1 # SPDX-License-Identifier: GPL-2.0 1 # SPDX-License-Identifier: GPL-2.0
2 menuconfig ASYMMETRIC_KEY_TYPE 2 menuconfig ASYMMETRIC_KEY_TYPE
3 bool "Asymmetric (public-key cryptogra 3 bool "Asymmetric (public-key cryptographic) key type"
4 depends on KEYS 4 depends on KEYS
5 help 5 help
6 This option provides support for a k 6 This option provides support for a key type that holds the data for
7 the asymmetric keys used for public 7 the asymmetric keys used for public key cryptographic operations such
8 as encryption, decryption, signature 8 as encryption, decryption, signature generation and signature
9 verification. 9 verification.
10 10
11 if ASYMMETRIC_KEY_TYPE 11 if ASYMMETRIC_KEY_TYPE
12 12
13 config ASYMMETRIC_PUBLIC_KEY_SUBTYPE 13 config ASYMMETRIC_PUBLIC_KEY_SUBTYPE
14 tristate "Asymmetric public-key crypto 14 tristate "Asymmetric public-key crypto algorithm subtype"
15 select MPILIB 15 select MPILIB
16 select CRYPTO_HASH_INFO 16 select CRYPTO_HASH_INFO
17 select CRYPTO_AKCIPHER 17 select CRYPTO_AKCIPHER
18 select CRYPTO_SIG <<
19 select CRYPTO_HASH 18 select CRYPTO_HASH
20 help 19 help
21 This option provides support for asy 20 This option provides support for asymmetric public key type handling.
22 If signature generation and/or verif 21 If signature generation and/or verification are to be used,
23 appropriate hash algorithms (such as 22 appropriate hash algorithms (such as SHA-1) must be available.
24 ENOPKG will be reported if the requi 23 ENOPKG will be reported if the requisite algorithm is unavailable.
25 24
>> 25 config ASYMMETRIC_TPM_KEY_SUBTYPE
>> 26 tristate "Asymmetric TPM backed private key subtype"
>> 27 depends on TCG_TPM
>> 28 depends on TRUSTED_KEYS
>> 29 select CRYPTO_HMAC
>> 30 select CRYPTO_SHA1
>> 31 select CRYPTO_HASH_INFO
>> 32 help
>> 33 This option provides support for TPM backed private key type handling.
>> 34 Operations such as sign, verify, encrypt, decrypt are performed by
>> 35 the TPM after the private key is loaded.
>> 36
26 config X509_CERTIFICATE_PARSER 37 config X509_CERTIFICATE_PARSER
27 tristate "X.509 certificate parser" 38 tristate "X.509 certificate parser"
28 depends on ASYMMETRIC_PUBLIC_KEY_SUBTY 39 depends on ASYMMETRIC_PUBLIC_KEY_SUBTYPE
29 select ASN1 40 select ASN1
30 select OID_REGISTRY 41 select OID_REGISTRY
31 help 42 help
32 This option provides support for par 43 This option provides support for parsing X.509 format blobs for key
33 data and provides the ability to ins 44 data and provides the ability to instantiate a crypto key from a
34 public key packet found inside the c 45 public key packet found inside the certificate.
35 46
36 config PKCS8_PRIVATE_KEY_PARSER 47 config PKCS8_PRIVATE_KEY_PARSER
37 tristate "PKCS#8 private key parser" 48 tristate "PKCS#8 private key parser"
38 depends on ASYMMETRIC_PUBLIC_KEY_SUBTY 49 depends on ASYMMETRIC_PUBLIC_KEY_SUBTYPE
39 select ASN1 50 select ASN1
40 select OID_REGISTRY 51 select OID_REGISTRY
41 help 52 help
42 This option provides support for par 53 This option provides support for parsing PKCS#8 format blobs for
43 private key data and provides the ab 54 private key data and provides the ability to instantiate a crypto key
44 from that data. 55 from that data.
