Skip to content

Commit b6c8cc7

Browse files
rlmengerlmenge
authored
kernel: Enable additional crypto support (microsoft#14374)
Activating these algorithms ensures our kernel configuration aligns with FIPS requirements and matches the capabilities of other certified kernels, facilitating compliance and broad cryptographic compatibility.
1 parent be780bc commit b6c8cc7

File tree

20 files changed

+66
-42
lines changed

20 files changed

+66
-42
lines changed

‎SPECS-EXTENDED/kernel-ipe/config‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -7513,10 +7513,10 @@ CONFIG_CRYPTO_ENGINE=m
75137513
#
75147514
CONFIG_CRYPTO_RSA=y
75157515
CONFIG_CRYPTO_DH=m
7516-
# CONFIG_CRYPTO_DH_RFC7919_GROUPS is not set
7517-
CONFIG_CRYPTO_ECC=m
7516+
CONFIG_CRYPTO_DH_RFC7919_GROUPS=y
7517+
CONFIG_CRYPTO_ECC=y
75187518
CONFIG_CRYPTO_ECDH=m
7519-
# CONFIG_CRYPTO_ECDSA is not set
7519+
CONFIG_CRYPTO_ECDSA=y
75207520
# CONFIG_CRYPTO_ECRDSA is not set
75217521
# CONFIG_CRYPTO_SM2 is not set
75227522
# CONFIG_CRYPTO_CURVE25519 is not set
@@ -7684,9 +7684,9 @@ CONFIG_CRYPTO_CHACHA20_X86_64=m
76847684
CONFIG_CRYPTO_BLAKE2S_X86=y
76857685
# CONFIG_CRYPTO_POLYVAL_CLMUL_NI is not set
76867686
CONFIG_CRYPTO_POLY1305_X86_64=m
7687-
# CONFIG_CRYPTO_SHA1_SSSE3 is not set
7688-
# CONFIG_CRYPTO_SHA256_SSSE3 is not set
7689-
# CONFIG_CRYPTO_SHA512_SSSE3 is not set
7687+
CONFIG_CRYPTO_SHA1_SSSE3=m
7688+
CONFIG_CRYPTO_SHA256_SSSE3=m
7689+
CONFIG_CRYPTO_SHA512_SSSE3=m
76907690
# CONFIG_CRYPTO_SM3_AVX_X86_64 is not set
76917691
# CONFIG_CRYPTO_GHASH_CLMUL_NI_INTEL is not set
76927692
CONFIG_CRYPTO_CRC32C_INTEL=m

‎SPECS-EXTENDED/kernel-ipe/config_aarch64‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -10539,7 +10539,7 @@ CONFIG_CRYPTO_HASH=y
1053910539
CONFIG_CRYPTO_HASH2=y
1054010540
CONFIG_CRYPTO_RNG=y
1054110541
CONFIG_CRYPTO_RNG2=y
10542-
CONFIG_CRYPTO_RNG_DEFAULT=m
10542+
CONFIG_CRYPTO_RNG_DEFAULT=y
1054310543
CONFIG_CRYPTO_AKCIPHER2=y
1054410544
CONFIG_CRYPTO_AKCIPHER=y
1054510545
CONFIG_CRYPTO_KPP2=y
@@ -10564,10 +10564,10 @@ CONFIG_CRYPTO_ENGINE=y
1056410564
#
1056510565
CONFIG_CRYPTO_RSA=y
1056610566
CONFIG_CRYPTO_DH=m
10567-
# CONFIG_CRYPTO_DH_RFC7919_GROUPS is not set
10568-
CONFIG_CRYPTO_ECC=m
10567+
CONFIG_CRYPTO_DH_RFC7919_GROUPS=y
10568+
CONFIG_CRYPTO_ECC=y
1056910569
CONFIG_CRYPTO_ECDH=m
10570-
# CONFIG_CRYPTO_ECDSA is not set
10570+
CONFIG_CRYPTO_ECDSA=y
1057110571
# CONFIG_CRYPTO_ECRDSA is not set
1057210572
# CONFIG_CRYPTO_SM2 is not set
1057310573
# CONFIG_CRYPTO_CURVE25519 is not set

