From cd4ff48276039beebc53e2e56e15f5c99a829fb2 Mon Sep 17 00:00:00 2001 From: Eric Biggers Date: Wed, 29 Mar 2023 05:46:07 +0000 Subject: [PATCH] ANDROID: gki_defconfig: enable CONFIG_CRYPTO_GHASH_ARM64_CE Enable the ARMv8 Crypto Extensions implementation of AES-GCM, as it's an order of magnitude faster than the generic implementation and is more secure. AES-GCM is used by Android's IPsec support (https://developer.android.com/reference/android/net/IpSecAlgorithm#AUTH_CRYPT_AES_GCM) and often is the first choice of algorithm for new purposes as well. This also makes GKI on arm64 consistent with GKI on x86, as the AES-NI accelerated AES-GCM is already enabled on x86. (It is not its own option on x86, but rather is included in CONFIG_CRYPTO_AES_NI_INTEL.) Bug: 274721410 Change-Id: I2877192dad8f71a961d6f6f465b62b6aeee69540 Signed-off-by: Eric Biggers --- arch/arm64/configs/gki_defconfig | 1 + 1 file changed, 1 insertion(+) diff --git a/arch/arm64/configs/gki_defconfig b/arch/arm64/configs/gki_defconfig index c1c661e25a91..1a23db15b3c2 100644 --- a/arch/arm64/configs/gki_defconfig +++ b/arch/arm64/configs/gki_defconfig @@ -87,6 +87,7 @@ CONFIG_VIRTUALIZATION=y CONFIG_KVM=y CONFIG_CRYPTO_SHA2_ARM64_CE=y CONFIG_CRYPTO_SHA512_ARM64_CE=y +CONFIG_CRYPTO_GHASH_ARM64_CE=y CONFIG_CRYPTO_POLYVAL_ARM64_CE=y CONFIG_CRYPTO_AES_ARM64_CE_BLK=y CONFIG_KPROBES=y