Changes in Kconfig

fc8c78bce3335860ff4ae9fcfd3b2eb1f674efbb - Merge tag 'libcrypto-tests-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiggers/linux

Tue, 18 Aug 2026 04:29:41 +0200

Merge tag 'libcrypto-tests-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiggers/linuxPull crypto library test updates from Eric Biggers: - Add comprehensive KUnit test suites for the new AES-GCM and AES-CCM library APIs - Add FIPS self-tests for all the AES encryption modes. This is needed for parity with the traditional crypto API - Fix a couple more issues in the IRQ test helper* tag 'libcrypto-tests-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiggers/linux: lib/crypto: aes-cmac: Use __cleanup() instead of memzero_explicit() kunit: irq: Unregister on-stack timer and work from debugobjects kunit: irq: Continue increasing hrtimer interval for longer lib/crypto: tests: Add KUnit test suite for AES-GCM lib/crypto: tests: Add KUnit test suite for AES-CCM lib/crypto: tests: Add aead-test-template.h lib/crypto: tests: Use per-test-case buffers in hash tests lib/crypto: tests: Create test-utils.h lib/crypto: aes: Add FIPS self-tests for GCM and CCM lib/crypto: aes: Add FIPS self-tests for unauthenticated modes lib/crypto: fips: Split fips.h into fips-aes.h and fips-sha.h List of files: /linux/lib/crypto/tests/Kconfig

d47db9bf50d28647689e6743ee93c45cb755ffc3 - Merge tag 'libcrypto-updates-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiggers/linux

Tue, 18 Aug 2026 04:16:42 +0200

Merge tag 'libcrypto-updates-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiggers/linuxPull crypto library updates from Eric Biggers: "Add library APIs for most AES encryption modes that are used in the kernel (ECB, CBC, CBC-CTS, CTR, XCTR, XTS, GCM, CCM). These AES modes have many in-kernel users that are currently using the crypto_skcipher or crypto_aead APIs. These existing APIs are difficult to use and inefficient. Until now, the lack of proper library support for these has been the main gap in the crypto library. This set of changes is the next stage of addressing it: - Implement the new APIs on top of the existing support for single-block AES in the library. - Fully document the new APIs. - Migrate the only user of the old AES-GCM library API to the new, more flexible API; then remove the old API and its implementation. - Wire up the new APIs to the traditional crypto API by adding crypto_skcipher and crypto_aead algorithms. This makes the new APIs be covered by the traditional crypto API's self-tests. It also makes them be already used for real on systems that don't have architecture-optimized code for these modes. But most importantly, this is a prerequisite for migrating the architecture-optimized code for these AES modes (i.e. arch/*/crypto/aes*) into the library, which as usual will eliminate a lot of redundant "glue" code. Note that unlike some of the other algorithms that have been migrated to the library, e.g. SHA-512, for these AES modes there was too much to get done in one cycle. Nor did it make sense to handle these modes one at a time, because they tend to be coupled together or depend on each other, especially in the architecture-optimized AES code. Thus, most of the benefits (reductions in lines of code, performance improvements, etc.) will follow in later cycles when architecture-optimized code is migrated into the library and users of crypto_skcipher and crypto_aead are updated to use the new APIs. The design of the new APIs was informed by writing proof-of-concept patches for many kernel subsystems currently accessing these same algorithms via crypto_skcipher or crypto_aead (patches 18-33 of https://lore.kernel.org/r/20260707053503.209874-1-ebiggers@kernel.org/). While those patches will be resent for real later, the total diffstat for them was negative 1905 lines. So clearly the new APIs are quite a bit easier to use and align better with what users actually need. Besides the new AES encryption APIs, there are also a few changes for improved AES-CMAC key and context zeroization"* tag 'libcrypto-updates-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiggers/linux: mac80211: fils_aead: Use __cleanup() instead of memzero_explicit() Bluetooth: SMP: clear the aes_cmac_key when done smb: clear the aes_cmac_key and aes_cmac_ctx when done lib/crypto: aes-cmac: Add zeroization functions lib/crypto: aesgcm: Remove old AES-GCM library x86/sev: Remove obsolete virtual address check x86/sev: Use new AES-GCM library crypto: aes - Add CCM support using library crypto: aes - Add GCM support using library crypto: aes - Add XTS support using library crypto: aes - Add CTR and XCTR support using library crypto: aes - Add CBC and CBC-CTS support using library crypto: aes - Add ECB support using library lib/crypto: aes: Add CCM support lib/crypto: aes: Add GCM support lib/crypto: aes: Add XTS support lib/crypto: aes: Add CTR and XCTR support lib/crypto: aes: Add CBC and CBC-CTS support lib/crypto: aes: Add ECB support crypto: xts - Split out __xts_verify_key() helper List of files: /linux/lib/crypto/tests/Kconfig

