menuconfig [31mCONFIG_ASYMMETRIC_KEY_TYPE[0m bool "Asymmetric (public-key cryptographic) key type" depends on [31mCONFIG_KEYS[0m help This option provides support for a key type that holds the data for the asymmetric keys used for public key cryptographic operations such as encryption, decryption, signature generation and signature verification. if [31mCONFIG_ASYMMETRIC_KEY_TYPE[0m config [31mCONFIG_ASYMMETRIC_PUBLIC_KEY_SUBTYPE[0m tristate "Asymmetric public-key crypto algorithm subtype" select [31mCONFIG_MPILIB[0m select [31mCONFIG_CRYPTO_HASH_INFO[0m select [31mCONFIG_CRYPTO_AKCIPHER[0m help This option provides support for asymmetric public key type handling. If signature generation and/or verification are to be used, appropriate hash algorithms (such as SHA-1) must be available. ENOPKG will be reported if the requisite algorithm is unavailable. config [31mCONFIG_X509_CERTIFICATE_PARSER[0m tristate "X.509 certificate parser" depends on [31mCONFIG_ASYMMETRIC_PUBLIC_KEY_SUBTYPE[0m select [31mCONFIG_ASN1[0m select [31mCONFIG_OID_REGISTRY[0m help This option provides support for parsing X.509 format blobs for key data and provides the ability to instantiate a crypto key from a public key packet found inside the certificate. config [31mCONFIG_PKCS7_MESSAGE_PARSER[0m tristate "PKCS#7 message parser" depends on [31mCONFIG_X509_CERTIFICATE_PARSER[0m select [31mCONFIG_ASN1[0m select [31mCONFIG_OID_REGISTRY[0m help This option provides support for parsing PKCS#7 format messages for signature data and provides the ability to verify the signature. config [31mCONFIG_PKCS7_TEST_KEY[0m tristate "PKCS#7 testing key type" depends on [31mCONFIG_SYSTEM_DATA_VERIFICATION[0m help This option provides a type of key that can be loaded up from a PKCS#7 message - provided the message is signed by a trusted key. If it is, the PKCS#7 wrapper is discarded and reading the key returns just the payload. If it isn't, adding the key will fail with an error. This is intended for testing the PKCS#7 parser. config [31mCONFIG_SIGNED_PE_FILE_VERIFICATION[0m bool "Support for PE file signature verification" depends on [31mCONFIG_PKCS7_MESSAGE_PARSER[0m=y depends on [31mCONFIG_SYSTEM_DATA_VERIFICATION[0m select [31mCONFIG_ASN1[0m select [31mCONFIG_OID_REGISTRY[0m help This option provides support for verifying the signature(s) on a signed PE binary. endif # [31mCONFIG_ASYMMETRIC_KEY_TYPE[0m |