| .. | .. |
|---|
| 3 | 3 | config FS_VERITY |
|---|
| 4 | 4 | bool "FS Verity (read-only file-based authenticity protection)" |
|---|
| 5 | 5 | select CRYPTO |
|---|
| 6 | | - # SHA-256 is selected as it's intended to be the default hash algorithm. |
|---|
| 6 | + # SHA-256 is implied as it's intended to be the default hash algorithm. |
|---|
| 7 | 7 | # To avoid bloat, other wanted algorithms must be selected explicitly. |
|---|
| 8 | | - select CRYPTO_SHA256 |
|---|
| 8 | + # Note that CRYPTO_SHA256 denotes the generic C implementation, but |
|---|
| 9 | + # some architectures provided optimized implementations of the same |
|---|
| 10 | + # algorithm that may be used instead. In this case, CRYPTO_SHA256 may |
|---|
| 11 | + # be omitted even if SHA-256 is being used. |
|---|
| 12 | + imply CRYPTO_SHA256 |
|---|
| 9 | 13 | help |
|---|
| 10 | 14 | This option enables fs-verity. fs-verity is the dm-verity |
|---|
| 11 | 15 | mechanism implemented at the file level. On supported |
|---|