Changes in Kconfig

be6498ca1cca9084330bdefb68ad8379d1ac5ea7 - hwrng: xilinx - Move xilinx-rng into drivers/char/hw_random/

Sun, 31 May 2026 21:17:38 +0200

hwrng: xilinx - Move xilinx-rng into drivers/char/hw_random/Since this file just implements a hwrng driver, move it intodrivers/char/hw_random/. Rename the kconfig option accordingly as well.Signed-off-by: Eric Biggers Signed-off-by: Herbert Xu List of files: /linux/drivers/crypto/Kconfig

5f1d444e084ce3e4619e38c45a8cc29e6fffb2bf - crypto: xilinx-trng - Replace crypto_drbg_ctr_df() with HMAC-SHA512

Sun, 31 May 2026 21:17:37 +0200

crypto: xilinx-trng - Replace crypto_drbg_ctr_df() with HMAC-SHA512This code is just trying to condition 48 bytes of random data. This canbe done easily using HKDF-SHA512-Extract, saving 300 lines of code.This commit also fixes forward security (in this particular case) byclearing the entropy from memory after it's used.Signed-off-by: Eric Biggers Signed-off-by: Herbert Xu List of files: /linux/drivers/crypto/Kconfig

32b4d29280ed2a991dc196d5845b892acedc63b8 - crypto: xilinx-trng - Remove crypto_rng interface

Sun, 31 May 2026 21:17:35 +0200

crypto: xilinx-trng - Remove crypto_rng interfaceImplementing the crypto_rng interface has no purpose, as it isn't usedin practice. It's being removed from other drivers too. Just removeit. This leaves hwrng, which is actually used.Tagging with 'Cc stable' due to the bugs that this removes: - xtrng_trng_generate() sometimes returned success even when it didn't fill in all the bytes. - It was possible for xtrng_trng_generate() and xtrng_hwrng_trng_read() to run concurrently and interfere with each other, as the locking code in xtrng_hwrng_trng_read() was broken.Fixes: 8979744aca80 ("crypto: xilinx - Add TRNG driver for Versal")Cc: stable@vger.kernel.orgSigned-off-by: Eric Biggers Signed-off-by: Herbert Xu List of files: /linux/drivers/crypto/Kconfig

c9fedb3b23d4664b824f60085bcdba92e5d9dd48 - crypto: exynos-rng - Remove exynos-rng driver

Sun, 31 May 2026 19:59:31 +0200

crypto: exynos-rng - Remove exynos-rng driverThis driver has no purpose. It doesn't feed into the Linux RNG, nordoes it implement the hwrng interface. It is accessible only via the"rng" algorithm type of AF_ALG, which isn't used in practice. Everyoneuses either the Linux RNG, or rarely /dev/hwrng.Moreover, this is a PRNG whose only source of entropy is the 160-bitseed the user passes in. So this can be used only by a user who alreadyhas a source of cryptographically secure random numbers, such as/dev/random. Which they can, and do, just use in the first place.Just remove this driver. There's no need to keep useless code around.Note that the other crypto_rng drivers in drivers/crypto/ are similarlyunused and are being removed too. This commit just handles exynos-rng.Signed-off-by: Eric Biggers Acked-by: Krzysztof Kozlowski Signed-off-by: Herbert Xu List of files: /linux/drivers/crypto/Kconfig

af3d1bb9a09daf928fc3f173689fb7904d6a6d4f - crypto: loongson - Remove broken and unused loongson-rng

