[PULL 00/22] Crypto and more patches

[Daniel P . Berrangé]

The following changes since commit bd38ae26cea0d1d6a97f930248df149204c210a2:

  Merge remote-tracking branch 'remotes/rth-gitlab/tags/pull-tcg-20210710' into 
staging (2021-07-12 11:02:39 +0100)

are available in the Git repository at:

  https://gitlab.com/berrange/qemu tags/crypto-and-more-pull-request

for you to fetch changes up to 1fc9958410c8683950ea22084b133a755561398b:

  tests/migration: fix unix socket migration (2021-07-12 14:00:20 +0100)

----------------------------------------------------------------
Merge crypto updates and misc fixes

 * Introduce a GNUTLS backend for crypto algorithms
 * Change crypto library preference gnutls > gcrypt > nettle > built-in
 * Remove built-in DES impl
 * Remove XTS mode from built-in AES impl
 * Fix seccomp rules to allow resource info getters
 * Fix migration performance test
 * Use GDateTime in io/ and net/rocker/ code

----------------------------------------------------------------

Daniel P. Berrangé (21):
  crypto: remove conditional around 3DES crypto test cases
  crypto: remove obsolete crypto test condition
  crypto: skip essiv ivgen tests if AES+ECB isn't available
  crypto: use &error_fatal in crypto tests
  crypto: fix gcrypt min version 1.8 regression
  crypto: drop gcrypt thread initialization code
  crypto: drop custom XTS support in gcrypt driver
  crypto: add crypto tests for single block DES-ECB and DES-CBC
  crypto: delete built-in DES implementation
  crypto: delete built-in XTS cipher mode support
  crypto: replace 'des-rfb' cipher with 'des'
  crypto: flip priority of backends to prefer gcrypt
  crypto: introduce build system for gnutls crypto backend
  crypto: add gnutls cipher provider
  crypto: add gnutls hash provider
  crypto: add gnutls hmac provider
  crypto: add gnutls pbkdf provider
  crypto: prefer gnutls as the crypto backend if new enough
  net/rocker: use GDateTime for formatting timestamp in debug messages
  io: use GDateTime for formatting timestamp for websock headers
  seccomp: don't block getters for resource control syscalls

Hyman (1):
  tests/migration: fix unix socket migration

 crypto/cipher-builtin.c.inc         | 132 ---------
 crypto/cipher-gcrypt.c.inc          | 143 +---------
 crypto/cipher-gnutls.c.inc          | 324 ++++++++++++++++++++++
 crypto/cipher-nettle.c.inc          |  26 +-
 crypto/cipher.c                     |  30 +-
 crypto/desrfb.c                     | 416 ----------------------------
 crypto/hash-gnutls.c                | 104 +++++++
 crypto/hmac-gnutls.c                | 139 ++++++++++
 crypto/init.c                       |  62 -----
 crypto/meson.build                  |   9 +-
 crypto/pbkdf-gnutls.c               |  90 ++++++
 hw/net/rocker/rocker.h              |  11 +-
 io/channel-websock.c                |  10 +-
 meson.build                         | 102 ++++---
 qapi/crypto.json                    |   4 +-
 softmmu/qemu-seccomp.c              |   6 -
 tests/migration/guestperf/engine.py |   2 +-
 tests/unit/test-crypto-cipher.c     |  31 ++-
 tests/unit/test-crypto-hash.c       |  13 +-
 tests/unit/test-crypto-hmac.c       |  28 +-
 tests/unit/test-crypto-ivgen.c      |  14 +-
 tests/unit/test-crypto-pbkdf.c      |   5 +-
 ui/vnc.c                            |  20 +-
 23 files changed, 823 insertions(+), 898 deletions(-)
 create mode 100644 crypto/cipher-gnutls.c.inc
 delete mode 100644 crypto/desrfb.c
 create mode 100644 crypto/hash-gnutls.c
 create mode 100644 crypto/hmac-gnutls.c
 create mode 100644 crypto/pbkdf-gnutls.c

-- 
2.31.1