b09bd2d92ee1bbbf6db4533d5d9d2a7b39ae48c4 - lib/crypto: tests: Add KUnit test suite for AES-GCM

Mon, 03 Aug 2026 01:30:05 +0200

lib/crypto: tests: Add KUnit test suite for AES-GCMAdd a KUnit test suite for the AES-GCM library API.It consists of:- All the shared test cases from aead-test-template.h. These include extensive consistency tests, a "Monte-Carlo test", and a benchmark.- Tests against hardcoded AES-GCM test vectors from external sources.Reviewed-by: Ard Biesheuvel Link: https://patch.msgid.link/20260802233005.161467-6-ebiggers@kernel.orgSigned-off-by: Eric Biggers List of files: /linux/lib/crypto/tests/Kconfig

2aeef50ecadca2fea0c96abed49452ff9b582b48 - lib/crypto: tests: Add KUnit test suite for AES-CCM

Mon, 03 Aug 2026 01:30:04 +0200

lib/crypto: tests: Add KUnit test suite for AES-CCMAdd a KUnit test suite for the AES-CCM library API.It consists of:- All the shared test cases from aead-test-template.h. These include extensive consistency tests, a "Monte-Carlo test", and a benchmark.- Tests against hardcoded AES-CCM test vectors from external sources.- Tests for CCM-specific message length validation.To generate the expected aes_ccm_monte_carlo_checksum[] value, add ascript gen-aead-testvecs.py which computes it using python-cryptography.Reviewed-by: Ard Biesheuvel Link: https://patch.msgid.link/20260802233005.161467-5-ebiggers@kernel.orgSigned-off-by: Eric Biggers List of files: /linux/lib/crypto/tests/Kconfig

6a1f9969cb79e0e194c160e0737ab301d7da21c1 - lib/crypto: aes: Add CCM support

Thu, 16 Jul 2026 00:11:47 +0200

lib/crypto: aes: Add CCM supportAdd support for AES-CCM to the crypto library.This will be used to provide a streamlined implementation of the"ccm(aes)" crypto_aead algorithm. Most users of "ccm(aes)" will also beable to switch to the library, which as usual will be faster andsimpler, e.g.: - fs/smb/client/ - fs/smb/server/ - net/mac80211/ - net/mac802154/(I've already written proof-of-concept patches for all the above, andthey helped inform the API design.)As in the AES-GCM API, incremental operation is supported. It has to beused carefully, especially when decrypting, but it makes the API generalenough to work well for all users.The AES-CCM library code calls aes_cbcmac_blocks() directly, bypassingthe higher-level aes_cbcmac_init(), aes_cbcmac_update(), andaes_cbcmac_final(). The latter set of functions is useful only forAES-CCM, so they don't make sense to keep around and will be removedonce the "ccm(aes)" crypto_aead starts using the AES-CCM library.Initial test coverage is provided by the crypto_aead support added in alater commit. I'm planning a KUnit test suite as well.Link: https://patch.msgid.link/20260715221153.246410-8-ebiggers@kernel.orgSigned-off-by: Eric Biggers List of files: /linux/lib/crypto/tests/Kconfig

