[434e3e0] | 1 | <?xml version="1.0" encoding="UTF-8"?>
|
---|
| 2 | <!DOCTYPE note PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
|
---|
| 3 | "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd">
|
---|
| 4 | <!-- Automatically generated by kernel-config.py
|
---|
| 5 | DO NOT EDIT! -->
|
---|
| 6 | <screen><emphasis role='blue'>S</emphasis>ecurity options --->
|
---|
| 7 | [*] <emphasis role='blue'>E</emphasis>nable access key retention support [KEYS]
|
---|
| 8 | [*] <emphasis role='blue'>L</emphasis>arge payload keys [BIG_KEYS]
|
---|
| 9 | [*] <emphasis role='blue'>D</emphasis>iffie-Hellman operations on retained keys [KEY_DH_OPERATIONS]
|
---|
| 10 |
|
---|
| 11 | -*- <emphasis role='blue'>C</emphasis>ryptographic API ---> [CRYPTO]
|
---|
[b2787106] | 12 | <emphasis role='blue'>P</emphasis>ublic-key cryptography --->
|
---|
| 13 | <*/M> <emphasis role='blue'>R</emphasis>SA (Rivest-Shamir-Adleman) [CRYPTO_RSA]
|
---|
[bcdc3a3] | 14 | H<emphasis role='blue'>a</emphasis>shes, digests, and MACs --->
|
---|
| 15 | <*/M> <emphasis role='blue'>S</emphasis>HA-1 [CRYPTO_SHA1]
|
---|
[b2787106] | 16 | [*] <emphasis role='blue'>A</emphasis>symmetric (public-key cryptographic) key type ---> [ASYMMETRIC_KEY_TYPE]
|
---|
| 17 | <*> <emphasis role='blue'>A</emphasis>symmetric public-key crypto algorithm subtype
|
---|
| 18 | ... [ASYMMETRIC_PUBLIC_KEY_SUBTYPE]
|
---|
| 19 | # If not built into the kernel, [SYSTEM_TRUSTED_KEYRING] won't show up;
|
---|
| 20 | # building as a module won't work:
|
---|
| 21 | <*> <emphasis role='blue'>X</emphasis>.509 certificate parser [X509_CERTIFICATE_PARSER]
|
---|
[434e3e0] | 22 | <emphasis role='blue'>C</emphasis>ertificates for signature checking --->
|
---|
| 23 | [*] <emphasis role='blue'>P</emphasis>rovide system-wide ring of trusted keys [SYSTEM_TRUSTED_KEYRING]
|
---|
| 24 | [*] <emphasis role='blue'>P</emphasis>rovide a keyring to which extra trustable keys may be added
|
---|
| 25 | ... [SECONDARY_TRUSTED_KEYRING]
|
---|
[20aab88] | 26 | [*] <emphasis role='blue'>P</emphasis>rovide system-wide ring of blacklisted keys [SYSTEM_BLACKLIST_KEYRING]
|
---|
| 27 |
|
---|
| 28 | <emphasis role='blue'>L</emphasis>ibrary routines --->
|
---|
| 29 | <emphasis role='blue'>C</emphasis>rypto library routines --->
|
---|
| 30 | # If not built into the kernel, [BIG_KEYS] won't show up;
|
---|
| 31 | # building as a module won't work:
|
---|
| 32 | <*> <emphasis role='blue'>C</emphasis>haCha20-Poly1305 AEAD support (8-byte nonce library version)
|
---|
| 33 | ... [CRYPTO_LIB_CHACHA20POLY1305]</screen>
|
---|