On Thu, 22 Oct 2026 12:40:54 +0200, Igor Opaniuk wrote:
> Add the SHA-512 (and SHA-384) block function on the SHA512H, SHA512H2,
> SHA512SU0 and SHA512SU1 instructions of the ARMv8.2 Crypto Extensions,
> next to the existing SHA-1 and SHA-256 ones. Hashing is the dominant cost
> of verifying large images (FIT, AVB hash descriptors over 64 MiB boot
> images), and SHA-512 is the algorithm of choice for new signing keys.
>
> These instructions are optional: ID_AA64ISAR0_EL1.SHA2 is 0b0010 when
> they are implemented and 0b0001 for SHA-256 only (Cortex-A55/A76/A78 and
> Neoverse N1 have only SHA-256; Cortex-A710/X2, Neoverse V1/N2 and newer
> have both). The glue therefore reads the register and falls back to the
> generic C implementation, which is exported as sha512_block_fn_generic()
> with sha512_block_fn() as its weak alias. The same binary thus runs on
> any ARMv8 CPU, including VMs whose capabilities vary, so the option
> defaults to y like ARMV8_CE_SHA256. The assembler is given
> ".arch armv8.2-a+sha3" and emits the instructions natively (binutils >=
> 2.29); no .inst encodings are needed.
>
> [...]
Applied to u-boot/main, thanks!
[1/1] arm64: add SHA-512 acceleration with the ARMv8.2 Crypto Extensions
commit: 19446d649cf576211b1282ebc86e9cd171b5fae4
--
Tom
