Changes in Kconfig

efe86f088f48f18c27b648e5724048947f3b7fb4 - Merge drm/drm-next into drm-xe-next

Tue, 14 Jul 2026 15:40:31 +0200

Merge drm/drm-next into drm-xe-nextSync some i915/display changesSigned-off-by: Rodrigo Vivi List of files: /linux/drivers/crypto/Kconfig

6d177908bad5992e17669030db41caab88041d5e - Merge drm/drm-next into drm-intel-next

Tue, 30 Jun 2026 14:55:43 +0200

Merge drm/drm-next into drm-intel-nextSync with v7.2-rc1.Signed-off-by: Jani Nikula List of files: /linux/drivers/crypto/Kconfig

827b9aabd3ea3e96d5e48abed9f44dbd1e550d4e - Merge drm/drm-next into drm-misc-next

Tue, 30 Jun 2026 10:16:00 +0200

Merge drm/drm-next into drm-misc-nextBackmerging to get drm-misc-next to v7.2-rc1.Signed-off-by: Thomas Zimmermann List of files: /linux/drivers/crypto/Kconfig

7dd19adaaac9a161723a24de7c270861063ec6ac - Merge tag 'v7.2-rc1' into drm-rust-next

Sun, 28 Jun 2026 22:39:43 +0200

Merge tag 'v7.2-rc1' into drm-rust-nextMerge v7.2-rc1 into drm-rust-next to start the next cycle.Devres now requires T: 'static, which conflicts with shmem::Object usingDevres> without that bound. Resolve by adding 'staticas a supertrait to DriverObject and DeviceContext, which does notrestrict any current use cases since DriverObject is always implementedon owned, refcounted types and DeviceContext is a sealed marker traitwith only unit-type implementors.If DriverObject (or DeviceContext) ever becomes lifetime-parameterized(e.g. via a GAT for TTM backed objects), the 'static supertrait can berelaxed at that point.Signed-off-by: Danilo Krummrich List of files: /linux/drivers/crypto/Kconfig

a4ff2be345d0abc943da8dd8da98151843b750dc - Merge tag 'v7.3-p1' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6

Thu, 20 Aug 2026 02:25:42 +0200

Merge tag 'v7.3-p1' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6Pull crypto update from Herbert Xu: "API: - Add af_alg_restrict sysctl and white list - Fix potential suspend/resume races in hwrng Algorithms: - Optimize vli additive operations using compiler builtins in ecc Drivers: - Remove unsafe/deprecated algorithms from qce - Mark qce as BROKEN - Add runtime PM and interconnect bandwidth scaling support to qce - Remove crypto_rng from qcom, sun8i and caam - Fix SG list issues in iaa - Fix SEV init path bugs in ccp"* tag 'v7.3-p1' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6: (122 commits) crypto: lskcipher - propagate errors from unaligned crypt crypto: keembay - use crypto_memneq() to compare CCM AEAD tags crypto: keembay - use crypto_memneq() to compare GCM AEAD tags crypto: sa2ul - use crypto_memneq() to compare AEAD tag hwrng: drivers - use named initializers for acpi_device_id crypto: qce - fix CCM AAD buffer underallocation crypto: iaa - unmap dst before software fallback on decompress crypto: iaa - use bounce buffer for multi-sg decompress input crypto: iaa - avoid counting fallback decompression bytes crypto: iaa - fall back to software for multi-entry scatterlists hwrng: core - Stop/start hwrng_fillfn() kthread before/after suspend-resume crypto: hisilicon/sec2 - fix CCM algorithm long packet failure crypto: eip93 - use struct_size() and flexible array for ring allocation crypto: krb5 - use kfree_sensitive() for derived key buffers crypto: af_alg - Stop after finding name in allowlist crypto: af_alg - Replace 'bool privileged' with flags crypto: af_alg - Make cbc(paes) privileged-only hwrng: imx-rngc - Disable clock on registration failure crypto: qat - remove dead ADF_HEX code crypto: qce - simplify qce_handle_request ... List of files: /linux/drivers/crypto/Kconfig

0eaed89c18aeedf0898baf2dbf5ff027c6795152 - Merge tag 'timers-v7.3-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/daniel.lezcano/linux into timers/clocksource

