mirror of https://github.com/torvalds/linux.git
d8d83d8ab0
Basically nobody should use blake2s in an HMAC construction; it already has a keyed variant. But unfortunately for historical reasons, Noise, used by WireGuard, uses HKDF quite strictly, which means we have to use this. Because this really shouldn't be used by others, this commit moves it into wireguard's noise.c locally, so that kernels that aren't using WireGuard don't get this superfluous code baked in. On m68k systems, this shaves off ~314 bytes. Cc: Herbert Xu <herbert@gondor.apana.org.au> Tested-by: Geert Uytterhoeven <geert@linux-m68k.org> Acked-by: Ard Biesheuvel <ardb@kernel.org> Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com> |
||
|---|---|---|
| .. | ||
| internal | ||
| acompress.h | ||
| aead.h | ||
| aes.h | ||
| akcipher.h | ||
| algapi.h | ||
| arc4.h | ||
| asym_tpm_subtype.h | ||
| authenc.h | ||
| b128ops.h | ||
| blake2b.h | ||
| blake2s.h | ||
| blowfish.h | ||
| cast5.h | ||
| cast6.h | ||
| cast_common.h | ||
| chacha.h | ||
| chacha20poly1305.h | ||
| cryptd.h | ||
| ctr.h | ||
| curve25519.h | ||
| des.h | ||
| dh.h | ||
| drbg.h | ||
| ecc_curve.h | ||
| ecdh.h | ||
| engine.h | ||
| gcm.h | ||
| gf128mul.h | ||
| ghash.h | ||
| hash.h | ||
| hash_info.h | ||
| hmac.h | ||
| if_alg.h | ||
| kdf_sp800108.h | ||
| kpp.h | ||
| md5.h | ||
| nhpoly1305.h | ||
| null.h | ||
| padlock.h | ||
| pcrypt.h | ||
| pkcs7.h | ||
| poly1305.h | ||
| public_key.h | ||
| rng.h | ||
| scatterwalk.h | ||
| serpent.h | ||
| sha1.h | ||
| sha1_base.h | ||
| sha2.h | ||
| sha3.h | ||
| sha256_base.h | ||
| sha512_base.h | ||
| skcipher.h | ||
| sm2.h | ||
| sm3.h | ||
| sm3_base.h | ||
| sm4.h | ||
| streebog.h | ||
| twofish.h | ||
| xts.h | ||