crypto: Add CRYPTO_ALG_KERN_DRIVER_ONLY flag

The added CRYPTO_ALG_KERN_DRIVER_ONLY indicates whether a cipher
is only available via a kernel driver. If the cipher implementation
might be available by using an instruction set or by porting the
kernel code, then it must not be set.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>

12 files changed, 78 insertions, 25 deletions

diff --git a/drivers/crypto/caam/caamalg.c b/drivers/crypto/caam/caamalg.c
index e73cf2e8110..e9acadbb1d3 100644
--- a/drivers/crypto/caam/caamalg.c
+++ b/drivers/crypto/caam/caamalg.c
@@ -2205,7 +2205,8 @@ static struct caam_crypto_alg *caam_alg_alloc(struct device *ctrldev,
         alg->cra_blocksize = template->blocksize;
         alg->cra_alignmask = 0;
         alg->cra_ctxsize = sizeof(struct caam_ctx);
-        alg->cra_flags = CRYPTO_ALG_ASYNC | template->type;
+        alg->cra_flags = CRYPTO_ALG_ASYNC | CRYPTO_ALG_KERN_DRIVER_ONLY |
+                         template->type;
         switch (template->type) {
         case CRYPTO_ALG_TYPE_ABLKCIPHER:
                 alg->cra_type = &crypto_ablkcipher_type;
diff --git a/drivers/crypto/geode-aes.c b/drivers/crypto/geode-aes.c
index 219d09cbb0d..f3e36c86b6c 100644
--- a/drivers/crypto/geode-aes.c
+++ b/drivers/crypto/geode-aes.c
@@ -393,7 +393,8 @@ static struct crypto_alg geode_cbc_alg = {
         .cra_driver_name        =       "cbc-aes-geode",
         .cra_priority           =       400,
         .cra_flags                      =       CRYPTO_ALG_TYPE_BLKCIPHER |
-                                                        CRYPTO_ALG_NEED_FALLBACK,
+                                                CRYPTO_ALG_KERN_DRIVER_ONLY |
+                                                CRYPTO_ALG_NEED_FALLBACK,
         .cra_init                       =       fallback_init_blk,
         .cra_exit                       =       fallback_exit_blk,
         .cra_blocksize          =       AES_MIN_BLOCK_SIZE,
@@ -479,7 +480,8 @@ static struct crypto_alg geode_ecb_alg = {
         .cra_driver_name        =       "ecb-aes-geode",
         .cra_priority           =       400,
         .cra_flags                      =       CRYPTO_ALG_TYPE_BLKCIPHER |
-                                                        CRYPTO_ALG_NEED_FALLBACK,
+                                                CRYPTO_ALG_KERN_DRIVER_ONLY |
+                                                CRYPTO_ALG_NEED_FALLBACK,
         .cra_init                       =       fallback_init_blk,
         .cra_exit                       =       fallback_exit_blk,
         .cra_blocksize          =       AES_MIN_BLOCK_SIZE,
diff --git a/drivers/crypto/hifn_795x.c b/drivers/crypto/hifn_795x.c
index fe765f49de5..6bd9d176820 100644
--- a/drivers/crypto/hifn_795x.c
+++ b/drivers/crypto/hifn_795x.c
@@ -2494,7 +2494,8 @@ static int hifn_alg_alloc(struct hifn_device *dev, struct hifn_alg_template *t)
                  t->drv_name, dev->name);
 
         alg->alg.cra_priority = 300;
-        alg->alg.cra_flags = CRYPTO_ALG_TYPE_ABLKCIPHER | CRYPTO_ALG_ASYNC;
+        alg->alg.cra_flags = CRYPTO_ALG_TYPE_ABLKCIPHER |
+                                CRYPTO_ALG_KERN_DRIVER_ONLY | CRYPTO_ALG_ASYNC;
         alg->alg.cra_blocksize = t->bsize;
         alg->alg.cra_ctxsize = sizeof(struct hifn_context);
         alg->alg.cra_alignmask = 0;
diff --git a/drivers/crypto/ixp4xx_crypto.c b/drivers/crypto/ixp4xx_crypto.c
