Intel QAT Zstd, QAT Gen6 Improvements Merged For Linux 7.1

Key Takeaways

• Intel QAT adds Zstd compression offload for Gen4/Gen5 accelerators
• QAT Gen6 supports native Zstd compression and decompression offload
• New wireless mode and anti‑rollback security added to QAT Gen6
• Linux crypto subsystem drops legacy DES/3DES CPU acceleration
• TI DTHEv2 driver now supports AES CTR, GCM, and CCM

Pulse Analysis

The Linux 7.1 kernel brings a comprehensive refresh to its cryptography stack, and the most visible change is the integration of Intel QuickAssist (QAT) enhancements. By moving Zstandard compression off the main CPU and onto dedicated QAT hardware, the kernel can achieve higher throughput with lower latency, a boon for data‑intensive services such as cloud storage, video transcoding, and real‑time analytics. The support now spans Gen4 and Gen5 accelerators, while the upcoming Gen6 chips deliver both compression and decompression natively, expanding the use cases for hardware‑assisted data reduction.

Beyond raw performance, Gen6’s new wireless mode and anti‑rollback feature address long‑standing security concerns. The wireless mode opens the door for QAT‑enabled networking workloads, allowing encrypted traffic to be processed more efficiently. Meanwhile, the anti‑rollback mechanism prevents older, potentially vulnerable firmware from being installed, mitigating downgrade attacks that have plagued hardware security in the past. Together, these capabilities reinforce the kernel’s reputation for robust, production‑grade security while keeping pace with evolving threat landscapes.

The update also trims legacy code, removing CPU‑based DES/3DES acceleration and unused SIMD SKCIPHER support, which simplifies the codebase and reduces attack surface. Complementary changes, such as the TI DTHEv2 driver’s addition of AES CTR, GCM, and CCM algorithms, ensure that modern encryption standards are fully supported. For enterprises, these improvements translate into faster cryptographic operations, lower CPU overhead, and a more secure, future‑ready Linux environment, reinforcing its dominance in cloud and edge deployments.