2a87486bc5c2bcb6c8085c4e4a3c8ee73a7c5c75 - lib/crypto: aes: Add GCM support

Thu, 16 Jul 2026 00:11:46 +0200

lib/crypto: aes: Add GCM supportAdd support for AES-GCM to the crypto library.This will be used to provide streamlined implementations of the"gcm(aes)" and "rfc4106(gcm(aes))" crypto_aead algorithms. Most usersof these will also be able to switch to the library, which as usual willbe faster and simpler, e.g.: - drivers/net/macsec.c - fs/smb/client/ - fs/smb/server/ - net/ceph/messenger_v2.c - net/mac80211/ (for both GMAC and GCMP) - net/tipc/crypto.c - security/keys/trusted-keys/trusted_dcp.c(I've already written proof-of-concept patches for all the above, andthey helped inform the API design.)As usual, the architecture-optimized AES-GCM code will be migrated intothe library as well (using the hooks provided in this commit as well asthe GHASH ones), eliminating lots of repetitive boilerplate code.Incremental en/decryption is supported. Incremental operation is a bitcontroversial in AEAD APIs because users have to be careful not toconsume any decrypted data that hasn't been authenticated yet. But I dothink it's the right choice here. It's not fundamentally different fromthe existing incremental MAC APIs, and it's the only approach that'sgeneral enough to work well for all users in the kernel: - An array of virtually-addressed buffers (like that used by BoringSSL's EVP_AEAD_CTX_sealv() and EVP_AEAD_CTX_openv()) doesn't work in the kernel in general, since in some cases the data for a single AES-GCM message is contained in a large number of highmem pages that each need to be mapped into memory individually. That can be done efficiently only by using CPU-local mappings, but there is a limited number of those. Ceph messenger v2 is a great example, as it can send or receive up to 32 MiB in a single AES-GCM message. And it needs the en/decrypted data to go into a (potentially large) number of bvecs provided by a custom iterator, as well as into four virtually-addressed buffers, two of which can be large buffers in the vmalloc region. Even just allocating an array big enough to store all the pointers can be problematic in the kernel. There are cases in which decryption runs in GFP_NOIO context or even in softirq context, where memory allocations are not as reliable as they normally are. - Meanwhile, 'struct scatterlist' (the choice of crypto_aead) has turned out to be really inconvenient for anyone who *does* just have virtually-addressed buffers. This is especially true if they can be in the vmalloc region, including the stack, as in that case the conversion to a scatterlist has to be done page-by-page. And even for users who have all of their data in bare 'struct page', none of them actually use 'struct scatterlist' as their native data structure anyway. They actually use skbs, bvecs, or other formats. - iov_iter is attractive, but ultimately not general enough either (considering the Ceph case for example), but also too general in some ways (like having support for userspace addresses). Additional iter types like ITER_SKB would help a bit, but bloating iov_iter with more types would reduce performance elsewhere in the kernel.Initial test coverage is provided by the crypto_aead support added in alater commit. I'm planning a KUnit test suite as well.Link: https://patch.msgid.link/20260715221153.246410-7-ebiggers@kernel.orgLink: https://patch.msgid.link/20260722021730.16897-1-ebiggers@kernel.orgSigned-off-by: Eric Biggers List of files: /linux/lib/crypto/tests/Kconfig

de9cccc5fd196e364536da4f5a7af18c66c7b31f - lib/crypto: aes: Add XTS support

Thu, 16 Jul 2026 00:11:45 +0200

lib/crypto: aes: Add XTS supportAdd support for AES-XTS to the crypto library.This will be used to provide a streamlined implementation of the"xts(aes)" crypto_skcipher algorithm. I'm also planning to use thisdirectly in fscrypt and blk-crypto-fallback.As usual, the architecture-optimized AES-XTS code will be migrated intothe library as well (using the hooks provided in this commit),eliminating lots of repetitive boilerplate code. Compared to directimplementation of "xts(aes)", I've also eliminated the requirement forarchitectures to implement ciphertext stealing, as the library justhandles it portably instead. That will simplify things considerably.Initial test coverage is provided by the crypto_skcipher support addedin a later commit. I'm planning a KUnit test suite as well.Link: https://patch.msgid.link/20260715221153.246410-6-ebiggers@kernel.orgSigned-off-by: Eric Biggers List of files: /linux/lib/crypto/tests/Kconfig

1f2d69a31a086960f67bda8d2dfcf19256245c32 - lib/crypto: aes: Add CTR and XCTR support