Sat, 30 May 2026 01:32:08 +0200

crypto: loongson - Remove broken and unused loongson-rngThe loongson-rng rng_alg has several vulnerabilities, including notproviding forward security, and a use-after-free bug due to the use ofwait_for_completion_interruptible().Meanwhile, the rng_alg framework doesn't really have any purpose in thefirst place other than to access the software algorithms crypto/drbg.cand crypto/jitterentropy.c. Hardware-specific rng_algs have noin-kernel user, and unlike hwrng there's no feed into the actual LinuxRNG. As such, there's really no point to this code. There are ofcourse other rng_alg drivers that are similarly unused, but they'resimilarly in the process of being phased out, e.g.https://lore.kernel.org/r/20260529193648.18172-1-ebiggers@kernel.org andhttps://lore.kernel.org/r/20260529220430.34135-1-ebiggers@kernel.orgGiven that, there's no point in fixing forward these vulnerabilities,and it makes much more sense to simply roll back the addition of thisdriver. If this platform provides TRNG (not PRNG) functionality, itcould make sense to add a hwrng driver, but it would be quite different.Link: https://lore.kernel.org/linux-crypto/20260525145939.GC2018@quark/Fixes: 766b2d724c8d ("crypto: loongson - add Loongson RNG driver support")Cc: stable@vger.kernel.orgSigned-off-by: Eric Biggers Signed-off-by: Herbert Xu List of files: /linux/drivers/crypto/Kconfig

7811ec9e973d2c9e465083699f0c8240b98cb8c4 - crypto: crypto4xx - Remove insecure and unused rng_alg

Sat, 30 May 2026 00:04:30 +0200

crypto: crypto4xx - Remove insecure and unused rng_algRemove crypto4xx_rng, as it is insecure and unused:- It has only a 64-bit security strength, which is highly inadequate. This can be seen by the fact that crypto4xx_hw_init() seeds it with only 64 bits of entropy, and the fact that the original commit mentions that it implements ANSI X9.17 Annex C. Another issue was that this driver didn't implement the crypto_rng API correctly, as crypto4xx_prng_generate() didn't return 0 on success.- No user of this code is known. It's usable only theoretically via the "rng" algorithm type of AF_ALG. But userspace actually just uses the actual Linux RNG (/dev/random etc) instead. And rng_algs don't contribute entropy to the actual Linux RNG either. (This may have been confused with hwrng, which does contribute entropy.)Fixes: d072bfa48853 ("crypto: crypto4xx - add prng crypto support")Cc: stable@vger.kernel.orgSigned-off-by: Eric Biggers Acked-by: Christian Lamparter Signed-off-by: Herbert Xu List of files: /linux/drivers/crypto/Kconfig

083c9ab12c402efe9ed55c942ede92eb35f8bf2a - crypto: omap-des - add COMPILE_TEST and fix CONFIG_OF=n build

Sun, 17 May 2026 12:34:14 +0200

crypto: omap-des - add COMPILE_TEST and fix CONFIG_OF=n buildCRYPTO_DEV_OMAP_DES only depends on ARCH_OMAP2PLUS, which is ARM-onlyand selects OF via ARM's USE_OF, making any non-OF code unreachable.Add COMPILE_TEST so the driver can be built with CONFIG_OF=n, making thenon-OF code reachable.Fix the resulting non-OF build failures:- omap_des_irq() was defined inside a CONFIG_OF block, but is referenced unconditionally from omap_des_probe(). Move the CONFIG_OF guard so it only covers omap_des_get_of().- The non-OF omap_des_get_of() stub took a struct device *, while omap_des_probe() passes a struct platform_device *. Make the stub prototype match the OF implementation and the caller.Signed-off-by: Thorsten Blum Signed-off-by: Herbert Xu List of files: /linux/drivers/crypto/Kconfig

aec2f682d47c54ef434b2d440992626d80b1ebdc - Merge tag 'v7.1-p1' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6

