Crypto Update for 4.15

[Herbert Xu <herbert@gondor.apana.org.au>]

Hi Linus: 

Here is the crypto update for 4.15:

API:

- Disambiguate EBUSY when queueing crypto request by adding ENOSPC.
  This change touches code outside the crypto API.
- Reset settings when empty string is written to rng_current.

Algorithms:

- Add OSCCA SM3 secure hash.

Drivers:

- Remove old mv_cesa driver (replaced by marvell/cesa).
- Enable rfc3686/ecb/cfb/ofb AES in crypto4xx.
- Add ccm/gcm AES in crypto4xx.
- Add support for BCM7278 in iproc-rng200.
- Add hash support on Exynos in s5p-sss.
- Fix fallback-induced error in vmx.
- Fix output IV in atmel-aes.
- Fix empty GCM hash in mediatek.

Others:

- Fix DoS potential in lib/mpi.
- Fix potential out-of-order issues with padata.

Please note that there may be a conflict with the tips tree due
to the timer_setup patch being applied in both cryptodev and
the tips tree.  The version in the tips tree also touchs the
mv_cesa driver which just happens to have been removed in this
cycle in cryptodev.  Any changes to mv_cesa may be safely discarded.


Please pull from

git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6.git linus


Allen (1):
      crypto: omap - return -ENOMEM on allocation failure.

Arnd Bergmann (1):
      crypto: axis - hide an unused variable

Arvind Yadav (11):
      crypto: nx - constify vio_device_id
      crypto: nx-842 - constify vio_device_id
      hwrng: pseries - constify vio_device_id
      crypto: padlock-aes - constify x86_cpu_id
      crypto: padlock-sha - constify x86_cpu_id
      hwrng: core - pr_err() strings should end with newlines
      crypto: omap-aes - pr_err() strings should end with newlines
      crypto: virtio - pr_err() strings should end with newlines
      crypto: chelsio - pr_err() strings should end with newlines
      crypto: qat - pr_err() strings should end with newlines
      crypto: bcm - pr_err() strings should end with newlines

Boris BREZILLON (5):
      crypto: marvell - Add a platform_device_id table
      ARM: configs: Stop selecting the old CESA driver
      crypto: marvell - Remove the old mv_cesa driver
      crypto: marvell - Switch cipher algs to the skcipher interface
      crypto: marvell - Add a NULL entry at the end of mv_cesa_plat_id_table[]

Christian Lamparter (25):
      crypto: crypto4xx - remove bad list_del
      crypto: crypto4xx - remove unused definitions and write-only variables
      crypto: crypto4xx - set CRYPTO_ALG_KERN_DRIVER_ONLY flag
      crypto: crypto4xx - remove extern statement before function declaration
      crypto: crypto4xx - remove double assignment of pd_uinfo->state
      crypto: crypto4xx - fix dynamic_sa_ctl's sa_contents declaration
      crypto: crypto4xx - move and refactor dynamic_contents helpers
      crypto: crypto4xx - enable AES RFC3686, ECB, CFB and OFB offloads
      crypto: crypto4xx - refactor crypto4xx_copy_pkt_to_dst()
      crypto: crypto4xx - replace crypto4xx_dev's scatter_buffer_size with constant
      crypto: crypto4xx - fix crypto4xx_build_pdr, crypto4xx_build_sdr leak
      crypto: crypto4xx - pointer arithmetic overhaul
      crypto: crypto4xx - wire up hmac_mc to hmac_muting
      crypto: crypto4xx - fix off-by-one AES-OFB
      crypto: crypto4xx - fix type mismatch compiler error
      crypto: crypto4xx - increase context and scatter ring buffer elements
      crypto: crypto4xx - add backlog queue support
      crypto: crypto4xx - use the correct LE32 format for IV and key defs
      crypto: crypto4xx - overhaul crypto4xx_build_pd()
      crypto: crypto4xx - fix various warnings
      crypto: crypto4xx - fix stalls under heavy load
      crypto: crypto4xx - simplify sa and state context acquisition
      crypto: crypto4xx - prepare for AEAD support
      crypto: crypto4xx - add aes-ccm support
      crypto: crypto4xx - add aes-gcm support

