Re: [RFC v3 20/27] crypto: sha: Load early in boot

[Jonathan Cameron]

On Wed, 11 Feb 2026 13:29:27 +1000
alistair23@xxxxxxxxx wrote:

> From: Alistair Francis <alistair.francis@xxxxxxx>
> 
> Work is ongoing to support PCIe device attestation and authentication.
> As part of this probing a PCIe device will require generating hashes via
> the SPDM protocol to the kernel.
> 
> Linux should verify the device before enabling the device, which means we
> need the crypto functions to be ready before arch initilisation (where PCIe
> init happens). Move the crypto init to postcore to
> ensure it's loaded before PCIe devices.
> 
> This allows us to verify the certificate chain provided by a PCIe device
> via SPDM before we enable it.
> 
> Signed-off-by: Alistair Francis <alistair.francis@xxxxxxx>
Reviewed-by: Jonathan Cameron <jonathan.cameron@xxxxxxxxxx>