1 config HAVE_TRUSTED_KEYS 1 config HAVE_TRUSTED_KEYS
2 bool 2 bool
3 3
4 config TRUSTED_KEYS_TPM 4 config TRUSTED_KEYS_TPM
5 bool "TPM-based trusted keys" 5 bool "TPM-based trusted keys"
6 depends on TCG_TPM >= TRUSTED_KEYS 6 depends on TCG_TPM >= TRUSTED_KEYS
7 default y 7 default y
8 select CRYPTO 8 select CRYPTO
9 select CRYPTO_HMAC 9 select CRYPTO_HMAC
10 select CRYPTO_SHA1 10 select CRYPTO_SHA1
11 select CRYPTO_HASH_INFO 11 select CRYPTO_HASH_INFO
12 select ASN1_ENCODER 12 select ASN1_ENCODER
13 select OID_REGISTRY 13 select OID_REGISTRY
14 select ASN1 14 select ASN1
15 select HAVE_TRUSTED_KEYS 15 select HAVE_TRUSTED_KEYS
16 help 16 help
17 Enable use of the Trusted Platform M 17 Enable use of the Trusted Platform Module (TPM) as trusted key
18 backend. Trusted keys are random num 18 backend. Trusted keys are random number symmetric keys,
19 which will be generated and RSA-seal 19 which will be generated and RSA-sealed by the TPM.
20 The TPM only unseals the keys, if th 20 The TPM only unseals the keys, if the boot PCRs and other
21 criteria match. 21 criteria match.
22 22
23 config TRUSTED_KEYS_TEE 23 config TRUSTED_KEYS_TEE
24 bool "TEE-based trusted keys" 24 bool "TEE-based trusted keys"
25 depends on TEE >= TRUSTED_KEYS 25 depends on TEE >= TRUSTED_KEYS
26 default y 26 default y
27 select HAVE_TRUSTED_KEYS 27 select HAVE_TRUSTED_KEYS
28 help 28 help
29 Enable use of the Trusted Execution 29 Enable use of the Trusted Execution Environment (TEE) as trusted
30 key backend. 30 key backend.
31 31
32 config TRUSTED_KEYS_CAAM 32 config TRUSTED_KEYS_CAAM
33 bool "CAAM-based trusted keys" 33 bool "CAAM-based trusted keys"
34 depends on CRYPTO_DEV_FSL_CAAM_JR >= T 34 depends on CRYPTO_DEV_FSL_CAAM_JR >= TRUSTED_KEYS
35 select CRYPTO_DEV_FSL_CAAM_BLOB_GEN 35 select CRYPTO_DEV_FSL_CAAM_BLOB_GEN
36 default y 36 default y
37 select HAVE_TRUSTED_KEYS 37 select HAVE_TRUSTED_KEYS
38 help 38 help
39 Enable use of NXP's Cryptographic Ac 39 Enable use of NXP's Cryptographic Accelerator and Assurance Module
40 (CAAM) as trusted key backend. 40 (CAAM) as trusted key backend.
41 41
42 config TRUSTED_KEYS_DCP 42 config TRUSTED_KEYS_DCP
43 bool "DCP-based trusted keys" 43 bool "DCP-based trusted keys"
44 depends on CRYPTO_DEV_MXS_DCP >= TRUST 44 depends on CRYPTO_DEV_MXS_DCP >= TRUSTED_KEYS
45 default y 45 default y
46 select HAVE_TRUSTED_KEYS 46 select HAVE_TRUSTED_KEYS
47 help 47 help
48 Enable use of NXP's DCP (Data Co-Pro 48 Enable use of NXP's DCP (Data Co-Processor) as trusted key backend.
49 49
50 if !HAVE_TRUSTED_KEYS 50 if !HAVE_TRUSTED_KEYS
51 comment "No trust source selected!" 51 comment "No trust source selected!"
52 endif 52 endif
Linux® is a registered trademark of Linus Torvalds in the United States and other countries.
TOMOYO® is a registered trademark of NTT DATA CORPORATION.