| 1 | <?xml version="1.0" encoding="UTF-8"?>
|
|---|
| 2 | <!DOCTYPE note PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
|
|---|
| 3 | "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd">
|
|---|
| 4 | <!-- Automatically generated by kernel-config.py
|
|---|
| 5 | DO NOT EDIT! -->
|
|---|
| 6 | <screen><emphasis role='blue'>S</emphasis>ecurity options --->
|
|---|
| 7 | [*] <emphasis role='blue'>E</emphasis>nable access key retention support [KEYS]
|
|---|
| 8 | [*] <emphasis role='blue'>L</emphasis>arge payload keys [BIG_KEYS]
|
|---|
| 9 | [*] <emphasis role='blue'>D</emphasis>iffie-Hellman operations on retained keys [KEY_DH_OPERATIONS]
|
|---|
| 10 |
|
|---|
| 11 | -*- <emphasis role='blue'>C</emphasis>ryptographic API ---> [CRYPTO]
|
|---|
| 12 | <emphasis role='blue'>P</emphasis>ublic-key cryptography --->
|
|---|
| 13 | <*/M> <emphasis role='blue'>R</emphasis>SA (Rivest-Shamir-Adleman) [CRYPTO_RSA]
|
|---|
| 14 | H<emphasis role='blue'>a</emphasis>shes, digests, and MACs --->
|
|---|
| 15 | <*/M> <emphasis role='blue'>S</emphasis>HA-1 [CRYPTO_SHA1]
|
|---|
| 16 | [*] <emphasis role='blue'>A</emphasis>symmetric (public-key cryptographic) key type ---> [ASYMMETRIC_KEY_TYPE]
|
|---|
| 17 | <*> <emphasis role='blue'>A</emphasis>symmetric public-key crypto algorithm subtype
|
|---|
| 18 | ... [ASYMMETRIC_PUBLIC_KEY_SUBTYPE]
|
|---|
| 19 | # If not built into the kernel, [SYSTEM_TRUSTED_KEYRING] won't show up;
|
|---|
| 20 | # building as a module won't work:
|
|---|
| 21 | <*> <emphasis role='blue'>X</emphasis>.509 certificate parser [X509_CERTIFICATE_PARSER]
|
|---|
| 22 | <emphasis role='blue'>C</emphasis>ertificates for signature checking --->
|
|---|
| 23 | [*] <emphasis role='blue'>P</emphasis>rovide system-wide ring of trusted keys [SYSTEM_TRUSTED_KEYRING]
|
|---|
| 24 | [*] <emphasis role='blue'>P</emphasis>rovide a keyring to which extra trustable keys may be added
|
|---|
| 25 | ... [SECONDARY_TRUSTED_KEYRING]
|
|---|
| 26 | [*] <emphasis role='blue'>P</emphasis>rovide system-wide ring of blacklisted keys [SYSTEM_BLACKLIST_KEYRING]
|
|---|
| 27 |
|
|---|
| 28 | <emphasis role='blue'>L</emphasis>ibrary routines --->
|
|---|
| 29 | <emphasis role='blue'>C</emphasis>rypto library routines --->
|
|---|
| 30 | # If not built into the kernel, [BIG_KEYS] won't show up;
|
|---|
| 31 | # building as a module won't work:
|
|---|
| 32 | <*> <emphasis role='blue'>C</emphasis>haCha20-Poly1305 AEAD support (8-byte nonce library version)
|
|---|
| 33 | ... [CRYPTO_LIB_CHACHA20POLY1305]</screen>
|
|---|