Christophe Jaillet (2):
      crypto: lrw - Fix an error handling path in 'create()'
      crypto: lrw - Check for incorrect cipher name

Colin Ian King (5):
      crypto: aesni - make arrays aesni_simd_skciphers and aesni_simd_skciphers2 static
      crypto: algboss - remove redundant setting of len to zero
      crypto: cavium - clean up clang warning on unread variable offset
      crypto: ccp - remove unused variable qim
      crypto: qat - remove unused and redundant pointer vf_info

Corentin LABBE (14):
      crypto: gcm - add GCM IV size constant
      crypto: caam - Use GCM IV size constant
      crypto: ccp - Use GCM IV size constant
      crypto: nx - Use GCM IV size constant
      crypto: atmel - Use GCM IV size constant
      crypto: bcm - Use GCM IV size constant
      crypto: mediatek - Use GCM IV size constant
      crypto: chelsio - Use GCM IV size constant
      crypto: omap - Use GCM IV size constant
      crypto: gcm - Use GCM IV size constant
      crypto: aesni - Use GCM IV size constant
      crypto: stm32 - use of_device_get_match_data
      crypto: omap - use of_device_get_match_data
      crypto: bcm - use of_device_get_match_data

Eric Biggers (6):
      crypto: dh - Fix double free of ctx->p
      crypto: dh - Don't permit 'p' to be 0
      crypto: dh - Don't permit 'key' or 'g' size longer than 'p'
      crypto: qat - Clean up error handling in qat_dh_set_secret()
      crypto: dh - Remove pointless checks for NULL 'p' and 'g'
      lib/mpi: call cond_resched() from mpi_powm() loop

Florian Fainelli (2):
      dt-bindings: rng: Document BCM7278 RNG200 compatible
      hwrng: iproc-rng200 - Add support for BCM7278

Geliang Tang (1):
      crypto: drop unnecessary return statements

Gilad Ben-Yossef (22):
      crypto: sm3 - add OSCCA SM3 secure hash
      crypto: sm3 - add SM3 test vectors
      crypto: change transient busy return code to -ENOSPC
      crypto: ccp - use -ENOSPC for transient busy indication
      net: use -ENOSPC for transient busy indication
      crypto: remove redundant backlog checks on EBUSY
      crypto: marvell/cesa - remove redundant backlog checks on EBUSY
      crypto: introduce crypto wait for async op
      crypto: algif - move to generic async completion
      crypto: move pub key to generic async completion
      crypto: drbg - move to generic async completion
      crypto: gcm - move to generic async completion
      crypto: testmgr - move to generic async completion
      fscrypt: move to generic async completion
      dm: move dm-verity to generic async completion
      cifs: move to generic async completion
      ima: move to generic async completion
      crypto: tcrypt - move to generic async completion
      crypto: talitos - move to generic async completion
      crypto: qce - move to generic async completion
      crypto: mediatek - move to generic async completion
      crypto: doc - adapt api sample to use async. op wait

Gustavo A. R. Silva (3):
      crypto: tcrypt - mark expected switch fall-throughs in do_test()
      crypto: qat - mark expected switch fall-throughs in qat_uclo
      crypto: chcr - Replace _manual_ swap with swap macro

Harsh Jain (5):
      crypto: gf128mul - The x8_ble multiplication functions
      crypto: chelsio - Use x8_ble gf multiplication to calculate IV.
      crypto: chelsio - Remove allocation of sg list to implement 2K limit of dsgl header
      crypto: chelsio - Move DMA un/mapping to chcr from lld cxgb4 driver
      crypto: chelsio - Fix memory leak

Herbert Xu (1):
      Merge git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux

Himanshu Jha (3):
      crypto: n2 - remove null check before kfree
      crypto: inside-secure - remove null check before kfree
      crypto: Use PTR_ERR_ZERO

Horia Geantă (4):
      MAINTAINERS: update caam crypto driver maintainers list
      crypto: caam/qi - abort algorithm setup on DPAA2 parts
      crypto: caam - remove unneeded edesc zeroization
      crypto: caam - remove unused param of ctx_map_to_sec4_sg()

Jim Quigley (1):
      hwrng: virtio - Virtio RNG devices need to be re-registered after suspend/resume

