zfs: wolfZFS port for OpenZFS 2.4.2 (FIPS fixes; supersedes #341)

Rebase the wolfZFS port to the zfs-2.4.2 release tag and fold in the FIPS
fixes (-287 private-key unlock, GCM-IV approved-DRBG upgrade, provider-native
EVP_KDF userspace key-derivation). Link the userspace ICP checksum test
programs (sha2_test, blake3_test) against libwolfssl. Quote
MODULE_IMPORT_NS("WOLFSSL") for kernel >= 6.13.

RNG: rely on ZFS's native random_get_bytes() for all key/salt/IV material
(it is the wolfCrypt FIPS DRBG once the CRNG kernel patch is installed). The
only delta vs vanilla ZFS is upgrading the two GCM-IV sites in zio_crypt.c
(zio_crypt_key_wrap, zio_crypt_generate_iv) from random_get_pseudo_bytes to
random_get_bytes, so GCM IVs come from an approved DRBG (SP 800-38D requires
it; the xorshift pseudo-RNG is not approved). No direct wc_RNG calls remain;
wolfZFS owns the crypto primitives and the CRNG patch owns RNG.

Validated on Proxmox VE 9.2 (zfs-2.4.2-pve1, kernel 7.0.12-1-pve) and the
OpenZFS test suite: run_crypto 2/2, run_sanity with all failures within the
known vanilla-ZFS environmental baseline, zero regressions.

Author: ColtonWilley

zfs/README.md

@@ -5,18 +5,32 @@ that replaces its native crypto implementation (used on linux) with wolfCrypt
 API calls. It links against `libwolfssl.so` and `libwolfssl.ko` in user and
 kernel space.
 
-The patch was written for this commit:
+The patch was written for the OpenZFS `zfs-2.4.2` release tag:
 ```
-commit cd06f79e2949b6255f5e8bf621c1b9497ad97b02 (HEAD)
-Author: Christos Longros <98426896+chrislongros@users.noreply.github.com>
-Date:   Sun Apr 26 00:24:38 2026 +0200
+commit 59f46c509be4... (tag: zfs-2.4.2)
 ```
-This patch inserts only a modest line count for wolfCrypt API calls, while
-removing zfs internal crypto implementations:
+It applies cleanly to both upstream `zfs-2.4.2` and the Proxmox `zfs-2.4.2-pve1`
+package. This patch inserts only a modest line count for wolfCrypt API calls,
+while removing zfs internal crypto implementations:
 ```
 $ git diff --stat | tail -n1
- 38 files changed, 821 insertions(+), 28583 deletions(-)
-```
+ 42 files changed, 885 insertions(+), 28608 deletions(-)
+```
+
+In addition to the ICP routing, this revision folds in the FIPS-related fixes
+(previously proposed in PR #341, which this supersedes):
+- `module/zfs/hkdf.c`: `PRIVATE_KEY_UNLOCK` bracket fixes
+  `FIPS_PRIVATE_KEY_LOCKED_E` (-287) on encrypted dataset creation under
+  wolfCrypt FIPS.
+- RNG: key, salt, and IV material use the kernel's native `random_get_bytes()`,
+  which is the wolfCrypt FIPS DRBG when the CRNG kernel patch is installed. The
+  only change vs vanilla ZFS is upgrading the two GCM-IV sites in `zio_crypt.c`
+  (`zio_crypt_key_wrap`, `zio_crypt_generate_iv`) from `random_get_pseudo_bytes`
+  to `random_get_bytes`, so the IVs come from the approved DRBG (SP 800-38D
+  requires GCM IVs from an approved RBG; the xorshift pseudo-RNG is not approved).
+- Userspace key-derivation uses the provider-native `EVP_KDF "PBKDF2"` with a
+  `RAND_bytes` salt, so it routes through an OpenSSL 3.x provider.
+- `MODULE_IMPORT_NS("WOLFSSL")` is quoted for kernel >= 6.13.
 
 ![wolfZFS Architecture Diagram](doc/wolfzfs_diagram.png)
 
@@ -151,8 +165,8 @@ git clone https://github.com/openzfs/zfs.git
 2. Patch OpenZFS:
 ```
 cd zfs
-git co cd06f79e2
-git apply ../patches/cd06f79e2_wolfzfs.patch
+git checkout zfs-2.4.2
+git apply ../patches/zfs-2.4.2_wolfzfs.patch
 cd ../
 ```