - Use new AES library API crypto: arm/ghash - Use new AES library API staging: rtl8723bs: core: Use new AES library API net: phy: mscc: macsec: Use new AES library API chelsio: Use new AES library API Bluetooth: SMP: Use new AES library API crypto: x86/aes - Remove the superseded AES-NI crypto_cipher lib/crypto: x86/aes: Add AES-NI optimization ... List of files: /linux/arch/arm64/crypto/Makefile

cc4adab164b772a34b3340d644b7c4728498581e - Merge tag 'v6.19-rc1' into msm-next

Tue, 20 Jan 2026 23:06:55 +0100

Merge tag 'v6.19-rc1' into msm-nextMerge Linux 6.19-rc1 in order to catch up with other changes (e.g. UBWCconfig database defining UBWC_6).Signed-off-by: Dmitry Baryshkov List of files: /linux/arch/arm64/crypto/Makefile

2b1ef7aeeb184ee78523f3d24e221296574c6f2d - lib/crypto: arm64/aes: Migrate optimized code into library

Mon, 12 Jan 2026 20:20:09 +0100

lib/crypto: arm64/aes: Migrate optimized code into libraryMove the ARM64 optimized AES key expansion and single-block AESen/decryption code into lib/crypto/, wire it up to the AES library API,and remove the superseded crypto_cipher algorithms.The result is that both the AES library and crypto_cipher APIs are nowoptimized for ARM64, whereas previously only crypto_cipher was (and theoptimizations weren't enabled by default, which this fixes as well).Note: to see the diff from arch/arm64/crypto/aes-ce-glue.c tolib/crypto/arm64/aes.h, view this commit with 'git show -M10'.Acked-by: Ard Biesheuvel Link: https://lore.kernel.org/r/20260112192035.10427-12-ebiggers@kernel.orgSigned-off-by: Eric Biggers List of files: /linux/arch/arm64/crypto/Makefile

b4a8528d17fbcd9027290c168efd6ba7ac4d4cd2 - lib/crypto: arm64/nh: Migrate optimized code into library

Thu, 11 Dec 2025 02:18:36 +0100

lib/crypto: arm64/nh: Migrate optimized code into libraryMigrate the arm64 NEON implementation of NH into lib/crypto/. Thismakes the nh() function be optimized on arm64 kernels.Note: this temporarily makes the adiantum template not utilize the arm64optimized NH code. This is resolved in a later commit that converts theadiantum template to use nh() instead of "nhpoly1305".Link: https://lore.kernel.org/r/20251211011846.8179-5-ebiggers@kernel.orgSigned-off-by: Eric Biggers List of files: /linux/arch/arm64/crypto/Makefile

5add3c3c280a35f7e258e9cef7607db5a2e56fdc - Merge drm/drm-next into drm-xe-next

Fri, 19 Dec 2025 11:51:22 +0100

Merge drm/drm-next into drm-xe-nextBackmerging to bring in 6.19-rc1. An important upstream bugfix andto help unblock PTL CI.Signed-off-by: Thomas Hellström List of files: /linux/arch/arm64/crypto/Makefile

b8304863a3990d0f18c38e5b94191830a63ee1af - Merge drm/drm-next into drm-intel-next

Mon, 15 Dec 2025 14:24:02 +0100

Merge drm/drm-next into drm-intel-nextSync-up some display code needed for Async flips refactor.Signed-off-by: Rodrigo Vivi List of files: /linux/arch/arm64/crypto/Makefile

7f790dd21a931c61167f7bdc327aecf2cebad327 - Merge drm/drm-next into drm-misc-next

Mon, 15 Dec 2025 09:27:39 +0100

Merge drm/drm-next into drm-misc-nextLet's kickstart the v6.20 (7.0?) release cycle.Signed-off-by: Maxime Ripard List of files: /linux/arch/arm64/crypto/Makefile

24f171c7e145f43b9f187578e89b0982ce87e54c - Merge tag 'asoc-fix-v6.19-rc1' of https://git.kernel.org/pub/scm/linux/kernel/git/broonie/sound into for-linus

Sun, 21 Dec 2025 11:11:11 +0100

Merge tag 'asoc-fix-v6.19-rc1' of https://git.kernel.org/pub/scm/linux/kernel/git/broonie/sound into for-linusASoC: Fixes for v6.19We've been quite busy with fixes since the merge window, though not inany particularly exciting ways - the standout thing is the fix for _SXcontrols which were broken by a change to how we do clamping, otherwiseit's all fairly run of the mill fixes and quirks. List of files: /linux/arch/arm64/crypto/Makefile