Thu, 16 Apr 2026 00:22:26 +0200

Merge tag 'v7.1-p1' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6Pull crypto update from Herbert Xu: "API: - Replace crypto_get_default_rng with crypto_stdrng_get_bytes - Remove simd skcipher support - Allow algorithm types to be disabled when CRYPTO_SELFTESTS is off Algorithms: - Remove CPU-based des/3des acceleration - Add test vectors for authenc(hmac(md5),cbc({aes,des})) and authenc(hmac({md5,sha1,sha224,sha256,sha384,sha512}),rfc3686(ctr(aes))) - Replace spin lock with mutex in jitterentropy Drivers: - Add authenc algorithms to safexcel - Add support for zstd in qat - Add wireless mode support for QAT GEN6 - Add anti-rollback support for QAT GEN6 - Add support for ctr(aes), gcm(aes), and ccm(aes) in dthev2"* tag 'v7.1-p1' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6: (129 commits) crypto: af_alg - use sock_kmemdup in alg_setkey_by_key_serial crypto: vmx - remove CRYPTO_DEV_VMX from Kconfig crypto: omap - convert reqctx buffer to fixed-size array crypto: atmel-sha204a - add Thorsten Blum as maintainer crypto: atmel-ecc - add Thorsten Blum as maintainer crypto: qat - fix IRQ cleanup on 6xxx probe failure crypto: geniv - Remove unused spinlock from struct aead_geniv_ctx crypto: qce - simplify qce_xts_swapiv() crypto: hisilicon - Fix dma_unmap_single() direction crypto: talitos - rename first/last to first_desc/last_desc crypto: talitos - fix SEC1 32k ahash request limitation crypto: jitterentropy - replace long-held spinlock with mutex crypto: hisilicon - remove unused and non-public APIs for qm and sec crypto: hisilicon/qm - drop redundant variable initialization crypto: hisilicon/qm - remove else after return crypto: hisilicon/qm - add const qualifier to info_name in struct qm_cmd_dump_item crypto: hisilicon - fix the format string type error crypto: ccree - fix a memory leak in cc_mac_digest() crypto: qat - add support for zstd crypto: qat - use swab32 macro ... List of files: /linux/drivers/crypto/Kconfig

c697c5fcfb5e73c723ca7d9f003e37b2b9534520 - crypto: vmx - remove CRYPTO_DEV_VMX from Kconfig

Sat, 04 Apr 2026 15:52:03 +0200

crypto: vmx - remove CRYPTO_DEV_VMX from KconfigCRYPTO_DEV_VMX has been moved to arch/powerpc/crypto/Kconfig, remove it.Signed-off-by: Thorsten Blum Signed-off-by: Herbert Xu List of files: /linux/drivers/crypto/Kconfig

cdadc14359378c0cf02251c86ffbc606f55bfadd - crypto: cryptomgr - Select algorithm types only when CRYPTO_SELFTESTS

Sat, 28 Mar 2026 00:08:18 +0100

crypto: cryptomgr - Select algorithm types only when CRYPTO_SELFTESTSEnabling any template selects CRYPTO_MANAGER, which causesCRYPTO_MANAGER2 to enable itself, which selects every algorithm typeoption. However, pulling in all algorithm types is needed only when theself-tests are enabled. So condition the selections accordingly.To make this possible, also add the missing selections to varioussymbols that were relying on transitive selections via CRYPTO_MANAGER.Signed-off-by: Eric Biggers Signed-off-by: Herbert Xu List of files: /linux/drivers/crypto/Kconfig

5469d16e71d65e2a71b68e0bb46eae63f9cb8965 - crypto: kconfig - fix typos in atmel-ecc and atmel-sha204a help

Fri, 27 Mar 2026 01:17:27 +0100

crypto: kconfig - fix typos in atmel-ecc and atmel-sha204a helps/Microhip/Microchip/Signed-off-by: Thorsten Blum Signed-off-by: Herbert Xu List of files: /linux/drivers/crypto/Kconfig

6dc7fce91041ec8d2f5e6fd589ee2962898d9f44 - crypto: sm3 - Rename CRYPTO_SM3_GENERIC to CRYPTO_SM3

Sat, 21 Mar 2026 05:09:26 +0100

crypto: sm3 - Rename CRYPTO_SM3_GENERIC to CRYPTO_SM3The kconfig options for generic crypto API modules have traditionally*not* had a "_GENERIC" suffix. Also, the "_GENERIC" suffix will makeeven less sense once the architecture-optimized SM3 code is moved intolib/crypto/ and the "sm3" crypto_shash is reimplemented on top of that.Thus, rename CRYPTO_SM3_GENERIC to CRYPTO_SM3.Acked-by: Ard Biesheuvel Link: https://lore.kernel.org/r/20260321040935.410034-4-ebiggers@kernel.orgSigned-off-by: Eric Biggers List of files: /linux/drivers/crypto/Kconfig

6c4fed5fee42f5785e881ef2c28359724b18b80e - crypto: drbg - Export CTR DRBG DF functions

