mirror of
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
synced 2024-09-27 12:57:53 +00:00
module: enable automatic module signing with FIPS 202 SHA-3
Add Kconfig options to use SHA-3 for kernel module signing. 256 size for RSA only, and higher sizes for RSA and NIST P-384. Signed-off-by: Dimitri John Ledkov <dimitri.ledkov@canonical.com> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
This commit is contained in:
parent
fdb4f66c95
commit
446b1e0b7b
2 changed files with 16 additions and 1 deletions
|
@ -30,7 +30,7 @@ config MODULE_SIG_KEY_TYPE_RSA
|
||||||
config MODULE_SIG_KEY_TYPE_ECDSA
|
config MODULE_SIG_KEY_TYPE_ECDSA
|
||||||
bool "ECDSA"
|
bool "ECDSA"
|
||||||
select CRYPTO_ECDSA
|
select CRYPTO_ECDSA
|
||||||
depends on MODULE_SIG_SHA384 || MODULE_SIG_SHA512
|
depends on !(MODULE_SIG_SHA256 || MODULE_SIG_SHA3_256)
|
||||||
help
|
help
|
||||||
Use an elliptic curve key (NIST P384) for module signing. Use
|
Use an elliptic curve key (NIST P384) for module signing. Use
|
||||||
a strong hash of same or higher bit length, i.e. sha384 or
|
a strong hash of same or higher bit length, i.e. sha384 or
|
||||||
|
|
|
@ -248,6 +248,18 @@ config MODULE_SIG_SHA512
|
||||||
bool "Sign modules with SHA-512"
|
bool "Sign modules with SHA-512"
|
||||||
select CRYPTO_SHA512
|
select CRYPTO_SHA512
|
||||||
|
|
||||||
|
config MODULE_SIG_SHA3_256
|
||||||
|
bool "Sign modules with SHA3-256"
|
||||||
|
select CRYPTO_SHA3
|
||||||
|
|
||||||
|
config MODULE_SIG_SHA3_384
|
||||||
|
bool "Sign modules with SHA3-384"
|
||||||
|
select CRYPTO_SHA3
|
||||||
|
|
||||||
|
config MODULE_SIG_SHA3_512
|
||||||
|
bool "Sign modules with SHA3-512"
|
||||||
|
select CRYPTO_SHA3
|
||||||
|
|
||||||
endchoice
|
endchoice
|
||||||
|
|
||||||
config MODULE_SIG_HASH
|
config MODULE_SIG_HASH
|
||||||
|
@ -256,6 +268,9 @@ config MODULE_SIG_HASH
|
||||||
default "sha256" if MODULE_SIG_SHA256
|
default "sha256" if MODULE_SIG_SHA256
|
||||||
default "sha384" if MODULE_SIG_SHA384
|
default "sha384" if MODULE_SIG_SHA384
|
||||||
default "sha512" if MODULE_SIG_SHA512
|
default "sha512" if MODULE_SIG_SHA512
|
||||||
|
default "sha3-256" if MODULE_SIG_SHA3_256
|
||||||
|
default "sha3-384" if MODULE_SIG_SHA3_384
|
||||||
|
default "sha3-512" if MODULE_SIG_SHA3_512
|
||||||
|
|
||||||
choice
|
choice
|
||||||
prompt "Module compression mode"
|
prompt "Module compression mode"
|
||||||
|
|
Loading…
Reference in a new issue