1 # SPDX-License-Identifier: GPL-2.0
2 menuconfig ASYMMETRIC_KEY_TYPE
3 bool "Asymmetric (public-key cryptogra
4 depends on KEYS
5 help
6 This option provides support for a k
7 the asymmetric keys used for public
8 as encryption, decryption, signature
9 verification.
10
11 if ASYMMETRIC_KEY_TYPE
12
13 config ASYMMETRIC_PUBLIC_KEY_SUBTYPE
14 tristate "Asymmetric public-key crypto
15 select MPILIB
16 select CRYPTO_HASH_INFO
17 select CRYPTO_AKCIPHER
18 select CRYPTO_SIG
19 select CRYPTO_HASH
20 help
21 This option provides support for asy
22 If signature generation and/or verif
23 appropriate hash algorithms (such as
24 ENOPKG will be reported if the requi
25
26 config X509_CERTIFICATE_PARSER
27 tristate "X.509 certificate parser"
28 depends on ASYMMETRIC_PUBLIC_KEY_SUBTY
29 select ASN1
30 select OID_REGISTRY
31 help
32 This option provides support for par
33 data and provides the ability to ins
34 public key packet found inside the c
35
36 config PKCS8_PRIVATE_KEY_PARSER
37 tristate "PKCS#8 private key parser"
38 depends on ASYMMETRIC_PUBLIC_KEY_SUBTY
39 select ASN1
40 select OID_REGISTRY
41 help
42 This option provides support for par
43 private key data and provides the ab
44 from that data.
45
46 config PKCS7_MESSAGE_PARSER
47 tristate "PKCS#7 message parser"
48 depends on X509_CERTIFICATE_PARSER
49 select CRYPTO_HASH
50 select ASN1
51 select OID_REGISTRY
52 help
53 This option provides support for par
54 signature data and provides the abil
55
56 config PKCS7_TEST_KEY
57 tristate "PKCS#7 testing key type"
58 depends on SYSTEM_DATA_VERIFICATION
59 help
60 This option provides a type of key t
61 PKCS#7 message - provided the messag
62 it is, the PKCS#7 wrapper is discard
63 just the payload. If it isn't, addi
64 error.
65
66 This is intended for testing the PKC
67
68 config SIGNED_PE_FILE_VERIFICATION
69 bool "Support for PE file signature ve
70 depends on PKCS7_MESSAGE_PARSER=y
71 depends on SYSTEM_DATA_VERIFICATION
72 select CRYPTO_HASH
73 select ASN1
74 select OID_REGISTRY
75 help
76 This option provides support for ver
77 signed PE binary.
78
79 config FIPS_SIGNATURE_SELFTEST
80 tristate "Run FIPS selftests on the X.
81 help
82 This option causes some selftests to
83 verification code, using some built
84 for FIPS.
85 depends on KEYS
86 depends on ASYMMETRIC_KEY_TYPE
87 depends on PKCS7_MESSAGE_PARSER=X509_C
88 depends on X509_CERTIFICATE_PARSER
89 depends on CRYPTO_RSA
90 depends on CRYPTO_SHA256
91
92 config FIPS_SIGNATURE_SELFTEST_RSA
93 bool
94 default y
95 depends on FIPS_SIGNATURE_SELFTEST
96 depends on CRYPTO_SHA256=y || CRYPTO_S
97 depends on CRYPTO_RSA=y || CRYPTO_RSA=
98
99 config FIPS_SIGNATURE_SELFTEST_ECDSA
100 bool
101 default y
102 depends on FIPS_SIGNATURE_SELFTEST
103 depends on CRYPTO_SHA256=y || CRYPTO_S
104 depends on CRYPTO_ECDSA=y || CRYPTO_EC
105
106 endif # ASYMMETRIC_KEY_TYPE
Linux® is a registered trademark of Linus Torvalds in the United States and other countries.
TOMOYO® is a registered trademark of NTT DATA CORPORATION.