Mon, 15 Sep 2025 15:30:25 +0200

crypto: drbg - Export CTR DRBG DF functionsExport drbg_ctr_df() derivative function to new module df_sp80090.Signed-off-by: Harsh Jain Signed-off-by: Herbert Xu List of files: /linux/drivers/crypto/Kconfig

908057d185a41560a55890afa69c9676fc63e55c - Merge tag 'v6.18-p1' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6

Sat, 04 Oct 2025 23:59:29 +0200

Merge tag 'v6.18-p1' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6Pull crypto updates from Herbert Xu: "Drivers: - Add ciphertext hiding support to ccp - Add hashjoin, gather and UDMA data move features to hisilicon - Add lz4 and lz77_only to hisilicon - Add xilinx hwrng driver - Add ti driver with ecb/cbc aes support - Add ring buffer idle and command queue telemetry for GEN6 in qat Others: - Use rcu_dereference_all to stop false alarms in rhashtable - Fix CPU number wraparound in padata"* tag 'v6.18-p1' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6: (78 commits) dt-bindings: rng: hisi-rng: convert to DT schema crypto: doc - Add explicit title heading to API docs hwrng: ks-sa - fix division by zero in ks_sa_rng_init KEYS: X.509: Fix Basic Constraints CA flag parsing crypto: anubis - simplify return statement in anubis_mod_init crypto: hisilicon/qm - set NULL to qm->debug.qm_diff_regs crypto: hisilicon/qm - clear all VF configurations in the hardware crypto: hisilicon - enable error reporting again crypto: hisilicon/qm - mask axi error before memory init crypto: hisilicon/qm - invalidate queues in use crypto: qat - Return pointer directly in adf_ctl_alloc_resources crypto: aspeed - Fix dma_unmap_sg() direction rhashtable: Use rcu_dereference_all and rcu_dereference_all_check crypto: comp - Use same definition of context alloc and free ops crypto: omap - convert from tasklet to BH workqueue crypto: qat - Replace kzalloc() + copy_from_user() with memdup_user() crypto: caam - double the entropy delay interval for retry padata: WQ_PERCPU added to alloc_workqueue users padata: replace use of system_unbound_wq with system_dfl_wq crypto: cryptd - WQ_PERCPU added to alloc_workqueue users ... List of files: /linux/drivers/crypto/Kconfig

38057e323657695ec8f814aff0cdd1c7e00d3e9b - Merge tag 'soc-drivers-6.18' of git://git.kernel.org/pub/scm/linux/kernel/git/soc/soc

Thu, 02 Oct 2025 02:32:51 +0200

Merge tag 'soc-drivers-6.18' of git://git.kernel.org/pub/scm/linux/kernel/git/soc/socPull SoC driver updates from Arnd Bergmann: "Lots of platform specific updates for Qualcomm SoCs, including a new TEE subsystem driver for the Qualcomm QTEE firmware interface. Added support for the Apple A11 SoC in drivers that are shared with the M1/M2 series, among more updates for those. Smaller platform specific driver updates for Renesas, ASpeed, Broadcom, Nvidia, Mediatek, Amlogic, TI, Allwinner, and Freescale SoCs. Driver updates in the cache controller, memory controller and reset controller subsystems. SCMI firmware updates to add more features and improve robustness. This includes support for having multiple SCMI providers in a single system. TEE subsystem support for protected DMA-bufs, allowing hardware to access memory areas that managed by the kernel but remain inaccessible from the CPU in EL1/EL0"* tag 'soc-drivers-6.18' of git://git.kernel.org/pub/scm/linux/kernel/git/soc/soc: (139 commits) soc/fsl/qbman: Use for_each_online_cpu() instead of for_each_cpu() soc: fsl: qe: Drop legacy-of-mm-gpiochip.h header from GPIO driver soc: fsl: qe: Change GPIO driver to a proper platform driver tee: fix register_shm_helper() pmdomain: apple: Add "apple,t8103-pmgr-pwrstate" dt-bindings: spmi: Add Apple A11 and T2 compatible serial: qcom-geni: Load UART qup Firmware from linux side spi: geni-qcom: Load spi qup Firmware from linux side i2c: qcom-geni: Load i2c qup Firmware from linux side soc: qcom: geni-se: Add support to load QUP SE Firmware via Linux subsystem soc: qcom: geni-se: Cleanup register defines and update copyright dt-bindings: qcom: se-common: Add QUP Peripheral-specific properties for I2C, SPI, and SERIAL bus Documentation: tee: Add Qualcomm TEE driver tee: qcom: enable TEE_IOC_SHM_ALLOC ioctl tee: qcom: add primordial object tee: add Qualcomm TEE driver tee: increase TEE_MAX_ARG_SIZE to 4096 tee: add TEE_IOCTL_PARAM_ATTR_TYPE_OBJREF tee: add TEE_IOCTL_PARAM_ATTR_TYPE_UBUF tee: add close_context to TEE driver operation ... List of files: /linux/drivers/crypto/Kconfig

