Skip to content

Non-Intel linux configs: make sure AES is enabled (CONFIG_CRYPTO_AES_NI_INTEL won't work there)#1434

Merged
tlaurion merged 1 commit intolinuxboot:masterfrom
tlaurion:non-intel_readd-AES-for-cryptsetup
Jul 6, 2023
Merged

Non-Intel linux configs: make sure AES is enabled (CONFIG_CRYPTO_AES_NI_INTEL won't work there)#1434
tlaurion merged 1 commit intolinuxboot:masterfrom
tlaurion:non-intel_readd-AES-for-cryptsetup

Conversation

@tlaurion
Copy link
Copy Markdown
Collaborator

@tlaurion tlaurion commented Jul 6, 2023

kgpe-d16 linux configs: disable CONFIG_CRYPTO_AES_NI_INTEL (not avail on AMD), enable generic AES.
qemu linux config: adding generic AES support, not removing CONFIG_CRYPTO_AES_NI_INTEL (in case someone wants to explore with intel coreboot qemu support later on)

This applied to Q35 qemu board which is AMD, not intel. generic AES needs to be enabled on non-intel boards, otherwise cryptsetup doesn't know how to deal with xts-plain

Test point:
cryptsetup benchmark

Otherwise cryptsetup fails call fails.

@JonathonHall-Purism
Copy link
Copy Markdown
Collaborator

Whoops, looks fine for merge to me 👍

…NI_INTEL won't work there)

kgpe-d16 linux configs: disable CONFIG_CRYPTO_AES_NI_INTEL (not avail on AMD)

This applied to Q35 qemu board which is AMD, not intel.
generic AES needs to be enabled on non-intel boards, otherwise cryptsetup doesn't know how to deal with xts-plain

Then saved back with linux.save_in_oldconfig_format_in_place
@tlaurion tlaurion force-pushed the non-intel_readd-AES-for-cryptsetup branch from f50cccc to 4f367d9 Compare July 6, 2023 19:36
@tlaurion tlaurion merged commit 3747d58 into linuxboot:master Jul 6, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants