This is an automated email from the git hooks/post-receive script.

unknown user pushed a change to branch master in repository linux.

from 9f4ad9e425a1 Linux 5.12 new 48cff270b037 tpm: efi: Use local variable for calculating final log size new 3dcd15665aca tpm: acpi: Check eventlog signature before using it new 9716ac65efc8 tpm: vtpm_proxy: Avoid reading host log when using a virtu [...] new b07067627cd5 lib: Add ASN.1 encoder new 1c6476e9741e oid_registry: Add TCG defined OIDS for TPM keys new de66514d934d security: keys: trusted: fix TPM2 authorizations new f2219745250f security: keys: trusted: use ASN.1 TPM2 key format for the blobs new e5fb5d2c5a03 security: keys: trusted: Make sealed key properly interoperable new 5d0682be3189 KEYS: trusted: Add generic trusted keys framework new 0a95ebc91305 KEYS: trusted: Introduce TEE based Trusted Keys new c429805fdf70 doc: trusted-encrypted: updates with TEE as a new trust source new 9d53913fad3e MAINTAINERS: Add entry for TEE based Trusted Keys new 3d785d73b4c1 char: tpm: fix error return code in tpm_cr50_i2c_tis_recv() new aec00aa04b11 KEYS: trusted: Fix missing null return from kzalloc call new 7dd1ce1a526c Merge tag 'tpmdd-next-v5.13' of git://git.kernel.org/pub/s [...] new 60dc5f1bcfaa KEYS: trusted: fix TPM trusted keys for generic framework new 87f27e7b189f Merge tag 'queue' of git://git.kernel.org/pub/scm/linux/ke [...] new 56c5812623f9 certs: Add EFI_CERT_X509_GUID support for dbx entries new 2565ca7f5ec1 certs: Move load_system_certificate_list to a common function new d1f044103dad certs: Add ability to preload revocation certs new ebd9c2ae369a integrity: Load mokx variables into the blacklist keyring new b0e22b47f650 Merge tag 'keys-cve-2020-26541-v3' of git://git.kernel.org [...] new 5dc33592e955 lockdep: Allow tuning tracing capacity constants. new ffc766b31e90 Merge tag 'tomoyo-pr-20210426' of git://git.osdn.net/gitro [...] new da3c6c836fb1 crypto: powepc/sha1 - remove unneeded semicolon new 3e2ccc745451 hwrng: ba431 - Use device-managed registration new 6131e970770d crypto: arm/blake2b - drop unnecessary return statement new 8fb7bd312fdb hwrng: xiphera-trng - use devm_platform_ioremap_resource() [...] new f17a25cb1776 crypto: qat - fix spelling mistake: "messge" -> "message" new e06da499d69a hwrng: bcm2835 - remove redundant null check new 9ae219b19931 crypto: amlogic - Fix unnecessary check in meson_crypto_probe() new 4ab6093ba4b1 crypto: serpent - Fix sparse byte order warnings new 662c1c5618aa crypto: keembay-ocs-hcu - Fix error return code in kmb_ocs [...] new 2eee428d8212 crypto: keembay-ocs-aes - Fix error return code in kmb_ocs [...] new a01dc5c1f755 crypto: qce - Restore/save ahash state with custom struct [...] new 38de3cf21fc0 crypto: qce - Hold back a block of data to be transferred [...] new f0d078dd6c49 crypto: qce - Return unsupported if key1 and key 2 are sam [...] new 42f730a47bee crypto: qce - Return unsupported if any three keys are sam [...] new f08789462255 crypto: qce - Return error for zero length messages new 44b45cdea4e3 crypto: qce - Return error for non-blocksize data(ECB/CBC [...] new 02d0dae3ce2a crypto: qce - Set ivsize to 0 for ecb(aes) new 25b71d61d631 crypto: qce - Improve the conditions for requesting AES fa [...] new 24cbcc9427a3 crypto: qce - Set data unit size to message length for AES [...] new 62e4842842f3 crypto: qce - Remover src_tbl from qce_cipher_reqctx new 4139fd587320 crypto: qce - Remove totallen and offset in qce_start new 1dbc6a1e25be crypto: sun8i-ss - fix result memory leak on error path new 664b0f41ce2e crypto: s5p-sss - initialize APB clock after the AXI bus c [...] new f0ba303badfe hwrng: omap - Fix included header from 'asm' new e40ff6f3eaa2 crypto: testmgr - delete some redundant code new 1406f0f34402 crypto: nx - add missing call to of_node_put() new