Commit ee137e01 authored by 8aed's avatar 8aed Committed by Alyssa Ross
Browse files

linux: enable the NIST SP800-90A DRBG

parent edfad583

pkgs/os-specific/linux/kernel/common-config.nix

+7 −0
Original line number Diff line number Diff line
@@ -562,6 +562,13 @@ let 
      KEYS_REQUEST_CACHE               = whenAtLeast "5.3" yes;

      # randomized slab caches

      RANDOM_KMALLOC_CACHES            = whenAtLeast "6.6" yes;



      # NIST SP800-90A DRBG modes - enabled by most distributions

      #   and required by some out-of-tree modules (ShuffleCake)

      #   This does not include the NSA-backdoored Dual-EC mode from the same NIST publication.

      CRYPTO_DRBG_HASH                 = yes;

      CRYPTO_DRBG_CTR                  = yes;



    } // optionalAttrs stdenv.hostPlatform.isx86_64 {

      # Enable Intel SGX

      X86_SGX     = whenAtLeast "5.11" yes;