‎SPECS-EXTENDED/kernel-ipe/kernel-ipe.signatures.json‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,8 +1,8 @@
11
{
22
"Signatures": {
33
"azurelinux-ca-20230216.pem": "d545401163c75878319f01470455e6bc18a5968e39dd964323225e3fe308849b",
4-
"config": "86b7c08764d8c4c4e955cdded877b2c8d387b82d375a64b4a12d8c6e611202dd",
5-
"config_aarch64": "f46e12c2cfab204c8e8ea8b4250c7778e886926df4ec4849c3da58b6460213d3",
4+
"config": "1ae57ff6851ef5bb2868c23f04a5794a823b4ed8412212fdbde2af1c7ff284b6",
5+
"config_aarch64": "1d85b489585e2b1b332b287ceb27d9c873b96dbe06f5416007ea8ee99ed72538",
66
"cpupower": "d7518767bf2b1110d146a49c7d42e76b803f45eb8bd14d931aa6d0d346fae985",
77
"cpupower.service": "b057fe9e5d0e8c36f485818286b80e3eba8ff66ff44797940e99b1fd5361bb98",
88
"sha512hmac-openssl.sh": "02ab91329c4be09ee66d759e4d23ac875037c3b56e5a598e32fd1206da06a27f",

‎SPECS-EXTENDED/kernel-ipe/kernel-ipe.spec‎

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -33,7 +33,7 @@
3333
Summary: Linux Kernel
3434
Name: kernel-ipe
3535
Version: 6.6.96.1
36-
Release: 1%{?dist}
36+
Release: 2%{?dist}
3737
License: GPLv2
3838
Vendor: Microsoft Corporation
3939
Distribution: Azure Linux
@@ -459,6 +459,9 @@ echo "initrd of kernel %{uname_r} removed" >&2
459459
%{_sysconfdir}/bash_completion.d/bpftool
460460

461461
%changelog
462+
* Thu Jul 17 2025 Rachel Menge <[email protected]> - 6.6.96.1-2
463+
- Bump release to match kernel
464+
462465
* Mon Jul 07 2025 CBL-Mariner Servicing Account <[email protected]> - 6.6.96.1-1
463466
- Auto-upgrade to 6.6.96.1
464467

‎SPECS-SIGNED/kernel-64k-signed/kernel-64k-signed.spec‎

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -7,7 +7,7 @@
77
Summary: Signed Linux Kernel for %{buildarch} systems
88
Name: kernel-64k-signed-%{buildarch}
99
Version: 6.6.96.1
10-
Release: 1%{?dist}
10+
Release: 2%{?dist}
1111
License: GPLv2
1212
Vendor: Microsoft Corporation
1313
Distribution: Azure Linux
@@ -105,6 +105,9 @@ echo "initrd of kernel %{uname_r} removed" >&2
105105
%exclude /module_info.ld
106106

107107
%changelog
108+
* Thu Jul 17 2025 Rachel Menge <[email protected]> - 6.6.96.1-2
109+
- Bump release to match kernel
110+
108111
* Mon Jul 07 2025 CBL-Mariner Servicing Account <[email protected]> - 6.6.96.1-1
109112
- Auto-upgrade to 6.6.96.1
110113

‎SPECS-SIGNED/kernel-signed/kernel-signed.spec‎

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -10,7 +10,7 @@
1010
Summary: Signed Linux Kernel for %{buildarch} systems
1111
Name: kernel-signed-%{buildarch}
1212
Version: 6.6.96.1
13-
Release: 1%{?dist}
13+
Release: 2%{?dist}
1414
License: GPLv2
1515
Vendor: Microsoft Corporation
1616
Distribution: Azure Linux
@@ -145,6 +145,9 @@ echo "initrd of kernel %{uname_r} removed" >&2
145145
%exclude /module_info.ld
146146

147147
%changelog
148+
* Thu Jul 17 2025 Rachel Menge <[email protected]> - 6.6.96.1-2
149+
- Bump release to match kernel
150+
148151
* Mon Jul 07 2025 CBL-Mariner Servicing Account <[email protected]> - 6.6.96.1-1
149152
- Auto-upgrade to 6.6.96.1
150153

