提交 183559f2 编写于 作者: L luhuaxin

crypto: enable some SM configs

1. set CONFIG_CRYPTO_SM2/3 to y:
The module signature based on SM2 cert has been supported now.
So the SM2/3 should be enabled by default to support SM2 cert
in kernel boot process.

2. set CONFIG_CRYPTO_SM3_GENERIC to y:
sm3-generic is architecture independent and should be build
in case other modules fail.

3. set CONFIG_CRYPTO_SM4_GENERIC to m:
sm4-generic is architecture independent and should be build
in case other modules fail.

4. enable algorithm implementations related to architecture:
Enable SM4-CE, SM4-NEON, SM3-AVX to imporve algorithm
performance.
Signed-off-by: Nluhuaxin <luhuaxin1@huawei.com>
上级 3c23a931
...@@ -754,6 +754,8 @@ CONFIG_CRYPTO_SHA512_ARM64_CE=m ...@@ -754,6 +754,8 @@ CONFIG_CRYPTO_SHA512_ARM64_CE=m
CONFIG_CRYPTO_SHA3_ARM64=m CONFIG_CRYPTO_SHA3_ARM64=m
CONFIG_CRYPTO_SM3_ARM64_CE=m CONFIG_CRYPTO_SM3_ARM64_CE=m
CONFIG_CRYPTO_SM4_ARM64_CE=m CONFIG_CRYPTO_SM4_ARM64_CE=m
CONFIG_CRYPTO_SM4_ARM64_CE_BLK=m
CONFIG_CRYPTO_SM4_ARM64_NEON_BLK=m
CONFIG_CRYPTO_GHASH_ARM64_CE=m CONFIG_CRYPTO_GHASH_ARM64_CE=m
CONFIG_CRYPTO_CRCT10DIF_ARM64_CE=m CONFIG_CRYPTO_CRCT10DIF_ARM64_CE=m
CONFIG_CRYPTO_AES_ARM64=y CONFIG_CRYPTO_AES_ARM64=y
...@@ -6532,6 +6534,7 @@ CONFIG_IMA_NG_TEMPLATE=y ...@@ -6532,6 +6534,7 @@ CONFIG_IMA_NG_TEMPLATE=y
CONFIG_IMA_DEFAULT_TEMPLATE="ima-ng" CONFIG_IMA_DEFAULT_TEMPLATE="ima-ng"
# CONFIG_IMA_DEFAULT_HASH_SHA1 is not set # CONFIG_IMA_DEFAULT_HASH_SHA1 is not set
CONFIG_IMA_DEFAULT_HASH_SHA256=y CONFIG_IMA_DEFAULT_HASH_SHA256=y
# CONFIG_IMA_DEFAULT_HASH_SM3 is not set
CONFIG_IMA_DEFAULT_HASH="sha256" CONFIG_IMA_DEFAULT_HASH="sha256"
# CONFIG_IMA_WRITE_POLICY is not set # CONFIG_IMA_WRITE_POLICY is not set
CONFIG_IMA_READ_POLICY=y CONFIG_IMA_READ_POLICY=y
...@@ -6636,7 +6639,7 @@ CONFIG_CRYPTO_ECC=m ...@@ -6636,7 +6639,7 @@ CONFIG_CRYPTO_ECC=m
CONFIG_CRYPTO_ECDH=m CONFIG_CRYPTO_ECDH=m
# CONFIG_CRYPTO_ECDSA is not set # CONFIG_CRYPTO_ECDSA is not set
# CONFIG_CRYPTO_ECRDSA is not set # CONFIG_CRYPTO_ECRDSA is not set
CONFIG_CRYPTO_SM2=m CONFIG_CRYPTO_SM2=y
CONFIG_CRYPTO_CURVE25519=m CONFIG_CRYPTO_CURVE25519=m
# #
...@@ -6696,7 +6699,8 @@ CONFIG_CRYPTO_SHA1=y ...@@ -6696,7 +6699,8 @@ CONFIG_CRYPTO_SHA1=y
CONFIG_CRYPTO_SHA256=y CONFIG_CRYPTO_SHA256=y
CONFIG_CRYPTO_SHA512=m CONFIG_CRYPTO_SHA512=m
CONFIG_CRYPTO_SHA3=m CONFIG_CRYPTO_SHA3=m
CONFIG_CRYPTO_SM3=m CONFIG_CRYPTO_SM3=y
CONFIG_CRYPTO_SM3_GENERIC=y
# CONFIG_CRYPTO_STREEBOG is not set # CONFIG_CRYPTO_STREEBOG is not set
CONFIG_CRYPTO_TGR192=m CONFIG_CRYPTO_TGR192=m
CONFIG_CRYPTO_WP512=m CONFIG_CRYPTO_WP512=m
