mirrors/linux
2
0
Fork 0
mirror of https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git synced 2026-05-16 00:51:51 -04:00
Code Issues Packages Projects Releases Wiki Activity
Files
7137cbf2b5c9feb6302d6da116eab2047c5f05d2
linux/crypto
History
Eric Biggers 7137cbf2b5 crypto: aes - Add cmac, xcbc, and cbcmac algorithms using library 
Update the "aes" module to implement "cmac(aes)", "xcbc(aes)", and
"cbcmac(aes)" algorithms using the corresponding library functions, and
register these with the crypto_shash API.  Each algorithm is included
only if the corresponding existing kconfig option is enabled.

This allows the architecture-optimized implementations of these
algorithms to continue to be accessible via the crypto_shash API once
they are migrated into the library.

For "xcbc(aes)", I also fixed the bug where AES key lengths other than
128 bits were allowed, so that this bug didn't have to be implemented in
the library.  The AES-XCBC-MAC specification (RFC 3566) is clear that
key lengths other than 128 bits MUST NOT be supported.  AES-XCBC-MAC
derives a 128-bit subkey internally, so the nonstandard support for
longer AES keys didn't really work: AES-128 was still used internally.

In the unlikely event that someone is actually relying on the broken and
nonstandard support for longer AES-XCBC-MAC keys, we can fairly easily
reintroduce it.  But it seems unnecessary: the only user of "xcbc(aes)"
seems to be IPsec, which uses 128-bit keys with it.

Reviewed-by: Ard Biesheuvel <ardb@kernel.org>
Link: https://lore.kernel.org/r/20260218213501.136844-3-ebiggers@kernel.org
Signed-off-by: Eric Biggers <ebiggers@kernel.org>
2026-03-09 13:27:20 -07:00
..
asymmetric_keys
x509: select CONFIG_CRYPTO_LIB_SHA256
2026-02-22 12:09:23 -08:00
async_tx
lib/raid6: replace custom zero page with ZERO_PAGE
2025-07-09 22:57:54 -07:00
krb5
kernel.h: drop hex.h and update all hex.h users
2026-01-20 19:44:19 -08:00
842.c
crypto: comp - Use same definition of context alloc and free ops
2025-09-20 20:21:03 +08:00
acompress.c
Merge tag 'locking-core-2026-02-08' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip
2026-02-10 12:28:44 -08:00
adiantum.c
crypto: adiantum - Drop support for asynchronous xchacha ciphers
2026-01-12 11:07:50 -08:00
aead.c
crypto: api - remove unnecessary forward declarations
2026-01-23 13:48:43 +08:00
aegis128-core.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
aegis128-neon-inner.c
crypto: aegis128-neon - add header for internal prototypes
2023-05-24 18:12:33 +08:00
aegis128-neon.c
crypto: aegis128-neon - Move to more abstract 'ksimd' guard API
2025-11-12 09:52:01 +01:00
aegis-neon.h
crypto: aegis128-neon - add header for internal prototypes
2023-05-24 18:12:33 +08:00
aegis.h
crypto: aegis - Switch from crypto_ft_tab[] to aes_enc_tab[]
2026-01-12 11:39:58 -08:00
aes.c
crypto: aes - Add cmac, xcbc, and cbcmac algorithms using library
2026-03-09 13:27:20 -07:00
af_alg.c
Convert 'alloc_obj' family to use the new default GFP_KERNEL argument
2026-02-21 17:09:51 -08:00
ahash.c
crypto: api - remove unnecessary forward declarations
2026-01-23 13:48:43 +08:00
akcipher.c
crypto: api - remove unnecessary forward declarations
2026-01-23 13:48:43 +08:00
algapi.c
Merge tag 'locking-core-2026-02-08' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip
2026-02-10 12:28:44 -08:00
algboss.c
Convert 'alloc_obj' family to use the new default GFP_KERNEL argument
2026-02-21 17:09:51 -08:00
algif_aead.c
crypto: algif_aead - use memcpy_sglist() instead of null skcipher
2025-05-12 13:32:53 +08:00
algif_hash.c
crypto: af_alg - zero initialize memory allocated via sock_kmalloc
