| .. | .. | 
|---|
 | 1 | +# SPDX-License-Identifier: GPL-2.0-only  | 
|---|
| 1 | 2 |  config FS_ENCRYPTION | 
|---|
| 2 | 3 |  	bool "FS Encryption (Per-file encryption)" | 
|---|
| 3 | 4 |  	select CRYPTO | 
|---|
| 4 | 5 |  	select CRYPTO_HASH | 
|---|
| 5 |  | -	select CRYPTO_BLKCIPHER  | 
|---|
 | 6 | +	select CRYPTO_SKCIPHER  | 
|---|
 | 7 | +	select CRYPTO_LIB_SHA256  | 
|---|
| 6 | 8 |  	select KEYS | 
|---|
| 7 | 9 |  	help | 
|---|
| 8 | 10 |  	  Enable encryption of files and directories.  This | 
|---|
| .. | .. | 
|---|
| 12 | 14 |  	  F2FS and UBIFS make use of this feature. | 
|---|
| 13 | 15 |   | 
|---|
| 14 | 16 |  # Filesystems supporting encryption must select this if FS_ENCRYPTION.  This | 
|---|
| 15 |  | -# allows the algorithms to be built as modules when all the filesystems are.  | 
|---|
 | 17 | +# allows the algorithms to be built as modules when all the filesystems are,  | 
|---|
 | 18 | +# whereas selecting them from FS_ENCRYPTION would force them to be built-in.  | 
|---|
 | 19 | +#  | 
|---|
 | 20 | +# Note: this option only pulls in the algorithms that filesystem encryption  | 
|---|
 | 21 | +# needs "by default".  If userspace will use "non-default" encryption modes such  | 
|---|
 | 22 | +# as Adiantum encryption, then those other modes need to be explicitly enabled  | 
|---|
 | 23 | +# in the crypto API; see Documentation/filesystems/fscrypt.rst for details.  | 
|---|
 | 24 | +#  | 
|---|
 | 25 | +# Also note that this option only pulls in the generic implementations of the  | 
|---|
 | 26 | +# algorithms, not any per-architecture optimized implementations.  It is  | 
|---|
 | 27 | +# strongly recommended to enable optimized implementations too.  It is safe to  | 
|---|
 | 28 | +# disable these generic implementations if corresponding optimized  | 
|---|
 | 29 | +# implementations will always be available too; for this reason, these are soft  | 
|---|
 | 30 | +# dependencies ('imply' rather than 'select').  Only disable these generic  | 
|---|
 | 31 | +# implementations if you're sure they will never be needed, though.  | 
|---|
| 16 | 32 |  config FS_ENCRYPTION_ALGS | 
|---|
| 17 | 33 |  	tristate | 
|---|
| 18 |  | -	select CRYPTO_AES  | 
|---|
| 19 |  | -	select CRYPTO_CBC  | 
|---|
| 20 |  | -	select CRYPTO_CTS  | 
|---|
| 21 |  | -	select CRYPTO_ECB  | 
|---|
| 22 |  | -	select CRYPTO_HMAC  | 
|---|
| 23 |  | -	select CRYPTO_SHA256  | 
|---|
| 24 |  | -	select CRYPTO_SHA512  | 
|---|
| 25 |  | -	select CRYPTO_XTS  | 
|---|
 | 34 | +	imply CRYPTO_AES  | 
|---|
 | 35 | +	imply CRYPTO_CBC  | 
|---|
 | 36 | +	imply CRYPTO_CTS  | 
|---|
 | 37 | +	imply CRYPTO_ECB  | 
|---|
 | 38 | +	imply CRYPTO_HMAC  | 
|---|
 | 39 | +	imply CRYPTO_SHA512  | 
|---|
 | 40 | +	imply CRYPTO_XTS  | 
|---|
| 26 | 41 |   | 
|---|
| 27 | 42 |  config FS_ENCRYPTION_INLINE_CRYPT | 
|---|
| 28 | 43 |  	bool "Enable fscrypt to use inline crypto" | 
|---|