kernel/git/next/linux-next.git/drivers/crypto, branch master

Merge branch 'master' of https://git.kernel.org/pub/scm/linux/kernel/git/herbert/cryptodev-2.6.git

2026-09-07T12:26:33+00:00

treewide: refresh kmalloc_obj() conversions

2026-09-05T04:37:00+00:00

This is another run of the Coccinelle script for converting kmalloc() family of allocations to kmalloc_obj() via the existing rules in scripts/coccinelle/api/kmalloc_objs.cocci This catches both the set of kmalloc() uses added since the first kmalloc_obj() conversions in v7.0 and adds a large group missed in the first pass due to Coccinelle not interacting well with the cleanup.h scoped_...() family of macros[1]. I worked around this with spatch's "--macro-file" argument to a file with all the scoped_...() macros mapped to Coccinelle's YACFE_ITERATOR[2] as that was the closest viable control flow indicator I could find. Build tested allmodconfig on x86, arm64, arm, loongarch, mips, powerpc, riscv, and s390 with no new warnings. Link: https://lore.kernel.org/lkml/202609021314.8A9C0B8@keescook/ [1] Link: https://github.com/coccinelle/coccinelle/blob/master/standard.h [2] Signed-off-by: Kees Cook

crypto: starfive - handle clock enable failures

2026-09-04T09:49:33+00:00

Return error from failed clock enable. starfive_cryp_probe ignores clk_prepare_enable return for hclk/ahb, then remove/error paths unconditionally clk_disable_unprepare both clocks. Check consecutive clk_prepare_enable(cryp->hclk)/cryp->ahb returns in starfive_cryp_probe. Signed-off-by: Jiawen Liu <1298662399@qq.com> Signed-off-by: Herbert Xu

crypto: ccree - use crypto_memneq() to compare AEAD tag

2026-09-04T09:49:33+00:00

cc_aead_complete() compares the computed MAC against the received ICV with memcmp(), which short-circuits on the first differing byte and leaks tag-match length via timing. Use crypto_memneq() instead. Assisted-by: gregkh_clanker_t1000 Signed-off-by: David C.C.M. Gall Signed-off-by: Herbert Xu

crypto: octeontx - use crypto_memneq() to check HMAC

2026-09-04T09:49:33+00:00

validate_hmac_cipher_null() compares the computed and received HMAC with memcmp(), which short-circuits on the first differing byte and leaks tag-match length via timing. Use crypto_memneq() instead. Because for cipher_null the validated payload is un-encrypted, this valid prefix leak allows for authenticated message forgery. Assisted-by: gregkh_clanker_t1000 Signed-off-by: David C.C.M. Gall Signed-off-by: Herbert Xu

crypto: octeontx2 - use crypto_memneq() to check HMAC for cipher_null authenc

2026-09-04T09:49:33+00:00

crypto: qce - simplify control flow in register functions

2026-09-04T09:49:33+00:00

Remove the goto statements and handle errors directly to simplify the control flow in qce_aead_register(), qce_ahash_register(), and qce_skcipher_register(). Signed-off-by: Thorsten Blum Reviewed-by: Bartosz Golaszewski Signed-off-by: Herbert Xu

crypto: crypto4xx - pass core_dev to request_irq

2026-09-04T09:49:32+00:00

Instead of using a get_drvdata function to get the proper struct, just pass the proper thing directly. Assisted-by: opencode:big-pickle Signed-off-by: Rosen Penev Signed-off-by: Herbert Xu

crypto: rockchip - pass crypto_info to irq handler

2026-09-04T09:48:47+00:00

The irq handler takes the platform device and calls platform_get_drvdata() to recover the driver data. Pass the driver data directly as the devm_request_irq() argument instead, dropping the platform_get_drvdata() call. Assisted-by: opencode:deepseek-v4-flash-free Signed-off-by: Rosen Penev Signed-off-by: Herbert Xu

crypto: s5p-sss - pass s5p_aes_dev to irq handler

2026-09-04T09:48:47+00:00

The threaded irq handler takes the platform device and calls platform_get_drvdata() to recover the driver data. Pass the driver data directly as the devm_request_threaded_irq() argument instead, dropping the platform_get_drvdata() call. Assisted-by: opencode:deepseek-v4-flash-free Signed-off-by: Rosen Penev Reviewed-by: Thomas Huth Reviewed-by: Vladimir Zapolskiy Signed-off-by: Herbert Xu