Pick required FIPS changes + Add FIPS RNG performance overhaul#372

Merged

kerneltoast merged 11 commits intofips-9-compliant/5.14.0-570.18.1.el9_6from

{sultan}_fips-rng_rocky9_6

Jun 28, 2025

Commits on Jun 25, 2025

crypto: jitter - replace LFSR with SHA3-256

jallisonciq
authored and
kerneltoast
committed
crypto: aead,cipher - zeroize key buffer after use

jallisonciq
authored and
kerneltoast
committed
SUSE: patch: crypto-ecdh-implement-FIPS-PCT.patch

jallisonciq
authored and
kerneltoast
committed
crypto: ecdh - explicitly zeroize private_key

jvdsn
authored and
kerneltoast
committed
crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init

uudiin
authored and
kerneltoast
committed
In essiv_aead_setkey(), use the same logic as crypto_authenc_esn_setkey() to zeroize keys on exit.

jason-rodri
authored and
kerneltoast
committed
crypto: drbg - Align buffers to at least a cache line
kerneltoast
committed
mm/gup: introduce pin_user_pages_fast_only()
kerneltoast
committed
crypto: rng - Convert crypto_default_rng_refcnt into an unsigned int
kerneltoast
committed
crypto: rng - Fix priority inversions due to mutex locks
kerneltoast
committed

Commits on Jun 28, 2025

crypto: rng - Implement fast per-CPU DRBG instances
kerneltoast
committed