Commit a20bead4 authored by luhuaxin's avatar luhuaxin Committed by Huaxin Lu
Browse files

crypto: enable some SM configs 

openeuler inclusion
category: feature
bugzilla: https://gitee.com/openeuler/kernel/issues/I6202L


CVE: NA

1. set CONFIG_CRYPTO_SM2/3 to y:
The module signature based on SM2 cert has been supported now.
So the SM2/3 should be enabled by default to support SM2 cert
in kernel boot process.

2. set CONFIG_CRYPTO_SM3_GENERIC to y:
sm3-generic is architecture independent and should be build
in case other modules fail.

3. set CONFIG_CRYPTO_SM4_GENERIC to m:
sm4-generic is architecture independent and should be build
in case other modules fail.

4. enable algorithm implementations related to architecture:
Enable SM4-CE, SM4-NEON, SM3-AVX to imporve algorithm
performance.

Signed-off-by: default avatarluhuaxin <luhuaxin1@huawei.com>
parent f3ff7ed6

arch/arm64/configs/openeuler_defconfig

+6 −2
Original line number Diff line number Diff line
@@ -755,6 +755,8 @@ CONFIG_CRYPTO_SHA512_ARM64_CE=m 
CONFIG_CRYPTO_SHA3_ARM64=m

CONFIG_CRYPTO_SM3_ARM64_CE=m

CONFIG_CRYPTO_SM4_ARM64_CE=m

CONFIG_CRYPTO_SM4_ARM64_CE_BLK=m

CONFIG_CRYPTO_SM4_ARM64_NEON_BLK=m

CONFIG_CRYPTO_GHASH_ARM64_CE=m

CONFIG_CRYPTO_CRCT10DIF_ARM64_CE=m

CONFIG_CRYPTO_AES_ARM64=y
@@ -6538,6 +6540,7 @@ CONFIG_IMA_NG_TEMPLATE=y 
CONFIG_IMA_DEFAULT_TEMPLATE="ima-ng"

# CONFIG_IMA_DEFAULT_HASH_SHA1 is not set

CONFIG_IMA_DEFAULT_HASH_SHA256=y

# CONFIG_IMA_DEFAULT_HASH_SM3 is not set

CONFIG_IMA_DEFAULT_HASH="sha256"

# CONFIG_IMA_WRITE_POLICY is not set

CONFIG_IMA_READ_POLICY=y
@@ -6642,7 +6645,7 @@ CONFIG_CRYPTO_ECC=m 
CONFIG_CRYPTO_ECDH=m

# CONFIG_CRYPTO_ECDSA is not set

# CONFIG_CRYPTO_ECRDSA is not set

CONFIG_CRYPTO_SM2=m

CONFIG_CRYPTO_SM2=y

CONFIG_CRYPTO_CURVE25519=m



#
@@ -6702,7 +6705,8 @@ CONFIG_CRYPTO_SHA1=y 
CONFIG_CRYPTO_SHA256=y

CONFIG_CRYPTO_SHA512=m

CONFIG_CRYPTO_SHA3=m

CONFIG_CRYPTO_SM3=m

CONFIG_CRYPTO_SM3=y

CONFIG_CRYPTO_SM3_GENERIC=y

# CONFIG_CRYPTO_STREEBOG is not set

CONFIG_CRYPTO_TGR192=m

CONFIG_CRYPTO_WP512=m

arch/x86/configs/openeuler_defconfig

+6 −2
Original line number Diff line number Diff line
@@ -7621,6 +7621,7 @@ CONFIG_IMA_NG_TEMPLATE=y 
CONFIG_IMA_DEFAULT_TEMPLATE="ima-ng"

# CONFIG_IMA_DEFAULT_HASH_SHA1 is not set

CONFIG_IMA_DEFAULT_HASH_SHA256=y

# CONFIG_IMA_DEFAULT_HASH_SM3 is not set

CONFIG_IMA_DEFAULT_HASH="sha256"

# CONFIG_IMA_WRITE_POLICY is not set

CONFIG_IMA_READ_POLICY=y
@@ -7726,7 +7727,7 @@ CONFIG_CRYPTO_ECC=m 
CONFIG_CRYPTO_ECDH=m

# CONFIG_CRYPTO_ECDSA is not set

# CONFIG_CRYPTO_ECRDSA is not set

# CONFIG_CRYPTO_SM2 is not set

CONFIG_CRYPTO_SM2=y

# CONFIG_CRYPTO_CURVE25519 is not set

# CONFIG_CRYPTO_CURVE25519_X86 is not set
@@ -7797,7 +7798,9 @@ CONFIG_CRYPTO_SHA512_SSSE3=m 
CONFIG_CRYPTO_SHA256=y

CONFIG_CRYPTO_SHA512=m

CONFIG_CRYPTO_SHA3=m

CONFIG_CRYPTO_SM3=m

CONFIG_CRYPTO_SM3=y

CONFIG_CRYPTO_SM3_GENERIC=y

CONFIG_CRYPTO_SM3_AVX_X86_64=m

# CONFIG_CRYPTO_STREEBOG is not set

CONFIG_CRYPTO_TGR192=m

CONFIG_CRYPTO_WP512=m
@@ -7836,6 +7839,7 @@ CONFIG_CRYPTO_SERPENT_SSE2_X86_64=m 
CONFIG_CRYPTO_SERPENT_AVX_X86_64=m

CONFIG_CRYPTO_SERPENT_AVX2_X86_64=m

CONFIG_CRYPTO_SM4=m

CONFIG_CRYPTO_SM4_GENERIC=m

CONFIG_CRYPTO_SM4_AESNI_AVX_X86_64=m

CONFIG_CRYPTO_SM4_AESNI_AVX2_X86_64=m

CONFIG_CRYPTO_TEA=m