Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit f46d50c8 authored by Eric Biggers's avatar Eric Biggers Committed by Alistair Delva
Browse files

ANDROID: gki_defconfig: enable accelerated AES and SHA-256 



Enable AES and SHA-256 accelerated with the ARM Cryptography Extensions
or with AES-NI, as recommended by
kernel-configs/android-4.19/android-recommended-{arm64,x86}.config.
These are ~10x faster than the other software implementations of AES and
SHA-256 on most devices, and often are required to get acceptable
fscrypt and dm-verity performance.

Bug: 142410832
Change-Id: Ia2794f47711132d5caa9021e6e81fb625e02be8d
Signed-off-by: default avatarEric Biggers <ebiggers@google.com>
parent 0adcd7cf

arch/arm64/configs/gki_defconfig

+2 −1
Original line number Diff line number Diff line
@@ -72,7 +72,8 @@ CONFIG_ARM_SCPI_PROTOCOL=y 
# CONFIG_ARM_SCPI_POWER_DOMAIN is not set

# CONFIG_EFI_ARMSTUB_DTB_LOADER is not set

CONFIG_ARM64_CRYPTO=y

CONFIG_CRYPTO_AES_ARM64=y

CONFIG_CRYPTO_SHA2_ARM64_CE=y

CONFIG_CRYPTO_AES_ARM64_CE_BLK=y

CONFIG_KPROBES=y

CONFIG_MODULES=y

CONFIG_MODULE_UNLOAD=y

arch/x86/configs/gki_defconfig

+2 −0
Original line number Diff line number Diff line
@@ -386,6 +386,8 @@ CONFIG_SECURITY_NETWORK=y 
CONFIG_HARDENED_USERCOPY=y

CONFIG_SECURITY_SELINUX=y

CONFIG_CRYPTO_ADIANTUM=y

CONFIG_CRYPTO_SHA256_SSSE3=y

CONFIG_CRYPTO_AES_NI_INTEL=y

CONFIG_CRYPTO_LZ4=y

CONFIG_CRYPTO_ZSTD=y

CONFIG_CRYPTO_ANSI_CPRNG=y