drivers/crypto/nx

IBM POWER Nest Accelerator (NX) crypto and compression engine

An on-chip coprocessor built into IBM POWER9 and POWER10 server CPUs that offloads symmetric encryption (AES, etc.), hashing, random-number generation, and gzip-style compression and decompression from the main cores. It is used in IBM's enterprise Power Systems servers, including current Power10 models like the S1014.

keep-annotate conf=0.87 last_sold=2025 deploy=low replacement=none subsystem=crypto category=crypto
87%

recommendation

Worth keeping but flagging as a specialist driver, because the hardware only exists in IBM's POWER9 and POWER10 enterprise servers rather than commodity machines. The code is clearly still alive in upstream — Herbert Xu and Eric Biggers were modernising it as recently as April 2025 — and IBM continues to sell Linux-capable Power10 systems new, so removing it would break a small but real customer base.

repository signals

18 files
6,746 source lines
33 commits, 5y
+550 / −517 lines added / removed, 5y
18 authors, 5y
monthly commits · 2021-04-21 → 2026-04-21 · 33 total · active in 18/61 months
2021 2022 2023 2024 2025 2026 2021-04: 0 commits · +0 −0 2021-05: 3 commits · +14 −15 2021-06: 8 commits · +180 −29 2021-07: 0 commits · +0 −0 2021-08: 0 commits · +0 −0 2021-09: 0 commits · +0 −0 2021-10: 0 commits · +0 −0 2021-11: 0 commits · +0 −0 2021-12: 0 commits · +0 −0 2022-01: 0 commits · +0 −0 2022-02: 1 commit · +2 −2 2022-03: 0 commits · +0 −0 2022-04: 1 commit · +1 −1 2022-05: 0 commits · +0 −0 2022-06: 2 commits · +5 −2 2022-07: 0 commits · +0 −0 2022-08: 0 commits · +0 −0 2022-09: 1 commit · +1 −4 2022-10: 0 commits · +0 −0 2022-11: 1 commit · +1 −1 2022-12: 0 commits · +0 −0 2023-01: 0 commits · +0 −0 2023-02: 1 commit · +9 −10 2023-03: 0 commits · +0 −0 2023-04: 0 commits · +0 −0 2023-05: 1 commit · +3 −3 2023-06: 0 commits · +0 −0 2023-07: 0 commits · +0 −0 2023-08: 0 commits · +0 −0 2023-09: 0 commits · +0 −0 2023-10: 0 commits · +0 −0 2023-11: 0 commits · +0 −0 2023-12: 0 commits · +0 −0 2024-01: 0 commits · +0 −0 2024-02: 0 commits · +0 −0 2024-03: 1 commit · +10 −6 2024-04: 0 commits · +0 −0 2024-05: 0 commits · +0 −0 2024-06: 0 commits · +0 −0 2024-07: 0 commits · +0 −0 2024-08: 1 commit · +3 −0 2024-09: 0 commits · +0 −0 2024-10: 2 commits · +19 −18 2024-11: 0 commits · +0 −0 2024-12: 0 commits · +0 −0 2025-01: 0 commits · +0 −0 2025-02: 1 commit · +17 −50 2025-03: 3 commits · +78 −78 2025-04: 2 commits · +182 −273 2025-05: 0 commits · +0 −0 2025-06: 0 commits · +0 −0 2025-07: 0 commits · +0 −0 2025-08: 0 commits · +0 −0 2025-09: 1 commit · +8 −4 2025-10: 0 commits · +0 −0 2025-11: 0 commits · +0 −0 2025-12: 0 commits · +0 −0 2026-01: 1 commit · +2 −5 2026-02: 2 commits · +15 −16 2026-03: 0 commits · +0 −0 2026-04: 0 commits · +0 −0

sources

  1. lore.kernel.org

    Recent upstream work touched drivers/crypto/nx in April 2025 ('crypto: nx - Use API partial block handling'), indicating the driver is still maintained rather than abandoned.

  2. ibm.com

    IBM documents Nest accelerators on POWER9 processor-based servers as on-chip accelerators for compression, decompression, encryption, and decryption.

  3. ibm.com

    IBM states Power10 servers, as well as Power9, have an on-chip NX accelerator providing compression, encryption, and random-number functions.

  4. ibm.com

    IBM's Power S1014 product page shows Power10-based servers designed to run Linux are current sale products, supporting that NX-capable Power systems were still sold new in 2025.

codex reasoning notes (technical)

`drivers/crypto/nx` is a real Power-platform crypto/compression accelerator driver (local Kconfig/read of tree). `lore_file_timeline` on `drivers/crypto/nx/nx.c` showed substantial 2025 maintenance traffic from Herbert Xu/Eric Biggers, with no removal signal in the retrieved lore evidence, so this is not a dead driver. Web search surfaced IBM docs confirming NX functionality on POWER9 and POWER10 and a current IBM Linux-capable Power10 product page. Conclusion: hardware remains shipping but only in a niche IBM Power enterprise segment, so keep the driver but annotate it as specialized/low-deployment. Source acquisition: lore URL from `lore_file_timeline`; IBM URLs from `web.search_query` results.