Changes in Kconfig

ecf3edd349dfabee9bc8a46c5ff91c9ebd858d48 - crypto: s390 - add select CRYPTO_AEAD for aes

Wed, 20 May 2026 09:38:44 +0200

crypto: s390 - add select CRYPTO_AEAD for aesThe aes driver registers both skcipher and aead algorithms,but when aead is not enabled this causes a link failure:s390-linux-ld: arch/s390/crypto/aes_s390.o: in function `aes_s390_fini':arch/s390/crypto/aes_s390.c:969:(.text+0x115e): undefined reference to `crypto_unregister_aead's390-linux-ld: arch/s390/crypto/aes_s390.o: in function `aes_s390_init':arch/s390/crypto/aes_s390.c:1028:(.init.text+0x294): undefined reference to `crypto_register_aead'Add the missing 'select' statement.Fixes: bf7fa038707c ("s390/crypto: add s390 platform specific aes gcm support.")Signed-off-by: Arnd Bergmann Reviewed-by: Harald Freudenberger Signed-off-by: Herbert Xu List of files: /linux/arch/s390/crypto/Kconfig

aec2f682d47c54ef434b2d440992626d80b1ebdc - Merge tag 'v7.1-p1' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6

Thu, 16 Apr 2026 00:22:26 +0200

Merge tag 'v7.1-p1' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6Pull crypto update from Herbert Xu: "API: - Replace crypto_get_default_rng with crypto_stdrng_get_bytes - Remove simd skcipher support - Allow algorithm types to be disabled when CRYPTO_SELFTESTS is off Algorithms: - Remove CPU-based des/3des acceleration - Add test vectors for authenc(hmac(md5),cbc({aes,des})) and authenc(hmac({md5,sha1,sha224,sha256,sha384,sha512}),rfc3686(ctr(aes))) - Replace spin lock with mutex in jitterentropy Drivers: - Add authenc algorithms to safexcel - Add support for zstd in qat - Add wireless mode support for QAT GEN6 - Add anti-rollback support for QAT GEN6 - Add support for ctr(aes), gcm(aes), and ccm(aes) in dthev2"* tag 'v7.1-p1' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6: (129 commits) crypto: af_alg - use sock_kmemdup in alg_setkey_by_key_serial crypto: vmx - remove CRYPTO_DEV_VMX from Kconfig crypto: omap - convert reqctx buffer to fixed-size array crypto: atmel-sha204a - add Thorsten Blum as maintainer crypto: atmel-ecc - add Thorsten Blum as maintainer crypto: qat - fix IRQ cleanup on 6xxx probe failure crypto: geniv - Remove unused spinlock from struct aead_geniv_ctx crypto: qce - simplify qce_xts_swapiv() crypto: hisilicon - Fix dma_unmap_single() direction crypto: talitos - rename first/last to first_desc/last_desc crypto: talitos - fix SEC1 32k ahash request limitation crypto: jitterentropy - replace long-held spinlock with mutex crypto: hisilicon - remove unused and non-public APIs for qm and sec crypto: hisilicon/qm - drop redundant variable initialization crypto: hisilicon/qm - remove else after return crypto: hisilicon/qm - add const qualifier to info_name in struct qm_cmd_dump_item crypto: hisilicon - fix the format string type error crypto: ccree - fix a memory leak in cc_mac_digest() crypto: qat - add support for zstd crypto: qat - use swab32 macro ... List of files: /linux/arch/s390/crypto/Kconfig

622d42ef977adeae3d5a5d0eb893e4aaf1d5330c - crypto: s390 - Remove des and des3_ede code

Thu, 26 Mar 2026 21:12:43 +0100

crypto: s390 - Remove des and des3_ede codeSince DES and Triple DES are obsolete, there is very little point inmaintining architecture-optimized code for them. Remove it.Signed-off-by: Eric Biggers Signed-off-by: Herbert Xu List of files: /linux/arch/s390/crypto/Kconfig

efd1d2c8f3c073c43d5616d0c2d698cbe8a3ecde - lib/crypto: s390/ghash: Migrate optimized code into library

