ANDROID: gki_defconfig: enable CONFIG_CRYPTO_GHASH_ARM64_CE
Enable the ARMv8 Crypto Extensions implementation of AES-GCM, as it's an order of magnitude faster than the generic implementation and is more secure. AES-GCM is used by Android's IPSec support (https://developer.android.com/reference/android/net/IpSecAlgorithm#AUTH_CRYPT_AES_GCM ) and often is the first choice of algorithm for new purposes as well. This also makes GKI on arm64 consistent with GKI on x86, as the AES-NI accelerated AES-GCM is already enabled on x86. (It is not its own option on x86, but rather is included in CONFIG_CRYPTO_AES_NI_INTEL.) Bug: 274721410 Change-Id: I2877192dad8f71a961d6f6f465b62b6aeee69540 Signed-off-by:Eric Biggers <ebiggers@google.com>
Loading
Please sign in to comment