[fips-9-compliant] Rebase Custom changes to 5.14.0-570.52.1.el9_6#628

Merged

PlaidCat merged 15 commits intofips-9-compliant/5.14.0-570.52.1.el9_6from

jmaple_fips-9-compliant/5.14.0-570.52.1.el9_6

Oct 17, 2025

Commits on Oct 15, 2025

SUSE: patch: crypto-ecdh-implement-FIPS-PCT.patch

jallisonciq
authored and
PlaidCat
committed
crypto: essiv - Zeroize keys on exit in essiv_aead_setkey()

jason-rodri
authored and
PlaidCat
committed
crypto: jitter - replace LFSR with SHA3-256

jallisonciq
authored and
PlaidCat
committed
crypto: aead,cipher - zeroize key buffer after use

jallisonciq
authored and
PlaidCat
committed
crypto: ecdh - explicitly zeroize private_key

jvdsn
authored and
PlaidCat
committed
crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init

uudiin
authored and
PlaidCat
committed
crypto: Kconfig - Make CRYPTO_FIPS depend on the DRBG being built-in

kerneltoast
authored and
PlaidCat
committed
random: Restrict extrng registration to init time

kerneltoast
authored and
PlaidCat
committed
crypto: rng - Convert crypto_default_rng_refcnt into an unsigned int

kerneltoast
authored and
PlaidCat
committed
crypto: rng - Only allow the DRBG to register as "stdrng" in FIPS mode

kerneltoast
authored and
PlaidCat
committed
crypto: drbg - Align buffers to at least a cache line

kerneltoast
authored and
PlaidCat
committed
crypto: rng - Fix priority inversions due to mutex locks

kerneltoast
authored and
PlaidCat
committed
mm/gup: reintroduce pin_user_pages_fast_only()

kerneltoast
authored and
PlaidCat
committed
crypto: rng - Implement fast per-CPU DRBG instances

kerneltoast
authored and
PlaidCat
committed
configs: Ensure FIPS settings defined
PlaidCat
committed