2025-10-17 16:03:57 +08:00
algif_rng.c
Convert 'alloc_obj' family to use the new default GFP_KERNEL argument
2026-02-21 17:09:51 -08:00
algif_skcipher.c
crypto: Add missing MODULE_DESCRIPTION() macros
2024-05-31 17:34:56 +08:00
anubis.c
crypto: anubis - simplify return statement in anubis_mod_init
2025-09-20 20:21:04 +08:00
api.c
Convert 'alloc_obj' family to use the new default GFP_KERNEL argument
2026-02-21 17:09:51 -08:00
arc4.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
aria_generic.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
authenc.c
crypto: authenc - Correctly pass EINPROGRESS back up to the caller
2025-10-17 16:03:58 +08:00
authencesn.c
crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec
2026-01-20 14:38:48 +08:00
blake2b.c
crypto: blake2b - Reimplement using library API
2025-10-29 22:04:24 -07:00
blowfish_common.c
crypto: blowfish - fix typo in comment
2026-01-23 13:48:44 +08:00
blowfish_generic.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
bpf_crypto_skcipher.c
crypto: bpf - Add MODULE_DESCRIPTION for skcipher
2025-03-02 15:19:43 +08:00
camellia_generic.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
cast5_generic.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
cast6_generic.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
cast_common.c
crypto: Add missing MODULE_DESCRIPTION() macros
2024-05-31 17:34:56 +08:00
cbc.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
ccm.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
chacha20poly1305.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
chacha.c
crypto: chacha - register only "-lib" drivers
2025-08-29 09:50:19 -07:00
cipher.c
module: Convert symbol namespace to string literal
2024-12-02 11:34:44 -08:00
cmac.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
compress.h
crypto: acomp - Move stream management into scomp layer
2025-03-15 16:21:22 +08:00
crc32.c
crypto/crc32[c]: register only "-lib" drivers
2025-06-30 09:31:56 -07:00
crc32c.c
crypto/crc32[c]: register only "-lib" drivers
2025-06-30 09:31:56 -07:00
cryptd.c
crypto: cryptd - WQ_PERCPU added to alloc_workqueue users
2025-09-13 12:11:06 +08:00
crypto_engine.c
Merge tag 'locking-core-2026-02-08' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip
2026-02-10 12:28:44 -08:00
crypto_null.c
crypto: null - use memcpy_sglist()
2025-05-12 13:32:53 +08:00
crypto_user.c
crypto: aes - Replace aes-generic with wrapper around lib
2026-01-12 11:39:58 -08:00
ctr.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
cts.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
deflate.c
Convert 'alloc_flex' family to use the new default GFP_KERNEL argument
2026-02-21 17:09:51 -08:00
des_generic.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
df_sp80090a.c
crypto: drbg - Use new AES library API
2026-01-15 14:09:08 -08:00
dh_helper.c
crypto: dh - split out deserialization code from crypto_dh_decode()
2022-03-03 10:47:50 +12:00
dh.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
drbg.c
Convert 'alloc_obj' family to use the new default GFP_KERNEL argument
2026-02-21 17:09:51 -08:00
ecb.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
ecc_curve_defs.h
crypto: ecc - Add NIST P521 curve parameters
2024-04-12 15:07:52 +08:00
ecc.c
Convert 'alloc_obj' family to use the new default GFP_KERNEL argument
2026-02-21 17:09:51 -08:00
ecdh_helper.c
crypto: ecdh - move curve_id of ECDH from the key to algorithm name
2021-03-13 00:04:03 +11:00
ecdh.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
ecdsa-p1363.c
crypto: ecdsa - Fix NIST P521 key size reported by KEYCTL_PKEY_QUERY
2025-04-16 15:16:21 +08:00
ecdsa-x962.c
