Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.bugs.dist > #1037053

Bug#976635: linux-image-arm64: Accelerated crypto modules missing from kernel config

Cross-posted to 2 groups.

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

On Sun, 06 Dec 2020 09:34:36 +0100 Ard Biesheuvel <ardb@kernel.org> wrote:
> Currently, arm64 kernel packages are built with the following Kconfig symbols 
unset:
> 
> # CONFIG_CRYPTO_SHA512_ARM64 is not set
> # CONFIG_CRYPTO_SHA512_ARM64_CE is not set
> # CONFIG_CRYPTO_SHA3_ARM64 is not set
> # CONFIG_CRYPTO_SM3_ARM64_CE is not set
> # CONFIG_CRYPTO_SM4_ARM64_CE is not set
> # CONFIG_CRYPTO_CRCT10DIF_ARM64_CE is not set
> # CONFIG_CRYPTO_AES_ARM64_NEON_BLK is not set
> # CONFIG_CRYPTO_AES_ARM64_BS is not set
> 
> Please consider enabling these as modules. The latter two are especially 
relevant, given that scalar AES is susceptible to known-plaintext attacks on 
the key due to the fact that it is not time invariant. While most arm64 SoCs 
implement the AES instructions and therefore don't rely on these modules, 
notable SoCs such as the Raspberry Pi 3 and 4 can only use the NEON version 
which is not enabled here. (And on these platforms, these are substantially 
faster too)

Are you the same Ard Biesheuvel that 'Signed-off-by' the patch in:
https://salsa.debian.org/kernel-team/linux/-/commit/
8332600d1188a6d88881fc835dfcd392a20f6bfc

In that commit a bunch of crypto modules got enabled, but (explicitly) not 
CONFIG_CRYPTO_AES_ARM64_NEON_BLK. Do you recall why that happened? (I realize 
it's from 2014)
There's an important difference between an 'oversight' and explicitly disabling 
a module and I'd like to have a clarification wrt that.

Cheers,
  Diederik

Back to linux.debian.bugs.dist | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Bug#976635: linux-image-arm64: Accelerated crypto modules missing from kernel config Ard Biesheuvel <ardb@kernel.org> - 2020-12-06 09:40 +0100
  Bug#976635: linux-image-arm64: Accelerated crypto modules missing from kernel config Diederik de Haas <didi.debian@cknow.org> - 2020-12-11 12:30 +0100
    Bug#976635: linux-image-arm64: Accelerated crypto modules missing from kernel config Ard Biesheuvel <ardb@kernel.org> - 2020-12-11 12:40 +0100
      Bug#976635: linux-image-arm64: Accelerated crypto modules missing from kernel config Diederik de Haas <didi.debian@cknow.org> - 2020-12-11 13:30 +0100

csiph-web