STMicroelectronics STM32 CRYP and HASH crypto accelerators
Hardware AES, DES/3DES, and SHA/HMAC acceleration blocks built into STMicroelectronics STM32 microcontrollers and microprocessors, including the STM32F7 series and the Linux-capable STM32MP1 and STM32MP13 application processors widely used in industrial, IoT, and embedded gateway products.
recommendation
It should stay in the kernel because the hardware is built into STMicroelectronics' STM32 microcontroller and microprocessor families that are actively shipping in 2025, and the driver itself is still receiving upstream patches as recently as March 2026. Because the crypto block is SoC-specific silicon, no other driver can replace it for these chips.
repository signals
sources
- lore.kernel.org
stm32-hash saw an upstream patch in March 2026, indicating current maintenance activity rather than abandonment.
- lore.kernel.org
stm32-cryp saw an upstream patch in March 2026, indicating current maintenance activity rather than abandonment.
- st.com
STM32F756 remains an active, volume-production MCU and advertises hardware crypto including HASH/HMAC and cryptographic acceleration.
- st.com
STM32MP135F remains an active, volume-production MPU with secured cryptographic acceleration and HASH/HMAC hardware.
- st.com
STM32MP1-series products were still listed by ST with secure boot and cryptography options, supporting ongoing Linux-class embedded deployments.
codex reasoning notes (technical)
Local shell `rg` on the driver sources shows active platform-driver code for STM32 CRYP and HASH, with compatibles including stm32f756, stm32mp1, and stm32mp13. `lore_file_timeline` on both C files returned fresh 2026 linux-crypto traffic and no sign of removal-oriented history, so this is an actively maintained embedded SoC driver, not a legacy orphan. ST product URLs were obtained via web search and show relevant STM32 families still active/in production in 2025-2026, so hardware is still sold new. Deployment is medium: real in industrial/IoT/embedded Linux and MCU products, but not broad general-purpose computing. No natural upstream replacement driver exists because this is SoC-specific crypto IP.