Commit 8f4c9978de91 for kernel

commit 8f4c9978de91a9a3b37df1e74d6201acfba6cefd
Merge: db425f7a0b15 0e253e250ed0
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date:   Tue Dec 2 18:24:35 2025 -0800

    Merge tag 'aes-gcm-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiggers/linux

    Pull AES-GCM optimizations from Eric Biggers:
     "More optimizations and cleanups for the x86_64 AES-GCM code:

       - Add a VAES+AVX2 optimized implementation of AES-GCM. This is very
         helpful on CPUs that have VAES but not AVX512, such as AMD Zen 3.

       - Make the VAES+AVX512 optimized implementation of AES-GCM handle
         large amounts of associated data efficiently.

       - Remove the "avx10_256" implementation of AES-GCM. It's superseded
         by the VAES+AVX2 optimized implementation.

       - Rename the "avx10_512" implementation to "avx512"

      Overall, this fills in a gap where AES-GCM wasn't fully optimized on
      some recent CPUs. It also drops code that won't be as useful as
      initially expected due to AVX10/256 being dropped from the AVX10 spec"

    * tag 'aes-gcm-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiggers/linux:
      crypto: x86/aes-gcm-vaes-avx2 - initialize full %rax return register
      crypto: x86/aes-gcm - optimize long AAD processing with AVX512
      crypto: x86/aes-gcm - optimize AVX512 precomputation of H^2 from H^1
      crypto: x86/aes-gcm - revise some comments in AVX512 code
      crypto: x86/aes-gcm - reorder AVX512 precompute and aad_update functions
      crypto: x86/aes-gcm - clean up AVX512 code to assume 512-bit vectors
      crypto: x86/aes-gcm - rename avx10 and avx10_512 to avx512
      crypto: x86/aes-gcm - remove VAES+AVX10/256 optimized code
      crypto: x86/aes-gcm - add VAES+AVX2 optimized code