Kamil Konieczny (3):
      crypto: doc - clarify return values for async hash methods
      crypto: s5p-sss - Change spaces to tabs
      crypto: s5p-sss - Add HASH support for Exynos

Kees Cook (2):
      hwrng: xgene - Convert timers to use timer_setup()
      crypto: drivers - Convert timers to use timer_setup()

LEROY Christophe (18):
      crypto: talitos - fix AEAD test failures
      crypto: talitos - fix memory corruption on SEC2
      crypto: talitos - fix setkey to check key weakness
      crypto: talitos - fix AEAD for sha224 on non sha224 capable chips
      crypto: talitos - fix use of sg_link_tbl_len
      crypto: talitos - fix ctr-aes-talitos
      crypto: talitos - zeroize the descriptor with memset()
      crypto: talitos - declare local functions static
      crypto: talitos - use devm_kmalloc()
      crypto: talitos - use of_property_read_u32()
      crypto: talitos - use devm_ioremap()
      crypto: talitos - don't check the number of channels at each interrupt
      crypto: talitos - remove to_talitos_ptr_len()
      crypto: talitos - simplify tests in ipsec_esp()
      crypto: talitos - DMA map key in setkey()
      crypto: talitos - do hw_context DMA mapping outside the requests
      crypto: talitos - chain in buffered data for ahash on SEC1
      crypto: talitos - avoid useless copy

Lionel Debieve (1):
      crypto: stm32/hash - Fix return issue on update

Mathias Krause (3):
      padata: set cpu_index of unused CPUs to -1
      padata: ensure the reorder timer callback runs on the correct CPU
      padata: ensure padata_do_serial() runs on the correct CPU

Mikulas Patocka (1):
      crypto: crc32-pclmul - remove useless relative addressing

Paulo Flabiano Smorigo (1):
      crypto: vmx - Use skcipher for ctr fallback

PrasannaKumar Muralidharan (3):
      hwrng: timeriomem - Remove 'max < 4' condition check
      dt/bindings: exynos-rng: Move dt binding documentation to bindings/crypto
      hwrng: core - Reset user selected rng by writing "" to rng_current

Radu Alexe (1):
      crypto: caam - fix incorrect define

Robert Baronescu (1):
      crypto: tcrypt - fix buffer lengths in test_aead_speed()

Romain Izard (2):
      crypto: atmel-aes - properly set IV after {en,de}crypt
      crypto: atmel-aes - Reset the controller before each use

Ryder Lee (1):
      crypto: mediatek - Add empty messages check in GCM mode

Salvatore Benedetto (1):
      MAINTAINERS: update maintainer for qat

Stephan Mueller (1):
      crypto: keywrap - simplify code

Tudor-Dan Ambarus (7):
      crypto: ecdh - return unsigned value for crypto_ecdh_key_len()
      crypto: dh - return unsigned int for dh_data_size()
      crypto: dh - return unsigned value for crypto_dh_key_len()
      crypto: atmel - return appropriate error code
      crypto: atmel - remove useless irq init
      crypto: ecdh - remove empty exit()
      crypto: atmel - remove empty functions

Yeshaswi M R Gowda (2):
      crypto: chelsio - Remove unused parameter
      crypto: chelsio - Check error code with IS_ERR macro

amd (2):
      crypto: ccp - unmap pages and remove unmap objects in callback
      crypto:ccp - invoke the DMA callback in a standard way

lionel.debieve@st.com (1):
      crypto: stm32/hash - Remove uninitialized symbol

