linux.git/include/crypto/internal, branch v6.16-rc2

Revert "crypto: testmgr - Add hash export format testing"

2025-05-23T09:20:59+00:00

This reverts commit 18c438b228558e05ede7dccf947a6547516fc0c7.

The s390 hmac and sha3 algorithms are failing the test.  Revert
the change until they have been fixed.

Reported-by: Ingo Franzki 
Link: https://lore.kernel.org/all/623a7fcb-b4cb-48e6-9833-57ad2b32a252@linux.ibm.com/
Signed-off-by: Herbert Xu

crypto: testmgr - Add hash export format testing

2025-05-19T05:48:20+00:00

Ensure that the hash state can be exported to and imported from
the generic algorithm.

Signed-off-by: Herbert Xu

crypto: hmac - Add ahash support

2025-05-19T05:48:20+00:00

Add ahash support to hmac so that drivers that can't do hmac in
hardware do not have to implement duplicate copies of hmac.

Signed-off-by: Herbert Xu

crypto: hash - Add export_core and import_core hooks

2025-05-19T05:48:19+00:00

Add export_core and import_core hooks.  These are intended to be
used by algorithms which are wrappers around block-only algorithms,
but are not themselves block-only, e.g., hmac.

Signed-off-by: Herbert Xu

crypto: hash - Move core export and import into internel/hash.h

2025-05-19T05:48:19+00:00

The core export and import functions are targeted at implementors
so move them into internal/hash.h.

Signed-off-by: Herbert Xu

crypto: testmgr - make it easier to enable the full set of tests

2025-05-12T05:34:03+00:00

Currently the full set of crypto self-tests requires
CONFIG_CRYPTO_MANAGER_EXTRA_TESTS=y.  This is problematic in two ways.
First, developers regularly overlook this option.  Second, the
description of the tests as "extra" sometimes gives the impression that
it is not required that all algorithms pass these tests.

Given that the main use case for the crypto self-tests is for
developers, make enabling CONFIG_CRYPTO_SELFTESTS=y just enable the full
set of crypto self-tests by default.

The slow tests can still be disabled by adding the command-line
parameter cryptomgr.noextratests=1, soon to be renamed to
cryptomgr.noslowtests=1.  The only known use case for doing this is for
people trying to use the crypto self-tests to satisfy the FIPS 140-3
pre-operational self-testing requirements when the kernel is being
validated as a FIPS 140-3 cryptographic module.

Signed-off-by: Eric Biggers 
Signed-off-by: Herbert Xu

crypto: geniv - use memcpy_sglist() instead of null skcipher

2025-05-12T05:32:53+00:00

For copying data between two scatterlists, just use memcpy_sglist()
instead of the so-called "null skcipher".  This is much simpler.

Signed-off-by: Eric Biggers 
Signed-off-by: Herbert Xu

crypto: ahash - Add HASH_REQUEST_ZERO

2025-05-05T10:20:46+00:00

Add a helper to zero hash stack requests that were never cloned
off the stack.

Signed-off-by: Herbert Xu

crypto: lib/sha256 - Use generic block helper

2025-05-05T10:20:45+00:00

Use the BLOCK_HASH_UPDATE_BLOCKS helper instead of duplicating
partial block handling.

Also remove the unused lib/sha256 force-generic interface.

Signed-off-by: Herbert Xu

crypto: lib/sha256 - Add helpers for block-based shash

2025-05-05T10:20:45+00:00

Add an internal sha256_finup helper and move the finalisation code
from __sha256_final into it.

Also add sha256_choose_blocks and CRYPTO_ARCH_HAVE_LIB_SHA256_SIMD
so that the Crypto API can use the SIMD block function unconditionally.
The Crypto API must not be used in hard IRQs and there is no reason
to have a fallback path for hardirqs.

Signed-off-by: Herbert Xu