diff --git a/src/security/vboot/Kconfig b/src/security/vboot/Kconfig
index 9025979596..a9981874cc 100644
--- a/src/security/vboot/Kconfig
+++ b/src/security/vboot/Kconfig
@@ -291,6 +291,14 @@ config VBOOT_X86_SHA256_ACCELERATION
 	  Use sha256msg1, sha256msg2, sha256rnds2 instruction to accelerate
 	  SHA hash calculation in vboot.
 
+config VBOOT_ARMV8_CE_SHA256_ACCELERATION
+	bool "Use ARMv8 Crypto Extension for sha256 hash calculation"
+	default y if CHROMEOS
+	default n
+	depends on ARCH_ARM64
+	help
+	  Use ARMv8 Crypto Extension to accelerate SHA hash calculation in vboot.
+
 config VBOOT_DEFINE_WIDEVINE_COUNTERS
 	bool
 	default n
diff --git a/src/security/vboot/Makefile.inc b/src/security/vboot/Makefile.inc
index 52d6de39f6..9e42ab124b 100644
--- a/src/security/vboot/Makefile.inc
+++ b/src/security/vboot/Makefile.inc
@@ -30,6 +30,7 @@ $$(VBOOT_LIB_$(1)): $(obj)/config.h
 	EC_EFS="$(CONFIG_VBOOT_EC_EFS)" \
 	X86_SHA_EXT="$(if $(CONFIG_ARCH_$(call toupper,$(1))_X86_32)$(CONFIG_ARCH_$(call toupper,$(1))_X86_64),$\
 			$(CONFIG_VBOOT_X86_SHA256_ACCELERATION))" \
+	ARMV8_CRYPTO_EXT="$(if $(CONFIG_ARCH_$(call toupper,$(1))_ARMV8_64),$$(CONFIG_VBOOT_ARMV8_CE_SHA256_ACCELERATION))" \
 	$(MAKE) -C $(VBOOT_SOURCE) \
 		BUILD=$$(abspath $$(dir $$(VBOOT_LIB_$(1)))) \
 		V=$(V) \