index 4c20c5bf605..a82c11af9f4 100644
--- a/drivers/crypto/ixp4xx_crypto.c
+++ b/drivers/crypto/ixp4xx_crypto.c
@@ -1449,6 +1449,7 @@ static int __init ixp_module_init(void)
                         /* block ciphers */
                         cra->cra_type = &crypto_ablkcipher_type;
                         cra->cra_flags = CRYPTO_ALG_TYPE_ABLKCIPHER |
+                                         CRYPTO_ALG_KERN_DRIVER_ONLY |
                                          CRYPTO_ALG_ASYNC;
                         if (!cra->cra_ablkcipher.setkey)
                                 cra->cra_ablkcipher.setkey = ablk_setkey;
@@ -1461,6 +1462,7 @@ static int __init ixp_module_init(void)
                         /* authenc */
                         cra->cra_type = &crypto_aead_type;
                         cra->cra_flags = CRYPTO_ALG_TYPE_AEAD |
+                                         CRYPTO_ALG_KERN_DRIVER_ONLY |
                                          CRYPTO_ALG_ASYNC;
                         cra->cra_aead.setkey = aead_setkey;
                         cra->cra_aead.setauthsize = aead_setauthsize;
diff --git a/drivers/crypto/mv_cesa.c b/drivers/crypto/mv_cesa.c
index 597235a2f8f..8ad2883505a 100644
--- a/drivers/crypto/mv_cesa.c
+++ b/drivers/crypto/mv_cesa.c
@@ -898,7 +898,8 @@ struct crypto_alg mv_aes_alg_ecb = {
         .cra_name               = "ecb(aes)",
         .cra_driver_name        = "mv-ecb-aes",
         .cra_priority   = 300,
-        .cra_flags      = CRYPTO_ALG_TYPE_ABLKCIPHER | CRYPTO_ALG_ASYNC,
+        .cra_flags      = CRYPTO_ALG_TYPE_ABLKCIPHER |
+                          CRYPTO_ALG_KERN_DRIVER_ONLY | CRYPTO_ALG_ASYNC,
         .cra_blocksize  = 16,
         .cra_ctxsize    = sizeof(struct mv_ctx),
         .cra_alignmask  = 0,
@@ -920,7 +921,8 @@ struct crypto_alg mv_aes_alg_cbc = {
         .cra_name               = "cbc(aes)",
         .cra_driver_name        = "mv-cbc-aes",
         .cra_priority   = 300,
-        .cra_flags      = CRYPTO_ALG_TYPE_ABLKCIPHER | CRYPTO_ALG_ASYNC,
+        .cra_flags      = CRYPTO_ALG_TYPE_ABLKCIPHER |
+                          CRYPTO_ALG_KERN_DRIVER_ONLY | CRYPTO_ALG_ASYNC,
         .cra_blocksize  = AES_BLOCK_SIZE,
         .cra_ctxsize    = sizeof(struct mv_ctx),
         .cra_alignmask  = 0,
@@ -952,7 +954,8 @@ struct ahash_alg mv_sha1_alg = {
                           .cra_driver_name = "mv-sha1",
                           .cra_priority = 300,
                           .cra_flags =
-                          CRYPTO_ALG_ASYNC | CRYPTO_ALG_NEED_FALLBACK,
+                          CRYPTO_ALG_ASYNC | CRYPTO_ALG_KERN_DRIVER_ONLY |
+                          CRYPTO_ALG_NEED_FALLBACK,
                           .cra_blocksize = SHA1_BLOCK_SIZE,
                           .cra_ctxsize = sizeof(struct mv_tfm_hash_ctx),
                           .cra_init = mv_cra_hash_sha1_init,
@@ -976,7 +979,8 @@ struct ahash_alg mv_hmac_sha1_alg = {
                           .cra_driver_name = "mv-hmac-sha1",
                           .cra_priority = 300,
                           .cra_flags =
-                          CRYPTO_ALG_ASYNC | CRYPTO_ALG_NEED_FALLBACK,
+                          CRYPTO_ALG_ASYNC | CRYPTO_ALG_KERN_DRIVER_ONLY |
+                          CRYPTO_ALG_NEED_FALLBACK,
                           .cra_blocksize = SHA1_BLOCK_SIZE,
