linux.git/crypto/Kconfig, branch v4.11

crypto: xts - Add ECB dependency

2017-02-23T12:11:06+00:00

Since the
   commit f1c131b45410a202eb45cc55980a7a9e4e4b4f40
   crypto: xts - Convert to skcipher
the XTS mode is based on ECB, so the mode must select
ECB otherwise it can fail to initialize.

Signed-off-by: Milan Broz 
Signed-off-by: Herbert Xu

crypto: ccm - switch to separate cbcmac driver

2017-02-11T09:50:45+00:00

Update the generic CCM driver to defer CBC-MAC processing to a
dedicated CBC-MAC ahash transform rather than open coding this
transform (and much of the associated scatterwalk plumbing) in
the CCM driver itself.

This cleans up the code considerably, but more importantly, it allows
the use of alternative CBC-MAC implementations that don't suffer from
performance degradation due to significant setup time (e.g., the NEON
based AES code needs to enable/disable the NEON, and load the S-box
into 16 SIMD registers, which cannot be amortized over the entire input
when using the cipher interface)

Signed-off-by: Ard Biesheuvel 
Signed-off-by: Herbert Xu

crypto: aes - add generic time invariant AES cipher

2017-02-11T09:50:43+00:00

Lookup table based AES is sensitive to timing attacks, which is due to
the fact that such table lookups are data dependent, and the fact that
8 KB worth of tables covers a significant number of cachelines on any
architecture, resulting in an exploitable correlation between the key
and the processing time for known plaintexts.

For network facing algorithms such as CTR, CCM or GCM, this presents a
security risk, which is why arch specific AES ports are typically time
invariant, either through the use of special instructions, or by using
SIMD algorithms that don't rely on table lookups.

For generic code, this is difficult to achieve without losing too much
performance, but we can improve the situation significantly by switching
to an implementation that only needs 256 bytes of table data (the actual
S-box itself), which can be prefetched at the start of each block to
eliminate data dependent latencies.

This code encrypts at ~25 cycles per byte on ARM Cortex-A57 (while the
ordinary generic AES driver manages 18 cycles per byte on this
hardware). Decryption is substantially slower.

Signed-off-by: Ard Biesheuvel 
Signed-off-by: Herbert Xu

crypto: aesni - Convert to skcipher

2016-11-28T13:23:20+00:00

This patch converts aesni (including fpu) over to the skcipher
interface.  The LRW implementation has been removed as the generic
LRW code can now be used directly on top of the accelerated ECB
implementation.

Signed-off-by: Herbert Xu

crypto: glue_helper - Add skcipher xts helpers

2016-11-28T13:23:20+00:00

This patch adds xts helpers that use the skcipher interface rather
than blkcipher.  This will be used by aesni_intel.

Signed-off-by: Herbert Xu

crypto: simd - Add simd skcipher helper

2016-11-28T13:23:18+00:00

This patch adds the simd skcipher helper which is meant to be
a replacement for ablk helper.  It replaces the underlying blkcipher
interface with skcipher, and also presents the top-level algorithm
as an skcipher.

Signed-off-by: Herbert Xu

crypto: crc32c-vpmsum - Rename CRYPT_CRC32C_VPMSUM option

2016-11-28T13:23:17+00:00

For consistency with the other 246 kernel configuration options,
rename CRYPT_CRC32C_VPMSUM to CRYPTO_CRC32C_VPMSUM.

Signed-off-by: Jean Delvare 
Cc: Anton Blanchard 
Cc: Herbert Xu 
Acked-by: Anton Blanchard 
Signed-off-by: Herbert Xu

crypto: acomp - add support for deflate via scomp

2016-10-25T03:08:36+00:00

Add scomp backend for deflate compression algorithm.

Signed-off-by: Giovanni Cabiddu 
Signed-off-by: Herbert Xu

crypto: acomp - add support for 842 via scomp

2016-10-25T03:08:33+00:00

Add scomp backend for 842 compression algorithm.

Signed-off-by: Giovanni Cabiddu 
Signed-off-by: Herbert Xu

crypto: acomp - add support for lz4hc via scomp

2016-10-25T03:08:32+00:00

Add scomp backend for lz4hc compression algorithm.

Signed-off-by: Giovanni Cabiddu 
Signed-off-by: Herbert Xu