‎SPECS-SIGNED/kernel-uki-signed/kernel-uki-signed.spec‎

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@
66
Summary: Signed Unified Kernel Image for %{buildarch} systems
77
Name: kernel-uki-signed-%{buildarch}
88
Version: 6.6.96.1
9-
Release: 1%{?dist}
9+
Release: 2%{?dist}
1010
License: GPLv2
1111
Vendor: Microsoft Corporation
1212
Distribution: Azure Linux
@@ -68,6 +68,9 @@ popd
6868
/boot/efi/EFI/Linux/vmlinuz-uki-%{kernelver}.efi
6969

7070
%changelog
71+
* Thu Jul 17 2025 Rachel Menge <[email protected]> - 6.6.96.1-2
72+
- Bump release to match kernel
73+
7174
* Mon Jul 07 2025 CBL-Mariner Servicing Account <[email protected]> - 6.6.96.1-1
7275
- Auto-upgrade to 6.6.96.1
7376

‎SPECS/kernel-64k/config_aarch64‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -10563,7 +10563,7 @@ CONFIG_CRYPTO_HASH=y
1056310563
CONFIG_CRYPTO_HASH2=y
1056410564
CONFIG_CRYPTO_RNG=y
1056510565
CONFIG_CRYPTO_RNG2=y
10566-
CONFIG_CRYPTO_RNG_DEFAULT=m
10566+
CONFIG_CRYPTO_RNG_DEFAULT=y
1056710567
CONFIG_CRYPTO_AKCIPHER2=y
1056810568
CONFIG_CRYPTO_AKCIPHER=y
1056910569
CONFIG_CRYPTO_KPP2=y
@@ -10588,10 +10588,10 @@ CONFIG_CRYPTO_ENGINE=y
1058810588
#
1058910589
CONFIG_CRYPTO_RSA=y
1059010590
CONFIG_CRYPTO_DH=m
10591-
# CONFIG_CRYPTO_DH_RFC7919_GROUPS is not set
10592-
CONFIG_CRYPTO_ECC=m
10591+
CONFIG_CRYPTO_DH_RFC7919_GROUPS=y
10592+
CONFIG_CRYPTO_ECC=y
1059310593
CONFIG_CRYPTO_ECDH=m
10594-
# CONFIG_CRYPTO_ECDSA is not set
10594+
CONFIG_CRYPTO_ECDSA=y
1059510595
# CONFIG_CRYPTO_ECRDSA is not set
1059610596
# CONFIG_CRYPTO_SM2 is not set
1059710597
# CONFIG_CRYPTO_CURVE25519 is not set

‎SPECS/kernel-64k/kernel-64k.signatures.json‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"Signatures": {
33
"azurelinux-ca-20230216.pem": "d545401163c75878319f01470455e6bc18a5968e39dd964323225e3fe308849b",
4-
"config_aarch64": "041daf4228d7f057d48235a4a060de91aa9a82e3c837cb1cf80e7bef13c6419f",
4+
"config_aarch64": "ab157e1a8b6223b05fa69af6fdfe5e5fc58cc727667b5e50930d4f534a247c9b",
55
"cpupower": "d7518767bf2b1110d146a49c7d42e76b803f45eb8bd14d931aa6d0d346fae985",
66
"cpupower.service": "b057fe9e5d0e8c36f485818286b80e3eba8ff66ff44797940e99b1fd5361bb98",
77
"sha512hmac-openssl.sh": "02ab91329c4be09ee66d759e4d23ac875037c3b56e5a598e32fd1206da06a27f",

‎SPECS/kernel-64k/kernel-64k.spec‎

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -27,7 +27,7 @@
2727
Summary: Linux Kernel
2828
Name: kernel-64k
2929
Version: 6.6.96.1
30-
Release: 1%{?dist}
30+
Release: 2%{?dist}
3131
License: GPLv2
3232
Vendor: Microsoft Corporation
3333
Distribution: Azure Linux
@@ -379,6 +379,9 @@ echo "initrd of kernel %{uname_r} removed" >&2
379379
%{_sysconfdir}/bash_completion.d/bpftool
380380

381381
%changelog
382+
* Thu Jul 17 2025 Rachel Menge <[email protected]> - 6.6.96.1-2
383+
- Bump release to match kernel
384+
382385
* Mon Jul 07 2025 CBL-Mariner Servicing Account <[email protected]> - 6.6.96.1-1
383386
- Auto-upgrade to 6.6.96.1
384387

0 commit comments

Comments
 (0)