Eric Biggers

That would probably be the most logical way to do it. That's what the [`fscrypt` tool](https://github.com/google/fscrypt) does, for example.

The kernel API is documented at https://www.kernel.org/doc/html/latest/filesystems/fscrypt.html#user-api

The new patch series from SiFive is [[PATCH 00/12] RISC-V: provide some accelerated cryptography implementations using vector extensions](https://lore.kernel.org/linux-crypto/[email protected]/T/#u), sent a few weeks ago. It generally seems to be in good...

The latest patchset is [[PATCH v3 00/10] RISC-V crypto with reworked asm files](https://lore.kernel.org/linux-crypto/[email protected]/T/#u). All prerequisites are upstream now, and we are aiming for the 6.9 kernel for the vector crypto...

RISC-V vector crypto optimizations were merged upstream for v6.9-rc1. See https://git.kernel.org/linus/67daf84203a02cf0 and https://git.kernel.org/linus/c150b809f7de2afd. The merged code covers all the basic use cases of kernel crypto. Future work will accelerate some...

Android will need: ``` CONFIG_RISCV_ISA_V=y CONFIG_CRYPTO_AES_RISCV64=y CONFIG_CRYPTO_CHACHA_RISCV64=y CONFIG_CRYPTO_GHASH_RISCV64=y CONFIG_CRYPTO_SHA256_RISCV64=y CONFIG_CRYPTO_SHA512_RISCV64=y ```

Which of the vector crypto extensions, exactly, are planned to be included in the baseline? I believe it needs to be at least Zvkng ("NIST Algorithm Suite with GCM"), which...

"All of them" would be Zvkng_Zvbc_Zvbb_Zvks, right? I.e.: NIST Algorithm Suite with GCM, Vector Carryless Multiplication, Vector Basic Bit-manipulation, and ShangMi Algorithm Suite. I'd be quite happy with Zvkng_Zvbc_Zvbb, and...

Fixed by 068b9f8f5dec46b222470f6d3f03244ba5b65f5c

There was a release recently, and there haven't been many changes since then, so it probably will be at least a few months before we do another release.