crypto: ecdsa - Fix NIST P521 key size reported by KEYCTL_PKEY_QUERY
2025-04-16 15:16:21 +08:00
ecdsa.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
ecdsasignature.asn1
crypto: ecdsa - Add support for ECDSA signature verification
2021-03-26 19:41:58 +11:00
echainiv.c
crypto: geniv - use memcpy_sglist() instead of null skcipher
2025-05-12 13:32:53 +08:00
ecrdsa_defs.h
crypto: ecc - Add nbits field to ecc_curve structure
2024-04-12 15:07:52 +08:00
ecrdsa_params.asn1
crypto: ecrdsa - add EC-RDSA (GOST 34.10) algorithm
2019-04-18 22:15:02 +08:00
ecrdsa_pub_key.asn1
crypto: ecrdsa - add EC-RDSA (GOST 34.10) algorithm
2019-04-18 22:15:02 +08:00
ecrdsa.c
crypto: ecdsa - Fix NIST P521 key size reported by KEYCTL_PKEY_QUERY
2025-04-16 15:16:21 +08:00
essiv.c
crypto: essiv - Check ssize for decryption and in-place encryption
2025-10-09 15:02:35 +08:00
fcrypt.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
fips.c
crypto: fips - annotate fips_enable() with __init to free init memory after boot
2025-12-19 14:47:47 +08:00
gcm.c
Convert 'alloc_obj' family to use the new default GFP_KERNEL argument
2026-02-21 17:09:51 -08:00
geniv.c
crypto: geniv - use memcpy_sglist() instead of null skcipher
2025-05-12 13:32:53 +08:00
ghash-generic.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
hash.h
crypto: remove CONFIG_CRYPTO_STATS
2024-04-02 10:49:38 +08:00
hctr2.c
crypto: hctr2 - Convert to use POLYVAL library
2025-11-11 11:03:38 -08:00
hkdf.c
crypto: hkdf - move to late_initcall
2025-06-11 10:59:45 +08:00
hmac.c
crypto: hmac - Add ahash support
2025-05-19 13:48:20 +08:00
internal.h
crypto: Enable context analysis
2026-01-05 16:43:36 +01:00
jitterentropy-kcapi.c
crypto: jitterentropy - Use default sha3 implementation
2025-11-05 20:30:51 -08:00
jitterentropy-testing.c
crypto: jitter - output full sample from test interface
2024-10-19 08:44:30 +08:00
jitterentropy.c
crypto: jitter - replace ARRAY_SIZE definition with header include
2025-07-18 20:52:01 +10:00
jitterentropy.h
crypto: jitter - output full sample from test interface
2024-10-19 08:44:30 +08:00
Kconfig
crypto: aes - Add cmac, xcbc, and cbcmac algorithms using library
2026-03-09 13:27:20 -07:00
kdf_sp800108.c
crypto: testmgr - replace CRYPTO_MANAGER_DISABLE_TESTS with CRYPTO_SELFTESTS
2025-05-12 13:33:14 +08:00
khazad.c
crypto: khazad - simplify return statement in khazad_mod_init
2025-12-29 08:48:35 +08:00
kpp.c
crypto: api - remove unnecessary forward declarations
2026-01-23 13:48:43 +08:00
krb5enc.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
lrw.c
crypto: lrw - Only add ecb if it is not already there
2025-05-19 13:48:20 +08:00
lskcipher.c
crypto: lskcipher - Use unregister_lskciphers in register_lskciphers
2026-01-23 13:48:42 +08:00
lz4.c
crypto: comp - Use same definition of context alloc and free ops
2025-09-20 20:21:03 +08:00
lz4hc.c
crypto: comp - Use same definition of context alloc and free ops
2025-09-20 20:21:03 +08:00
lzo-rle.c
crypto: comp - Use same definition of context alloc and free ops
2025-09-20 20:21:03 +08:00
lzo.c
crypto: comp - Use same definition of context alloc and free ops
2025-09-20 20:21:03 +08:00
Makefile
Merge tag 'locking-core-2026-02-08' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip
2026-02-10 12:28:44 -08:00
md4.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
md5.c
crypto: md5 - Implement export_core() and import_core()
2025-09-08 09:47:38 -07:00
michael_mic.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
mldsa.c
crypto: Add ML-DSA crypto_sig support
2026-01-21 22:32:50 +00:00
pcbc.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
pcrypt.c
