# SPDX-License-Identifier: GPL-2.0 menuconfig [31mCONFIG_ASYMMETRIC_KEY_TYPE[0m bool "Asymmetric (public-key cryptographic) key type" depends on [31mCONFIG_KEYS[0m help This option provides support for a key type that holds the data for the asymmetric keys used for public key cryptographic operations such as encryption, decryption, signature generation and signature verification. if [31mCONFIG_ASYMMETRIC_KEY_TYPE[0m config [31mCONFIG_ASYMMETRIC_PUBLIC_KEY_SUBTYPE[0m tristate "Asymmetric public-key crypto algorithm subtype" select [31mCONFIG_MPILIB[0m select [31mCONFIG_CRYPTO_HASH_INFO[0m select [31mCONFIG_CRYPTO_AKCIPHER[0m select [31mCONFIG_CRYPTO_HASH[0m help This option provides support for asymmetric public key type handling. If signature generation and/or verification are to be used, appropriate hash algorithms (such as SHA-1) must be available. ENOPKG will be reported if the requisite algorithm is unavailable. config [31mCONFIG_ASYMMETRIC_TPM_KEY_SUBTYPE[0m tristate "Asymmetric TPM backed private key subtype" depends on [31mCONFIG_TCG_TPM[0m depends on [31mCONFIG_TRUSTED_KEYS[0m select [31mCONFIG_CRYPTO_HMAC[0m select [31mCONFIG_CRYPTO_SHA1[0m select [31mCONFIG_CRYPTO_HASH_INFO[0m help This option provides support for TPM backed private key type handling. Operations such as sign, verify, encrypt, decrypt are performed by the TPM after the private key is loaded. config [31mCONFIG_X509_CERTIFICATE_PARSER[0m tristate "X.509 certificate parser" depends on [31mCONFIG_ASYMMETRIC_PUBLIC_KEY_SUBTYPE[0m select [31mCONFIG_ASN1[0m select [31mCONFIG_OID_REGISTRY[0m help This option provides support for parsing X.509 format blobs for key data and provides the ability to instantiate a crypto key from a public key packet found inside the certificate. config [31mCONFIG_PKCS8_PRIVATE_KEY_PARSER[0m tristate "PKCS#8 private key parser" depends on [31mCONFIG_ASYMMETRIC_PUBLIC_KEY_SUBTYPE[0m select [31mCONFIG_ASN1[0m select [31mCONFIG_OID_REGISTRY[0m help This option provides support for parsing PKCS#8 format blobs for private key data and provides the ability to instantiate a crypto key from that data. config [31mCONFIG_TPM_KEY_PARSER[0m tristate "TPM private key parser" depends on [31mCONFIG_ASYMMETRIC_TPM_KEY_SUBTYPE[0m select [31mCONFIG_ASN1[0m help This option provides support for parsing TPM format blobs for private key data and provides the ability to instantiate a crypto key from that data. config [31mCONFIG_PKCS7_MESSAGE_PARSER[0m tristate "PKCS#7 message parser" depends on [31mCONFIG_X509_CERTIFICATE_PARSER[0m select [31mCONFIG_CRYPTO_HASH[0m select [31mCONFIG_ASN1[0m select [31mCONFIG_OID_REGISTRY[0m help This option provides support for parsing PKCS#7 format messages for signature data and provides the ability to verify the signature. config [31mCONFIG_PKCS7_TEST_KEY[0m tristate "PKCS#7 testing key type" depends on [31mCONFIG_SYSTEM_DATA_VERIFICATION[0m help This option provides a type of key that can be loaded up from a PKCS#7 message - provided the message is signed by a trusted key. If it is, the PKCS#7 wrapper is discarded and reading the key returns just the payload. If it isn't, adding the key will fail with an error. This is intended for testing the PKCS#7 parser. config [31mCONFIG_SIGNED_PE_FILE_VERIFICATION[0m bool "Support for PE file signature verification" depends on [31mCONFIG_PKCS7_MESSAGE_PARSER[0m=y depends on [31mCONFIG_SYSTEM_DATA_VERIFICATION[0m select [31mCONFIG_CRYPTO_HASH[0m select [31mCONFIG_ASN1[0m select [31mCONFIG_OID_REGISTRY[0m help This option provides support for verifying the signature(s) on a signed PE binary. endif # [31mCONFIG_ASYMMETRIC_KEY_TYPE[0m |