70409217e7
Add Kconfig option for VBOOT_SHA_ARMV8_CE, which will use ARMv8 Crypto Extension for SHA256[1] instead of software implementation. [1] https://crrev.com/c/4170144 BUG=b:263514393 BRANCH=corsola TEST='vboot kernel verification' gets 111 msecs improvement on Tentacruel. Before: 1100:finished vboot kernel verification 905,150 (123,518) After: 1100:finished vboot kernel verification 787,277 (12,254) Cq-Depend: chromium:4170144, chromium:4242678 Change-Id: If92830830a0658dfad2a066e9efa624783865cf2 Signed-off-by: Yidi Lin <yidilin@chromium.org> Reviewed-on: https://review.coreboot.org/c/coreboot/+/72710 Tested-by: build bot (Jenkins) <no-reply@coreboot.org> Reviewed-by: Yu-Ping Wu <yupingso@google.com>
35 lines
859 B
Text
35 lines
859 B
Text
# SPDX-License-Identifier: BSD-3-Clause
|
|
|
|
config VBOOT_LIB
|
|
bool "Compile verified boot (vboot) library"
|
|
default y if CHROMEOS
|
|
default n
|
|
help
|
|
This option enables compiling and building vboot libraries vboot_fw and tlcl.
|
|
|
|
if VBOOT_LIB
|
|
|
|
config VBOOT_TPM2_MODE
|
|
bool "TPM2 Mode"
|
|
default y
|
|
help
|
|
This option enables TPM 2.0 support in vboot. Disabling it allows using TPM 1.2.
|
|
|
|
config VBOOT_X86_SHA_EXT
|
|
bool "x86 SHA Extension"
|
|
default y if CHROMEOS
|
|
default n
|
|
depends on ARCH_X86
|
|
help
|
|
This option enables SHA256 implementation using x86 SHA processor extension
|
|
instructions: sha256msg1, sha256msg2, sha256rnds2.
|
|
|
|
config VBOOT_SHA_ARMV8_CE
|
|
bool "SHA256 implementation using ARMv8 Crypto Extension"
|
|
default y if CHROMEOS
|
|
default n
|
|
depends on ARCH_ARM64
|
|
help
|
|
This option enables SHA256 implementation using ARMv8 Crypto Extension.
|
|
|
|
endif
|