ae8351284b74 hwrng: cctrng - Use device-managed registration API new 7ea39973d1e5 hwrng: pic32 - Use device-managed registration API new 3729095cc139 crypto: cavium - remove unused including <linux/version.h> new 98b5ef3e97b1 crypto: sun8i-ss - Fix memory leak of object d when dma_iv [...] new 83681f2bebb3 crypto: api - check for ERR pointers in crypto_destroy_tfm() new 1877c73b7c03 crypto: ccp - Don't initialize SEV support without the SEV [...] new 8123455a6485 crypto: hisilicon/hpre - add version adapt to new algorithms new 9b94ae729068 crypto: hisilicon/hpre - add algorithm type new 6763f5ea2d9a crypto: ecdh - move curve_id of ECDH from the key to algor [...] new 14bb76768275 crypto: ecc - expose ecc curves new 05e7b906aa7c crypto: hisilicon/hpre - add 'ECDH' algorithm new 8fb9340e178a crypto: ecc - add curve25519 params and expose them new 90274769cf79 crypto: hisilicon/hpre - add 'CURVE25519' algorithm new 282894556b83 crypto: sun8i-ce - fix error return code in sun8i_ce_prng_ [...] new 792b32fad548 crypto: qat - fix unmap invalid dma address new 7cc05071f930 crypto: qat - fix use of 'dma_map_single' new 0618e07ea3e0 dt-bindings: rng: bcm2835: add clock constraints new 381345820db5 dt-bindings: rng: bcm2835: document reset support new e5f9f41d5e62 hwrng: bcm2835 - add reset support new aa31e559f7f9 crypto: sun4i-ss - simplify optional reset handling new 0914999744e5 crypto: aegis128 - Move simd prototypes into aegis.h new d2f2516a3882 crypto: arm/blake2s - fix for big endian new d5adb9d1f7f8 crypto: arm/aes-scalar - switch to common rev_l/mov_l macros new e0ba808db7ba crypto: arm/chacha-scalar - switch to common rev_l macro new f50281df94d7 hwrng: cctrng - use devm_platform_ioremap_resource() to simplify new 682689a56e3b hwrng: ba431 - use devm_platform_ioremap_resource() to simplify new 4b7aef023041 crypto: hisilicon/sec - fixes a printing error new a44dce504bce crypto: hisilicon/sec - fixes some coding style new 8d759bec84b1 crypto: hisilicon/sec - fixes some driver coding style new befb1ddaece1 hwrng: cctrng - delete redundant printing of return value new 7547738d28dd oid_registry: Add OIDs for ECDSA with SHA224/256/384/512 new 4e6602916bc6 crypto: ecdsa - Add support for ECDSA signature verification new 703c748d5f2c crypto: ecc - Add NIST P384 curve parameters new 149ca1611d92 crypto: ecc - Add math to support fast NIST P384 new c12d448ba939 crypto: ecdsa - Register NIST P384 and extend test suite new d1a303e8616c x509: Detect sm2 keys by their parameters OID new 299f561a6693 x509: Add support for parsing x509 certs with ECDSA keys new 947d70597236 ima: Support EC keys for signature verification new 2a8e615436de x509: Add OID for NIST P384 and extend parser for it new 3877869d13a0 Merge branch 'ecc' new e656459b5750 hwrng: intel - Fix included header from 'asm new 4a5eed173493 crypto: ccp - reduce tee command status polling interval f [...] new 00aa6e65aa04 crypto: ccp - fix command queuing to TEE ring buffer new 5595d0dc1d33 crypto: amlogic - Fix the parameter of dma_unmap_sg() new c114ecd3a1a3 crypto: cavium - Fix the parameter of dma_unmap_sg() new ade18fb4dfae crypto: ux500 - Fix the parameter of dma_unmap_sg() new 884b93c51025 crypto: allwinner - Fix the parameter of dma_unmap_sg() new 91253022821d hwrng: core - convert sysfs sprintf/snprintf family to sysfs_emit new 36c25011c27e crypto: jitterentropy - Put constants on the right side of [...] new 27fb85783f0d crypto: inside-secure - Minor typo fix in the file safexcel.c new 45394566b042 crypto: hisilicon/sec - Supply missing description for 'se [...] new 85a557cbec71 crypto: bcm - Fix a whole host of kernel-doc misdemeanours new 29e5b87804e1 crypto: chelsio - Fix some kernel-doc issues new 0368853ede1d crypto: ux500/hash - Fix worthy kernel-doc headers and rem [...] new e2dcca6a2707 crypto: keembay - Fix