45 56
>> 57 config TPM_KEY_PARSER
>> 58 tristate "TPM private key parser"
>> 59 depends on ASYMMETRIC_TPM_KEY_SUBTYPE
>> 60 select ASN1
>> 61 help
>> 62 This option provides support for parsing TPM format blobs for
>> 63 private key data and provides the ability to instantiate a crypto key
>> 64 from that data.
>> 65
46 config PKCS7_MESSAGE_PARSER 66 config PKCS7_MESSAGE_PARSER
47 tristate "PKCS#7 message parser" 67 tristate "PKCS#7 message parser"
48 depends on X509_CERTIFICATE_PARSER 68 depends on X509_CERTIFICATE_PARSER
49 select CRYPTO_HASH 69 select CRYPTO_HASH
50 select ASN1 70 select ASN1
51 select OID_REGISTRY 71 select OID_REGISTRY
52 help 72 help
53 This option provides support for par 73 This option provides support for parsing PKCS#7 format messages for
54 signature data and provides the abil 74 signature data and provides the ability to verify the signature.
55 75
56 config PKCS7_TEST_KEY 76 config PKCS7_TEST_KEY
57 tristate "PKCS#7 testing key type" 77 tristate "PKCS#7 testing key type"
58 depends on SYSTEM_DATA_VERIFICATION 78 depends on SYSTEM_DATA_VERIFICATION
59 help 79 help
60 This option provides a type of key t 80 This option provides a type of key that can be loaded up from a
61 PKCS#7 message - provided the messag 81 PKCS#7 message - provided the message is signed by a trusted key. If
62 it is, the PKCS#7 wrapper is discard 82 it is, the PKCS#7 wrapper is discarded and reading the key returns
63 just the payload. If it isn't, addi 83 just the payload. If it isn't, adding the key will fail with an
64 error. 84 error.
65 85
66 This is intended for testing the PKC 86 This is intended for testing the PKCS#7 parser.
67 87
68 config SIGNED_PE_FILE_VERIFICATION 88 config SIGNED_PE_FILE_VERIFICATION
69 bool "Support for PE file signature ve 89 bool "Support for PE file signature verification"
70 depends on PKCS7_MESSAGE_PARSER=y 90 depends on PKCS7_MESSAGE_PARSER=y
71 depends on SYSTEM_DATA_VERIFICATION 91 depends on SYSTEM_DATA_VERIFICATION
72 select CRYPTO_HASH 92 select CRYPTO_HASH
73 select ASN1 93 select ASN1
74 select OID_REGISTRY 94 select OID_REGISTRY
75 help 95 help
76 This option provides support for ver 96 This option provides support for verifying the signature(s) on a
77 signed PE binary. 97 signed PE binary.
78 <<
79 config FIPS_SIGNATURE_SELFTEST <<
80 tristate "Run FIPS selftests on the X. <<
81 help <<
82 This option causes some selftests to <<
83 verification code, using some built <<
84 for FIPS. <<
85 depends on KEYS <<
86 depends on ASYMMETRIC_KEY_TYPE <<
87 depends on PKCS7_MESSAGE_PARSER=X509_C <<
88 depends on X509_CERTIFICATE_PARSER <<
89 depends on CRYPTO_RSA <<
90 depends on CRYPTO_SHA256 <<
91 <<
92 config FIPS_SIGNATURE_SELFTEST_RSA <<
93 bool <<
94 default y <<
95 depends on FIPS_SIGNATURE_SELFTEST <<
96 depends on CRYPTO_SHA256=y || CRYPTO_S <<
97 depends on CRYPTO_RSA=y || CRYPTO_RSA= <<
98 <<
99 config FIPS_SIGNATURE_SELFTEST_ECDSA <<
100 bool <<
101 default y <<
102 depends on FIPS_SIGNATURE_SELFTEST <<
103 depends on CRYPTO_SHA256=y || CRYPTO_S <<
104 depends on CRYPTO_ECDSA=y || CRYPTO_EC <<
105 98
106 endif # ASYMMETRIC_KEY_TYPE 99 endif # ASYMMETRIC_KEY_TYPE
Linux® is a registered trademark of Linus Torvalds in the United States and other countries.
TOMOYO® is a registered trademark of NTT DATA CORPORATION.