tequilaOS/platform_kernel_configs
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

q: Recommend enabling architecture-optimized AES and SHA-256

Browse source 
It's usually very helpful to enable AES-XTS and SHA-256 optimized with
the ARM crypto extensions (or x86 AES-NI and SHA-NI).  AES-XTS is used
by file-based encryption; SHA-256 is used by dm-verity.  I was a bit
surprised to see that these weren't already in the recommended configs.

This is change I6175e16261a7360d34de76735e06e21c41db58c8 applied to the
'q' directory.

Bug: 130816578
Change-Id: I7049f7f47bc343a8001640809e1eb6dafded172f
Signed-off-by: Eric Biggers <ebiggers@google.com>
This commit is contained in:
Eric Biggers 2019-04-18 12:20:19 -07:00
parent 94efd7a4ec
commit 4dd5598f42
9 changed files with 32 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
q/android-4.14/android-recommended-arm.config Normal file
View file

@ -0,0 +1,6 @@
# KEEP ALPHABETICALLY SORTED
CONFIG_ARM_CRYPTO=y
CONFIG_CRYPTO_AES_ARM_CE=y
CONFIG_CRYPTO_SHA2_ARM_CE=y
CONFIG_KERNEL_MODE_NEON=y
CONFIG_NEON=y

3
q/android-4.14/android-recommended-arm64.config
View file

@ -1,4 +1,7 @@
# KEEP ALPHABETICALLY SORTED # KEEP ALPHABETICALLY SORTED
CONFIG_ARM64_CRYPTO=y
CONFIG_ARM64_SW_TTBR0_PAN=y CONFIG_ARM64_SW_TTBR0_PAN=y
CONFIG_CRYPTO_AES_ARM64_CE_BLK=y
CONFIG_CRYPTO_SHA2_ARM64_CE=y
CONFIG_RANDOMIZE_BASE=y CONFIG_RANDOMIZE_BASE=y
CONFIG_RELOCATABLE=y CONFIG_RELOCATABLE=y

2
q/android-4.14/android-recommended-x86.config
View file

@ -1,3 +1,5 @@
# KEEP ALPHABETICALLY SORTED # KEEP ALPHABETICALLY SORTED
CONFIG_CRYPTO_AES_NI_INTEL=y
CONFIG_CRYPTO_SHA256_SSSE3=y
CONFIG_RANDOMIZE_BASE=y CONFIG_RANDOMIZE_BASE=y
CONFIG_RELOCATABLE=y CONFIG_RELOCATABLE=y

6
q/android-4.19/android-recommended-arm.config Normal file
View file

@ -0,0 +1,6 @@
# KEEP ALPHABETICALLY SORTED
CONFIG_ARM_CRYPTO=y
CONFIG_CRYPTO_AES_ARM_CE=y
CONFIG_CRYPTO_SHA2_ARM_CE=y
CONFIG_KERNEL_MODE_NEON=y
CONFIG_NEON=y

3
q/android-4.19/android-recommended-arm64.config
View file

@ -1,4 +1,7 @@
# KEEP ALPHABETICALLY SORTED # KEEP ALPHABETICALLY SORTED
CONFIG_ARM64_CRYPTO=y
CONFIG_ARM64_SW_TTBR0_PAN=y CONFIG_ARM64_SW_TTBR0_PAN=y
CONFIG_CRYPTO_AES_ARM64_CE_BLK=y
CONFIG_CRYPTO_SHA2_ARM64_CE=y
CONFIG_RANDOMIZE_BASE=y CONFIG_RANDOMIZE_BASE=y
CONFIG_RELOCATABLE=y CONFIG_RELOCATABLE=y

2
q/android-4.19/android-recommended-x86.config
View file

@ -1,3 +1,5 @@
# KEEP ALPHABETICALLY SORTED # KEEP ALPHABETICALLY SORTED
CONFIG_CRYPTO_AES_NI_INTEL=y
CONFIG_CRYPTO_SHA256_SSSE3=y
CONFIG_RANDOMIZE_BASE=y CONFIG_RANDOMIZE_BASE=y
CONFIG_RELOCATABLE=y CONFIG_RELOCATABLE=y

5
q/android-4.9/android-recommended-arm.config
View file

@ -1,2 +1,7 @@
# KEEP ALPHABETICALLY SORTED # KEEP ALPHABETICALLY SORTED
CONFIG_ARM_CRYPTO=y
CONFIG_CRYPTO_AES_ARM_CE=y
CONFIG_CRYPTO_SHA2_ARM_CE=y
CONFIG_KERNEL_MODE_NEON=y
CONFIG_NEON=y
CONFIG_UPROBE_EVENT=y CONFIG_UPROBE_EVENT=y

3
q/android-4.9/android-recommended-arm64.config
View file

@ -1,3 +1,6 @@
# KEEP ALPHABETICALLY SORTED # KEEP ALPHABETICALLY SORTED
CONFIG_ARM64_CRYPTO=y
CONFIG_CRYPTO_AES_ARM64_CE_BLK=y
CONFIG_CRYPTO_SHA2_ARM64_CE=y
CONFIG_RANDOMIZE_BASE=y CONFIG_RANDOMIZE_BASE=y
CONFIG_RELOCATABLE=y CONFIG_RELOCATABLE=y

2
q/android-4.9/android-recommended-x86.config
View file

@ -1,4 +1,6 @@
# KEEP ALPHABETICALLY SORTED # KEEP ALPHABETICALLY SORTED
CONFIG_CRYPTO_AES_NI_INTEL=y
CONFIG_CRYPTO_SHA256_SSSE3=y
CONFIG_RANDOMIZE_BASE=y CONFIG_RANDOMIZE_BASE=y
CONFIG_RELOCATABLE=y CONFIG_RELOCATABLE=y
CONFIG_UPROBE_EVENT=y CONFIG_UPROBE_EVENT=y