1 # SPDX-License-Identifier: GPL-2.0 << 2 menuconfig ASYMMETRIC_KEY_TYPE 1 menuconfig ASYMMETRIC_KEY_TYPE 3 bool "Asymmetric (public-key cryptogra !! 2 tristate "Asymmetric (public-key cryptographic) key type" 4 depends on KEYS 3 depends on KEYS 5 help 4 help 6 This option provides support for a k 5 This option provides support for a key type that holds the data for 7 the asymmetric keys used for public 6 the asymmetric keys used for public key cryptographic operations such 8 as encryption, decryption, signature 7 as encryption, decryption, signature generation and signature 9 verification. 8 verification. 10 9 11 if ASYMMETRIC_KEY_TYPE 10 if ASYMMETRIC_KEY_TYPE 12 11 13 config ASYMMETRIC_PUBLIC_KEY_SUBTYPE 12 config ASYMMETRIC_PUBLIC_KEY_SUBTYPE 14 tristate "Asymmetric public-key crypto 13 tristate "Asymmetric public-key crypto algorithm subtype" 15 select MPILIB 14 select MPILIB 16 select CRYPTO_HASH_INFO << 17 select CRYPTO_AKCIPHER << 18 select CRYPTO_SIG << 19 select CRYPTO_HASH << 20 help 15 help 21 This option provides support for asy 16 This option provides support for asymmetric public key type handling. 22 If signature generation and/or verif 17 If signature generation and/or verification are to be used, 23 appropriate hash algorithms (such as 18 appropriate hash algorithms (such as SHA-1) must be available. 24 ENOPKG will be reported if the requi 19 ENOPKG will be reported if the requisite algorithm is unavailable. 25 20 >> 21 config PUBLIC_KEY_ALGO_RSA >> 22 tristate "RSA public-key algorithm" >> 23 depends on ASYMMETRIC_PUBLIC_KEY_SUBTYPE >> 24 select MPILIB_EXTRA >> 25 help >> 26 This option enables support for the RSA algorithm (PKCS#1, RFC3447). >> 27 26 config X509_CERTIFICATE_PARSER 28 config X509_CERTIFICATE_PARSER 27 tristate "X.509 certificate parser" 29 tristate "X.509 certificate parser" 28 depends on ASYMMETRIC_PUBLIC_KEY_SUBTY 30 depends on ASYMMETRIC_PUBLIC_KEY_SUBTYPE 29 select ASN1 31 select ASN1 30 select OID_REGISTRY 32 select OID_REGISTRY 31 help 33 help 32 This option provides support for par !! 34 This option procides support for parsing X.509 format blobs for key 33 data and provides the ability to ins 35 data and provides the ability to instantiate a crypto key from a 34 public key packet found inside the c 36 public key packet found inside the certificate. 35 << 36 config PKCS8_PRIVATE_KEY_PARSER << 37 tristate "PKCS#8 private key parser" << 38 depends on ASYMMETRIC_PUBLIC_KEY_SUBTY << 39 select ASN1 << 40 select OID_REGISTRY << 41 help << 42 This option provides support for par << 43 private key data and provides the ab << 44 from that data. << 45 << 46 config PKCS7_MESSAGE_PARSER << 47 tristate "PKCS#7 message parser" << 48 depends on X509_CERTIFICATE_PARSER << 49 select CRYPTO_HASH << 50 select ASN1 << 51 select OID_REGISTRY << 52 help << 53 This option provides support for par << 54 signature data and provides the abil << 55 << 56 config PKCS7_TEST_KEY << 57 tristate "PKCS#7 testing key type" << 58 depends on SYSTEM_DATA_VERIFICATION << 59 help << 60 This option provides a type of key t << 61 PKCS#7 message - provided the messag << 62 it is, the PKCS#7 wrapper is discard << 63 just the payload. If it isn't, addi << 64 error. << 65 << 66 This is intended for testing the PKC << 67 << 68 config SIGNED_PE_FILE_VERIFICATION << 69 bool "Support for PE file signature ve << 70 depends on PKCS7_MESSAGE_PARSER=y << 71 depends on SYSTEM_DATA_VERIFICATION << 72 select CRYPTO_HASH << 73 select ASN1 << 74 select OID_REGISTRY << 75 help << 76 This option provides support for ver << 77 signed PE binary. << 78 << 79 config FIPS_SIGNATURE_SELFTEST << 80 tristate "Run FIPS selftests on the X. << 81 help << 82 This option causes some selftests to << 83 verification code, using some built << 84 for FIPS. << 85 depends on KEYS << 86 depends on ASYMMETRIC_KEY_TYPE << 87 depends on PKCS7_MESSAGE_PARSER=X509_C << 88 depends on X509_CERTIFICATE_PARSER << 89 depends on CRYPTO_RSA << 90 depends on CRYPTO_SHA256 << 91 << 92 config FIPS_SIGNATURE_SELFTEST_RSA << 93 bool << 94 default y << 95 depends on FIPS_SIGNATURE_SELFTEST << 96 depends on CRYPTO_SHA256=y || CRYPTO_S << 97 depends on CRYPTO_RSA=y || CRYPTO_RSA= << 98 << 99 config FIPS_SIGNATURE_SELFTEST_ECDSA << 100 bool << 101 default y << 102 depends on FIPS_SIGNATURE_SELFTEST << 103 depends on CRYPTO_SHA256=y || CRYPTO_S << 104 depends on CRYPTO_ECDSA=y || CRYPTO_EC << 105 37 106 endif # ASYMMETRIC_KEY_TYPE 38 endif # ASYMMETRIC_KEY_TYPE
Linux® is a registered trademark of Linus Torvalds in the United States and other countries.
TOMOYO® is a registered trademark of NTT DATA CORPORATION.