...@@ -6722,6 +6726,7 @@ CONFIG_CRYPTO_CHACHA20=m ...@@ -6722,6 +6726,7 @@ CONFIG_CRYPTO_CHACHA20=m
CONFIG_CRYPTO_SEED=m CONFIG_CRYPTO_SEED=m
CONFIG_CRYPTO_SERPENT=m CONFIG_CRYPTO_SERPENT=m
CONFIG_CRYPTO_SM4=m CONFIG_CRYPTO_SM4=m
CONFIG_CRYPTO_SM4_GENERIC=m
CONFIG_CRYPTO_TEA=m CONFIG_CRYPTO_TEA=m
CONFIG_CRYPTO_TWOFISH=m CONFIG_CRYPTO_TWOFISH=m
CONFIG_CRYPTO_TWOFISH_COMMON=m CONFIG_CRYPTO_TWOFISH_COMMON=m
......
...@@ -7617,6 +7617,7 @@ CONFIG_IMA_NG_TEMPLATE=y ...@@ -7617,6 +7617,7 @@ CONFIG_IMA_NG_TEMPLATE=y
CONFIG_IMA_DEFAULT_TEMPLATE="ima-ng" CONFIG_IMA_DEFAULT_TEMPLATE="ima-ng"
# CONFIG_IMA_DEFAULT_HASH_SHA1 is not set # CONFIG_IMA_DEFAULT_HASH_SHA1 is not set
CONFIG_IMA_DEFAULT_HASH_SHA256=y CONFIG_IMA_DEFAULT_HASH_SHA256=y
# CONFIG_IMA_DEFAULT_HASH_SM3 is not set
CONFIG_IMA_DEFAULT_HASH="sha256" CONFIG_IMA_DEFAULT_HASH="sha256"
# CONFIG_IMA_WRITE_POLICY is not set # CONFIG_IMA_WRITE_POLICY is not set
CONFIG_IMA_READ_POLICY=y CONFIG_IMA_READ_POLICY=y
...@@ -7722,7 +7723,7 @@ CONFIG_CRYPTO_ECC=m ...@@ -7722,7 +7723,7 @@ CONFIG_CRYPTO_ECC=m
CONFIG_CRYPTO_ECDH=m CONFIG_CRYPTO_ECDH=m
# CONFIG_CRYPTO_ECDSA is not set # CONFIG_CRYPTO_ECDSA is not set
# CONFIG_CRYPTO_ECRDSA is not set # CONFIG_CRYPTO_ECRDSA is not set
# CONFIG_CRYPTO_SM2 is not set CONFIG_CRYPTO_SM2=y
# CONFIG_CRYPTO_CURVE25519 is not set # CONFIG_CRYPTO_CURVE25519 is not set
# CONFIG_CRYPTO_CURVE25519_X86 is not set # CONFIG_CRYPTO_CURVE25519_X86 is not set
...@@ -7793,7 +7794,9 @@ CONFIG_CRYPTO_SHA512_SSSE3=m ...@@ -7793,7 +7794,9 @@ CONFIG_CRYPTO_SHA512_SSSE3=m
CONFIG_CRYPTO_SHA256=y CONFIG_CRYPTO_SHA256=y
CONFIG_CRYPTO_SHA512=m CONFIG_CRYPTO_SHA512=m
CONFIG_CRYPTO_SHA3=m CONFIG_CRYPTO_SHA3=m
CONFIG_CRYPTO_SM3=m CONFIG_CRYPTO_SM3=y
CONFIG_CRYPTO_SM3_GENERIC=y
CONFIG_CRYPTO_SM3_AVX_X86_64=m
# CONFIG_CRYPTO_STREEBOG is not set # CONFIG_CRYPTO_STREEBOG is not set
CONFIG_CRYPTO_TGR192=m CONFIG_CRYPTO_TGR192=m
CONFIG_CRYPTO_WP512=m CONFIG_CRYPTO_WP512=m
...@@ -7832,6 +7835,7 @@ CONFIG_CRYPTO_SERPENT_SSE2_X86_64=m ...@@ -7832,6 +7835,7 @@ CONFIG_CRYPTO_SERPENT_SSE2_X86_64=m
CONFIG_CRYPTO_SERPENT_AVX_X86_64=m CONFIG_CRYPTO_SERPENT_AVX_X86_64=m
CONFIG_CRYPTO_SERPENT_AVX2_X86_64=m CONFIG_CRYPTO_SERPENT_AVX2_X86_64=m
CONFIG_CRYPTO_SM4=m CONFIG_CRYPTO_SM4=m
CONFIG_CRYPTO_SM4_GENERIC=m
CONFIG_CRYPTO_SM4_AESNI_AVX_X86_64=m CONFIG_CRYPTO_SM4_AESNI_AVX_X86_64=m
CONFIG_CRYPTO_SM4_AESNI_AVX2_X86_64=m CONFIG_CRYPTO_SM4_AESNI_AVX2_X86_64=m
CONFIG_CRYPTO_TEA=m CONFIG_CRYPTO_TEA=m
......
Markdown is supported
0% .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册