incorrectly named functions/structs new 71057841feaa crypto: atmel-ecc - Struct headers need to start with keyw [...] new 0beb2b6046ce crypto: caam - Provide the name of the function and provid [...] new 32c2e6dd7c60 crypto: vmx - Source headers are not good kernel-doc candidates new d007bac1fbd6 crypto: nx - Repair some kernel-doc problems new 5b0ef7990e29 crypto: nitrox - Demote non-compliant kernel-doc headers new b66accaab379 crypto: qat - don't release uninitialized resources new 8609f5cfdc87 crypto: qat - ADF_STATUS_PF_RUNNING should be set after ad [...] new 0193b32f565e crypto: ecc - Correct an error in the comments new bbe6c4ba518d crypto: hisilicon/hpre - delete wrap of 'CONFIG_CRYPTO_DH' new ed48466d3ff9 crypto: hisilicon/hpre - optimise 'hpre_algs_register' error path new a9214b0b6ed2 crypto: hisilicon - fix the check on dma address new 670fefb92409 crypto: hisilicon/hpre - fix "hpre_ctx_init" resource leak new 7d15697983c7 crypto: hisilicon/hpre - fix Kconfig new 45bb26d946cd crypto: hisilicon/qm - set the total number of queues new c4392b46ee95 crypto: hisilicon/qm - move 'CURRENT_QM' code to qm.c new 6250383a2083 crypto: hisilicon/qm - set the number of queues for function new 8bbecfb402f7 crypto: hisilicon/qm - add queue isolation support for Kunpeng930 new dbb153c02bac crypto: vmx - fix incorrect kernel-doc comment syntax in files new 73f04d3d800f crypto: amcc - fix incorrect kernel-doc comment syntax in files new ce668da5f11e crypto: ux500 - fix incorrect kernel-doc comment syntax new 10cb823bbacd crypto: nx - fix incorrect kernel-doc comment syntax in files new 30d0f6a956fc crypto: rng - fix crypto_rng_reset() refcounting when !CRY [...] new a181e0fdb216 random: initialize ChaCha20 constants with correct endianness new 118a4417e143 random: remove dead code left over from blocking pool new 1015f19b2151 hwrng: omap - Use of_device_get_match_data() helper new 8d195e7a8ada crypto: poly1305 - fix poly1305_core_setkey() declaration new 83dc1173d73f crypto: qat - fix error path in adf_isr_resource_alloc() new 5377265f54de crypto: hisilicon - use the correct HiSilicon copyright new c29da9700f8c crypto: keywrap - Remove else after break statement new 5c083eb3e9ca crypto: fcrypt - Remove 'do while(0)' loop for single stat [...] new 30a4240e06ea crypto: hisilicon/zip - adjust functions location new d746881855ba crypto: hisilicon/zip - add comments for 'hisi_zip_sqe' new 2bcf36348ce5 crypto: hisilicon/zip - initialize operations about 'sqe' [...] new 95c612b30898 crypto: hisilicon/zip - support new 'sqe' type in Kunpeng930 new 64e80c8f48a0 crypto: hisilicon/hpre - fix PASID setting on kunpeng 920 new 09fd266f1741 crypto: hisilicon/hpre - fix a typo and delete redundant b [...] new 9bb3fbbff371 crypto: hisilicon/hpre - delete redundant '\n' new 0ae869926fab crypto: hisilicon/hpre - Add processing of src_data in 'CU [...] new 059c5342812c crypto: hisilicon/sec - Fixes AES algorithm mode parameter [...] new ac1af1a788b2 crypto: allwinner - add missing CRYPTO_ prefix new da6503f52bf8 crypto: hisilicon/sec - Fix a module parameter error new a52c7b16ddf3 crypto: ccp - A value assigned to a variable is never used new fd4317b7b2c9 crypto: hisilicon/hpre - fix a typo in hpre_crypto.c new 63655b62f560 crypto: ccp - Use DEFINE_SPINLOCK() for spinlock new 3d8c5f5a08c3 crypto: rockchip - delete unneeded variable initialization new 50274b01ac16 crypto: sun8i-ss - Fix memory leak of pad new 854b77371998 crypto: sa2ul - Fix memory leak of rxd new ae6ce7b17e50 crypto: hisilicon/sec - fixup checking the 3DES weak key new 556b64b9f39e crypto: hisilicon/qm - delete redundant code new f7cae626cabb crypto: qat - Fix a double free in adf_create_ring new 16a9874fe468 crypto: chelsio - Read rxchannel-id from firmware new fa07c1a30be7 crypto: ecc - delete a useless function declaration new 