                           .cra_ctxsize = sizeof(struct mv_tfm_hash_ctx),
                           .cra_init = mv_cra_hash_hmac_sha1_init,
diff --git a/drivers/crypto/n2_core.c b/drivers/crypto/n2_core.c
index 8944dabc0e3..67b97c5fd85 100644
--- a/drivers/crypto/n2_core.c
+++ b/drivers/crypto/n2_core.c
@@ -1402,7 +1402,8 @@ static int __devinit __n2_register_one_cipher(const struct n2_cipher_tmpl *tmpl)
         snprintf(alg->cra_name, CRYPTO_MAX_ALG_NAME, "%s", tmpl->name);
         snprintf(alg->cra_driver_name, CRYPTO_MAX_ALG_NAME, "%s-n2", tmpl->drv_name);
         alg->cra_priority = N2_CRA_PRIORITY;
-        alg->cra_flags = CRYPTO_ALG_TYPE_ABLKCIPHER | CRYPTO_ALG_ASYNC;
+        alg->cra_flags = CRYPTO_ALG_TYPE_ABLKCIPHER |
+                         CRYPTO_ALG_KERN_DRIVER_ONLY | CRYPTO_ALG_ASYNC;
         alg->cra_blocksize = tmpl->block_size;
         p->enc_type = tmpl->enc_type;
         alg->cra_ctxsize = sizeof(struct n2_cipher_context);
@@ -1493,7 +1494,9 @@ static int __devinit __n2_register_one_ahash(const struct n2_hash_tmpl *tmpl)
         snprintf(base->cra_name, CRYPTO_MAX_ALG_NAME, "%s", tmpl->name);
         snprintf(base->cra_driver_name, CRYPTO_MAX_ALG_NAME, "%s-n2", tmpl->name);
         base->cra_priority = N2_CRA_PRIORITY;
-        base->cra_flags = CRYPTO_ALG_TYPE_AHASH | CRYPTO_ALG_NEED_FALLBACK;
+        base->cra_flags = CRYPTO_ALG_TYPE_AHASH |
+                          CRYPTO_ALG_KERN_DRIVER_ONLY |
+                          CRYPTO_ALG_NEED_FALLBACK;
         base->cra_blocksize = tmpl->block_size;
         base->cra_ctxsize = sizeof(struct n2_hash_ctx);
         base->cra_module = THIS_MODULE;
diff --git a/drivers/crypto/omap-aes.c b/drivers/crypto/omap-aes.c
index 5b970d9e995..63e57b57a12 100644
--- a/drivers/crypto/omap-aes.c
+++ b/drivers/crypto/omap-aes.c
@@ -756,7 +756,9 @@ static struct crypto_alg algs[] = {
         .cra_name               = "ecb(aes)",
         .cra_driver_name        = "ecb-aes-omap",
         .cra_priority           = 100,
-        .cra_flags              = CRYPTO_ALG_TYPE_ABLKCIPHER | CRYPTO_ALG_ASYNC,
+        .cra_flags              = CRYPTO_ALG_TYPE_ABLKCIPHER |
+                                  CRYPTO_ALG_KERN_DRIVER_ONLY |
+                                  CRYPTO_ALG_ASYNC,
         .cra_blocksize          = AES_BLOCK_SIZE,
         .cra_ctxsize            = sizeof(struct omap_aes_ctx),
         .cra_alignmask          = 0,
@@ -776,7 +778,9 @@ static struct crypto_alg algs[] = {
         .cra_name               = "cbc(aes)",
         .cra_driver_name        = "cbc-aes-omap",
         .cra_priority           = 100,
-        .cra_flags              = CRYPTO_ALG_TYPE_ABLKCIPHER | CRYPTO_ALG_ASYNC,
+        .cra_flags              = CRYPTO_ALG_TYPE_ABLKCIPHER |
+                                  CRYPTO_ALG_KERN_DRIVER_ONLY |
+                                  CRYPTO_ALG_ASYNC,
         .cra_blocksize          = AES_BLOCK_SIZE,
         .cra_ctxsize            = sizeof(struct omap_aes_ctx),
         .cra_alignmask          = 0,
diff --git a/drivers/crypto/omap-sham.c b/drivers/crypto/omap-sham.c
index 6399a8f1938..a3fd6fc504b 100644
--- a/drivers/crypto/omap-sham.c
+++ b/drivers/crypto/omap-sham.c
@@ -953,6 +953,7 @@ static struct ahash_alg algs[] = {
                 .cra_driver_name        = "omap-sha1",
                 .cra_priority           = 100,
