Enable crypto kernel configs in kernel version 6.12#16141
Open
chalamalasetty wants to merge 2 commits into3.0-devfrom
Open
Enable crypto kernel configs in kernel version 6.12#16141chalamalasetty wants to merge 2 commits into3.0-devfrom
chalamalasetty wants to merge 2 commits into3.0-devfrom
Conversation
chalamalasetty
requested review from
anphel31,
christopherco,
jslobodzian,
rlmenge and
sidchintamaneni
microsoft-github-policy-service
bot
added
Packaging
3.0-dev
anphel31
reviewed
Mar 7, 2026
SPECS/kernel-hwe/kernel-hwe.spec
Outdated
| %changelog | ||
| * Fri Mar 06 2026 Suresh Babu Chalamalasetty <schalam@microsoft.com> - 6.12.57.1-6 | ||
| - Enable FIPS crypto configs CONFIG_CRYPTO_DH_RFC7919_GROUPS, CONFIG_CRYPTO_ECDSA, | ||
| - CONFIG_CRYPTO_ARC4, CONFIG_CRYPTO_DEV_BCM_SPU and their dependencies |
Member
There was a problem hiding this comment.
mention these changes are only for arm64?
anphel31
approved these changes
Mar 7, 2026
christopherco
requested changes
Mar 11, 2026
Collaborator
christopherco
left a comment
christopherco
left a comment
There was a problem hiding this comment.
One comment to better understand why BCM is being added into the configs.
Rest generally looks okay, though we need a change into the kernel config CI checker to ensure future kernel-hwe version upgrades keep these config changes. Please work with @rlmenge on getting this config checker in place.
| # CONFIG_ARCH_ALPINE is not set | ||
| # CONFIG_ARCH_APPLE is not set | ||
| # CONFIG_ARCH_BCM is not set | ||
| CONFIG_ARCH_BCM=y |
Collaborator
There was a problem hiding this comment.
question(blocking): why are all these Broadcom configs being enabled?
Contributor
Author
There was a problem hiding this comment.
BCM related configs are enabled as dependencies for CONFIG_CRYPTO_DEV_BCM_SPU.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Merge Checklist
All boxes should be checked before merging the PR (just tick any boxes which don't apply to this PR)
*-staticsubpackages, etc.) have had theirReleasetag incremented../cgmanifest.json,./toolkit/scripts/toolchain/cgmanifest.json,.github/workflows/cgmanifest.json)./LICENSES-AND-NOTICES/SPECS/data/licenses.json,./LICENSES-AND-NOTICES/SPECS/LICENSES-MAP.md,./LICENSES-AND-NOTICES/SPECS/LICENSE-EXCEPTIONS.PHOTON)*.signatures.jsonfilessudo make go-tidy-allandsudo make go-test-coveragepassSummary
Enable crypto kernel configs in kernel version 6.12
Change Log
Enable crypto kernel configs in kernel version 6.12
Does this affect the toolchain?
NO
Associated issues
Links to CVEs
Test Methodology