Files
kata-containers/tools/packaging/kernel/configs/fragments/s390/crypto.conf
Hyounggyu Choi 86a02c5f6a kernel: Add crypto kernel config for s390
This config update supports new crypto algorithms for s390.

Fixes: #5158

Signed-off-by: Hyounggyu Choi <Hyounggyu.Choi@ibm.com>
2022-09-13 18:13:57 +02:00

46 lines
1.5 KiB
Plaintext

# Comments and options from https://github.com/torvalds/linux/blob/master/drivers/crypto/Kconfig
# Enable s390 architectural random number generation API
CONFIG_ARCH_RANDOM=y
# Fallbacks for s390 specific implementation
CONFIG_CRYPTO_CBC=y
CONFIG_CRYPTO_CTR=y
CONFIG_CRYPTO_ECB=y
CONFIG_CRYPTO_XTS=y
# Enable HW for crypto
CONFIG_CRYPTO_HW=y
# Support for s390 cryptographic adapters
CONFIG_ZCRYPT=y
# Kernel API for protected key handling
CONFIG_PKEY=y
# s390 hardware accelerated implementation of the SHA-1 secure hash standard
CONFIG_CRYPTO_SHA1_S390=y
# s390 hardware accelerated implementation of the SHA256 secure hash standard
CONFIG_CRYPTO_SHA256_S390=y
# s390 hardware accelerated implementation of the SHA512 secure hash standard
CONFIG_CRYPTO_SHA512_S390=y
# s390 hardware accelerated implementation of the DES cipher algorithm (FIPS 46-2),
# and Triple DES EDE (FIPS 46-3).
CONFIG_CRYPTO_DES_S390=y
# s390 hardware accelerated implementation of the AES cipher algorithms (FIPS-197)
CONFIG_CRYPTO_AES_S390=y
# s390 hardware accelerated implementation of the CRC algorithms
CONFIG_CRYPTO_CRC32_S390=y
# Pseudo random number generator device driver
CONFIG_S390_PRNG=y
# Support for Galois/Counter Mode (GCM)
CONFIG_CRYPTO_GCM=y
# SHA3 and its variants for s390
CONFIG_CRYPTO_SHA3=y
CONFIG_CRYPTO_SHA3_256_S390=y
CONFIG_CRYPTO_SHA3_512_S390=y
# Support for ChaCha stream cipher algorithms
CONFIG_CRYPTO_CHACHA20=y
CONFIG_CRYPTO_CHACHA20POLY1305=y
CONFIG_CRYPTO_CHACHA_S390=y
# When PKEY is enabled and dm-crypt wants to use protected keys
CONFIG_CRYPTO_PAES_S390=y