                 .cra_flags              = CRYPTO_ALG_TYPE_AHASH |
+                                                CRYPTO_ALG_KERN_DRIVER_ONLY |
                                                 CRYPTO_ALG_ASYNC |
                                                 CRYPTO_ALG_NEED_FALLBACK,
                 .cra_blocksize          = SHA1_BLOCK_SIZE,
@@ -975,6 +976,7 @@ static struct ahash_alg algs[] = {
                 .cra_driver_name        = "omap-md5",
                 .cra_priority           = 100,
                 .cra_flags              = CRYPTO_ALG_TYPE_AHASH |
+                                                CRYPTO_ALG_KERN_DRIVER_ONLY |
                                                 CRYPTO_ALG_ASYNC |
                                                 CRYPTO_ALG_NEED_FALLBACK,
                 .cra_blocksize          = SHA1_BLOCK_SIZE,
@@ -998,6 +1000,7 @@ static struct ahash_alg algs[] = {
                 .cra_driver_name        = "omap-hmac-sha1",
                 .cra_priority           = 100,
                 .cra_flags              = CRYPTO_ALG_TYPE_AHASH |
+                                                CRYPTO_ALG_KERN_DRIVER_ONLY |
                                                 CRYPTO_ALG_ASYNC |
                                                 CRYPTO_ALG_NEED_FALLBACK,
                 .cra_blocksize          = SHA1_BLOCK_SIZE,
@@ -1022,6 +1025,7 @@ static struct ahash_alg algs[] = {
                 .cra_driver_name        = "omap-hmac-md5",
                 .cra_priority           = 100,
                 .cra_flags              = CRYPTO_ALG_TYPE_AHASH |
+                                                CRYPTO_ALG_KERN_DRIVER_ONLY |
                                                 CRYPTO_ALG_ASYNC |
                                                 CRYPTO_ALG_NEED_FALLBACK,
                 .cra_blocksize          = SHA1_BLOCK_SIZE,
diff --git a/drivers/crypto/picoxcell_crypto.c b/drivers/crypto/picoxcell_crypto.c
index 58480d00932..410a03c01ca 100644
--- a/drivers/crypto/picoxcell_crypto.c
+++ b/drivers/crypto/picoxcell_crypto.c
@@ -1322,6 +1322,7 @@ static struct spacc_alg ipsec_engine_algs[] = {
                         .cra_driver_name = "cbc-aes-picoxcell",
                         .cra_priority = SPACC_CRYPTO_ALG_PRIORITY,
                         .cra_flags = CRYPTO_ALG_TYPE_ABLKCIPHER |
+                                     CRYPTO_ALG_KERN_DRIVER_ONLY |
                                      CRYPTO_ALG_ASYNC |
                                      CRYPTO_ALG_NEED_FALLBACK,
                         .cra_blocksize = AES_BLOCK_SIZE,
@@ -1349,6 +1350,7 @@ static struct spacc_alg ipsec_engine_algs[] = {
                         .cra_driver_name = "ecb-aes-picoxcell",
                         .cra_priority = SPACC_CRYPTO_ALG_PRIORITY,
                         .cra_flags = CRYPTO_ALG_TYPE_ABLKCIPHER |
+                                CRYPTO_ALG_KERN_DRIVER_ONLY |
                                 CRYPTO_ALG_ASYNC | CRYPTO_ALG_NEED_FALLBACK,
                         .cra_blocksize = AES_BLOCK_SIZE,
                         .cra_ctxsize = sizeof(struct spacc_ablk_ctx),
@@ -1373,7 +1375,9 @@ static struct spacc_alg ipsec_engine_algs[] = {
                         .cra_name = "cbc(des)",
                         .cra_driver_name = "cbc-des-picoxcell",
                         .cra_priority = SPACC_CRYPTO_ALG_PRIORITY,
-                        .cra_flags = CRYPTO_ALG_TYPE_ABLKCIPHER | CRYPTO_ALG_ASYNC,
+                        .cra_flags = CRYPTO_ALG_TYPE_ABLKCIPHER |
+                                        CRYPTO_ALG_ASYNC |
+                                        CRYPTO_ALG_KERN_DRIVER_ONLY,
                         .cra_blocksize = DES_BLOCK_SIZE,
                         .cra_ctxsize = sizeof(struct spacc_ablk_ctx),
                         .cra_type = &crypto_ablkcipher_type,
@@ -1398,7 +1402,9 @@ static struct spacc_alg ipsec_engine_algs[] = {
                         .cra_name = "ecb(des)",
                         .cra_driver_name = "ecb-des-picoxcell",
                         .cra_priority = SPACC_CRYPTO_ALG_PRIORITY,
-                        .cra_flags = CRYPTO_ALG_TYPE_ABLKCIPHER | CRYPTO_ALG_ASYNC,
+                        .cra_flags = CRYPTO_ALG_TYPE_ABLKCIPHER |
+                                        CRYPTO_ALG_ASYNC |
+                                        CRYPTO_ALG_KERN_DRIVER_ONLY,
                         .cra_blocksize = DES_BLOCK_SIZE,
                         .cra_ctxsize = sizeof(struct spacc_ablk_ctx),
                         .cra_type = &crypto_ablkcipher_type,
@@ -1422,7 +1428,9 @@ static struct spacc_alg ipsec_engine_algs[] = {
                         .cra_name = "cbc(des3_ede)",
                         .cra_driver_name = "cbc-des3-ede-picoxcell",
                         .cra_priority = SPACC_CRYPTO_ALG_PRIORITY,
-                        .cra_flags = CRYPTO_ALG_TYPE_ABLKCIPHER | CRYPTO_ALG_ASYNC,
+                        .cra_flags = CRYPTO_ALG_TYPE_ABLKCIPHER |
+                                        CRYPTO_ALG_ASYNC |
+                                        CRYPTO_ALG_KERN_DRIVER_ONLY,
                         .cra_blocksize = DES3_EDE_BLOCK_SIZE,
                         .cra_ctxsize = sizeof(struct spacc_ablk_ctx),
                         .cra_type = &crypto_ablkcipher_type,
@@ -1447,7 +1455,9 @@ static struct spacc_alg ipsec_engine_algs[] = {
                         .cra_name = "ecb(des3_ede)",
                         .cra_driver_name = "ecb-des3-ede-picoxcell",
                         .cra_priority = SPACC_CRYPTO_ALG_PRIORITY,
-                        .cra_flags = CRYPTO_ALG_TYPE_ABLKCIPHER | CRYPTO_ALG_ASYNC,
+                        .cra_flags = CRYPTO_ALG_TYPE_ABLKCIPHER |
+                                        CRYPTO_ALG_ASYNC |
+                                        CRYPTO_ALG_KERN_DRIVER_ONLY,
                         .cra_blocksize = DES3_EDE_BLOCK_SIZE,
                         .cra_ctxsize = sizeof(struct spacc_ablk_ctx),
                         .cra_type = &crypto_ablkcipher_type,
@@ -1472,7 +1482,9 @@ static struct spacc_alg ipsec_engine_algs[] = {
                         .cra_name = "authenc(hmac(sha1),cbc(aes))",
                         .cra_driver_name = "authenc-hmac-sha1-cbc-aes-picoxcell",
                         .cra_priority = SPACC_CRYPTO_ALG_PRIORITY,
-                        .cra_flags = CRYPTO_ALG_TYPE_AEAD | CRYPTO_ALG_ASYNC,
+                        .cra_flags = CRYPTO_ALG_TYPE_AEAD |
+                                        CRYPTO_ALG_ASYNC |
+                                        CRYPTO_ALG_KERN_DRIVER_ONLY,
                         .cra_blocksize = AES_BLOCK_SIZE,
                         .cra_ctxsize = sizeof(struct spacc_aead_ctx),
                         .cra_type = &crypto_aead_type,
@@ -1500,7 +1512,9 @@ static struct spacc_alg ipsec_engine_algs[] = {
                         .cra_name = "authenc(hmac(sha256),cbc(aes))",
                         .cra_driver_name = "authenc-hmac-sha256-cbc-aes-picoxcell",
                         .cra_priority = SPACC_CRYPTO_ALG_PRIORITY,
-                        .cra_flags = CRYPTO_ALG_TYPE_AEAD | CRYPTO_ALG_ASYNC,
+                        .cra_flags = CRYPTO_ALG_TYPE_AEAD |
+                                        CRYPTO_ALG_ASYNC |
+                                        CRYPTO_ALG_KERN_DRIVER_ONLY,
                         .cra_blocksize = AES_BLOCK_SIZE,
                         .cra_ctxsize = sizeof(struct spacc_aead_ctx),
                         .cra_type = &crypto_aead_type,
@@ -1527,7 +1541,9 @@ static struct spacc_alg ipsec_engine_algs[] = {
                         .cra_name = "authenc(hmac(md5),cbc(aes))",
                         .cra_driver_name = "authenc-hmac-md5-cbc-aes-picoxcell",
                         .cra_priority = SPACC_CRYPTO_ALG_PRIORITY,
-                        .cra_flags = CRYPTO_ALG_TYPE_AEAD | CRYPTO_ALG_ASYNC,
+                        .cra_flags = CRYPTO_ALG_TYPE_AEAD |
+                                        CRYPTO_ALG_ASYNC |
+                                        CRYPTO_ALG_KERN_DRIVER_ONLY,
                         .cra_blocksize = AES_BLOCK_SIZE,
                         .cra_ctxsize = sizeof(struct spacc_aead_ctx),
                         .cra_type = &crypto_aead_type,
@@ -1554,7 +1570,9 @@ static struct spacc_alg ipsec_engine_algs[] = {
                         .cra_name = "authenc(hmac(sha1),cbc(des3_ede))",
                         .cra_driver_name = "authenc-hmac-sha1-cbc-3des-picoxcell",
                         .cra_priority = SPACC_CRYPTO_ALG_PRIORITY,
-                        .cra_flags = CRYPTO_ALG_TYPE_AEAD | CRYPTO_ALG_ASYNC,
+                        .cra_flags = CRYPTO_ALG_TYPE_AEAD |
+                                        CRYPTO_ALG_ASYNC |
+                                        CRYPTO_ALG_KERN_DRIVER_ONLY,
                         .cra_blocksize = DES3_EDE_BLOCK_SIZE,
                         .cra_ctxsize = sizeof(struct spacc_aead_ctx),
                         .cra_type = &crypto_aead_type,
@@ -1582,7 +1600,9 @@ static struct spacc_alg ipsec_engine_algs[] = {
                         .cra_name = "authenc(hmac(sha256),cbc(des3_ede))",
                         .cra_driver_name = "authenc-hmac-sha256-cbc-3des-picoxcell",
                         .cra_priority = SPACC_CRYPTO_ALG_PRIORITY,
-                        .cra_flags = CRYPTO_ALG_TYPE_AEAD | CRYPTO_ALG_ASYNC,
+                        .cra_flags = CRYPTO_ALG_TYPE_AEAD |
+                                        CRYPTO_ALG_ASYNC |
+                                        CRYPTO_ALG_KERN_DRIVER_ONLY,
                         .cra_blocksize = DES3_EDE_BLOCK_SIZE,
                         .cra_ctxsize = sizeof(struct spacc_aead_ctx),
                         .cra_type = &crypto_aead_type,
@@ -1609,7 +1629,9 @@ static struct spacc_alg ipsec_engine_algs[] = {
                         .cra_name = "authenc(hmac(md5),cbc(des3_ede))",
                         .cra_driver_name = "authenc-hmac-md5-cbc-3des-picoxcell",
                         .cra_priority = SPACC_CRYPTO_ALG_PRIORITY,
-                        .cra_flags = CRYPTO_ALG_TYPE_AEAD | CRYPTO_ALG_ASYNC,
+                        .cra_flags = CRYPTO_ALG_TYPE_AEAD |
+                                        CRYPTO_ALG_ASYNC |
+                                        CRYPTO_ALG_KERN_DRIVER_ONLY,
                         .cra_blocksize = DES3_EDE_BLOCK_SIZE,
                         .cra_ctxsize = sizeof(struct spacc_aead_ctx),
                         .cra_type = &crypto_aead_type,
@@ -1639,7 +1661,9 @@ static struct spacc_alg l2_engine_algs[] = {
                         .cra_name = "f8(kasumi)",
                         .cra_driver_name = "f8-kasumi-picoxcell",
                         .cra_priority = SPACC_CRYPTO_ALG_PRIORITY,
-                        .cra_flags = CRYPTO_ALG_TYPE_GIVCIPHER | CRYPTO_ALG_ASYNC,
+                        .cra_flags = CRYPTO_ALG_TYPE_GIVCIPHER |
+                                        CRYPTO_ALG_ASYNC |
+                                        CRYPTO_ALG_KERN_DRIVER_ONLY,
                         .cra_blocksize = 8,
                         .cra_ctxsize = sizeof(struct spacc_ablk_ctx),
                         .cra_type = &crypto_ablkcipher_type,
diff --git a/drivers/crypto/s5p-sss.c b/drivers/crypto/s5p-sss.c
index 3376bca200f..bc986f80608 100644
--- a/drivers/crypto/s5p-sss.c
+++ b/drivers/crypto/s5p-sss.c
@@ -518,7 +518,8 @@ static struct crypto_alg algs[] = {
                 .cra_driver_name        = "ecb-aes-s5p",
                 .cra_priority           = 100,
                 .cra_flags              = CRYPTO_ALG_TYPE_ABLKCIPHER |
-                                          CRYPTO_ALG_ASYNC,
+                                          CRYPTO_ALG_ASYNC |
+                                          CRYPTO_ALG_KERN_DRIVER_ONLY,
                 .cra_blocksize          = AES_BLOCK_SIZE,
                 .cra_ctxsize            = sizeof(struct s5p_aes_ctx),
                 .cra_alignmask          = 0x0f,
@@ -538,7 +539,8 @@ static struct crypto_alg algs[] = {
                 .cra_driver_name        = "cbc-aes-s5p",
                 .cra_priority           = 100,
                 .cra_flags              = CRYPTO_ALG_TYPE_ABLKCIPHER |
-                                          CRYPTO_ALG_ASYNC,
+                                          CRYPTO_ALG_ASYNC |
+                                          CRYPTO_ALG_KERN_DRIVER_ONLY,
                 .cra_blocksize          = AES_BLOCK_SIZE,
                 .cra_ctxsize            = sizeof(struct s5p_aes_ctx),
                 .cra_alignmask          = 0x0f,
diff --git a/drivers/crypto/talitos.c b/drivers/crypto/talitos.c
index 2d8c7890168..dc641c79652 100644
--- a/drivers/crypto/talitos.c
+++ b/drivers/crypto/talitos.c
@@ -2648,6 +2648,7 @@ static struct talitos_crypto_alg *talitos_alg_alloc(struct device *dev,
         alg->cra_priority = TALITOS_CRA_PRIORITY;
         alg->cra_alignmask = 0;
         alg->cra_ctxsize = sizeof(struct talitos_ctx);
+        alg->cra_flags |= CRYPTO_ALG_KERN_DRIVER_ONLY;
 
         t_alg->dev = dev;
 
diff --git a/include/linux/crypto.h b/include/linux/crypto.h
index 8a94217b298..a8fa6541b86 100644
--- a/include/linux/crypto.h
+++ b/include/linux/crypto.h
@@ -75,6 +75,11 @@
  */
 #define CRYPTO_ALG_INSTANCE             0x00000800
 
+/* Set this bit if the algorithm provided is hardware accelerated but
+ * not available to userspace via instruction set or so.
+ */
+#define CRYPTO_ALG_KERN_DRIVER_ONLY     0x00001000
+
 /*
  * Transform masks and values (for crt_flags).
  */