linux-kernel - [GIT PULL] Crypto library conversions for 6.17

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <20250727234542.GC1261@sol>
Date: Sun, 27 Jul 2025 16:45:42 -0700
From: Eric Biggers <ebiggers@...nel.org>
To: Linus Torvalds <torvalds@...ux-foundation.org>
Cc: linux-crypto@...r.kernel.org, linux-kernel@...r.kernel.org,
	fsverity@...ts.linux.dev, apparmor@...ts.ubuntu.com,
	Ard Biesheuvel <ardb@...nel.org>,
	"Jason A. Donenfeld" <Jason@...c4.com>,
	John Johansen <john.johansen@...onical.com>
Subject: [GIT PULL] Crypto library conversions for 6.17

Note: this depends on the "Crypto library updates" pull request and
should be merged after it.

The following changes since commit c76ed8790b3018fe36647d9aae96e0373f321184:

  crypto: sha1 - Remove sha1_base.h (2025-07-14 11:28:38 -0700)

are available in the Git repository at:

  https://git.kernel.org/pub/scm/linux/kernel/git/ebiggers/linux.git tags/libcrypto-conversions-for-linus

for you to fetch changes up to 998646b3c1129188f1fdffac3779feb9708b4b4a:

  fsverity: Switch from crypto_shash to SHA-2 library (2025-07-14 11:29:32 -0700)

----------------------------------------------------------------

Convert fsverity and apparmor to use the SHA-2 library functions
instead of crypto_shash. This is simpler and also slightly faster.

----------------------------------------------------------------
Eric Biggers (3):
      apparmor: use SHA-256 library API instead of crypto_shash API
      fsverity: Explicitly include <linux/export.h>
      fsverity: Switch from crypto_shash to SHA-2 library

 Documentation/filesystems/fsverity.rst |   3 +-
 fs/verity/Kconfig                      |   6 +-
 fs/verity/enable.c                     |   9 +-
 fs/verity/fsverity_private.h           |  24 ++--
 fs/verity/hash_algs.c                  | 194 +++++++++++----------------------
 fs/verity/measure.c                    |   1 +
 fs/verity/open.c                       |  37 +++----
 fs/verity/read_metadata.c              |   1 +
 fs/verity/verify.c                     |   8 +-
 security/apparmor/Kconfig              |   3 +-
 security/apparmor/crypto.c             |  85 ++-------------
 11 files changed, 120 insertions(+), 251 deletions(-)