Mon, 17 Aug 2026 10:29:52 +0200

Merge tag 'timers-v7.3-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/daniel.lezcano/linux into timers/clocksource - Use designated initializers for sh_mtu2, sh_cmt, and sh_tmu, and drop the unused initializer in the platform_device_id table for sh_mtu2 (Uwe Kleine-König) - Remove redundant dev_err()/dev_err_probe() messages when devm_request_*_irq() fails, as the helper already logs an error message (Pan Chuang) - Fix a boot hang on Allwinner D1 when a forced minimum delta is used with the sun4i timer (Felix Yan) - Fix an IRQ leak in the cpuhp_setup_state() error path by freeing the IRQ on failure in the NXP PIT driver (WenTao Liang) - Fix incorrect unmapping of shared MMIO between the clocksource and clockevent drivers. If one of them fails to initialize, the error path unmaps the shared MMIO region, leaving the other driver with an invalid mapping on clps711x (Guangshuo Li) - Make the samsung_pwm driver compatible with PREEMPT_RT by replacing regular spinlocks with raw_spinlock_t in atomic contexts (Marek Szyprowski) - Use __raw_readl() and __raw_writel() instead of ioread32() and iowrite32() to support SWAP_IO_SPACE in the rtl-otto driver (Rustam Adilov) - Fix a missing clk_disable_unprepare() call in the timer initialization error path of the Armada driver (Yuho Choi)Link: https://lore.kernel.org/lkml/75feea31-683d-45a1-87f4-ab045e0152ae@oss.qualcomm.com List of files: /linux/drivers/crypto/Kconfig

b4d85f863e5a6f1fa01b186001af0f68f4f5239e - Merge branch 'next' into for-linus

Sat, 15 Aug 2026 06:26:07 +0200

Merge branch 'next' into for-linusPrepare input updates for 7.3 merge window. List of files: /linux/drivers/crypto/Kconfig

df373d39c6f038d176af303ae72f02c7c70b953d - crypto: qce - Mark QCE as BROKEN

Sun, 12 Jul 2026 23:31:31 +0200

crypto: qce - Mark QCE as BROKENThis driver is harmful:- It is much slower than the CPU [1] [2].- It Has a history of bugs [2] [3].- It does not have exclusive access to the hardware [4], causing races with the secure world.- It register its implementations with too low a cra_priority for them to be actually used [5].Therefore, disable it to ensure that nobody builds it into kernels theyintend to ship.In the future, the driver will be used for processing restricted mediacontent. However, the kernel does not currently support this. Sincethe driver will have future uses, allow building it if COMPILE_TEST isenabled.[1]: https://lore.kernel.org/r/20250704070322.20692-1-ebiggers@kernel.org/[2]: https://lore.kernel.org/r/20250615031807.GA81869@sol/[3]: https://lore.kernel.org/r/20260706-qce-fix-self-tests-v5-0-86f461ff1829@oss.qualcomm.com/[4]: https://lore.kernel.org/r/20260629-qcom-qce-cmd-descr-v20-0-56f67da84c05@oss.qualcomm.com/[5]: https://lore.kernel.org/r/20260524204537.GB110177@quark/Fixes: ec8f5d8f6f76 ("crypto: qce - Qualcomm crypto engine driver")Signed-off-by: Demi Marie Obenour Acked-by: Eric Biggers Signed-off-by: Herbert Xu List of files: /linux/drivers/crypto/Kconfig

76904fccf81936c084faebc73ac72c0919a42941 - Merge tag 'v7.2-rc3' into next

Tue, 14 Jul 2026 04:06:00 +0200

Merge tag 'v7.2-rc3' into nextSync up with mainline to pull in stable fixes to avoid merge conflicts. List of files: /linux/drivers/crypto/Kconfig

6727c44461f788bb49a37875fbc70654e8db30b2 - hwrng: qcom - Move qcom-rng.c into drivers/char/hw_random/

Mon, 08 Jun 2026 19:58:48 +0200

hwrng: qcom - Move qcom-rng.c into drivers/char/hw_random/Since this file just implements a hwrng driver, move it intodrivers/char/hw_random/. Rename the kconfig option accordingly as well.Signed-off-by: Eric Biggers Signed-off-by: Herbert Xu List of files: /linux/drivers/crypto/Kconfig

2ecdf5c9910e20f73639bc322f0518a3439d17c0 - crypto: qcom-rng - Remove crypto_rng interface

Mon, 08 Jun 2026 19:58:47 +0200

crypto: qcom-rng - Remove crypto_rng interfaceqcom-rng.c exposes the same hardware through two completely separateinterfaces, crypto_rng and hwrng. However, the implementation of thisis buggy because it permits generation operations from these interfacesto run concurrently with each other, accessing the same registers. Thatis, qcom_rng_generate() synchronizes with itself but not withqcom_hwrng_read(). This results in potential repetition of output fromthe RNG, output of non-random values, etc.Fortunately, there's actually no point in hardware RNG driversimplementing the crypto_rng interface. It's not actually used byanything besides the "rng" algorithm type of AF_ALG, which in turn isnot actually used in practice. Other crypto_rng hardware drivers arelikewise being phased out, leaving just the hwrng support.Thus, remove it to simplify the code and avoid conflict (and confusion)with the hwrng interface which is the one that actually matters.Fixes: f29cd5bb64c2 ("crypto: qcom-rng - Add hw_random interface support")Cc: stable@vger.kernel.orgSigned-off-by: Eric Biggers Reviewed-by: Dmitry Baryshkov Signed-off-by: Herbert Xu List of files: /linux/drivers/crypto/Kconfig

