.. | .. |
---|
3 | 3 | config FS_VERITY |
---|
4 | 4 | bool "FS Verity (read-only file-based authenticity protection)" |
---|
5 | 5 | select CRYPTO |
---|
6 | | - # SHA-256 is selected as it's intended to be the default hash algorithm. |
---|
| 6 | + # SHA-256 is implied as it's intended to be the default hash algorithm. |
---|
7 | 7 | # To avoid bloat, other wanted algorithms must be selected explicitly. |
---|
8 | | - select CRYPTO_SHA256 |
---|
| 8 | + # Note that CRYPTO_SHA256 denotes the generic C implementation, but |
---|
| 9 | + # some architectures provided optimized implementations of the same |
---|
| 10 | + # algorithm that may be used instead. In this case, CRYPTO_SHA256 may |
---|
| 11 | + # be omitted even if SHA-256 is being used. |
---|
| 12 | + imply CRYPTO_SHA256 |
---|
9 | 13 | help |
---|
10 | 14 | This option enables fs-verity. fs-verity is the dm-verity |
---|
11 | 15 | mechanism implemented at the file level. On supported |
---|