en Copyright 2015 Java http://kernelsources.org:8080/source/history/linux/arch/riscv/crypto/Kconfig#0fc8f6200d2313278fbf4539bbab74677c685531 Merge drm/drm-fixes into drm-misc-fixesGetting fixes and updates from v7.1-rc1.Signed-off-by: Thomas Zimmermann <tzimmermann@suse.de> List of files: /linux/arch/riscv/crypto/Kconfig Mon, 27 Apr 2026 10:26:49 +0200 Thomas Zimmermann <tzimmermann@suse.de> http://kernelsources.org:8080/source/history/linux/arch/riscv/crypto/Kconfig#f4b369c6fe0ceaba2da2daff8c9eb415f85926dd Merge branch 'next' into for-linusPrepare input updates for 7.1 merge window. List of files: /linux/arch/riscv/crypto/Kconfig Mon, 20 Apr 2026 03:28:57 +0200 Dmitry Torokhov <dmitry.torokhov@gmail.com> http://kernelsources.org:8080/source/history/linux/arch/riscv/crypto/Kconfig#0421ccdfad0d92713a812a5aeb7d07b0ea7213c8 Merge tag 'v7.0-rc3' into nextSync up with the mainline to brig up the latest changes, specificallychanges to ALPS driver. List of files: /linux/arch/riscv/crypto/Kconfig Thu, 12 Mar 2026 18:44:42 +0100 Dmitry Torokhov <dmitry.torokhov@gmail.com> http://kernelsources.org:8080/source/history/linux/arch/riscv/crypto/Kconfig#370c3883195566ee3e7d79e0146c3d735a406573 Merge tag 'libcrypto-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiggers/linuxPull crypto library updates from Eric Biggers: - Migrate more hash algorithms from the traditional crypto subsystem to lib/crypto/ Like the algorithms migrated earlier (e.g. SHA-*), this simplifies the implementations, improves performance, enables further simplifications in calling code, and solves various other issues: - AES CBC-based MACs (AES-CMAC, AES-XCBC-MAC, and AES-CBC-MAC) - Support these algorithms in lib/crypto/ using the AES library and the existing arm64 assembly code - Reimplement the traditional crypto API's "cmac(aes)", "xcbc(aes)", and "cbcmac(aes)" on top of the library - Convert mac80211 to use the AES-CMAC library. Note: several other subsystems can use it too and will be converted later - Drop the broken, nonstandard, and likely unused support for "xcbc(aes)" with key lengths other than 128 bits - Enable optimizations by default - GHASH - Migrate the standalone GHASH code into lib/crypto/ - Integrate the GHASH code more closely with the very similar POLYVAL code, and improve the generic GHASH implementation to resist cache-timing attacks and use much less memory - Reimplement the AES-GCM library and the "gcm" crypto_aead template on top of the GHASH library. Remove "ghash" from the crypto_shash API, as it's no longer needed - Enable optimizations by default - SM3 - Migrate the kernel's existing SM3 code into lib/crypto/, and reimplement the traditional crypto API's "sm3" on top of it - I don't recommend using SM3, but this cleanup is worthwhile to organize the code the same way as other algorithms - Testing improvements: - Add a KUnit test suite for each of the new library APIs - Migrate the existing ChaCha20Poly1305 test to KUnit - Make the KUnit all_tests.config enable all crypto library tests - Move the test kconfig options to the Runtime Testing menu - Other updates to arch-optimized crypto code: - Optimize SHA-256 for Zhaoxin CPUs using the Padlock Hash Engine - Remove some MD5 implementations that are no longer worth keeping - Drop big endian and voluntary preemption support from the arm64 code, as those configurations are no longer supported on arm64 - Make jitterentropy and samples/tsm-mr use the crypto library APIs* tag 'libcrypto-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiggers/linux: (66 commits) lib/crypto: arm64: Assume a little-endian kernel arm64: fpsimd: Remove obsolete cond_yield macro lib/crypto: arm64/sha3: Remove obsolete chunking logic lib/crypto: arm64/sha512: Remove obsolete chunking logic lib/crypto: arm64/sha256: Remove obsolete chunking logic lib/crypto: arm64/sha1: Remove obsolete chunking logic lib/crypto: arm64/poly1305: Remove obsolete chunking logic lib/crypto: arm64/gf128hash: Remove obsolete chunking logic lib/crypto: arm64/chacha: Remove obsolete chunking logic lib/crypto: arm64/aes: Remove obsolete chunking logic lib/crypto: Include <crypto/utils.h> instead of <crypto/algapi.h> lib/crypto: aesgcm: Don't disable IRQs during AES block encryption lib/crypto: aescfb: Don't disable IRQs during AES block encryption lib/crypto: tests: Migrate ChaCha20Poly1305 self-test to KUnit lib/crypto: sparc: Drop optimized MD5 code lib/crypto: mips: Drop optimized MD5 code lib: Move crypto library tests to Runtime Testing menu crypto: sm3 - Remove 'struct sm3_state' crypto: sm3 - Remove the original "sm3_block_generic()" crypto: sm3 - Remove sm3_base.h ... List of files: /linux/arch/riscv/crypto/Kconfig Tue, 14 Apr 2026 02:31:39 +0200 Linus Torvalds <torvalds@linux-foundation.org> http://kernelsources.org:8080/source/history/linux/arch/riscv/crypto/Kconfig#5f6bbba5e9bb7f271557513d0ed77bb7b5a92698 lib/crypto: riscv/sm3: Migrate optimized code into libraryInstead of exposing the riscv-optimized SM3 code via a riscv-specificcrypto_shash algorithm, instead just implement the sm3_blocks() libraryfunction. This is much simpler, it makes the SM3 library functions beriscv-optimized, and it fixes the longstanding issue where theriscv-optimized SM3 code was disabled by default. SM3 still remainsavailable through crypto_shash, but individual architectures no longerneed to handle it.Tweak the prototype of sm3_transform_zvksh_zvkb() to match what thelibrary expects, including changing the block count to size_t.Note that the assembly code already treated it as size_t.Note: to see the diff from arch/riscv/crypto/sm3-riscv64-glue.c tolib/crypto/riscv/sm3.h, view this commit with 'git show -M10'.Acked-by: Ard Biesheuvel <ardb@kernel.org>Link: https://lore.kernel.org/r/20260321040935.410034-9-ebiggers@kernel.orgSigned-off-by: Eric Biggers <ebiggers@kernel.org> List of files: /linux/arch/riscv/crypto/Kconfig Sat, 21 Mar 2026 05:09:31 +0100 Eric Biggers <ebiggers@kernel.org> http://kernelsources.org:8080/source/history/linux/arch/riscv/crypto/Kconfig#af413d71f09d4dde28277319926c1c3a6ec8b8d4 lib/crypto: riscv/ghash: Migrate optimized code into libraryRemove the "ghash-riscv64-zvkg" crypto_shash algorithm. Move thecorresponding assembly code into lib/crypto/, modify it to take thelength in blocks instead of bytes, and wire it up to the GHASH library.This makes the GHASH library be optimized with the RISC-V VectorCryptography Extension. It also greatly reduces the amount ofriscv-specific glue code that is needed, and it fixes the issue wherethis optimized GHASH code was disabled by default.Note that this RISC-V code has multiple opportunities for improvement,such as adding more parallelism, providing an optimized multiplicationfunction, and directly supporting POLYVAL. But for now, this commitsimply tweaks ghash_zvkg() slightly to make it compatible with thelibrary, then wires it up to ghash_blocks_arch().ghash_preparekey_arch() is also implemented to store the copy of the rawkey needed by the vghsh.vv instruction.Acked-by: Ard Biesheuvel <ardb@kernel.org>Link: https://lore.kernel.org/r/20260319061723.1140720-13-ebiggers@kernel.orgSigned-off-by: Eric Biggers <ebiggers@kernel.org> List of files: /linux/arch/riscv/crypto/Kconfig Thu, 19 Mar 2026 07:17:13 +0100 Eric Biggers <ebiggers@kernel.org> http://kernelsources.org:8080/source/history/linux/arch/riscv/crypto/Kconfig#42d3b66d4cdbacfc9d120d2301b8de89cc29a914 Merge drm/drm-next into drm-xe-nextBackmerging to bring in 7.00-rc3. Important ahead GPU SVM merging THPsupport.Signed-off-by: Matthew Brost <matthew.brost@intel.com> List of files: /linux/arch/riscv/crypto/Kconfig Thu, 12 Mar 2026 15:17:56 +0100 Matthew Brost <matthew.brost@intel.com> http://kernelsources.org:8080/source/history/linux/arch/riscv/crypto/Kconfig#f09812b85fa6f41058bcc46e70ac406bf9b0493a Merge drm/drm-next into drm-intel-nextSync with v7.0-rc1 which contains a few treewide changes affecting