kernel.git/arch/arm64/crypto, branch linux-4.16.y

crypto: arm,arm64 - Fix random regeneration of S_shipped

2018-04-08T12:29:51Z

commit 6aaf49b495b446ff6eec0ac983f781ca0dc56a73 upstream. The decision to rebuild .S_shipped is made based on the relative timestamps of .S_shipped and .pl files but git makes this essentially random. This means that the perl script might run anyway (usually at most once per checkout), defeating the whole purpose of _shipped. Fix by skipping the rule unless explicit make variables are provided: REGENERATE_ARM_CRYPTO or REGENERATE_ARM64_CRYPTO. This can produce nasty occasional build failures downstream, for example for toolchains with broken perl. The solution is minimally intrusive to make it easier to push into stable. Another report on a similar issue here: https://lkml.org/lkml/2018/3/8/1379 Signed-off-by: Leonard Crestez Cc: Reviewed-by: Masahiro Yamada Acked-by: Ard Biesheuvel Signed-off-by: Herbert Xu Signed-off-by: Greg Kroah-Hartman

crypto: arm64/sha512 - fix/improve new v8.2 Crypto Extensions code

2018-01-25T14:10:36Z

Add a missing symbol export that prevents this code to be built as a module. Also, move the round constant table to the .rodata section, and use a more optimized version of the core transform. Signed-off-by: Ard Biesheuvel Signed-off-by: Herbert Xu

crypto: arm64/sm3 - new v8.2 Crypto Extensions implementation

2018-01-25T14:10:35Z

Implement the Chinese SM3 secure hash algorithm using the new special instructions that have been introduced as an optional extension in ARMv8.2. Tested-by: Steve Capper Signed-off-by: Ard Biesheuvel Signed-off-by: Herbert Xu

crypto: arm64/sha3 - new v8.2 Crypto Extensions implementation

2018-01-25T14:10:35Z

Implement the various flavours of SHA3 using the new optional EOR3/RAX1/XAR/BCAX instructions introduced by ARMv8.2. Tested-by: Steve Capper Signed-off-by: Ard Biesheuvel Signed-off-by: Herbert Xu

crypto: arm64/sha1-ce - get rid of literal pool

2018-01-18T12:00:33Z

Load the four SHA-1 round constants using immediates rather than literal pool entries, to avoid having executable data that may be exploitable under speculation attacks. Signed-off-by: Ard Biesheuvel Signed-off-by: Herbert Xu

crypto: arm64/sha2-ce - move the round constant table to .rodata section

2018-01-18T12:00:32Z

Move the SHA2 round constant table to the .rodata section where it is safe from being exploited by speculative execution. Signed-off-by: Ard Biesheuvel Signed-off-by: Herbert Xu

crypto: arm64/crct10dif - move literal data to .rodata section

2018-01-18T12:00:31Z

Move the CRC-T10DIF literal data to the .rodata section where it is safe from being exploited by speculative execution. Signed-off-by: Ard Biesheuvel Signed-off-by: Herbert Xu

crypto: arm64/crc32 - move literal data to .rodata section

2018-01-18T12:00:31Z

Move CRC32 literal data to the .rodata section where it is safe from being exploited by speculative execution. Signed-off-by: Ard Biesheuvel Signed-off-by: Herbert Xu

crypto: arm64/aes-neon - move literal data to .rodata section

2018-01-18T12:00:30Z

Move the S-boxes and some other literals to the .rodata section where it is safe from being exploited by speculative execution. Signed-off-by: Ard Biesheuvel Signed-off-by: Herbert Xu

crypto: arm64/aes-cipher - move S-box to .rodata section

2018-01-18T12:00:30Z

Move the AES inverse S-box to the .rodata section where it is safe from abuse by speculation. Signed-off-by: Ard Biesheuvel Signed-off-by: Herbert Xu