crypto: pcrypt - Optimize pcrypt_aead_init_tfm()
2025-06-13 17:26:17 +08:00
proc.c
crypto: Enable context analysis
2026-01-05 16:43:36 +01:00
ripemd.h
crypto: rmd320 - remove RIPE-MD 320 hash algorithm
2021-01-29 16:07:04 +11:00
rmd160.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
rng.c
crypto: rng - Use unregister_rngs in register_rngs
2026-02-06 18:52:22 +08:00
rsa_helper.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152
2019-05-30 11:26:32 -07:00
rsa-pkcs1pad.c
crypto: rsassa-pkcs1 - Migrate to sig_alg backend
2024-10-05 13:22:04 +08:00
rsa.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
rsaprivkey.asn1
treewide: Add SPDX identifier to IETF ASN.1 modules
2023-10-27 18:04:28 +08:00
rsapubkey.asn1
treewide: Add SPDX identifier to IETF ASN.1 modules
2023-10-27 18:04:28 +08:00
rsassa-pkcs1.c
crypto: ecdsa - Fix NIST P521 key size reported by KEYCTL_PKEY_QUERY
2025-04-16 15:16:21 +08:00
scatterwalk.c
Revert "crypto: scatterwalk - Move skcipher walk and use it for memcpy_sglist"
2025-11-22 10:04:50 +08:00
scompress.c
Merge tag 'locking-core-2026-02-08' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip
2026-02-10 12:28:44 -08:00
seed.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
seqiv.c
crypto: seqiv - Do not use req->iv after crypto_aead_encrypt
2025-12-19 14:47:06 +08:00
serpent_generic.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
sha1.c
crypto: sha1 - Implement export_core() and import_core()
2025-09-02 19:02:35 -07:00
sha3.c
crypto: sha3 - Reimplement using library API
2025-11-05 20:30:51 -08:00
sha256.c
crypto: sha256 - Implement export_core() and import_core()
2025-09-02 19:02:37 -07:00
sha512.c
crypto: sha512 - Implement export_core() and import_core()
2025-09-02 19:02:39 -07:00
shash.c
crypto: api - remove unnecessary forward declarations
2026-01-23 13:48:43 +08:00
sig.c
crypto: api - Add support for duplicating algorithms before registration
2025-04-16 15:36:24 +08:00
simd.c
Convert 'alloc_obj' family to use the new default GFP_KERNEL argument
2026-02-21 17:09:51 -08:00
skcipher.c
crypto: api - remove unnecessary forward declarations
2026-01-23 13:48:43 +08:00
skcipher.h
crypto: remove CONFIG_CRYPTO_STATS
2024-04-02 10:49:38 +08:00
sm3_generic.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
sm4_generic.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
sm4.c
move asm/unaligned.h to linux/unaligned.h
2024-10-02 17:23:23 -04:00
streebog_generic.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
tcrypt.c
Convert 'alloc_obj' family to use the new default GFP_KERNEL argument
2026-02-21 17:09:51 -08:00
tcrypt.h
crypto: tcrypt - Remove unused poly1305 support
2025-11-22 10:04:50 +08:00
tea.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
testmgr.c
crypto: aes - Add cmac, xcbc, and cbcmac algorithms using library
2026-03-09 13:27:20 -07:00
testmgr.h
Merge tag 'v7.0-p1' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6
2026-02-10 08:36:42 -08:00
twofish_common.c
crypto: Prepare to move crypto_tfm_ctx
2022-12-02 18:12:40 +08:00
twofish_generic.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
wp512.c
crypto: wp512 - Use API partial block handling
2025-06-23 16:56:56 +08:00
xcbc.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
xctr.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
xor.c
crypto: xor - fix template benchmarking
2024-08-02 20:53:25 +08:00
xts.c
crypto: xts - Only add ecb if it is not already there
2025-05-19 13:48:20 +08:00
xxhash_generic.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
zstd.c
Convert 'alloc_flex' family to use the new default GFP_KERNEL argument
2026-02-21 17:09:51 -08:00