25ee76a221b0 crypto: geode - use DEFINE_SPINLOCK() for spinlock new 7dad7d007ab7 crypto: ixp4xx - use DEFINE_SPINLOCK() for spinlock new 7ed83901326f crypto: hisilicon/qm - add stop queue by hardware new 0f19dbc994dc crypto: arm64/aes-ce - deal with oversight in new CTR carry code new 6e57871c3b75 crypto: hisilicon/trng - add version to adapt new algorithm new 8553856cc6f7 crypto: atmel-tdes - Remove redundant dev_err call in atme [...] new a790f9de1da7 crypto: img-hash - Remove redundant dev_err call in img_ha [...] new bea47077ece6 crypto: ux500 - Remove redundant dev_err calls new 6dab37467389 crypto: keembay - Remove redundant dev_err calls new e0e638f7e09c crypto: ccree - Remove redundant dev_err call in init_cc_r [...] new 1aa33c7a4897 crypto: cavium/zip - remove unused including <linux/version.h> new ac98fc5e1c32 crypto: sun4i-ss - Fix PM reference leak when pm_runtime_g [...] new 06cd7423cf45 crypto: sun8i-ss - Fix PM reference leak when pm_runtime_g [...] new cc987ae9150c crypto: sun8i-ce - Fix PM reference leak in sun8i_ce_probe() new 1cb3ad701970 crypto: stm32/hash - Fix PM reference leak on stm32-hash.c new 747bf30fd944 crypto: stm32/cryp - Fix PM reference leak on stm32-cryp.c new 13343badae09 crypto: sa2ul - Fix PM reference leak in sa_ul_probe() new 1f34cc4a8da3 crypto: omap-aes - Fix PM reference leak on omap-aes.c new 3eb75fc7d8c7 crypto: atmel - use the correct print format new 07a4356bafa9 crypto: hisilicon/sec - use the correct print format new 51028c6efa90 crypto: hisilicon/sgl - add a comment for block size initi [...] new c5f735bbf35a crypto: hisilicon/sgl - delete unneeded variable initialization new 197272b8f0bb crypto: hisilicon/sgl - add some dfx logs new 4b95e17b8fcc crypto: hisilicon/sgl - fix the soft sg map to hardware sg new 7e958d301c0d crypto: hisilicon/sgl - fix the sg buf unmap new 1c4d9d5bbb5a crypto: qat - enable detection of accelerators hang new 44200f2d9b8b crypto: arm/curve25519 - Move '.fpu' after '.arch' new a2035904f012 crypto: hisilicon/hpre - delete the rudundant space after return new c4433247d91f crypto: hisilicon/hpre - use the correct variable type new 5bc3962c53c7 crypto: hisilicon/hpre - add debug log new 705f6e134ad1 crypto: hisilicon/hpre - delete redundant log and return i [...] new 0f049f7d11dc crypto: crc32-generic - Use SPDX-License-Identifier new b2a4411aca29 crypto: doc - fix kernel-doc notation in chacha.c and af_alg.c new d9e21600dc09 crypto: hisilicon - dynamic configuration 'err_info' new b7220a7439fa crypto: hisilicon - support new error types for ZIP new 10594d1e5ff7 crypto: hisilicon - add new error type for SEC new c4aab24448a3 crypto: hisilicon - enable new error types for QM new 6535cbc49071 dt-bindings: crypto: ti,sa2ul: Add new compatible for AM64 new e8a4529d4598 crypto: sa2ul - Support for per channel coherency new 0bc42311cdff crypto: sa2ul - Add support for AM64 new 25c2850eb80f crypto: chelsio - remove unused function new 01fec8c3bbd0 crypto: ux500/cryp - Remove duplicate argument new 66810912fd1e crypto: chelsio/chcr - Remove useless MODULE_VERSION new b2d17df35ea5 crypto: octeontx2 - add support for OcteonTX2 98xx CPT block. new 5d17c414e102 crypto: ccp - Make ccp_dev_suspend and ccp_dev_resume void [...] new 195ec383d805 ccp: ccp - add support for Green Sardine new 6b238db73701 crypto: s5p-sss - simplify getting of_device_id match data new 3d3b3a0067d2 crypto: s5p-sss - remove unneeded local variable initialization new 87bff3d8b94c crypto: s5p-sss - consistently use local 'dev' variable in [...] new d17d9227c332 crypto: camellia - drop duplicate "depends on CRYPTO" new a0fc20333ee4 fscrypt: relax Kconfig dependencies for crypto API algorithms new e3a606f2c544 fsverity: relax build time dependency on CRYPTO_SHA256 new a4a78bc8ead4 Merge branch 'linus' of git://git.kernel.org/pub/scm/linux [...]