Thu, 19 Mar 2026 07:17:14 +0100

lib/crypto: s390/ghash: Migrate optimized code into libraryRemove the "ghash-s390" crypto_shash algorithm, and replace it with animplementation of ghash_blocks_arch() for the GHASH library.This makes the GHASH library be optimized with CPACF. It also greatlyreduces the amount of s390-specific glue code that is needed, and itfixes the issue where this GHASH optimization was disabled by default.Acked-by: Ard Biesheuvel Link: https://lore.kernel.org/r/20260319061723.1140720-14-ebiggers@kernel.orgSigned-off-by: Eric Biggers List of files: /linux/arch/s390/crypto/Kconfig

0cab15611e839142f4fd3c8a366acd1f7334b30b - lib/crypto: s390/aes: Migrate optimized code into library

Mon, 12 Jan 2026 20:20:13 +0100

lib/crypto: s390/aes: Migrate optimized code into libraryImplement aes_preparekey_arch(), aes_encrypt_arch(), andaes_decrypt_arch() using the CPACF AES instructions.Then, remove the superseded "aes-s390" crypto_cipher.The result is that both the AES library and crypto_cipher APIs use theCPACF AES instructions, whereas previously only crypto_cipher did (andit wasn't enabled by default, which this commit fixes as well).Note that this preserves the optimization where the AES key is stored inraw form rather than expanded form. CPACF just takes the raw key.Acked-by: Ard Biesheuvel Tested-by: Holger Dengler Reviewed-by: Holger Dengler Link: https://lore.kernel.org/r/20260112192035.10427-16-ebiggers@kernel.orgSigned-off-by: Eric Biggers List of files: /linux/arch/s390/crypto/Kconfig

496df7cd649dcb0437d3dbde5231bd5dcd77d2ec - crypto: s390/sha3 - Remove superseded SHA-3 code

Sun, 26 Oct 2025 06:50:32 +0100

crypto: s390/sha3 - Remove superseded SHA-3 codeThe SHA-3 library now utilizes the same s390 SHA-3 accelerationcapabilities as the arch/s390/crypto/ SHA-3 crypto_shash algorithms.Moreover, crypto/sha3.c now uses the SHA-3 library. The result is thatall SHA-3 APIs are now s390-accelerated without any need for the oldSHA-3 code in arch/s390/crypto/. Remove this superseded code.Also update the s390 defconfig and debug_defconfig files to enableCONFIG_CRYPTO_SHA3 instead of CONFIG_CRYPTO_SHA3_256_S390 andCONFIG_CRYPTO_SHA3_512_S390. This makes it so that the s390-optimizedSHA-3 continues to be built when either of these defconfigs is used.Tested-by: Harald Freudenberger Reviewed-by: Ard Biesheuvel Link: https://lore.kernel.org/r/20251026055032.1413733-16-ebiggers@kernel.orgSigned-off-by: Eric Biggers List of files: /linux/arch/s390/crypto/Kconfig

377982d5618a7b80bf2ad3eed9aa62691e984d50 - lib/crypto: s390/sha1: Migrate optimized code into library

Sun, 13 Jul 2025 01:23:02 +0200

lib/crypto: s390/sha1: Migrate optimized code into libraryInstead of exposing the s390-optimized SHA-1 code via s390-specificcrypto_shash algorithms, instead just implement the sha1_blocks()library function. This is much simpler, it makes the SHA-1 libraryfunctions be s390-optimized, and it fixes the longstanding issue wherethe s390-optimized SHA-1 code was disabled by default. SHA-1 stillremains available through crypto_shash, but individual architectures nolonger need to handle it.Reviewed-by: Ard Biesheuvel Link: https://lore.kernel.org/r/20250712232329.818226-12-ebiggers@kernel.orgSigned-off-by: Eric Biggers List of files: /linux/arch/s390/crypto/Kconfig

b7b366087e0f1645f867077a14bab617516d0f57 - lib/crypto: s390/sha512: Migrate optimized SHA-512 code to library

Mon, 30 Jun 2025 18:03:16 +0200

lib/crypto: s390/sha512: Migrate optimized SHA-512 code to libraryInstead of exposing the s390-optimized SHA-512 code via s390-specificcrypto_shash algorithms, instead just implement the sha512_blocks()library function. This is much simpler, it makes the SHA-512 (andSHA-384) library functions be s390-optimized, and it fixes thelongstanding issue where the s390-optimized SHA-512 code was disabled bydefault. SHA-512 still remains available through crypto_shash, butindividual architectures no longer need to handle it.Acked-by: Ard Biesheuvel Link: https://lore.kernel.org/r/20250630160320.2888-13-ebiggers@kernel.orgSigned-off-by: Eric Biggers List of files: /linux/arch/s390/crypto/Kconfig

b9eac03edcf83e25cd2c21be18e7733249fd75c1 - crypto: s390/sha256 - implement library instead of shash