raveendra padasalagi (1):
      crypto: brcm - Explicity ACK mailbox message

 Documentation/crypto/api-samples.rst               |   52 +-
 .../{rng => crypto}/samsung,exynos-rng4.txt        |    0
 .../devicetree/bindings/rng/brcm,iproc-rng200.txt  |    4 +-
 MAINTAINERS                                        |    5 +-
 arch/arm/configs/dove_defconfig                    |    2 +-
 arch/arm/configs/multi_v5_defconfig                |    2 +-
 arch/arm/configs/orion5x_defconfig                 |    2 +-
 arch/x86/crypto/aesni-intel_glue.c                 |   10 +-
 arch/x86/crypto/crc32-pclmul_asm.S                 |   17 +-
 crypto/Kconfig                                     |   11 +
 crypto/Makefile                                    |    1 +
 crypto/af_alg.c                                    |   27 -
 crypto/ahash.c                                     |   12 +-
 crypto/algapi.c                                    |    6 +-
 crypto/algboss.c                                   |    1 -
 crypto/algif_aead.c                                |    8 +-
 crypto/algif_hash.c                                |   30 +-
 crypto/algif_skcipher.c                            |    9 +-
 crypto/api.c                                       |   13 +
 crypto/asymmetric_keys/public_key.c                |   28 +-
 crypto/cryptd.c                                    |    4 +-
 crypto/cts.c                                       |    6 +-
 crypto/dh.c                                        |   36 +-
 crypto/dh_helper.c                                 |   20 +-
 crypto/drbg.c                                      |   36 +-
 crypto/ecdh.c                                      |    6 -
 crypto/ecdh_helper.c                               |    2 +-
 crypto/gcm.c                                       |   55 +-
 crypto/gf128mul.c                                  |   13 +
 crypto/keywrap.c                                   |   84 +-
 crypto/lrw.c                                       |   17 +-
 crypto/rmd128.c                                    |    2 -
 crypto/rmd160.c                                    |    2 -
 crypto/rmd256.c                                    |    2 -
 crypto/rmd320.c                                    |    2 -
 crypto/rsa-pkcs1pad.c                              |   16 +-
 crypto/sm3_generic.c                               |  210 +++
 crypto/tcrypt.c                                    |  209 +--
 crypto/testmgr.c                                   |  210 +--
 crypto/testmgr.h                                   |   67 +
 crypto/xts.c                                       |    8 +-
 drivers/char/hw_random/Kconfig                     |    6 +-
 drivers/char/hw_random/core.c                      |   53 +-
 drivers/char/hw_random/iproc-rng200.c              |    1 +
 drivers/char/hw_random/pseries-rng.c               |    2 +-
 drivers/char/hw_random/timeriomem-rng.c            |    7 -
 drivers/char/hw_random/virtio-rng.c                |   21 +-
 drivers/char/hw_random/xgene-rng.c                 |    8 +-
 drivers/crypto/Kconfig                             |   40 +-
 drivers/crypto/Makefile                            |    1 -
 drivers/crypto/amcc/Makefile                       |    2 +-
 drivers/crypto/amcc/crypto4xx_alg.c                |  512 +++++-
 drivers/crypto/amcc/crypto4xx_core.c               |  831 +++++----
 drivers/crypto/amcc/crypto4xx_core.h               |  199 ++-
 drivers/crypto/amcc/crypto4xx_reg_def.h            |    3 +
 drivers/crypto/amcc/crypto4xx_sa.c                 |   85 -
 drivers/crypto/amcc/crypto4xx_sa.h                 |   99 +-
 drivers/crypto/atmel-aes.c                         |   80 +-
 drivers/crypto/atmel-sha.c                         |    5 +-
 drivers/crypto/atmel-tdes.c                        |   23 +-
 drivers/crypto/axis/artpec6_crypto.c               |   10 +-
 drivers/crypto/bcm/cipher.c                        |  116 +-
 drivers/crypto/bcm/cipher.h                        |    3 +-
 drivers/crypto/bcm/util.c                          |   14 +-
 drivers/crypto/caam/caamalg.c                      |   10 +-
 drivers/crypto/caam/caamalg_qi.c                   |    7 +-
 drivers/crypto/caam/caamhash.c                     |   12 +-
 drivers/crypto/caam/compat.h                       |    1 +
 drivers/crypto/caam/desc.h                         |    2 +-
 drivers/crypto/cavium/nitrox/nitrox_hal.c          |    2 +-
