1. 26 Apr, 2021 5 commits
    • Linus Torvalds's avatar
      Merge branch 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6 · a4a78bc8
      Linus Torvalds authored
      Pull crypto updates from Herbert Xu:
       "API:
      
         - crypto_destroy_tfm now ignores errors as well as NULL pointers
      
        Algorithms:
      
         - Add explicit curve IDs in ECDH algorithm names
      
         - Add NIST P384 curve parameters
      
         - Add ECDSA
      
        Drivers:
      
         - Add support for Green Sardine in ccp
      
         - Add ecdh/curve25519 to hisilicon/hpre
      
         - Add support for AM64 in sa2ul"
      
      * 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6: (184 commits)
        fsverity: relax build time dependency on CRYPTO_SHA256
        fscrypt: relax Kconfig dependencies for crypto API algorithms
        crypto: camellia - drop duplicate "depends on CRYPTO"
        crypto: s5p-sss - consistently use local 'dev' variable in probe()
        crypto: s5p-sss - remove unneeded local variable initialization
        crypto: s5p-sss - simplify getting of_device_id match data
        ccp: ccp - add support for Green Sardine
        crypto: ccp - Make ccp_dev_suspend and ccp_dev_resume void functions
        crypto: octeontx2 - add support for OcteonTX2 98xx CPT block.
        crypto: chelsio/chcr - Remove useless MODULE_VERSION
        crypto: ux500/cryp - Remove duplicate argument
        crypto: chelsio - remove unused function
        crypto: sa2ul - Add support for AM64
        crypto: sa2ul - Support for per channel coherency
        dt-bindings: crypto: ti,sa2ul: Add new compatible for AM64
        crypto: hisilicon - enable new error types for QM
        crypto: hisilicon - add new error type for SEC
        crypto: hisilicon - support new error types for ZIP
        crypto: hisilicon - dynamic configuration 'err_info'
        crypto: doc - fix kernel-doc notation in chacha.c and af_alg.c
        ...
      a4a78bc8
    • Linus Torvalds's avatar
      Merge tag 'tomoyo-pr-20210426' of git://git.osdn.net/gitroot/tomoyo/tomoyo-test1 · ffc766b3
      Linus Torvalds authored
      Pull lockdep capacity limit updates from Tetsuo Handa:
       "syzbot is occasionally reporting that fuzz testing is terminated due
        to hitting upper limits lockdep can track.
      
        Analysis via /proc/lockdep* did not show any obvious culprits, allow
        tuning tracing capacity constants"
      
      * tag 'tomoyo-pr-20210426' of git://git.osdn.net/gitroot/tomoyo/tomoyo-test1:
        lockdep: Allow tuning tracing capacity constants.
      ffc766b3
    • Linus Torvalds's avatar
      Merge tag 'keys-cve-2020-26541-v3' of... · b0e22b47
      Linus Torvalds authored
      Merge tag 'keys-cve-2020-26541-v3' of git://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs
      
      Pull x509 dbx/mokx UEFI support from David Howells:
       "Here's a set of patches from Eric Snowberg[1] that add support for
        EFI_CERT_X509_GUID entries in the dbx and mokx UEFI tables (such
        entries cause matching certificates to be rejected).
      
        These are currently ignored and only the hash entries are made use of.
      
        Additionally Eric included his patches to allow such certificates to
        be preloaded.
      
        These patches deal with CVE-2020-26541.
      
        To quote Eric:
             'This is the fifth patch series for adding support for
              EFI_CERT_X509_GUID entries [2]. It has been expanded to not only
              include dbx entries but also entries in the mokx. Additionally
              my series to preload these certificate [3] has also been
              included'"
      
      Link: https://lore.kernel.org/r/20210122181054.32635-1-eric.snowberg@oracle.com [1]
      Link: https://patchwork.kernel.org/project/linux-security-module/patch/20200916004927.64276-1-eric.snowberg@oracle.com/ [2]
      Link: https://lore.kernel.org/patchwork/cover/1315485/ [3]
      
      * tag 'keys-cve-2020-26541-v3' of git://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs:
        integrity: Load mokx variables into the blacklist keyring
        certs: Add ability to preload revocation certs
        certs: Move load_system_certificate_list to a common function
        certs: Add EFI_CERT_X509_GUID support for dbx entries
      b0e22b47
    • Linus Torvalds's avatar
      Merge tag 'queue' of git://git.kernel.org/pub/scm/linux/kernel/git/jejb/tpmdd · 87f27e7b
      Linus Torvalds authored
      Pull tpm fixes from James Bottomley:
       "Fix a regression in the TPM trusted keys caused by the generic rework
        to add ARM TEE based trusted keys.
      
        Without this fix, the TPM trusted key subsystem fails to add or load
        any keys"
      
      * tag 'queue' of git://git.kernel.org/pub/scm/linux/kernel/git/jejb/tpmdd:
        KEYS: trusted: fix TPM trusted keys for generic framework
      87f27e7b
    • Linus Torvalds's avatar
      Merge tag 'tpmdd-next-v5.13' of git://git.kernel.org/pub/scm/linux/kernel/git/jarkko/linux-tpmdd · 7dd1ce1a
      Linus Torvalds authored
      Pull tpm updates from Jarkko Sakkinen:
       "New features:
      
         - ARM TEE backend for kernel trusted keys to complete the existing
           TPM backend
      
         - ASN.1 format for TPM2 trusted keys to make them interact with the
           user space stack, such as OpenConnect VPN
      
        Other than that, a bunch of bug fixes"
      
      * tag 'tpmdd-next-v5.13' of git://git.kernel.org/pub/scm/linux/kernel/git/jarkko/linux-tpmdd:
        KEYS: trusted: Fix missing null return from kzalloc call
        char: tpm: fix error return code in tpm_cr50_i2c_tis_recv()
        MAINTAINERS: Add entry for TEE based Trusted Keys
        doc: trusted-encrypted: updates with TEE as a new trust source
        KEYS: trusted: Introduce TEE based Trusted Keys
        KEYS: trusted: Add generic trusted keys framework
        security: keys: trusted: Make sealed key properly interoperable
        security: keys: trusted: use ASN.1 TPM2 key format for the blobs
        security: keys: trusted: fix TPM2 authorizations
        oid_registry: Add TCG defined OIDS for TPM keys
        lib: Add ASN.1 encoder
        tpm: vtpm_proxy: Avoid reading host log when using a virtual device
        tpm: acpi: Check eventlog signature before using it
        tpm: efi: Use local variable for calculating final log size
      7dd1ce1a
  2. 25 Apr, 2021 6 commits
  3. 24 Apr, 2021 3 commits
  4. 23 Apr, 2021 17 commits
  5. 22 Apr, 2021 9 commits