The 210 revisions listed above as "new" are entirely new to this repository and will be described in separate emails. The revisions listed as "adds" were already present in the repository and have only been added to this reference.

Summary of changes: Documentation/admin-guide/kernel-parameters.txt | 12 + .../devicetree/bindings/crypto/ti,sa2ul.yaml | 24 +- .../devicetree/bindings/rng/brcm,bcm2835.yaml | 21 + Documentation/security/keys/trusted-encrypted.rst | 229 ++++- MAINTAINERS | 8 + arch/arm/crypto/aes-cipher-core.S | 42 +- arch/arm/crypto/blake2b-neon-glue.c | 4 +- arch/arm/crypto/blake2s-core.S | 21 + arch/arm/crypto/chacha-scalar-core.S | 43 +- arch/arm/crypto/curve25519-core.S | 2 +- arch/arm/crypto/poly1305-glue.c | 2 +- arch/arm64/crypto/aes-modes.S | 1 + arch/arm64/crypto/poly1305-glue.c | 2 +- arch/mips/crypto/poly1305-glue.c | 2 +- arch/powerpc/crypto/sha1-spe-glue.c | 2 +- arch/x86/crypto/poly1305_glue.c | 6 +- certs/Kconfig | 17 + certs/Makefile | 21 +- certs/blacklist.c | 64 ++ certs/blacklist.h | 2 + certs/common.c | 57 ++ certs/common.h | 9 + certs/revocation_certificates.S | 21 + certs/system_keyring.c | 55 +- crypto/Kconfig | 15 +- crypto/Makefile | 6 + crypto/aegis.h | 19 + crypto/aegis128-core.c | 15 - crypto/aegis128-neon.c | 10 +- crypto/af_alg.c | 94 ++- crypto/api.c | 2 +- crypto/asymmetric_keys/public_key.c | 4 +- crypto/asymmetric_keys/x509_cert_parser.c | 49 +- crypto/asymmetric_keys/x509_public_key.c | 4 +- crypto/crc32_generic.c | 24 +- crypto/ecc.c | 291 +++++-- crypto/ecc.h | 49 +- crypto/ecc_curve_defs.h | 49 ++ crypto/ecdh.c | 72 +- crypto/ecdh_helper.c | 4 +- crypto/ecdsa.c | 376 +++++++++ crypto/ecdsasignature.asn1 | 4 + crypto/fcrypt.c | 5 +- crypto/jitterentropy.c | 8 +- crypto/keywrap.c | 4 +- crypto/rng.c | 10 +- crypto/serpent_generic.c | 39 +- crypto/testmgr.c | 42 +- crypto/testmgr.h | 458 +++++++++- drivers/char/hw_random/ba431-rng.c | 16 +- drivers/char/hw_random/bcm2835-rng.c | 27 +- drivers/char/hw_random/cctrng.c | 20 +- drivers/char/hw_random/core.c | 2 +- drivers/char/hw_random/intel-rng.c | 2 +- drivers/char/hw_random/omap-rng.c | 14 +- drivers/char/hw_random/pic32-rng.c | 3 +- drivers/char/hw_random/xiphera-trng.c | 4 +- drivers/char/random.c | 21 +- drivers/char/tpm/eventlog/acpi.c | 33 +- drivers/char/tpm/eventlog/common.c | 3 + drivers/char/tpm/eventlog/efi.c | 29 +- drivers/char/tpm/tpm_tis_i2c_cr50.c | 1 + drivers/crypto/allwinner/Kconfig | 14 +- .../crypto/allwinner/sun4i-ss/sun4i-ss-cipher.c | 2 +- drivers/crypto/allwinner/sun4i-ss/sun4i-ss-core.c | 23 +- drivers/crypto/allwinner/sun4i-ss/sun4i-ss-hash.c | 2 +- drivers/crypto/allwinner/sun4i-ss/sun4i-ss-prng.c | 2 +- .../crypto/allwinner/sun8i-ce/sun8i-ce-cipher.c | 9 +- drivers/crypto/allwinner/sun8i-ce/sun8i-ce-core.c | 2 +- drivers/crypto/allwinner/sun8i-ce/sun8i-ce-hash.c | 3 +- drivers/crypto/allwinner/sun8i-ce/sun8i-ce-prng.c | 1 + .../crypto/allwinner/sun8i-ss/sun8i-ss-cipher.c | 11 +- drivers/crypto/allwinner/sun8i-ss/sun8i-ss-core.c | 2 +- drivers/crypto/allwinner/sun8i-ss/sun8i-ss-hash.c | 12 +- drivers/crypto/allwinner/sun8i-ss/sun8i-ss-prng.c | 4 +- drivers/crypto/amcc/crypto4xx_alg.c | 12 +- drivers/crypto/amcc/crypto4xx_core.c | 18 +- drivers/crypto/amcc/crypto4xx_core.h | 4 +- drivers/crypto/amcc/crypto4xx_reg_def.h | 8 +- drivers/crypto/amcc/crypto4xx_sa.h | 18 +- drivers/crypto/amcc/crypto4xx_trng.h | 2 +- drivers/crypto/amlogic/amlogic-gxl-cipher.c | 6 +- drivers/crypto/amlogic/amlogic-gxl-core.c | 3 - drivers/crypto/atmel-ecc.c | 30 +- drivers/crypto/atmel-i2c.c | 2 +- drivers/crypto/atmel-sha.c | 4 +- drivers/crypto/atmel-tdes.c | 1 - drivers/crypto/bcm/cipher.c | 7 +- drivers/crypto/bcm/spu.c | 16 +- drivers/crypto/bcm/spu2.c | 43 +- drivers/crypto/bcm/util.c | 4 +- drivers/crypto/caam/caamalg_qi2.c | 3 + drivers/crypto/caam/caampkc.c | 3 +- drivers/crypto/cavium/cpt/cptpf_main.c | 1 - drivers/crypto/cavium/nitrox/nitrox_isr.c | 4 +- drivers/crypto/cavium/nitrox/nitrox_reqmgr.c | 9 +- drivers/crypto/cavium/zip/common.h | 1 - drivers/crypto/ccp/ccp-crypto-main.c | 3 +- drivers/crypto/ccp/ccp-dev.c | 12 +- drivers/crypto/ccp/ccp-ops.c | 1 - drivers/crypto/ccp/sev-dev.c | 6 + drivers/crypto/ccp/sp-dev.c | 12 +- drivers/crypto/ccp/sp-dev.h | 15 +- drivers/crypto/ccp/sp-pci.c | 1 + drivers/crypto/ccp/tee-dev.c | 57 +- drivers/crypto/ccp/tee-dev.h | 20 +- drivers/crypto/ccree/cc_driver.c | 4 +- drivers/crypto/chelsio/chcr_algo.c | 32 +- drivers/crypto/chelsio/chcr_core.c | 5 +- drivers/crypto/chelsio/chcr_core.h | 1 - drivers/crypto/geode-aes.c | 4 +- drivers/crypto/hisilicon/Kconfig | 2 + drivers/crypto/hisilicon/hpre/hpre.h | 18 +- drivers/crypto/hisilicon/hpre/hpre_crypto.c | 921 ++++++++++++++++++++- drivers/crypto/hisilicon/hpre/hpre_main.c | 158 ++-- drivers/crypto/hisilicon/qm.c | 396 +++++++-- drivers/crypto/hisilicon/qm.h | 29 +- drivers/crypto/hisilicon/sec/sec_algs.c | 2 +- drivers/crypto/hisilicon/sec/sec_drv.c | 13 +- drivers/crypto/hisilicon/sec/sec_drv.h | 2 +- drivers/crypto/hisilicon/sec2/sec.h | 10 +- drivers/crypto/hisilicon/sec2/sec_crypto.c | 137 +-- drivers/crypto/hisilicon/sec2/sec_crypto.h | 6 +- drivers/crypto/hisilicon/sec2/sec_main.c | 267 +++--- drivers/crypto/hisilicon/sgl.c | 37 +- drivers/crypto/hisilicon/trng/trng.c | 13 +- drivers/crypto/hisilicon/zip/zip.h | 50 +- drivers/crypto/hisilicon/zip/zip_crypto.c | 710 +++++++++------- drivers/crypto/hisilicon/zip/zip_main.c | 99 +-- drivers/crypto/img-hash.c | 3 - drivers/crypto/inside-secure/safexcel.c | 2 +- drivers/crypto/ixp4xx_crypto.c | 7 +- drivers/crypto/keembay/keembay-ocs-aes-core.c | 8 +- drivers/crypto/keembay/keembay-ocs-hcu-core.c | 8 +- drivers/crypto/keembay/ocs-hcu.c | 8 +- drivers/crypto/marvell/octeontx2/otx2_cpt_common.h | 10 +- .../marvell/octeontx2/otx2_cpt_mbox_common.c | 14 +- drivers/crypto/marvell/octeontx2/otx2_cptlf.c | 8 +- drivers/crypto/marvell/octeontx2/otx2_cptlf.h | 1 + drivers/crypto/marvell/octeontx2/otx2_cptpf.h | 1 + drivers/crypto/marvell/octeontx2/otx2_cptpf_main.c | 33 +- .../crypto/marvell/octeontx2/otx2_cptpf_ucode.c | 144 +++- drivers/crypto/nx/nx-aes-cbc.c | 2 +- drivers/crypto/nx/nx-aes-ccm.c | 2 +- drivers/crypto/nx/nx-aes-ctr.c | 2 +- drivers/crypto/nx/nx-aes-ecb.c | 2 +- drivers/crypto/nx/nx-aes-gcm.c | 2 +- drivers/crypto/nx/nx-aes-xcbc.c | 2 +- drivers/crypto/nx/nx-common-powernv.c | 4 +- drivers/crypto/nx/nx-sha256.c | 2 +- drivers/crypto/nx/nx-sha512.c | 2 +- drivers/crypto/nx/nx.c | 5 +- drivers/crypto/nx/nx_debugfs.c | 2 +- drivers/crypto/omap-aes.c | 7 +- drivers/crypto/qat/qat_4xxx/adf_4xxx_hw_data.c | 1 + drivers/crypto/qat/qat_c3xxx/adf_c3xxx_hw_data.c | 1 + drivers/crypto/qat/qat_c3xxxvf/adf_drv.c | 4 +- drivers/crypto/qat/qat_c62x/adf_c62x_hw_data.c | 1 + drivers/crypto/qat/qat_c62xvf/adf_drv.c | 4 +- drivers/crypto/qat/qat_common/adf_accel_devices.h | 1 + drivers/crypto/qat/qat_common/adf_gen2_hw_data.c | 25 + drivers/crypto/qat/qat_common/adf_gen2_hw_data.h | 13 + drivers/crypto/qat/qat_common/adf_gen4_hw_data.c | 40 + drivers/crypto/qat/qat_common/adf_gen4_hw_data.h | 14 +- drivers/crypto/qat/qat_common/adf_init.c | 4 + drivers/crypto/qat/qat_common/adf_isr.c | 29 +- drivers/crypto/qat/qat_common/adf_pf2vf_msg.c | 2 +- drivers/crypto/qat/qat_common/adf_transport.c | 1 + drivers/crypto/qat/qat_common/adf_vf2pf_msg.c | 4 +- drivers/crypto/qat/qat_common/adf_vf_isr.c | 17 +- drivers/crypto/qat/qat_common/qat_algs.c | 32 +- drivers/crypto/qat/qat_dh895xccvf/adf_drv.c | 4 +- drivers/crypto/qce/cipher.h | 1 - drivers/crypto/qce/common.c | 25 +- drivers/crypto/qce/common.h | 3 +- drivers/crypto/qce/sha.c | 143 ++-- drivers/crypto/qce/skcipher.c | 69 +- drivers/crypto/rockchip/rk3288_crypto_ahash.c | 2 +- drivers/crypto/s5p-sss.c | 17 +- drivers/crypto/sa2ul.c | 143 +++- drivers/crypto/sa2ul.h | 4 + drivers/crypto/stm32/stm32-cryp.c | 4 +- drivers/crypto/stm32/stm32-hash.c | 8 +- drivers/crypto/ux500/cryp/cryp.c | 5 +- drivers/crypto/ux500/cryp/cryp.h | 2 +- drivers/crypto/ux500/cryp/cryp_core.c | 10 +- drivers/crypto/ux500/cryp/cryp_irq.c | 2 +- drivers/crypto/ux500/cryp/cryp_irq.h | 4 +- drivers/crypto/ux500/cryp/cryp_irqp.h | 4 +- drivers/crypto/ux500/cryp/cryp_p.h | 15 +- drivers/crypto/ux500/hash/hash_core.c | 18 +- drivers/crypto/vmx/aes.c | 2 +- drivers/crypto/vmx/aes_cbc.c | 2 +- drivers/crypto/vmx/aes_ctr.c | 2 +- drivers/crypto/vmx/aes_xts.c | 2 +- drivers/crypto/vmx/ghash.c | 2 +- drivers/crypto/vmx/vmx.c | 2 +- fs/crypto/Kconfig | 30 +- fs/verity/Kconfig | 8 +- include/crypto/acompress.h | 2 + include/crypto/aead.h | 2 + include/crypto/akcipher.h | 2 + include/crypto/chacha.h | 9 +- include/crypto/ecc_curve.h | 60 ++ include/crypto/ecdh.h | 3 +- include/crypto/hash.h | 4 + include/crypto/internal/poly1305.h | 3 +- include/crypto/kpp.h | 2 + include/crypto/poly1305.h | 6 +- include/crypto/rng.h | 2 + include/crypto/skcipher.h | 2 + include/keys/asymmetric-type.h | 6 + include/keys/system_keyring.h | 15 + include/keys/trusted-type.h | 55 ++ include/keys/trusted_tee.h | 16 + include/keys/trusted_tpm.h | 29 +- include/linux/asn1_encoder.h | 32 + include/linux/oid_registry.h | 15 +- include/linux/tpm.h | 2 + include/trace/events/random.h | 83 -- include/uapi/misc/uacce/hisi_qm.h | 1 + kernel/locking/lockdep.c | 2 +- kernel/locking/lockdep_internals.h | 8 +- lib/Kconfig | 3 + lib/Kconfig.debug | 40 + lib/Makefile | 1 + lib/asn1_encoder.c | 454 ++++++++++ lib/crypto/chacha.c | 4 +- lib/crypto/poly1305-donna32.c | 3 +- lib/crypto/poly1305-donna64.c | 3 +- lib/crypto/poly1305.c | 3 +- lib/oid_registry.c | 24 + net/bluetooth/ecdh_helper.c | 2 - net/bluetooth/selftest.c | 2 +- net/bluetooth/smp.c | 6 +- scripts/Makefile | 1 + security/integrity/digsig_asymmetric.c | 30 +- .../integrity/platform_certs/keyring_handler.c | 11 + security/integrity/platform_certs/load_uefi.c | 20 +- security/keys/Kconfig | 3 + security/keys/trusted-keys/Makefile | 6 + security/keys/trusted-keys/tpm2key.asn1 | 11 + security/keys/trusted-keys/trusted_core.c | 360 ++++++++ security/keys/trusted-keys/trusted_tee.c | 318 +++++++ security/keys/trusted-keys/trusted_tpm1.c | 401 +++------ security/keys/trusted-keys/trusted_tpm2.c | 269 +++++- 246 files changed, 6735 insertions(+), 2432 deletions(-) create mode 100644 certs/common.c create mode 100644 certs/common.h create mode 100644 certs/revocation_certificates.S create mode 100644 crypto/ecdsa.c create mode 100644 crypto/ecdsasignature.asn1 create mode 100644 include/crypto/ecc_curve.h create mode 100644 include/keys/trusted_tee.h create mode 100644 include/linux/asn1_encoder.h create mode 100644 lib/asn1_encoder.c create mode 100644 security/keys/trusted-keys/tpm2key.asn1 create mode 100644 security/keys/trusted-keys/trusted_core.c create mode 100644 security/keys/trusted-keys/trusted_tee.c