Marvell CESA cryptographic accelerator for Orion, Kirkwood, Dove, and Armada SoCs
An on-chip cryptographic engine built into Marvell's ARM-based system-on-chip families (Orion, Kirkwood, Dove, and Armada 370/XP/375/38x) used since the late 2000s. It offloads AES, DES, and SHA/MD5 operations for embedded gear like consumer NAS boxes, home routers, and industrial networking appliances.
recommendation
Worth keeping but documenting its niche, because the hardware is older and shipping in modest volumes today, yet Marvell Armada 38x parts and boards like SolidRun's ClearFog A388 are still sold new in 2025 for embedded networking, and OpenWrt continues to support the mvebu platform. Upstream activity as recent as 2026 shows the driver is still being maintained rather than drifting toward removal, so there is no reason to deprecate it — just a reason to flag it as serving a shrinking embedded audience.
repository signals
sources
- lore.kernel.org
Recent upstream patch traffic still touches the CESA driver in 2026, indicating the driver is maintained rather than abandoned.
- marvell.com
Marvell's ARMADA 38x product page identifies the SoC family and positions it for embedded NAS/networking applications that use this accelerator block.
- solid-run.com
SolidRun still presents ClearFog A388 boards built around the Marvell Armada 388 SoC, a platform using this driver family.
- shop.solid-run.com
A Marvell Armada A388 evaluation kit was still listed for sale, supporting the conclusion that compatible hardware remained purchasable in 2025-era channels.
- openwrt.org
OpenWrt still documents the mvebu target as working for Marvell Armada 370/380/XP series, showing ongoing downstream deployment in embedded/router use.
codex reasoning notes (technical)
Local `rg` on the source tree showed DT compatibles for Orion, Kirkwood, Dove, Armada 370, Armada XP, Armada 375, and Armada 38x in `cesa.c`, confirming the chipset family. `lore_file_timeline` returned recent 2025-2026 patch activity with maintenance cleanups and no visible removal-oriented subjects, so this does not look deprecation-bound. Web search returned Marvell's ARMADA 38x page plus SolidRun ClearFog A388 current product and shop pages, which indicate compatible hardware is still sold in embedded channels, but only in niche/industrial volumes. OpenWrt's current mvebu target page supports continued real-world deployments. Because hardware is old and niche but still sold and still seeing upstream attention, `keep-annotate` fits better than `deprecate` or `remove`.