diff --git a/init/Kconfig b/init/Kconfig
index 0935a7d84a26d46f87186b295f5b56ede49af499..4e81d70311c48a96aef7c936f32466ca64dc348d 100644
--- a/init/Kconfig
+++ b/init/Kconfig
@@ -2307,6 +2307,9 @@ config MODULE_SIG_SHA512
 	bool "Sign modules with SHA-512"
 	select CRYPTO_SHA512
 
+config MODULE_SIG_SM3
+	bool "Sign modules with SM3"
+	select CRYPTO_SM3
 endchoice
 
 config MODULE_SIG_HASH
@@ -2317,6 +2320,7 @@ config MODULE_SIG_HASH
 	default "sha256" if MODULE_SIG_SHA256
 	default "sha384" if MODULE_SIG_SHA384
 	default "sha512" if MODULE_SIG_SHA512
+	default "sm3" if MODULE_SIG_SM3
 
 config MODULE_COMPRESS
 	bool "Compress modules on installation"