Commit d336e0ed authored Nov 28, 2023 by GUO Zihua

keys: Allow automatic module signature with SM3

hulk inclusion
category: feature
bugzilla: https://gitee.com/openeuler/kernel/issues/I8JZPP


CVE: NA

--------------------------------

Support SM3 algorithm for module automatic signature during
"make modules_install" and "make modules_sign".

Signed-off-by: GUO Zihua <guozihua@huawei.com>
Reviewed-by: Xiu Jianfeng <xiujianfeng@huawei.com>
Reviewed-by: Chao Liu <liuchao173@huawei.com>
Signed-off-by: Zheng Zengkai <zhengzengkai@huawei.com>
Conflicts:
	init/Kconfig
Signed-off-by: GUO Zihua <guozihua@huawei.com>

parent 13398d9e

kernel/module/Kconfig

+5 −0

Original line number	Diff line number	Diff line
		@@ -256,6 +256,10 @@ config MODULE_SIG_SHA512
		bool "Sign modules with SHA-512"
		select CRYPTO_SHA512

		config MODULE_SIG_SM3
		bool "Sign modules with SM3"
		select CRYPTO_SM3

		endchoice

		config MODULE_SIG_HASH
		@@ -266,6 +270,7 @@ config MODULE_SIG_HASH
		default "sha256" if MODULE_SIG_SHA256
		default "sha384" if MODULE_SIG_SHA384
		default "sha512" if MODULE_SIG_SHA512
		default "sm3" if MODULE_SIG_SM3

		choice
		prompt "Module compression mode"