[GIT PULL] Crypto library fixes for v6.19-rc1

[Eric Biggers]

The following changes since commit 7a3984bbd69055898add0fe22445f99435f33450:

  Merge tag 'mips_6.19' of git://git.kernel.org/pub/scm/linux/kernel/git/mips/linux (2025-12-10 06:20:22 +0900)

are available in the Git repository at:

  https://git.kernel.org/pub/scm/linux/kernel/git/ebiggers/linux.git tags/libcrypto-fixes-for-linus

for you to fetch changes up to f6a458746f905adb7d70e50e8b9383dc9e3fd75f:

  crypto: arm64/ghash - Fix incorrect output from ghash-neon (2025-12-10 09:46:26 -0800)

----------------------------------------------------------------

Fixes for some recent regressions as well as some longstanding issues:

 - Fix incorrect output from the arm64 NEON implementation of GHASH

 - Merge the ksimd scopes in the arm64 XTS code to reduce stack usage

 - Roll up the BLAKE2b round loop on 32-bit kernels to greatly reduce
   code size and stack usage

 - Add missing RISCV_EFFICIENT_VECTOR_UNALIGNED_ACCESS dependency

 - Fix chacha-riscv64-zvkb.S to not use frame pointer for data

----------------------------------------------------------------
Ard Biesheuvel (2):
      crypto/arm64: aes/xts - Use single ksimd scope to reduce stack bloat
      crypto/arm64: sm4/xts - Merge ksimd scopes to reduce stack bloat

Eric Biggers (4):
      lib/crypto: riscv: Depend on RISCV_EFFICIENT_VECTOR_UNALIGNED_ACCESS
      lib/crypto: blake2b: Roll up BLAKE2b round loop on 32-bit
      lib/crypto: blake2s: Replace manual unrolling with unrolled_full
      crypto: arm64/ghash - Fix incorrect output from ghash-neon

Vivian Wang (1):
      lib/crypto: riscv/chacha: Avoid s0/fp register

 arch/arm64/crypto/aes-glue.c           | 75 ++++++++++++++++------------------
 arch/arm64/crypto/aes-neonbs-glue.c    | 44 ++++++++++----------
 arch/arm64/crypto/ghash-ce-glue.c      |  2 +-
 arch/arm64/crypto/sm4-ce-glue.c        | 42 +++++++++----------
 arch/riscv/crypto/Kconfig              | 12 ++++--
 lib/crypto/Kconfig                     |  9 ++--
 lib/crypto/Makefile                    |  1 -
 lib/crypto/blake2b.c                   | 44 +++++++++-----------
 lib/crypto/blake2s.c                   | 38 ++++++++---------
 lib/crypto/riscv/chacha-riscv64-zvkb.S |  5 +--
 10 files changed, 130 insertions(+), 142 deletions(-)