diff mbox series

[cip-kernel-config,1/2] 6.1.y-cip/arm64/qemu_arm64_defconfig: Enable TPM-based LUKS partitions

Message ID 20230908121152.502670-1-Sai.Sathujoda@toshiba-tsip.com (mailing list archive)
State Accepted, archived
Delegated to: Nobuhiro Iwamatsu
Headers show
Series [cip-kernel-config,1/2] 6.1.y-cip/arm64/qemu_arm64_defconfig: Enable TPM-based LUKS partitions | expand

Commit Message

Sai.Sathujoda@toshiba-tsip.com Sept. 8, 2023, 12:11 p.m. UTC
From: Sai Sathujoda <Sai.Sathujoda@toshiba-tsip.com>

These configs allow to use LUKS encrypted partitions with
the passphrase stored in TPM2.

Signed-off-by: Sai Sathujoda <Sai.Sathujoda@toshiba-tsip.com>
---
 6.1.y-cip/arm64/qemu_arm64_defconfig | 11 +++++++++++
 1 file changed, 11 insertions(+)

Comments

Nobuhiro Iwamatsu Sept. 19, 2023, 12:12 p.m. UTC | #1
Hi!

> -----Original Message-----
> From: Sai.Sathujoda@toshiba-tsip.com <Sai.Sathujoda@toshiba-tsip.com>
> Sent: Friday, September 8, 2023 9:12 PM
> To: cip-dev@lists.cip-project.org; iwamatsu nobuhiro(岩松 信洋 ○DITC□
> DIT○OST) <nobuhiro1.iwamatsu@toshiba.co.jp>
> Cc: ashrith sai(TSIP) <Sai.Sathujoda@toshiba-tsip.com>; dinesh
> kumar(TSIP TMIEC ODG Porting) <dinesh.kumar@toshiba-tsip.com>;
> hayashi kazuhiro(林 和宏 DME ○DIG□MPS○MP4)
> <kazuhiro3.hayashi@toshiba.co.jp>
> Subject: [cip-kernel-config 1/2] 6.1.y-cip/arm64/qemu_arm64_defconfig:
> Enable TPM-based LUKS partitions
> 
> From: Sai Sathujoda <Sai.Sathujoda@toshiba-tsip.com>
> 
> These configs allow to use LUKS encrypted partitions with the passphrase
> stored in TPM2.
> 
> Signed-off-by: Sai Sathujoda <Sai.Sathujoda@toshiba-tsip.com>
> ---
>  6.1.y-cip/arm64/qemu_arm64_defconfig | 11 +++++++++++
>  1 file changed, 11 insertions(+)

Applied, thank.

Best regards,
  Nobuhiro
diff mbox series

Patch

diff --git a/6.1.y-cip/arm64/qemu_arm64_defconfig b/6.1.y-cip/arm64/qemu_arm64_defconfig
index 087dd34..04a6614 100644
--- a/6.1.y-cip/arm64/qemu_arm64_defconfig
+++ b/6.1.y-cip/arm64/qemu_arm64_defconfig
@@ -414,3 +414,14 @@  CONFIG_DEBUG_FS=y
 # CONFIG_FTRACE is not set
 CONFIG_TEST_USER_COPY=m
 CONFIG_MEMTEST=y
+CONFIG_CRYPTO_HMAC=y
+CONFIG_ARM64_CRYPTO=y
+CONFIG_CRYPTO_SHA256_ARM64=y
+CONFIG_CRYPTO_SHA256=y
+CONFIG_CRYPTO_DRBG_HMAC=y
+CONFIG_CRYPTO_LIB_SHA256=y
+CONFIG_CRYPTO_XTS=y
+CONFIG_SECURITYFS=y
+CONFIG_TCG_TIS_CORE=y
+CONFIG_TCG_TIS=y
+CONFIG_TCG_TIS_SPI=y