u-boot.git/drivers/crypto, branch master

crypto: fsl: Hide CAAM_64BIT symbol behind FSL_CAAM

2026-07-06T02:20:34Z

Make CAAM_64BIT selectable only in case FSL_CAAM is selected, otherwise CAAM_64BIT shows up in configs of unrelated platforms. Signed-off-by: Marek Vasut Reviewed-by: Tom Rini Reviewed-by: Peng Fan Reviewed-by: Heiko Schocher Signed-off-by: Peng Fan

Kconfig: drivers: restyle remaining

2026-06-25T21:00:58Z

Restyle all Kconfigs for the rest of "drivers": Menu entries : no space left Menu attributes: 1 TAB Help text : 1 TAB + 2 spaces Replace '---help---' by 'help' Signed-off-by: Johan Jonker [trini: Add missing indentation on a few more multi-paragraph help texts] Signed-off-by: Tom Rini

crypto: tegra: Use dev_read_addr_x()

2026-06-09T20:53:34Z

Use dev_read_addr_size_name_ptr() which supports both live device tree and flat DT backends, avoiding direct dependency on devfdt_* helpers. No functional changes. Signed-off-by: Peng Fan Reviewed-by: Svyatoslav Ryhel

crypto: aspeed: Use dev_read_addr_x()

2026-06-09T20:53:34Z

Use dev_read_addr_x() which supports both live device tree and flat DT backends, avoiding direct dependency on devfdt_* helpers. No functional changes. Signed-off-by: Peng Fan

crypto: fsl: Select ARCH_MISC_INIT for CAAM driver

2026-04-02T12:07:18Z

The CAAM JR driver is initialized from arch_misc_init(). If ARCH_MISC_INIT is not enabled, the driver is never initialized, which can lead to crashes or hangs (e.g. during hash operations). Select ARCH_MISC_INIT when enabling FSL_CAAM to ensure proper initialization. Signed-off-by: Heiko Schocher Suggested-by: Fabio Estevam Reviewed-by: Peng Fan

dm: crypto: Check malloc return value

2026-01-02T21:51:54Z

tmp_buffer is allocated using malloc but failure is not handled. This commit ensures that we do not use a NULL pointer if malloc fails. Signed-off-by: Francois Berder

crypto: tegra: Tighten TEGRA_AES driver dependency

2025-10-28T09:27:43Z

This driver relies on tegra-specific headers to compile so make it depend on ARCH_TEGRA. Signed-off-by: Tom Rini Reviewed-by: Svyatoslav Ryhel

crypto/rng: double the entropy delay interval for retry

2025-10-10T03:44:27Z

During entropy evaluation, if the generated samples fail any statistical test, then, all of the bits will be discarded, and a second set of samples will be generated and tested. Double the ent_delay to give more chance to pass before performing retry. Signed-off-by: Gaurav Jain Signed-off-by: Peng Fan

drivers: crypto: fsl: rng: Reinitialize job ring

2025-08-27T08:12:21Z

u-boot internals were being corrupted following an EFI callback to get_rng(). One of the many footprints was a corruption of the EFI protocols linked list. A request for >16 bytes of random data is broken into smaller requests. Those requests are fed in a loop to the CAAM RNG, which uses a job queue ring for interaction. However, the job queue descriptor is created only at probe time. That descriptor may end up needing an endian swap (LS1046A) before being fed to the CAAM RNG. This corrupts the descriptor for the next iteration, since it will be blindly endian swapped yet again. Two issues arise. The number of words to endian swap is taken from the input descriptor itself. So on the second iteration, the length has been corrupted. This results in a corruption past the end of the descriptor: whatever is after in memory is endian swapped too. Second, some of the entries in the descriptor are DMA addresses. If the descriptor is still somehow considered valid after swapping, the data at the corrupted DMA address is now trampled. Linux properly initializes the descriptor for each iteration. This is what is now done with this commit. Signed-off-by: Anthony Pighin Signed-off-by: Peng Fan

crypto: tegra: Add Tegra AES engine driver

2025-08-01T05:43:41Z

This driver allows using Tegra AES engines within BSEV and BSEA blocks to encrypt and decrypt data using different AES algorithms. One use case is allowing u-boot to self update by using the already loaded AES key in the engine's SBK slot by the bootrom. Particular care must be taken as chainloaded u-boot's may not have the SBK slot loaded as the vendor bootloader erases it before leaving it. Signed-off-by: Ion Agorria