Thu, 16 Jul 2026 00:11:44 +0200

lib/crypto: aes: Add CTR and XCTR supportAdd support for AES-CTR and AES-XCTR to the crypto library.These will be used to provide streamlined implementations of the"ctr(aes)" and "xctr(aes)" crypto_skcipher algorithms. Most users of"ctr(aes)" will also be able to switch to the library, which as usualwill be simpler and faster, e.g.: - net/mac80211/fils_aead.c - net/mac802154/llsec.cAs usual, the architecture-optimized AES-CTR and AES-XCTR code will bemigrated into the library as well (using the hooks provided in thiscommit), eliminating lots of repetitive boilerplate code.This is also a prerequisite for supporting AES-GCM, AES-CCM, andAES-HCTR2 in the crypto library.Initial test coverage is provided by the crypto_skcipher support addedin a later commit. I'm planning a KUnit test suite as well.Reviewed-by: Thomas Huth Link: https://patch.msgid.link/20260715221153.246410-5-ebiggers@kernel.orgSigned-off-by: Eric Biggers List of files: /linux/lib/crypto/tests/Kconfig

3cbcf6a2d18e0a69225c616dae1ad9c37b8731b5 - lib/crypto: aes: Add CBC and CBC-CTS support

Thu, 16 Jul 2026 00:11:43 +0200

lib/crypto: aes: Add CBC and CBC-CTS supportAdd support for AES-CBC and AES-CBC-CTS to the crypto library.These will be used to provide streamlined implementations of the"cbc(aes)" and "cts(cbc(aes))" crypto_skcipher algorithms. Most usersof these crypto_skcipher algorithms will also be able to switch to thelibrary, which as usual will be simpler and faster, e.g.: - block/blk-crypto-fallback.c (for AES-128-CBC-ESSIV) - fs/crypto/crypto.c (for AES-128-CBC-ESSIV) - fs/crypto/fname.c (for AES-256-CTS and AES-128-CBC) - kernel/bpf/crypto.c - net/ceph/crypto.c - security/keys/encrypted-keys/encrypted.cAs usual, the architecture-optimized AES-CBC and AES-CBC-CTS code willbe migrated into the library as well (using the hooks provided in thiscommit), eliminating lots of repetitive boilerplate code.Initial test coverage is provided by the crypto_skcipher support addedin a later commit. I'm planning a KUnit test suite as well.Reviewed-by: Thomas Huth Link: https://patch.msgid.link/20260715221153.246410-4-ebiggers@kernel.orgSigned-off-by: Eric Biggers List of files: /linux/lib/crypto/tests/Kconfig

5ab301fcc234cd93c5b7768877dab5e2ef70c6fb - lib/crypto: aes: Add ECB support

Thu, 16 Jul 2026 00:11:42 +0200

lib/crypto: aes: Add ECB supportAdd support for AES-ECB to the crypto library.This will be used to provide a streamlined implementation of the"ecb(aes)" crypto_skcipher algorithm. fs/crypto/keysetup_v1.c will alsouse aes_ecb_encrypt() directly.As usual, the architecture-optimized AES-ECB code will be migrated intothe library as well (using the hooks provided in this commit),eliminating lots of repetitive boilerplate code.ECB is obsolete of course, but we need this for parity with thetraditional API and to support some odd users of ECB in the kernel.Initial test coverage is provided by the crypto_skcipher support addedin a later commit. I'm planning a KUnit test suite as well.Create a documentation file libcrypto-unauth-encryption.rst to hold thedocumentation for this and other unauthenticated encryption modes.Reviewed-by: Thomas Huth Link: https://patch.msgid.link/20260715221153.246410-3-ebiggers@kernel.orgSigned-off-by: Eric Biggers List of files: /linux/lib/crypto/tests/Kconfig

7a0e692a0381254b2f77c54dec100cd3325a6fdf - Merge branch 'next' into for-linus

Tue, 23 Jun 2026 08:10:08 +0200

Merge branch 'next' into for-linusPrepare input updates for 7.2 merge window. List of files: /linux/lib/crypto/tests/Kconfig

fff88709f9a9153af85b5224b4594caa5387ca60 - Merge tag 'v7.1-rc6' into next

Mon, 01 Jun 2026 04:43:25 +0200

Merge tag 'v7.1-rc6' into nextSync up with mainline to pull in a fix to IMS PCU driver and otherenhancements. List of files: /linux/lib/crypto/tests/Kconfig