Mon, 28 Apr 2025 19:00:33 +0200

crypto: s390/sha256 - implement library instead of shashInstead of providing crypto_shash algorithms for the arch-optimizedSHA-256 code, instead implement the SHA-256 library. This is muchsimpler, it makes the SHA-256 library functions be arch-optimized, andit fixes the longstanding issue where the arch-optimized SHA-256 wasdisabled by default. SHA-256 still remains available throughcrypto_shash, but individual architectures no longer need to handle it.Signed-off-by: Eric Biggers Signed-off-by: Herbert Xu List of files: /linux/arch/s390/crypto/Kconfig

3ea91323fe32011092fc75575d9a074ab374d673 - crypto: s390 - move library functions to arch/s390/lib/crypto/

Tue, 22 Apr 2025 17:27:13 +0200

crypto: s390 - move library functions to arch/s390/lib/crypto/Continue disentangling the crypto library functions from the genericcrypto infrastructure by moving the s390 ChaCha library functions into anew directory arch/s390/lib/crypto/ that does not depend on CRYPTO.This mirrors the distinction between crypto/ and lib/crypto/.Acked-by: Heiko Carstens Signed-off-by: Eric Biggers Signed-off-by: Herbert Xu List of files: /linux/arch/s390/crypto/Kconfig

4cf0e759161d28ce44b97bbdb051b176f31c647d - crypto: s390 - drop redundant dependencies on S390

Tue, 22 Apr 2025 17:27:06 +0200

crypto: s390 - drop redundant dependencies on S390arch/s390/crypto/Kconfig is sourced only when CONFIG_S390=y, so there isno need for the symbols defined inside it to depend on S390.Acked-by: Ard Biesheuvel Acked-by: Heiko Carstens Signed-off-by: Eric Biggers Signed-off-by: Herbert Xu List of files: /linux/arch/s390/crypto/Kconfig

efe8ddfaa3361c5080ad10a1226652cc0839ee49 - crypto: s390/chacha - remove the skcipher algorithms

Sat, 05 Apr 2025 20:26:07 +0200

crypto: s390/chacha - remove the skcipher algorithmsSince crypto/chacha.c now registers chacha20-$(ARCH), xchacha20-$(ARCH),and xchacha12-$(ARCH) skcipher algorithms that use the architecture'sChaCha and HChaCha library functions, individual architectures no longerneed to do the same. Therefore, remove the redundant skcipheralgorithms and leave just the library functions.Signed-off-by: Eric Biggers Signed-off-by: Herbert Xu List of files: /linux/arch/s390/crypto/Kconfig

17ec3e71ba797cdb62164fea9532c81b60f47167 - crypto: lib/Kconfig - Hide arch options from user

Thu, 27 Feb 2025 08:48:39 +0100

crypto: lib/Kconfig - Hide arch options from userThe ARCH_MAY_HAVE patch missed arm64, mips and s390. But it mayalso lead to arch options being enabled but ineffective becauseof modular/built-in conflicts.As the primary user of all these options wireguard is selectingthe arch options anyway, make the same selections at the lib/cryptooption level and hide the arch options from the user.Instead of selecting them centrally from lib/crypto, simply setthe default of each arch option as suggested by Eric Biggers.Change the Crypto API generic algorithms to select the top-levellib/crypto options instead of the generic one as otherwise thereis no way to enable the arch options (Eric Biggers). Introduce aset of INTERNAL options to work around dependency cycles on theCONFIG_CRYPTO symbol.Fixes: 1047e21aecdf ("crypto: lib/Kconfig - Fix lib built-in failure when arch is modular")Reported-by: kernel test robot Reported-by: Arnd Bergmann Closes: https://lore.kernel.org/oe-kbuild-all/202502232152.JC84YDLp-lkp@intel.com/Signed-off-by: Herbert Xu List of files: /linux/arch/s390/crypto/Kconfig