00599d4841790d05401820a96cf7edb193888b00 - Merge drm/drm-fixes into drm-misc-fixes

Mon, 29 Jun 2026 17:58:00 +0200

Merge drm/drm-fixes into drm-misc-fixesPull in tag v7.2-rc1 so that drm-misc-fixes becomes useful again,and drm-misc-next-fixes can be closed.Signed-off-by: Maarten Lankhorst List of files: /linux/drivers/crypto/Kconfig

7a0e692a0381254b2f77c54dec100cd3325a6fdf - Merge branch 'next' into for-linus

Tue, 23 Jun 2026 08:10:08 +0200

Merge branch 'next' into for-linusPrepare input updates for 7.2 merge window. List of files: /linux/drivers/crypto/Kconfig

9611c0ce215a66770ccbe5c126bf57ba8c31bcad - Merge commit '6beaec3aee9852438b89e4d7891caf5e84d45851' of git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux into gpio/for-current

Fri, 19 Jun 2026 10:50:17 +0200

Merge commit '6beaec3aee9852438b89e4d7891caf5e84d45851' of git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux into gpio/for-currentThis pulls in the merge commit for MFD updates for v7.2. The PR containsa build-time dependency of one of the GPIO commits that will follow. List of files: /linux/drivers/crypto/Kconfig

0d8c1134936f1fb6678156ab4248ac740d274525 - Merge tag 'v7.2-p1' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6

Tue, 16 Jun 2026 05:31:23 +0200

Merge tag 'v7.2-p1' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6Pull crypto updates from Herbert Xu: "API: - Drop support for off-CPU cryptography in af_alg - Document that af_alg is *always* slower - Document the deprecation of af_alg - Remove zero-copy support from skcipher and aead in af_alg - Cap AEAD AD length to 0x80000000 in af_alg - Free default RNG on module exit Algorithms: - Fix vli multiplication carry overflow in ecc - Drop unused cipher_null crypto_alg - Remove unused variants of drbg - Use lib/crypto in drbg - Use memcpy_from/to_sglist in authencesn - Allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode - Disallow RSA PKCS#1 SHA-1 sig algs in FIPS mode - Filter out async aead implementations at alloc in krb5 - Fix non-parallel fallback by rstoring callback in pcrypt - Validate poly1305 template argument in chacha20poly1305 Drivers: - Add sysfs PCI reset support to qat - Add KPT support for GEN6 devices to qat - Remove unused character device and ioctls from qat - Add support for hw access via SMCC to mtk - Remove prng support from crypto4xx - Remove prng support from hisi-trng - Remove prng support from sun4i-ss - Remove prng support from xilinx-trng - Remove loongson-rng - Remove exynos-rng Others: - Remove support for AIO on sockets"* tag 'v7.2-p1' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6: (196 commits) crypto: tegra - fix refcount leak in tegra_se_host1x_submit() crypto: rng - Free default RNG on module exit crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode hwrng: jh7110 - fix refcount leak in starfive_trng_read() crypto: atmel-ecc - drop dead code in atmel_ecdh_max_size crypto: cavium/cpt - fix DMA cleanup using wrong loop index crypto: marvell/octeontx - fix DMA cleanup using wrong loop index MAINTAINERS: make myself the maintainer of the Qualcomm QCE driver crypto: amcc - convert irq_of_parse_and_map to platform_get_irq crypto: sun4i-ss - Remove insecure and unused rng_alg hwrng: xilinx - Move xilinx-rng into drivers/char/hw_random/ crypto: xilinx-trng - Replace crypto_drbg_ctr_df() with HMAC-SHA512 crypto: xilinx-trng - Fix return value of xtrng_hwrng_trng_read() crypto: xilinx-trng - Remove crypto_rng interface crypto: exynos-rng - Remove exynos-rng driver hwrng: hisi-trng - Move hisi-trng into drivers/char/hw_random/ crypto: hisi-trng - Remove crypto_rng interface crypto: loongson - Remove broken and unused loongson-rng crypto: crypto4xx - Remove insecure and unused rng_alg crypto: qat - validate RSA CRT component lengths ... List of files: /linux/drivers/crypto/Kconfig

be6498ca1cca9084330bdefb68ad8379d1ac5ea7 - hwrng: xilinx - Move xilinx-rng into drivers/char/hw_random/