 drivers/crypto/ccp/ccp-crypto-aes-galois.c         |    9 +-
 drivers/crypto/ccp/ccp-crypto-main.c               |    8 +-
 drivers/crypto/ccp/ccp-dev-v5.c                    |    3 +-
 drivers/crypto/ccp/ccp-dev.c                       |    7 +-
 drivers/crypto/ccp/ccp-dmaengine.c                 |    5 +-
 drivers/crypto/chelsio/chcr_algo.c                 | 1798 ++++++++++++--------
 drivers/crypto/chelsio/chcr_algo.h                 |   57 +-
 drivers/crypto/chelsio/chcr_core.c                 |   10 +-
 drivers/crypto/chelsio/chcr_core.h                 |    2 +-
 drivers/crypto/chelsio/chcr_crypto.h               |  121 +-
 drivers/crypto/inside-secure/safexcel_hash.c       |    6 +-
 drivers/crypto/ixp4xx_crypto.c                     |    1 -
 drivers/crypto/marvell/cesa.c                      |   29 +-
 drivers/crypto/marvell/cesa.h                      |   27 +-
 drivers/crypto/marvell/cipher.c                    |  476 +++---
 drivers/crypto/marvell/tdma.c                      |    5 +-
 drivers/crypto/mediatek/mtk-aes.c                  |   39 +-
 drivers/crypto/mv_cesa.c                           | 1216 -------------
 drivers/crypto/mv_cesa.h                           |  150 --
 drivers/crypto/n2_core.c                           |   12 +-
 drivers/crypto/nx/nx-842-pseries.c                 |    2 +-
 drivers/crypto/nx/nx-aes-gcm.c                     |    9 +-
 drivers/crypto/nx/nx.c                             |    2 +-
 drivers/crypto/omap-aes-gcm.c                      |   11 +-
 drivers/crypto/omap-aes.c                          |   12 +-
 drivers/crypto/omap-des.c                          |    7 +-
 drivers/crypto/omap-sham.c                         |    7 +-
 drivers/crypto/padlock-aes.c                       |    2 +-
 drivers/crypto/padlock-sha.c                       |    2 +-
 drivers/crypto/picoxcell_crypto.c                  |    7 +-
 drivers/crypto/qat/qat_common/adf_dev_mgr.c        |    3 -
 drivers/crypto/qat/qat_common/qat_asym_algs.c      |   18 +-
 drivers/crypto/qat/qat_common/qat_uclo.c           |   15 +-
 drivers/crypto/qce/ablkcipher.c                    |    5 +-
 drivers/crypto/qce/sha.c                           |   30 +-
 drivers/crypto/s5p-sss.c                           | 1596 +++++++++++++++--
 drivers/crypto/stm32/stm32-hash.c                  |   20 +-
 drivers/crypto/talitos.c                           |  582 ++++---
 drivers/crypto/talitos.h                           |    7 +-
 drivers/crypto/ux500/cryp/cryp_core.c              |    1 -
 drivers/crypto/virtio/virtio_crypto_algs.c         |    2 +-
 drivers/crypto/vmx/aes_ctr.c                       |   33 +-
 drivers/md/dm-verity-target.c                      |   81 +-
 drivers/md/dm-verity.h                             |    5 -
 drivers/net/ethernet/chelsio/cxgb4/sge.c           |    8 +-
 fs/cifs/smb2ops.c                                  |   30 +-
 fs/crypto/crypto.c                                 |   28 +-
 fs/crypto/fname.c                                  |   36 +-
 fs/crypto/fscrypt_private.h                        |   10 -
 fs/crypto/keyinfo.c                                |   21 +-
 include/crypto/dh.h                                |    2 +-
 include/crypto/drbg.h                              |    3 +-
 include/crypto/ecdh.h                              |    2 +-
 include/crypto/gcm.h                               |    8 +
 include/crypto/gf128mul.h                          |    2 +-
 include/crypto/hash.h                              |   28 +-
 include/crypto/if_alg.h                            |   15 +-
 include/crypto/sm3.h                               |   40 +
 include/crypto/sm3_base.h                          |  117 ++
 include/linux/crypto.h                             |   40 +
 include/linux/padata.h                             |    4 +
 kernel/padata.c                                    |   71 +-
 lib/mpi/mpi-pow.c                                  |    2 +
 net/ipv4/ah4.c                                     |    2 +-
 net/ipv4/esp4.c                                    |    2 +-
 net/ipv6/ah6.c                                     |    2 +-
 net/ipv6/esp6.c                                    |    2 +-
 security/integrity/ima/ima_crypto.c                |   56 +-
 138 files changed, 5712 insertions(+), 4661 deletions(-)

Thanks,
-- 
Email: Herbert Xu <herbert@gondor.apana.org.au>
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt