Crypto library fixes for v7.4-rc2

The following changes since commit 5b0764a53235d3c77e1ed674e836e1b3fe1a4b1f:

Merge tag 'drm-next-2026-10-21' of https://gitlab.freedesktop.org/drm/kernel (2026-10-23 18:29:02 -1000)

are available in the Git repository at:

https://git.kernel.org/pub/scm/linux/kernel/git/ebiggers/linux.git tags/libcrypto-for-linus

for you to fetch changes up to 01ad209f122b7c173477bd60c7997564f9c65961:

lib/crypto: mldsa: Add __must_check to mldsa_verify() (2026-10-29 10:12:11 -0700)

----------------------------------------------------------------

- Disable the MIPS64 Octeon optimized SHA-1, SHA-256, and SHA-512 code on little-endian kernels, since it doesn't work correctly on them

- Remove the PowerPC optimized Poly1305 code. It's already been marked as BROKEN for over a year due to not working in softirq context, but it turns out some of the Poly1305 math is incorrect too

- A few robustness improvements for the ML-DSA code

----------------------------------------------------------------
Eric Biggers (5):
lib/crypto: mips: Disable Octeon SHA code on little-endian kernels lib/crypto: powerpc/poly1305: Remove BROKEN implementation lib/crypto: mldsa: Check pk_len before doing pointer arithmetic lib/crypto: mldsa: Explicitly check that 'alg' is a valid value lib/crypto: mldsa: Add __must_check to mldsa_verify()

 include/crypto/mldsa.h                 |    6 +-
 lib/crypto/Kconfig                     |   12 +-
 lib/crypto/Makefile                    |    2 -
 lib/crypto/mldsa.c                     |   15 +-
 lib/crypto/powerpc/poly1305-p10le_64.S | 1076 --------------------------------
 lib/crypto/powerpc/poly1305.h          |   76 ---
 lib/crypto/tests/mldsa_kunit.c         |    9 +
 7 files changed, 28 insertions(+), 1168 deletions(-)
 delete mode 100644 lib/crypto/powerpc/poly1305-p10le_64.S
 delete mode 100644 lib/crypto/powerpc/poly1305.h