Sun, 31 May 2026 21:17:38 +0200

hwrng: xilinx - Move xilinx-rng into drivers/char/hw_random/Since this file just implements a hwrng driver, move it intodrivers/char/hw_random/. Rename the kconfig option accordingly as well.Signed-off-by: Eric Biggers Signed-off-by: Herbert Xu List of files: /linux/drivers/crypto/Kconfig

5f1d444e084ce3e4619e38c45a8cc29e6fffb2bf - crypto: xilinx-trng - Replace crypto_drbg_ctr_df() with HMAC-SHA512

Sun, 31 May 2026 21:17:37 +0200

crypto: xilinx-trng - Replace crypto_drbg_ctr_df() with HMAC-SHA512This code is just trying to condition 48 bytes of random data. This canbe done easily using HKDF-SHA512-Extract, saving 300 lines of code.This commit also fixes forward security (in this particular case) byclearing the entropy from memory after it's used.Signed-off-by: Eric Biggers Signed-off-by: Herbert Xu List of files: /linux/drivers/crypto/Kconfig

32b4d29280ed2a991dc196d5845b892acedc63b8 - crypto: xilinx-trng - Remove crypto_rng interface

Sun, 31 May 2026 21:17:35 +0200

crypto: xilinx-trng - Remove crypto_rng interfaceImplementing the crypto_rng interface has no purpose, as it isn't usedin practice. It's being removed from other drivers too. Just removeit. This leaves hwrng, which is actually used.Tagging with 'Cc stable' due to the bugs that this removes: - xtrng_trng_generate() sometimes returned success even when it didn't fill in all the bytes. - It was possible for xtrng_trng_generate() and xtrng_hwrng_trng_read() to run concurrently and interfere with each other, as the locking code in xtrng_hwrng_trng_read() was broken.Fixes: 8979744aca80 ("crypto: xilinx - Add TRNG driver for Versal")Cc: stable@vger.kernel.orgSigned-off-by: Eric Biggers Signed-off-by: Herbert Xu List of files: /linux/drivers/crypto/Kconfig

c9fedb3b23d4664b824f60085bcdba92e5d9dd48 - crypto: exynos-rng - Remove exynos-rng driver

Sun, 31 May 2026 19:59:31 +0200

crypto: exynos-rng - Remove exynos-rng driverThis driver has no purpose. It doesn't feed into the Linux RNG, nordoes it implement the hwrng interface. It is accessible only via the"rng" algorithm type of AF_ALG, which isn't used in practice. Everyoneuses either the Linux RNG, or rarely /dev/hwrng.Moreover, this is a PRNG whose only source of entropy is the 160-bitseed the user passes in. So this can be used only by a user who alreadyhas a source of cryptographically secure random numbers, such as/dev/random. Which they can, and do, just use in the first place.Just remove this driver. There's no need to keep useless code around.Note that the other crypto_rng drivers in drivers/crypto/ are similarlyunused and are being removed too. This commit just handles exynos-rng.Signed-off-by: Eric Biggers Acked-by: Krzysztof Kozlowski Signed-off-by: Herbert Xu List of files: /linux/drivers/crypto/Kconfig

af3d1bb9a09daf928fc3f173689fb7904d6a6d4f - crypto: loongson - Remove broken and unused loongson-rng

Sat, 30 May 2026 01:32:08 +0200

crypto: loongson - Remove broken and unused loongson-rngThe loongson-rng rng_alg has several vulnerabilities, including notproviding forward security, and a use-after-free bug due to the use ofwait_for_completion_interruptible().Meanwhile, the rng_alg framework doesn't really have any purpose in thefirst place other than to access the software algorithms crypto/drbg.cand crypto/jitterentropy.c. Hardware-specific rng_algs have noin-kernel user, and unlike hwrng there's no feed into the actual LinuxRNG. As such, there's really no point to this code. There are ofcourse other rng_alg drivers that are similarly unused, but they'resimilarly in the process of being phased out, e.g.https://lore.kernel.org/r/20260529193648.18172-1-ebiggers@kernel.org andhttps://lore.kernel.org/r/20260529220430.34135-1-ebiggers@kernel.orgGiven that, there's no point in fixing forward these vulnerabilities,and it makes much more sense to simply roll back the addition of thisdriver. If this platform provides TRNG (not PRNG) functionality, itcould make sense to add a hwrng driver, but it would be quite different.Link: https://lore.kernel.org/linux-crypto/20260525145939.GC2018@quark/Fixes: 766b2d724c8d ("crypto: loongson - add Loongson RNG driver support")Cc: stable@vger.kernel.orgSigned-off-by: Eric Biggers Signed-off-by: Herbert Xu List of files: /linux/drivers/crypto/Kconfig