i915.Signed-off-by: Jani Nikula <jani.nikula@intel.com> List of files: /linux/arch/riscv/crypto/Kconfig Wed, 25 Feb 2026 12:23:04 +0100 Jani Nikula <jani.nikula@intel.com> http://kernelsources.org:8080/source/history/linux/arch/riscv/crypto/Kconfig#8b85987d3cf50178f67618122d9f3bb202f62f42 Merge drm/drm-next into drm-misc-nextLet's merge 7.0-rc1 to start the new drm-misc-next windowSigned-off-by: Maxime Ripard <mripard@kernel.org> List of files: /linux/arch/riscv/crypto/Kconfig Mon, 23 Feb 2026 11:48:20 +0100 Maxime Ripard <mripard@kernel.org> http://kernelsources.org:8080/source/history/linux/arch/riscv/crypto/Kconfig#c17ee635fd3a482b2ad2bf5e269755c2eae5f25e Merge drm/drm-fixes into drm-misc-fixes7.0-rc1 was just released, let's merge it to kick the new release cycle.Signed-off-by: Maxime Ripard <mripard@kernel.org> List of files: /linux/arch/riscv/crypto/Kconfig Mon, 23 Feb 2026 10:09:45 +0100 Maxime Ripard <mripard@kernel.org> http://kernelsources.org:8080/source/history/linux/arch/riscv/crypto/Kconfig#13d83ea9d81ddcb08b46377dcc9de6e5df1248d1 Merge tag 'libcrypto-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiggers/linuxPull crypto library updates from Eric Biggers: - Add support for verifying ML-DSA signatures. ML-DSA (Module-Lattice-Based Digital Signature Algorithm) is a recently-standardized post-quantum (quantum-resistant) signature algorithm. It was known as Dilithium pre-standardization. The first use case in the kernel will be module signing. But there are also other users of RSA and ECDSA signatures in the kernel that might want to upgrade to ML-DSA eventually. - Improve the AES library: - Make the AES key expansion and single block encryption and decryption functions use the architecture-optimized AES code. Enable these optimizations by default. - Support preparing an AES key for encryption-only, using about half as much memory as a bidirectional key. - Replace the existing two generic implementations of AES with a single one. - Simplify how Adiantum message hashing is implemented. Remove the "nhpoly1305" crypto_shash in favor of direct lib/crypto/ support for NH hashing, and enable optimizations by default.* tag 'libcrypto-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiggers/linux: (53 commits) lib/crypto: mldsa: Clarify the documentation for mldsa_verify() slightly lib/crypto: aes: Drop 'volatile' from aes_sbox and aes_inv_sbox lib/crypto: aes: Remove old AES en/decryption functions lib/crypto: aesgcm: Use new AES library API lib/crypto: aescfb: Use new AES library API crypto: omap - Use new AES library API crypto: inside-secure - Use new AES library API crypto: drbg - Use new AES library API crypto: crypto4xx - Use new AES library API crypto: chelsio - Use new AES library API crypto: ccp - Use new AES library API crypto: x86/aes-gcm - Use new AES library API crypto: arm64/ghash - Use new AES library API crypto: arm/ghash - Use new AES library API staging: rtl8723bs: core: Use new AES library API net: phy: mscc: macsec: Use new AES library API chelsio: Use new AES library API Bluetooth: SMP: Use new AES library API crypto: x86/aes - Remove the superseded AES-NI crypto_cipher lib/crypto: x86/aes: Add AES-NI optimization ... List of files: /linux/arch/riscv/crypto/Kconfig Tue, 10 Feb 2026 17:31:09 +0100 Linus Torvalds <torvalds@linux-foundation.org> http://kernelsources.org:8080/source/history/linux/arch/riscv/crypto/Kconfig#ec496f77b4c11036cc835d6f045fb5e5ef1e6530 Merge branch 'for-6.20/sony' into for-linus- Support for Rock band 4 PS4 and PS5 guitars (Rosalie Wanders) List of files: /linux/arch/riscv/crypto/Kconfig Mon, 09 Feb 2026 17:33:26 +0100 Jiri Kosina <jkosina@suse.com> http://kernelsources.org:8080/source/history/linux/arch/riscv/crypto/Kconfig#cc4adab164b772a34b3340d644b7c4728498581e Merge tag 'v6.19-rc1' into msm-nextMerge Linux 6.19-rc1 in order to catch up with other changes (e.g. UBWCconfig database defining UBWC_6).Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@oss.qualcomm.com> List of files: /linux/arch/riscv/crypto/Kconfig Tue, 20 Jan 2026 23:06:55 +0100 Dmitry Baryshkov <dmitry.baryshkov@oss.qualcomm.com> http://kernelsources.org:8080/source/history/linux/arch/riscv/crypto/Kconfig#a4e573db06a4e8c519ec4c42f8e1249a0853367a lib/crypto: riscv/aes: Migrate optimized code into libraryMove the aes_encrypt_zvkned() and aes_decrypt_zvkned() assemblyfunctions into lib/crypto/, wire them up to the AES library API, andremove the "aes-riscv64-zvkned" crypto_cipher algorithm.To make this possible, change the prototypes of these functions totake (rndkeys, key_len) instead of a pointer to crypto_aes_ctx, andchange the RISC-V AES-XTS code to implement tweak encryption using theAES library instead of directly calling aes_encrypt_zvkned().The result is that both the AES library and crypto_cipher APIs useRISC-V's AES instructions, whereas previously only crypto_cipher did(and it wasn't enabled by default, which this commit fixes as well).Acked-by: Ard Biesheuvel <ardb@kernel.org>Link: https://lore.kernel.org/r/20260112192035.10427-15-ebiggers@kernel.orgSigned-off-by: Eric Biggers <ebiggers@kernel.org> List of files: /linux/arch/riscv/crypto/Kconfig Mon, 12 Jan 2026 20:20:12 +0100 Eric Biggers <ebiggers@kernel.org> http://kernelsources.org:8080/source/history/linux/arch/riscv/crypto/Kconfig#5add3c3c280a35f7e258e9cef7607db5a2e56fdc Merge drm/drm-next into drm-xe-nextBackmerging to bring in 6.19-rc1. An important upstream bugfix andto help unblock PTL CI.Signed-off-by: Thomas Hellström <thomas.hellstrom@linux.intel.com> List of files: /linux/arch/riscv/crypto/Kconfig Fri, 19 Dec 2025 11:51:22 +0100 Thomas Hellström <thomas.hellstrom@linux.intel.com> http://kernelsources.org:8080/source/history/linux/arch/riscv/crypto/Kconfig#ec439c38013550420aecc15988ae6acb670838c1 Merge git://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf after 6.19-rc1Cross-merge BPF and other fixes after downstream PR.Signed-off-by: Alexei Starovoitov <ast@kernel.org> List of files: /linux/arch/riscv/crypto/Kconfig Wed, 17 Dec 2025 06:29:38 +0100 Alexei Starovoitov <ast@kernel.org> http://kernelsources.org:8080/source/history/linux/arch/riscv/crypto/Kconfig#b8304863a3990d0f18c38e5b94191830a63ee1af Merge drm/drm-next into drm-intel-nextSync-up some display code needed for Async flips refactor.Signed-off-by: Rodrigo Vivi <rodrigo.vivi@intel.com> List of files: /linux/arch/riscv/crypto/Kconfig Mon, 15 Dec 2025 14:24:02 +0100 Rodrigo Vivi <rodrigo.vivi@intel.com> http://kernelsources.org:8080/source/history/linux/arch/riscv/crypto/Kconfig#7f790dd21a931c61167f7bdc327aecf2cebad327 Merge drm/drm-next into drm-misc-nextLet's kickstart the v6.20 (7.0?) release cycle.Signed-off-by: Maxime Ripard <mripard@kernel.org> List of files: /linux/arch/riscv/crypto/Kconfig Mon, 15 Dec 2025 09:27:39 +0100 Maxime Ripard <mripard@kernel.org> http://kernelsources.org:8080/source/history/linux/arch/riscv/crypto/Kconfig#24f171c7e145f43b9f187578e89b0982ce87e54c Merge tag 'asoc-fix-v6.19-rc1' of https://git.kernel.org/pub/scm/linux/kernel/git/broonie/sound into for-linusASoC: Fixes for v6.19We've been quite busy with fixes since the merge window, though not inany particularly exciting ways - the standout thing is the fix for _SXcontrols which were broken by a change to how we do clamping, otherwiseit's all fairly run of the mill fixes and quirks. List of files: /linux/arch/riscv/crypto/Kconfig Sun, 21 Dec 2025 11:11:11 +0100 Takashi Iwai <tiwai@suse.de> http://kernelsources.org:8080/source/history/linux/arch/riscv/crypto/Kconfig#84318277d6334c6981ab326d4acc87c6a6ddc9b8 Merge remote-tracking branch 'drm/drm-fixes' into drm-misc-fixesPull in rc1 to include all changes since the merge window closed,and grab all fixes and changes from drm/drm-next.Signed-off-by: Maarten Lankhorst <dev@lankhorst.se> List of files: /linux/arch/riscv/crypto/Kconfig Mon, 15 Dec 2025 12:53:27 +0100 Maarten Lankhorst <dev@lankhorst.se>