Recommend enabling architecture-optimized AES and SHA-256

It's usually very helpful to enable AES-XTS and SHA-256 optimized with
the ARM crypto extensions (or x86 AES-NI and SHA-NI).  AES-XTS is used
by file-based encryption; SHA-256 is used by dm-verity.  I was a bit
surprised to see that these weren't already in the recommended configs.

Change-Id: I6175e16261a7360d34de76735e06e21c41db58c8
Signed-off-by: Eric Biggers <ebiggers@google.com>
This commit is contained in:
Eric Biggers 2019-04-05 17:02:45 -07:00
parent 8384af3f9d
commit 63f8ad1f4b
9 changed files with 32 additions and 0 deletions

View file

@ -0,0 +1,6 @@
# KEEP ALPHABETICALLY SORTED
CONFIG_ARM_CRYPTO=y
CONFIG_CRYPTO_AES_ARM_CE=y
CONFIG_CRYPTO_SHA2_ARM_CE=y
CONFIG_KERNEL_MODE_NEON=y
CONFIG_NEON=y

View file

@ -1,4 +1,7 @@
# KEEP ALPHABETICALLY SORTED
CONFIG_ARM64_CRYPTO=y
CONFIG_ARM64_SW_TTBR0_PAN=y
CONFIG_CRYPTO_AES_ARM64_CE_BLK=y
CONFIG_CRYPTO_SHA2_ARM64_CE=y
CONFIG_RANDOMIZE_BASE=y
CONFIG_RELOCATABLE=y

View file

@ -1,3 +1,5 @@
# KEEP ALPHABETICALLY SORTED
CONFIG_CRYPTO_AES_NI_INTEL=y
CONFIG_CRYPTO_SHA256_SSSE3=y
CONFIG_RANDOMIZE_BASE=y
CONFIG_RELOCATABLE=y

View file

@ -0,0 +1,6 @@
# KEEP ALPHABETICALLY SORTED
CONFIG_ARM_CRYPTO=y
CONFIG_CRYPTO_AES_ARM_CE=y
CONFIG_CRYPTO_SHA2_ARM_CE=y
CONFIG_KERNEL_MODE_NEON=y
CONFIG_NEON=y

View file

@ -1,4 +1,7 @@
# KEEP ALPHABETICALLY SORTED
CONFIG_ARM64_CRYPTO=y
CONFIG_ARM64_SW_TTBR0_PAN=y
CONFIG_CRYPTO_AES_ARM64_CE_BLK=y
CONFIG_CRYPTO_SHA2_ARM64_CE=y
CONFIG_RANDOMIZE_BASE=y
CONFIG_RELOCATABLE=y

View file

@ -1,3 +1,5 @@
# KEEP ALPHABETICALLY SORTED
CONFIG_CRYPTO_AES_NI_INTEL=y
CONFIG_CRYPTO_SHA256_SSSE3=y
CONFIG_RANDOMIZE_BASE=y
CONFIG_RELOCATABLE=y

View file

@ -1,2 +1,7 @@
# KEEP ALPHABETICALLY SORTED
CONFIG_ARM_CRYPTO=y
CONFIG_CRYPTO_AES_ARM_CE=y
CONFIG_CRYPTO_SHA2_ARM_CE=y
CONFIG_KERNEL_MODE_NEON=y
CONFIG_NEON=y
CONFIG_UPROBE_EVENT=y

View file

@ -1,3 +1,6 @@
# KEEP ALPHABETICALLY SORTED
CONFIG_ARM64_CRYPTO=y
CONFIG_CRYPTO_AES_ARM64_CE_BLK=y
CONFIG_CRYPTO_SHA2_ARM64_CE=y
CONFIG_RANDOMIZE_BASE=y
CONFIG_RELOCATABLE=y

View file

@ -1,4 +1,6 @@
# KEEP ALPHABETICALLY SORTED
CONFIG_CRYPTO_AES_NI_INTEL=y
CONFIG_CRYPTO_SHA256_SSSE3=y
CONFIG_RANDOMIZE_BASE=y
CONFIG_RELOCATABLE=y
CONFIG_UPROBE_EVENT=y