<feed xmlns='http://www.w3.org/2005/Atom'>
<title>kernel/linux.git/drivers/s390/crypto/zcrypt_api.c, branch linux-4.4.y</title>
<subtitle>Linux kernel stable tree (mirror)</subtitle>
<id>https://git.radix-linux.su/kernel/linux.git/atom?h=linux-4.4.y</id>
<link rel='self' href='https://git.radix-linux.su/kernel/linux.git/atom?h=linux-4.4.y'/>
<link rel='alternate' type='text/html' href='https://git.radix-linux.su/kernel/linux.git/'/>
<updated>2015-11-11T12:56:34+00:00</updated>
<entry>
<title>s390/zcrypt: Fix initialisation when zcrypt is built-in</title>
<updated>2015-11-11T12:56:34+00:00</updated>
<author>
<name>Sascha Silbe</name>
<email>silbe@linux.vnet.ibm.com</email>
</author>
<published>2015-10-28T10:06:08+00:00</published>
<link rel='alternate' type='text/html' href='https://git.radix-linux.su/kernel/linux.git/commit/?id=121a868d05500b9d7e5108cc52474dafbf60e285'/>
<id>urn:sha1:121a868d05500b9d7e5108cc52474dafbf60e285</id>
<content type='text'>
ap_bus and zcrypt_api assumed module information to always be present
and initialisation to be done in module loading order (symbol
dependencies). These assumptions don't hold if zcrypt is built-in;
THIS_MODULE will be NULL in this case and init call order is linker
order, i.e. Makefile order.

Fix initialisation order by ordering the object files in the Makefile
according to their dependencies, like the module loader would do.

Fix message type registration by using a dedicated "name" field rather
than piggy-backing on the module ("owner") information. There's no
change to the requirement that module name and msgtype name are
identical. The existing name macros are used.

We don't need any special code for dealing with the drivers being
built-in; the generic module support code already does the right
thing.

Test results:
1. CONFIG_MODULES=y, CONFIG_ZCRYPT=y

   KVM: boots, no /sys/bus/ap (expected)
   LPAR with CEX5: boots, /sys/bus/ap/devices/card*/type present

2. CONFIG_MODULES=y, CONFIG_ZCRYPT=m=:

   KVM: boots, loading zcrypt_cex4 (and ap) fails (expected)
   LPAR with CEX5: boots, loading =zcrypt_cex4= succeeds,
   /sys/bus/ap/devices/card*/type present after explicit module
   loading

3. CONFIG_MODULES unset, CONFIG_ZCRYPT=y:
   KVM: boots, no /sys/bus/ap (expected)
   LPAR with CEX5: boots, /sys/bus/ap/devices/card*/type present

No further testing (user-space functionality) was done.

Fixes: 3b6245fd303f ("s390/zcrypt: Separate msgtype implementation from card modules.")
Signed-off-by: Sascha Silbe &lt;silbe@linux.vnet.ibm.com&gt;
Signed-off-by: Martin Schwidefsky &lt;schwidefsky@de.ibm.com&gt;
</content>
</entry>
<entry>
<title>s390/zcrypt: enable odd RSA modulus sizes in CRT format</title>
<updated>2015-10-14T12:31:59+00:00</updated>
<author>
<name>Ingo Tuchscherer</name>
<email>ingo.tuchscherer@linux.vnet.ibm.com</email>
</author>
<published>2015-09-04T07:57:24+00:00</published>
<link rel='alternate' type='text/html' href='https://git.radix-linux.su/kernel/linux.git/commit/?id=1330a1258dc20caa5961b07aa62482793d6f2ecf'/>
<id>urn:sha1:1330a1258dc20caa5961b07aa62482793d6f2ecf</id>
<content type='text'>
In the past only even modulus sizes were allowed for RSA keys in
CRT format. This restriction was based on limited RSA key generation
on older crypto adapters that provides only even modulus sizes. This
restriction is not valid any more.

Revoke restrictions that crypto requests can be serviced with odd
RSA modulus length in CRT format.

Signed-off-by: Ingo Tuchscherer &lt;ingo.tuchscherer@linux.vnet.ibm.com&gt;
Signed-off-by: Martin Schwidefsky &lt;schwidefsky@de.ibm.com&gt;
</content>
</entry>
<entry>
<title>drivers/s390/crypto/zcrypt_api.c: use seq_hex_dump() to dump buffers</title>
<updated>2015-09-10T20:29:01+00:00</updated>
<author>
<name>Andy Shevchenko</name>
<email>andriy.shevchenko@linux.intel.com</email>
</author>
<published>2015-09-09T22:38:42+00:00</published>
<link rel='alternate' type='text/html' href='https://git.radix-linux.su/kernel/linux.git/commit/?id=5d2fe875c9e822aa55579ea2032153e2891db57a'/>
<id>urn:sha1:5d2fe875c9e822aa55579ea2032153e2891db57a</id>
<content type='text'>
Instead of custom approach let's use recently introduced seq_hex_dump()
helper.

Signed-off-by: Andy Shevchenko &lt;andriy.shevchenko@linux.intel.com&gt;
Acked-by: Ingo Tuchscherer &lt;ingo.tuchscherer@de.ibm.com&gt;
Cc: Alexander Viro &lt;viro@zeniv.linux.org.uk&gt;
Cc: Joe Perches &lt;joe@perches.com&gt;
Cc: Tadeusz Struk &lt;tadeusz.struk@intel.com&gt;
Cc: Helge Deller &lt;deller@gmx.de&gt;
Cc: Catalin Marinas &lt;catalin.marinas@arm.com&gt;
Cc: Vladimir Kondratiev &lt;qca_vkondrat@qca.qualcomm.com&gt;
Signed-off-by: Andrew Morton &lt;akpm@linux-foundation.org&gt;
Signed-off-by: Linus Torvalds &lt;torvalds@linux-foundation.org&gt;
</content>
</entry>
<entry>
<title>s390/zcrypt: enable s390 hwrng to seed kernel entropy</title>
<updated>2015-07-01T07:34:37+00:00</updated>
<author>
<name>Ingo Tuchscherer</name>
<email>ingo.tuchscherer@de.ibm.com</email>
</author>
<published>2015-03-17T15:02:20+00:00</published>
<link rel='alternate' type='text/html' href='https://git.radix-linux.su/kernel/linux.git/commit/?id=db490cb9aeb77b392f4bdaad3ebe96ea1d5c7bfe'/>
<id>urn:sha1:db490cb9aeb77b392f4bdaad3ebe96ea1d5c7bfe</id>
<content type='text'>
Set the 'quality' property in the zcrypt rng device structure to enable the
zcrypt hwrng device to take part in the kernel entropy seeding process.
A module parameter named hwrng_seed will be introduced to disable the
participation. By default this parameter is set to 1 (enabled).

Signed-off-by: Ingo Tuchscherer &lt;ingo.tuchscherer@de.ibm.com&gt;
Signed-off-by: Harald Freudenberger &lt;freude@linux.vnet.ibm.com&gt;
Signed-off-by: Martin Schwidefsky &lt;schwidefsky@de.ibm.com&gt;
</content>
</entry>
<entry>
<title>s390/zcrypt: Fixed possible race condition in zcrypt module handling</title>
<updated>2014-09-25T08:52:04+00:00</updated>
<author>
<name>Ingo Tuchscherer</name>
<email>ingo.tuchscherer@de.ibm.com</email>
</author>
<published>2014-09-16T12:37:25+00:00</published>
<link rel='alternate' type='text/html' href='https://git.radix-linux.su/kernel/linux.git/commit/?id=46b05c7bd51edafb8c8da088b49bddf7f78d48f9'/>
<id>urn:sha1:46b05c7bd51edafb8c8da088b49bddf7f78d48f9</id>
<content type='text'>
Signed-off-by: Ingo Tuchscherer &lt;ingo.tuchscherer@de.ibm.com&gt;
Signed-off-by: Martin Schwidefsky &lt;schwidefsky@de.ibm.com&gt;
</content>
</entry>
<entry>
<title>s390: avoid format strings leaking into names</title>
<updated>2014-06-11T08:13:27+00:00</updated>
<author>
<name>Kees Cook</name>
<email>keescook@chromium.org</email>
</author>
<published>2014-06-10T17:46:20+00:00</published>
<link rel='alternate' type='text/html' href='https://git.radix-linux.su/kernel/linux.git/commit/?id=ef283688f54cc87c421f2a05ddf75fded6f4ad86'/>
<id>urn:sha1:ef283688f54cc87c421f2a05ddf75fded6f4ad86</id>
<content type='text'>
This makes sure format strings can't accidentally leak into kernel
interface names.