5c8cbca290acdd49a694b36c0af76ba0c00bbf12 - Merge branch '20260507-ubwc-rework-v4-4-c19593d20c1d@oss.qualcomm.com' of https://git.kernel.org/pub/scm/linux/kernel/git/qcom/linux into HEAD

Thu, 21 May 2026 22:36:50 +0200

Merge branch '20260507-ubwc-rework-v4-4-c19593d20c1d@oss.qualcomm.com' of https://git.kernel.org/pub/scm/linux/kernel/git/qcom/linux into HEADMerge the branch with the soc/qcom changes, required for the next UBWCpatches.Signed-off-by: Dmitry Baryshkov List of files: /linux/lib/crypto/tests/Kconfig

09d6818d3bdc1ea6e49a425040528cbdbc97bc0a - Merge branch 'linus' into timers/clocksource

Mon, 18 May 2026 11:01:07 +0200

Merge branch 'linus' into timers/clocksource... to bring it up to date for new changes. List of files: /linux/lib/crypto/tests/Kconfig

658a6021492ad3b1b8a6e9a83963a1fad35a2af8 - Merge drm/drm-next into drm-intel-next

Fri, 15 May 2026 13:01:15 +0200

Merge drm/drm-next into drm-intel-nextSome Display Port Adaptive Sync depends on drm work.Signed-off-by: Rodrigo Vivi List of files: /linux/lib/crypto/tests/Kconfig

8edf8b09fc44990977b3fbcb708035b1740d0b7e - Merge drm/drm-next into drm-intel-gt-next

Tue, 12 May 2026 10:16:35 +0200

Merge drm/drm-next into drm-intel-gt-nextBackmerging to pull in commit 5401b9adebc9 ("i915: don't usea vma that didn't match the context VM") to revert it.Signed-off-by: Joonas Lahtinen List of files: /linux/lib/crypto/tests/Kconfig

c53ed3e99920df6a90553c89a1c053aa0776841e - Merge drm/drm-next into drm-xe-next

Fri, 08 May 2026 16:19:45 +0200

Merge drm/drm-next into drm-xe-nextBringing in recent display changes.Signed-off-by: Thomas Hellström List of files: /linux/lib/crypto/tests/Kconfig

cafac16b6207b88ad92fbba1169ae4f43865cb0d - Merge drm/drm-next into drm-misc-next

Mon, 27 Apr 2026 10:49:13 +0200

Merge drm/drm-next into drm-misc-nextGetting fixes and updates from v7.1-rc1.Signed-off-by: Thomas Zimmermann List of files: /linux/lib/crypto/tests/Kconfig

1655f6895a896eb632ca8a019259bc5d358a9712 - Merge tag 'timers-v7.1-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/daniel.lezcano/linux into timers/clocksource

Sun, 12 Apr 2026 22:33:39 +0200

Merge tag 'timers-v7.1-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/daniel.lezcano/linux into timers/clocksource - Added the DT bindings for the compatible string 'fsl,imx25-epit' (Frank Li) - Made the rttm_cs variable static for the rtl otto timer driver (Krzysztof Kozlowski) - Fixed error return code handling in the sun5i timer driver (Chen Ni) - Made the timer-of and the mmio code compatible with modules (Daniel Lezcano)Link: https://lore.kernel.org/151feae1-39ba-4abd-a9f9-9bff377a2cd8@oss.qualcomm.com List of files: /linux/lib/crypto/tests/Kconfig

4ab789c1b3c81eca56a3b1f7686f3c805add1e49 - Merge drm/drm-next into drm-intel-next

Mon, 30 Mar 2026 14:06:42 +0200

Merge drm/drm-next into drm-intel-nextBackmerge drm-next to sync up with drm and xe changes, in particularAuxCCS.Signed-off-by: Jani Nikula List of files: /linux/lib/crypto/tests/Kconfig