diff options
Diffstat (limited to 'crypto/Kconfig')
| -rw-r--r-- | crypto/Kconfig | 71 |
1 files changed, 52 insertions, 19 deletions
diff --git a/crypto/Kconfig b/crypto/Kconfig index ff83a40f5b..d1360a2101 100644 --- a/crypto/Kconfig +++ b/crypto/Kconfig @@ -1,3 +1,5 @@ +# SPDX-License-Identifier: GPL-2.0-only + menu "Crypto support" config CRC32 @@ -14,25 +16,25 @@ menuconfig DIGEST if DIGEST -config MD5 +config HAVE_DIGEST_MD5 bool -config SHA1 +config HAVE_DIGEST_SHA1 bool -config SHA224 +config HAVE_DIGEST_SHA224 bool -config SHA256 +config HAVE_DIGEST_SHA256 bool -config SHA384 +config HAVE_DIGEST_SHA384 bool -config SHA512 +config HAVE_DIGEST_SHA512 bool -config DIGEST_HMAC +config HAVE_DIGEST_HMAC bool config DIGEST_CRC32_GENERIC @@ -41,49 +43,70 @@ config DIGEST_CRC32_GENERIC config DIGEST_MD5_GENERIC bool "MD5" - select MD5 + select HAVE_DIGEST_MD5 config DIGEST_SHA1_GENERIC bool "SHA1" - select SHA1 + select HAVE_DIGEST_SHA1 config DIGEST_SHA224_GENERIC bool "SHA224" - select SHA224 + select HAVE_DIGEST_SHA224 config DIGEST_SHA256_GENERIC bool "SHA256" - select SHA256 + select HAVE_DIGEST_SHA256 config DIGEST_SHA384_GENERIC bool "SHA384" - select SHA384 + select HAVE_DIGEST_SHA384 config DIGEST_SHA512_GENERIC bool "SHA512" - select SHA512 + select HAVE_DIGEST_SHA512 config DIGEST_HMAC_GENERIC bool "HMAC" - select DIGEST_HMAC + select HAVE_DIGEST_HMAC config DIGEST_SHA1_ARM tristate "SHA1 digest algorithm (ARM-asm)" - depends on ARM - select SHA1 + depends on ARM && !CPU_V8 + select HAVE_DIGEST_SHA1 help SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented using optimized ARM assembler. config DIGEST_SHA256_ARM tristate "SHA-224/256 digest algorithm (ARM-asm and NEON)" - depends on ARM - select SHA256 - select SHA224 + depends on ARM && !CPU_V8 + select HAVE_DIGEST_SHA256 + select HAVE_DIGEST_SHA224 help SHA-256 secure hash standard (DFIPS 180-2) implemented using optimized ARM assembler and NEON, when available. +config DIGEST_SHA1_ARM64_CE + tristate "SHA-1 digest algorithm (ARMv8 Crypto Extensions)" + depends on CPU_V8 + select HAVE_DIGEST_SHA1 + help + SHA-1 secure hash algorithm (FIPS 180) + + Architecture: arm64 using: + - ARMv8 Crypto Extensions + +config DIGEST_SHA256_ARM64_CE + tristate "SHA-224/256 digest algorithm (ARMv8 Crypto Extensions)" + depends on CPU_V8 + select HAVE_DIGEST_SHA256 + select HAVE_DIGEST_SHA224 + help + SHA-224 and SHA-256 secure hash algorithms (FIPS 180) + + Architecture: arm64 using: + - ARMv8 Crypto Extensions + endif config CRYPTO_PBKDF2 @@ -98,6 +121,7 @@ config CRYPTO_RSA config CRYPTO_RSA_BUILTIN_KEYS bool default y if CRYPTO_RSA_KEY != "" + select RSATOC config CRYPTO_RSA_KEY depends on CRYPTO_RSA @@ -107,6 +131,9 @@ config CRYPTO_RSA_KEY X.509 certificates to be included into barebox. If the string starts with "pkcs11:" it is interpreted as a PKCS#11 URI rather than a file. + This avoids the mkimage dependency of CONFIG_BOOTM_FITIMAGE_PUBKEY + at the cost of an openssl build-time dependency. + config CRYPTO_RSA_KEY_NAME_HINT depends on CRYPTO_RSA string "FIT image key name hint" @@ -120,4 +147,10 @@ config CRYPTO_KEYSTORE This is a simple keystore, which can be used to pass keys between several components via simple interface. +config JWT + bool "JSON Web Token support" if COMPILE_TEST + select JSMN + select BASE64 + select CRYPTO_RSA + endmenu |