linux-kernel - [PATCH 2/3] cifs: Only select the required crypto modules

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20170125160817.1d6fb22d@endymion>
Date:   Wed, 25 Jan 2017 16:08:17 +0100
From:   Jean Delvare <jdelvare@...e.de>
To:     linux-cifs@...r.kernel.org
Cc:     Steve French <sfrench@...ba.org>,
        LKML <linux-kernel@...r.kernel.org>
Subject: [PATCH 2/3] cifs: Only select the required crypto modules

The sha256 and cmac crypto modules are only needed for SMB2+, so move
the select statements to config CIFS_SMB2. Also select CRYPTO_AES
there as SMB2+ needs it.

Signed-off-by: Jean Delvare <jdelvare@...e.de>
Cc: Steve French <sfrench@...ba.org>
---
 fs/cifs/Kconfig |    5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

--- linux-4.5-rc0.orig/fs/cifs/Kconfig	2016-01-22 09:52:13.700961277 +0100
+++ linux-4.5-rc0/fs/cifs/Kconfig	2016-01-22 09:56:23.420279765 +0100
@@ -9,8 +9,6 @@ config CIFS
 	select CRYPTO_ARC4
 	select CRYPTO_ECB
 	select CRYPTO_DES
-	select CRYPTO_SHA256
-	select CRYPTO_CMAC
 	help
 	  This is the client VFS module for the Common Internet File System
 	  (CIFS) protocol which is the successor to the Server Message Block
@@ -173,6 +171,9 @@ config CIFS_SMB2
 	select KEYS
 	select FSCACHE
 	select DNS_RESOLVER
+	select CRYPTO_AES
+	select CRYPTO_SHA256
+	select CRYPTO_CMAC
 
 	help
 	  This enables support for the Server Message Block version 2

-- 
Jean Delvare
SUSE L3 Support