Changes in fips-aes.h

fc8c78bce3335860ff4ae9fcfd3b2eb1f674efbb - Merge tag 'libcrypto-tests-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiggers/linux

Tue, 18 Aug 2026 04:29:41 +0200

Merge tag 'libcrypto-tests-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiggers/linuxPull crypto library test updates from Eric Biggers: - Add comprehensive KUnit test suites for the new AES-GCM and AES-CCM library APIs - Add FIPS self-tests for all the AES encryption modes. This is needed for parity with the traditional crypto API - Fix a couple more issues in the IRQ test helper* tag 'libcrypto-tests-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiggers/linux: lib/crypto: aes-cmac: Use __cleanup() instead of memzero_explicit() kunit: irq: Unregister on-stack timer and work from debugobjects kunit: irq: Continue increasing hrtimer interval for longer lib/crypto: tests: Add KUnit test suite for AES-GCM lib/crypto: tests: Add KUnit test suite for AES-CCM lib/crypto: tests: Add aead-test-template.h lib/crypto: tests: Use per-test-case buffers in hash tests lib/crypto: tests: Create test-utils.h lib/crypto: aes: Add FIPS self-tests for GCM and CCM lib/crypto: aes: Add FIPS self-tests for unauthenticated modes lib/crypto: fips: Split fips.h into fips-aes.h and fips-sha.h List of files: /linux/lib/crypto/fips-aes.h

fbdb43c0007b37e574fa0ca76afd13bed96db8f6 - lib/crypto: aes: Add FIPS self-tests for GCM and CCM

Mon, 03 Aug 2026 00:24:08 +0200

lib/crypto: aes: Add FIPS self-tests for GCM and CCMUpcoming changes will wire up architecture-optimized implementations ofGCM and CCM. FIPS labs can consider such designs to meet the thresholdfor separate self-tests to be needed.Therefore, add FIPS self-tests for encryption and decryption in thesemodes.Reviewed-by: Ard Biesheuvel Link: https://patch.msgid.link/20260802222408.91757-4-ebiggers@kernel.orgSigned-off-by: Eric Biggers List of files: /linux/lib/crypto/fips-aes.h

e967fa98f7618e98b50b3d49a1768deba8981a98 - lib/crypto: aes: Add FIPS self-tests for unauthenticated modes

Mon, 03 Aug 2026 00:24:07 +0200

lib/crypto: aes: Add FIPS self-tests for unauthenticated modesUpcoming changes will wire up architecture-optimized implementations ofECB, CBC, CBC-CTS, CTR, and XTS. FIPS labs can consider such designs tomeet the threshold for separate self-tests to be needed.The inverse direction of the block cipher also needs to be exercised,which the existing CMAC self-test doesn't do.Therefore, add FIPS self-tests for encryption and decryption in thesemodes as well as the "bare" AES.Reviewed-by: Ard Biesheuvel Link: https://patch.msgid.link/20260802222408.91757-3-ebiggers@kernel.orgSigned-off-by: Eric Biggers List of files: /linux/lib/crypto/fips-aes.h

60e9a0f5bec2e93c6e8fd462850676f488aa51c8 - lib/crypto: fips: Split fips.h into fips-aes.h and fips-sha.h

Mon, 03 Aug 2026 00:24:06 +0200

lib/crypto: fips: Split fips.h into fips-aes.h and fips-sha.hIn preparation for adding FIPS self-tests for AES encryption modes,split fips.h into separate files for the AES and SHA test vectors.They are still generated by the same script, but this keeps things a bitmore organized.Reviewed-by: Ard Biesheuvel Link: https://patch.msgid.link/20260802222408.91757-2-ebiggers@kernel.orgSigned-off-by: Eric Biggers List of files: /linux/lib/crypto/fips-aes.h