From: Herbert Xu <herbert@gondor.apana.org.au>
Date: Sat, 8 Mar 2025 07:03:20 +0000 (+0800)
Subject: Merge tag 'crypto-krb5-20250303' of git://git.kernel.org/pub/scm/linux/kernel/git... 
X-Git-Tag: v6.15-rc1~118^2~90
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=d4880fe6fd5758e86fb8db1a8ea865d81b92e1f5;p=thirdparty%2Fkernel%2Flinux.git

Merge tag 'crypto-krb5-20250303' of git://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs.git

Pull Kerberos crypto library from David Howells:

crypto: Add Kerberos crypto lib

It does a couple of things:

 (1) Provide an AEAD crypto driver, krb5enc, that mirrors the authenc
     driver, but that hashes the plaintext, not the ciphertext.  This was
     made a separate module rather than just being a part of the authenc
     driver because it has to do all of the constituent operations in the
     opposite order - which impacts the async op handling.

     Testmgr data is provided for AES+SHA2 and Camellia combinations of
     authenc and krb5enc used by the krb5 library.  AES+SHA1 is not
     provided as the RFCs don't contain usable test vectors.

 (2) Provide a Kerberos 5 crypto library.  This is an extract from the
     sunrpc driver as that code can be shared between sunrpc/nfs and
     rxrpc/afs.  This provides encryption, decryption, get MIC and verify
     MIC routines that use and wrap the crypto functions, along with some
     functions to provide layout management.

     This supports AES+SHA1, AES+SHA2 and Camellia encryption types.

     Self-testing is provided that goes further than is possible with
     testmgr, doing subkey derivation as well.

The patches were previously posted here:

    https://lore.kernel.org/r/20250203142343.248839-1-dhowells@redhat.com/

as part of a larger series, but the networking guys would prefer these to
go through the crypto tree.  If you want them reposting independently, I
can do that.
---

d4880fe6fd5758e86fb8db1a8ea865d81b92e1f5