Signed-off-by: Kees Cook &lt;keescook@chromium.org&gt;
Signed-off-by: Heiko Carstens &lt;heiko.carstens@de.ibm.com&gt;
Signed-off-by: Martin Schwidefsky &lt;schwidefsky@de.ibm.com&gt;
</content>
</entry>
<entry>
<title>s390/zcrypt: add length check for aligned data to avoid overflow in msg-type 6</title>
<updated>2014-04-01T07:23:34+00:00</updated>
<author>
<name>Ingo Tuchscherer</name>
<email>ingo.tuchscherer@de.ibm.com</email>
</author>
<published>2014-03-18T15:30:21+00:00</published>
<link rel='alternate' type='text/html' href='https://git.radix-linux.su/kernel/linux.git/commit/?id=ce1ce2f31224c18e84d859ccd5675cbb2728f57a'/>
<id>urn:sha1:ce1ce2f31224c18e84d859ccd5675cbb2728f57a</id>
<content type='text'>
Signed-off-by: Ingo Tuchscherer &lt;ingo.tuchscherer@de.ibm.com&gt;
Signed-off-by: Martin Schwidefsky &lt;schwidefsky@de.ibm.com&gt;
</content>
</entry>
<entry>
<title>s390/zcrypt: add support for EP11 coprocessor cards</title>
<updated>2013-12-18T16:37:15+00:00</updated>
<author>
<name>Ingo Tuchscherer</name>
<email>ingo.tuchscherer@de.ibm.com</email>
</author>
<published>2013-11-20T09:47:13+00:00</published>
<link rel='alternate' type='text/html' href='https://git.radix-linux.su/kernel/linux.git/commit/?id=91f3e3eaba4413e76ce8e12e3ef10525a889142f'/>
<id>urn:sha1:91f3e3eaba4413e76ce8e12e3ef10525a889142f</id>
<content type='text'>
This feature extends the generic cryptographic device driver (zcrypt)
with a new capability to service EP11 requests for the Crypto Express4S
card in EP11 (Enterprise PKCS#11 mode) coprocessor mode.

Signed-off-by: Ingo Tuchscherer &lt;ingo.tuchscherer@de.ibm.com&gt;
Signed-off-by: Martin Schwidefsky &lt;schwidefsky@de.ibm.com&gt;
</content>
</entry>
<entry>
<title>s390/zcryt: Handle AP configuration changes</title>
<updated>2012-09-26T13:45:17+00:00</updated>
<author>
<name>Holger Dengler</name>
<email>hd@linux.vnet.ibm.com</email>
</author>
<published>2012-09-10T19:34:26+00:00</published>
<link rel='alternate' type='text/html' href='https://git.radix-linux.su/kernel/linux.git/commit/?id=dabecb2933f7ae901c88cb10c71ab38ca7dfc38f'/>
<id>urn:sha1:dabecb2933f7ae901c88cb10c71ab38ca7dfc38f</id>
<content type='text'>
Detect external AP bus configuration changes and request
an AP device rescan.

Signed-off-by: Holger Dengler &lt;hd@linux.vnet.ibm.com&gt;
Signed-off-by: Martin Schwidefsky &lt;schwidefsky@de.ibm.com&gt;
</content>
</entry>
<entry>
<title>s390/zcrypt: Separate msgtype implementation from card modules.</title>
<updated>2012-09-26T13:44:55+00:00</updated>
<author>
<name>Holger Dengler</name>
<email>hd@linux.vnet.ibm.com</email>
</author>
<published>2012-08-28T14:45:36+00:00</published>
<link rel='alternate' type='text/html' href='https://git.radix-linux.su/kernel/linux.git/commit/?id=5e55a488c87aa6cc269b04bfec99e835f03b2c2d'/>
<id>urn:sha1:5e55a488c87aa6cc269b04bfec99e835f03b2c2d</id>
<content type='text'>
Msgtype implementations are now separated from card specific modules
and can be dynamically registered. Existing msgtype implementations
are restructured in modules.

Signed-off-by: Holger Dengler &lt;hd@linux.vnet.ibm.com&gt;
Signed-off-by: Martin Schwidefsky &lt;schwidefsky@de.ibm.com&gt;
</content>
</entry>
</feed>
