linux-stable.git/crypto/Kconfig, branch v5.5

crypto: mips/chacha - select CRYPTO_SKCIPHER, not CRYPTO_BLKCIPHER

2019-11-22T10:48:38+00:00

Another instance of CRYPTO_BLKCIPHER made it in just after it was
renamed to CRYPTO_SKCIPHER.  Fix it.

Signed-off-by: Eric Biggers 
Acked-by: Ard Biesheuvel 
Signed-off-by: Herbert Xu

crypto: curve25519 - x86_64 library and KPP implementations

2019-11-17T01:02:44+00:00

This implementation is the fastest available x86_64 implementation, and
unlike Sandy2x, it doesn't requie use of the floating point registers at
all. Instead it makes use of BMI2 and ADX, available on recent
microarchitectures. The implementation was written by Armando
Faz-Hernández with contributions (upstream) from Samuel Neves and me,
in addition to further changes in the kernel implementation from us.

Signed-off-by: Jason A. Donenfeld 
Signed-off-by: Samuel Neves 
Co-developed-by: Samuel Neves 
[ardb: - move to arch/x86/crypto
       - wire into lib/crypto framework
       - implement crypto API KPP hooks ]
Signed-off-by: Ard Biesheuvel 
Signed-off-by: Herbert Xu

crypto: curve25519 - implement generic KPP driver

2019-11-17T01:02:43+00:00

Expose the generic Curve25519 library via the crypto API KPP interface.

Signed-off-by: Ard Biesheuvel 
Signed-off-by: Herbert Xu

crypto: blake2s - x86_64 SIMD implementation

2019-11-17T01:02:43+00:00

These implementations from Samuel Neves support AVX and AVX-512VL.
Originally this used AVX-512F, but Skylake thermal throttling made
AVX-512VL more attractive and possible to do with negligable difference.

Signed-off-by: Jason A. Donenfeld 
Signed-off-by: Samuel Neves 
Co-developed-by: Samuel Neves 
[ardb: move to arch/x86/crypto, wire into lib/crypto framework]
Signed-off-by: Ard Biesheuvel 
Signed-off-by: Herbert Xu

crypto: blake2s - implement generic shash driver

2019-11-17T01:02:42+00:00

Wire up our newly added Blake2s implementation via the shash API.

Signed-off-by: Ard Biesheuvel 
Signed-off-by: Herbert Xu

crypto: mips/poly1305 - incorporate OpenSSL/CRYPTOGAMS optimized implementation

2019-11-17T01:02:42+00:00

This is a straight import of the OpenSSL/CRYPTOGAMS Poly1305 implementation for
MIPS authored by Andy Polyakov, a prior 64-bit only version of which has been
contributed by him to the OpenSSL project. The file 'poly1305-mips.pl' is taken
straight from this upstream GitHub repository [0] at commit
d22ade312a7af958ec955620b0d241cf42c37feb, and already contains all the changes
required to build it as part of a Linux kernel module.

[0] https://github.com/dot-asm/cryptogams

Co-developed-by: Andy Polyakov 
Signed-off-by: Andy Polyakov 
Co-developed-by: René van Dorst 
Signed-off-by: René van Dorst 
Signed-off-by: Ard Biesheuvel 
Signed-off-by: Herbert Xu

crypto: x86/poly1305 - expose existing driver as poly1305 library

2019-11-17T01:02:41+00:00

Implement the arch init/update/final Poly1305 library routines in the
accelerated SIMD driver for x86 so they are accessible to users of
the Poly1305 library interface as well.

Signed-off-by: Ard Biesheuvel 
Signed-off-by: Herbert Xu

crypto: x86/poly1305 - depend on generic library not generic shash

2019-11-17T01:02:41+00:00

Remove the dependency on the generic Poly1305 driver. Instead, depend
on the generic library so that we only reuse code without pulling in
the generic skcipher implementation as well.

While at it, remove the logic that prefers the non-SIMD path for short
inputs - this is no longer necessary after recent FPU handling changes
on x86.

Since this removes the last remaining user of the routines exported
by the generic shash driver, unexport them and make them static.

Signed-off-by: Ard Biesheuvel 
Signed-off-by: Herbert Xu

crypto: poly1305 - move core routines into a separate library

2019-11-17T01:02:41+00:00

Move the core Poly1305 routines shared between the generic Poly1305
shash driver and the Adiantum and NHPoly1305 drivers into a separate
library so that using just this pieces does not pull in the crypto
API pieces of the generic Poly1305 routine.

In a subsequent patch, we will augment this generic library with
init/update/final routines so that Poyl1305 algorithm can be used
directly without the need for using the crypto API's shash abstraction.

Signed-off-by: Ard Biesheuvel 
Signed-off-by: Herbert Xu

crypto: mips/chacha - wire up accelerated 32r2 code from Zinc

2019-11-17T01:02:40+00:00

This integrates the accelerated MIPS 32r2 implementation of ChaCha
into both the API and library interfaces of the kernel crypto stack.

The significance of this is that, in addition to becoming available
as an accelerated library implementation, it can also be used by
existing crypto API code such as Adiantum (for block encryption on
ultra low performance cores) or IPsec using chacha20poly1305. These
are use cases that have already opted into using the abstract crypto
API. In order to support Adiantum, the core assembler routine has
been adapted to take the round count as a function argument rather
than hardcoding it to 20.

Co-developed-by: René van Dorst 
Signed-off-by: René van Dorst 
Signed-off-by: Ard Biesheuvel 
Signed-off-by: Herbert Xu