008071917dfccffe6637d264e255553af15c99f9 - s390/crc32: expose CRC32 functions through lib

Mon, 02 Dec 2024 02:08:34 +0100

s390/crc32: expose CRC32 functions through libMove the s390 CRC32 assembly code into the lib directory and wire it upto the library interface. This allows it to be used without goingthrough the crypto API. It remains usable via the crypto API too viathe shash algorithms that use the library interface. Thus all thearch-specific "shash" code becomes unnecessary and is removed.Note: to see the diff from arch/s390/crypto/crc32-vx.c toarch/s390/lib/crc32-glue.c, view this commit with 'git show -M10'.Reviewed-by: Ard Biesheuvel Link: https://lore.kernel.org/r/20241202010844.144356-10-ebiggers@kernel.orgSigned-off-by: Eric Biggers List of files: /linux/arch/s390/crypto/Kconfig

c3dcb058b110d07e56cc8129273e1342905b611c - s390/crypto: Add hardware acceleration for HMAC modes

Wed, 07 Aug 2024 18:06:29 +0200

s390/crypto: Add hardware acceleration for HMAC modesAdd new shash exploiting the HMAC hardware accelerations for SHA224,SHA256, SHA384 and SHA512 introduced with message-security assistextension 11.Reviewed-by: Harald Freudenberger Signed-off-by: Holger Dengler Signed-off-by: Vasily Gorbik List of files: /linux/arch/s390/crypto/Kconfig

cf514b2a5902ee4f93e9636ace5228fed27f23bb - crypto: Kconfig - simplify cipher entries

Sat, 20 Aug 2022 20:41:50 +0200

crypto: Kconfig - simplify cipher entriesShorten menu titles and make them consistent:- acronym- name- architecture features in parenthesis- no suffixes like " algorithm", "support", or "hardware acceleration", or "optimized"Simplify help text descriptions, update references, and ensure thathttps references are still valid.Signed-off-by: Robert Elliott Signed-off-by: Herbert Xu List of files: /linux/arch/s390/crypto/Kconfig

3f342a23257df99b792c1edb1236e85badc157de - crypto: Kconfig - simplify hash entries

Sat, 20 Aug 2022 20:41:48 +0200

crypto: Kconfig - simplify hash entriesShorten menu titles and make them consistent:- acronym- name- architecture features in parenthesis- no suffixes like " algorithm", "support", or "hardware acceleration", or "optimized"Simplify help text descriptions, update references, and ensure thathttps references are still valid.Signed-off-by: Robert Elliott Signed-off-by: Herbert Xu List of files: /linux/arch/s390/crypto/Kconfig

ec84348da449d96ce5be47f7d00221cb8374f462 - crypto: Kconfig - simplify CRC entries

Sat, 20 Aug 2022 20:41:46 +0200

crypto: Kconfig - simplify CRC entriesShorten menu titles and make them consistent:- acronym- name- architecture features in parenthesis- no suffixes like " algorithm", "support", or "hardware acceleration", or "optimized"Simplify help text descriptions, update references, and ensure thathttps references are still valid.Signed-off-by: Robert Elliott Signed-off-by: Herbert Xu List of files: /linux/arch/s390/crypto/Kconfig

c9d24c97c89c1ba9b2d4ff8b721443d7471f87b6 - crypto: Kconfig - move s390 entries to a submenu

Sat, 20 Aug 2022 20:41:37 +0200

crypto: Kconfig - move s390 entries to a submenuMove CPU-specific crypto/Kconfig entries to arch/xxx/crypto/Kconfigand create a submenu for them under the Crypto API menu.Suggested-by: Eric Biggers Signed-off-by: Robert Elliott Signed-off-by: Herbert Xu List of files: /linux/arch/s390/crypto/Kconfig

3f5615e012b4593943bbc2a6c3ce150bb33e1966 - [S390] crypto: move s390 Kconfig options.

Sat, 26 Jan 2008 14:11:07 +0100

[S390] crypto: move s390 Kconfig options.Move s390 crypto Kconfig options to drivers/crypto/Kconfig to have allhardware crypto devices in one place.This also makes messing up the kernel source tree easier for some people.Signed-off-by: Jan Glauber Signed-off-by: Martin Schwidefsky List of files: /linux/arch/s390/crypto/Kconfig