Linux 7.4 merges optimized AES crypto for x86, RISC-V and SPARC64
Google engineer Eric Biggers migrated AVX and AES-NI accelerated AES implementations into the kernel crypto library for Linux 7.4, with a separate SPARC64 contribution from Stian Halseth.
Summary
Linux 7.4 kernel merges performance improvements to its cryptographic subsystem. Google engineer Eric Biggers moved optimized AES implementations for ECB, CBC, CBC-CTS, CTR, XCTR and XTS modes into lib/crypto, enabling AVX and AES-NI acceleration on x86/x86_64 and optimized paths on RISC-V. The change also eliminates redundant glue code. Separately, Stian Halseth contributed a SPARC64 AES-XTS implementation using crypto opcodes.
What changed in the crypto library
- Modes migrated: ECB, CBC, CBC-CTS, CTR, XCTR, XTS now live in lib/crypto rather than architecture-specific locations
- x86 acceleration: Uses AVX optimized paths plus AES-NI instructions on Intel/AMD CPUs
- RISC-V: Gains optimized AES mode implementations through the same library migration
- SPARC64: New AES-XTS implementation using native crypto opcodes, contributed by Stian Halseth
- Code cleanup: Removes redundant glue code and duplication between cipher implementations
Why it matters
Kernel-level crypto acceleration benefits disk encryption, network security protocols and any subsystem using the standard crypto APIs, with particular relevance for RISC-V systems gaining mature optimized paths.
Original reference: www.phoronix.com →