[v2,6/6] crypto: aes - allow generic AES to be replaced by fixed time AES

Message ID 1497611869-6126-7-git-send-email-ard.biesheuvel@linaro.org
State New
Headers show
  • crypto: aes - allow generic AES to be omitted
Related show

Commit Message

Ard Biesheuvel June 16, 2017, 11:17 a.m.
On systems where a small memory footprint is important, the generic
AES code with its 16 KB of lookup tables and fully unrolled encrypt
and decrypt routines may be an unnecessary burden, especially given
that modern SoCs often have dedicated instructions for AES. And even
if they don't, a time invariant implementation may be preferred over
a fast one that may be susceptible to cache timing attacks.

So allow the declared dependency of other subsystems on AES to be
fulfilled by either the generic AES or the much smaller time invariant

Signed-off-by: Ard Biesheuvel <ard.biesheuvel@linaro.org>

 crypto/Kconfig | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

Patch hide | download patch | download mbox

diff --git a/crypto/Kconfig b/crypto/Kconfig
index f33c0d9136cf..2958120cdef3 100644
--- a/crypto/Kconfig
+++ b/crypto/Kconfig
@@ -899,12 +899,14 @@  config CRYPTO_AES_CORE
 config CRYPTO_AES
+	select CRYPTO_AES_GENERIC if (CRYPTO_AES=y && CRYPTO_AES_TI != y) || \
+				     (CRYPTO_AES=m && !CRYPTO_AES_TI)
 	tristate "AES cipher algorithms"