38b22cde38aba61eafd752c8a2e43e631014e58a - crypto: atmel-aes: make it selectable for ARCH_MICROCHIP

Wed, 13 Aug 2025 19:44:45 +0200

crypto: atmel-aes: make it selectable for ARCH_MICROCHIPLAN969x uses the Atmel crypto, so make it selectable for ARCH_MICROCHIP toavoid needing to update depends in future if other Microchip SoC-s use itas well.Signed-off-by: Robert Marko Acked-by: Herbert Xu Acked-by: Daniel Machon Signed-off-by: Nicolas Ferre List of files: /linux/drivers/crypto/Kconfig

8979744aca8096ee5072798dfc1181606919b35d - crypto: xilinx - Add TRNG driver for Versal

Mon, 25 Aug 2025 09:16:59 +0200

crypto: xilinx - Add TRNG driver for VersalAdd True Random Number Generator(TRNG) driver for Versalplatform.Co-developed-by: Mounika Botcha Signed-off-by: Mounika Botcha Signed-off-by: Harsh Jain Signed-off-by: Herbert Xu List of files: /linux/drivers/crypto/Kconfig

766b2d724c8df071031412eea902b566a0049c31 - crypto: loongson - add Loongson RNG driver support

Sat, 05 Jul 2025 09:20:43 +0200

crypto: loongson - add Loongson RNG driver supportLoongson's Random Number Generator is found inside Loongson SecurityEngine chip.Co-developed-by: Yinggang Gu Signed-off-by: Yinggang Gu Signed-off-by: Qunqin Zhao Reviewed-by: Huacai Chen Acked-by: Herbert Xu Link: https://lore.kernel.org/r/20250705072045.1067-3-zhaoqunqin@loongson.cnSigned-off-by: Lee Jones List of files: /linux/drivers/crypto/Kconfig

52f641bc63a46657b1d72d902fcee30ab1233c7b - crypto: ti - Add driver for DTHE V2 AES Engine (ECB, CBC)

Wed, 20 Aug 2025 11:12:27 +0200

crypto: ti - Add driver for DTHE V2 AES Engine (ECB, CBC)Add support for ECB and CBC modes in the AES Engine of the DTHE V2hardware cryptography engine.Signed-off-by: T Pratham Signed-off-by: Herbert Xu List of files: /linux/drivers/crypto/Kconfig

cbbc675506cc4cd93e6f895e7c1f693156f9a95c - crypto: s390 - New s390 specific protected key hash phmac

Tue, 17 Jun 2025 15:44:37 +0200

crypto: s390 - New s390 specific protected key hash phmacAdd support for protected key hmac ("phmac") for s390 arch.With the latest machine generation there is now support forprotected key (that is a key wrapped by a master key storedin firmware) hmac for sha2 (sha224, sha256, sha384 and sha512)for the s390 specific CPACF instruction kmac.This patch adds support via 4 new ahashes registered asphmac(sha224), phmac(sha256), phmac(sha384) and phmac(sha512).Co-developed-by: Holger Dengler Signed-off-by: Harald Freudenberger Reviewed-by: Holger Dengler Signed-off-by: Holger Dengler Signed-off-by: Herbert Xu List of files: /linux/drivers/crypto/Kconfig