linux.git/crypto/Makefile, branch v2.6.29

crypto: hash - Add shash interface

2008-12-25T00:01:26+00:00

The shash interface replaces the current synchronous hash interface.
It improves over hash in two ways.  Firstly shash is reentrant,
meaning that the same tfm may be used by two threads simultaneously
as all hashing state is stored in a local descriptor.

The other enhancement is that shash no longer takes scatter list
entries.  This is because shash is specifically designed for
synchronous algorithms and as such scatter lists are unnecessary.

All existing hash users will be converted to shash once the
algorithms have been completely converted.

There is also a new finup function that combines update with final.
This will be extended to ahash once the algorithm conversion is
done.

This is also the first time that an algorithm type has their own
registration function.  Existing algorithm types will be converted
to this way in due course.

Signed-off-by: Herbert Xu

crypto: api - Disallow cryptomgr as a module if algorithms are built-in

2008-12-10T12:29:44+00:00

If we have at least one algorithm built-in then it no longer makes
sense to have the testing framework, and hence cryptomgr to be a
module.  It should be either on or off, i.e., built-in or disabled.

This just happens to stop a potential runaway modprobe loop that
seems to trigger on at least one distro.

With fixes from Evgeniy Polyakov.

Signed-off-by: Herbert Xu

crypto: rng - RNG interface and implementation

2008-08-29T05:50:04+00:00

This patch adds a random number generator interface as well as a
cryptographic pseudo-random number generator based on AES.  It is
meant to be used in cases where a deterministic CPRNG is required.

One of the first applications will be as an input in the IPsec IV
generation process.

Signed-off-by: Neil Horman 
Signed-off-by: Herbert Xu

crypto: api - Add fips_enable flag

2008-08-29T05:50:02+00:00

Add the ability to turn FIPS-compliant mode on or off at boot

In order to be FIPS compliant, several check may need to be preformed that may
be construed as unusefull in a non-compliant mode.  This patch allows us to set
a kernel flag incating that we are running in a fips-compliant mode from boot
up.  It also exports that mode information to user space via a sysctl
(/proc/sys/crypto/fips_enabled).

Tested successfully by me.

Signed-off-by: Neil Horman 
Signed-off-by: Herbert Xu

crypto: skcipher - Move IV generators into their own modules

2008-08-29T05:50:00+00:00

This patch moves the default IV generators into their own modules
in order to break a dependency loop between cryptomgr, rng, and
blkcipher.

Signed-off-by: Herbert Xu

crypto: cryptomgr - Add test infrastructure

2008-08-29T05:49:55+00:00

This patch moves the newly created alg_test infrastructure into
cryptomgr.  This shall allow us to use it for testing at algorithm
registrations.

Signed-off-by: Herbert Xu

Revert crypto: prng - Deterministic CPRNG

2008-07-15T15:46:24+00:00

This patch is clearly not ready yet for prime time.

Signed-off-by: Herbert Xu

crypto: prng - Deterministic CPRNG

2008-07-10T12:35:18+00:00

This patch adds a cryptographic pseudo-random number generator
based on CTR(AES-128).  It is meant to be used in cases where a
deterministic CPRNG is required.

One of the first applications will be as an input in the IPsec IV
generation process.

Signed-off-by: Neil Horman 
Signed-off-by: Herbert Xu

[CRYPTO] hash: Add asynchronous hash support

2008-07-10T12:35:13+00:00

This patch adds asynchronous hash and digest support.

Signed-off-by: Loc Ho 
Signed-off-by: Herbert Xu

[CRYPTO] ripemd: Add support for RIPEMD-256 and RIPEMD-320

2008-07-10T12:35:13+00:00

This patch adds support for the extended RIPEMD hash
algorithms RIPEMD-256 and RIPEMD-320.

Signed-off-by: Adrian-Ken Rueegsegger 
Signed-off-by: Herbert Xu