Cryptography Updates:
- DM Verity now leverages the kernel's crypto library, including the two-way interleaved SHA-256 hashing support for performance and reduced code maintenance.
- AES-GCM sees significant performance boosts (up to 74% on AMD Zen 3 CPUs) through AVX2 instruction implementation and improved AVX-512 efficiency for larger data sets.
Virtual Machine (VM) Changes:
- AMD's X2APIC implementation for VMs now supports up to 4,096 CPU cores.
- The TDX code has been overhauled to address systemic races.
- Live Update Orchestra (LUO) is added to the kernel, building on Kexec to allow kernel updates without a full reboot, preserving device states and memory regions for minimal downtime in VM host environments.