Recommend enabling architecture-optimized AES and SHA-256
It's usually very helpful to enable AES-XTS and SHA-256 optimized with the ARM crypto extensions (or x86 AES-NI and SHA-NI). AES-XTS is used by file-based encryption; SHA-256 is used by dm-verity. I was a bit surprised to see that these weren't already in the recommended configs. Change-Id: I6175e16261a7360d34de76735e06e21c41db58c8 Signed-off-by: Eric Biggers <ebiggers@google.com>
This commit is contained in:
parent
8384af3f9d
commit
63f8ad1f4b
9 changed files with 32 additions and 0 deletions
6
android-4.14/android-recommended-arm.config
Normal file
6
android-4.14/android-recommended-arm.config
Normal file
|
@ -0,0 +1,6 @@
|
|||
# KEEP ALPHABETICALLY SORTED
|
||||
CONFIG_ARM_CRYPTO=y
|
||||
CONFIG_CRYPTO_AES_ARM_CE=y
|
||||
CONFIG_CRYPTO_SHA2_ARM_CE=y
|
||||
CONFIG_KERNEL_MODE_NEON=y
|
||||
CONFIG_NEON=y
|
|
@ -1,4 +1,7 @@
|
|||
# KEEP ALPHABETICALLY SORTED
|
||||
CONFIG_ARM64_CRYPTO=y
|
||||
CONFIG_ARM64_SW_TTBR0_PAN=y
|
||||
CONFIG_CRYPTO_AES_ARM64_CE_BLK=y
|
||||
CONFIG_CRYPTO_SHA2_ARM64_CE=y
|
||||
CONFIG_RANDOMIZE_BASE=y
|
||||
CONFIG_RELOCATABLE=y
|
||||
|
|
|
@ -1,3 +1,5 @@
|
|||
# KEEP ALPHABETICALLY SORTED
|
||||
CONFIG_CRYPTO_AES_NI_INTEL=y
|
||||
CONFIG_CRYPTO_SHA256_SSSE3=y
|
||||
CONFIG_RANDOMIZE_BASE=y
|
||||
CONFIG_RELOCATABLE=y
|
||||
|
|
6
android-4.19/android-recommended-arm.config
Normal file
6
android-4.19/android-recommended-arm.config
Normal file
|
@ -0,0 +1,6 @@
|
|||
# KEEP ALPHABETICALLY SORTED
|
||||
CONFIG_ARM_CRYPTO=y
|
||||
CONFIG_CRYPTO_AES_ARM_CE=y
|
||||
CONFIG_CRYPTO_SHA2_ARM_CE=y
|
||||
CONFIG_KERNEL_MODE_NEON=y
|
||||
CONFIG_NEON=y
|
|
@ -1,4 +1,7 @@
|
|||
# KEEP ALPHABETICALLY SORTED
|
||||
CONFIG_ARM64_CRYPTO=y
|
||||
CONFIG_ARM64_SW_TTBR0_PAN=y
|
||||
CONFIG_CRYPTO_AES_ARM64_CE_BLK=y
|
||||
CONFIG_CRYPTO_SHA2_ARM64_CE=y
|
||||
CONFIG_RANDOMIZE_BASE=y
|
||||
CONFIG_RELOCATABLE=y
|
||||
|
|
|
@ -1,3 +1,5 @@
|
|||
# KEEP ALPHABETICALLY SORTED
|
||||
CONFIG_CRYPTO_AES_NI_INTEL=y
|
||||
CONFIG_CRYPTO_SHA256_SSSE3=y
|
||||
CONFIG_RANDOMIZE_BASE=y
|
||||
CONFIG_RELOCATABLE=y
|
||||
|
|
|
@ -1,2 +1,7 @@
|
|||
# KEEP ALPHABETICALLY SORTED
|
||||
CONFIG_ARM_CRYPTO=y
|
||||
CONFIG_CRYPTO_AES_ARM_CE=y
|
||||
CONFIG_CRYPTO_SHA2_ARM_CE=y
|
||||
CONFIG_KERNEL_MODE_NEON=y
|
||||
CONFIG_NEON=y
|
||||
CONFIG_UPROBE_EVENT=y
|
||||
|
|
|
@ -1,3 +1,6 @@
|
|||
# KEEP ALPHABETICALLY SORTED
|
||||
CONFIG_ARM64_CRYPTO=y
|
||||
CONFIG_CRYPTO_AES_ARM64_CE_BLK=y
|
||||
CONFIG_CRYPTO_SHA2_ARM64_CE=y
|
||||
CONFIG_RANDOMIZE_BASE=y
|
||||
CONFIG_RELOCATABLE=y
|
||||
|
|
|
@ -1,4 +1,6 @@
|
|||
# KEEP ALPHABETICALLY SORTED
|
||||
CONFIG_CRYPTO_AES_NI_INTEL=y
|
||||
CONFIG_CRYPTO_SHA256_SSSE3=y
|
||||
CONFIG_RANDOMIZE_BASE=y
|
||||
CONFIG_RELOCATABLE=y
|
||||
CONFIG_UPROBE_EVENT=y
|
||||
|
|
Loading…
Reference in a new issue