39 lines
1.3 KiB
Plaintext
39 lines
1.3 KiB
Plaintext
config ECRYPT_FS
|
|
tristate "eCrypt filesystem layer support"
|
|
depends on KEYS && CRYPTO && (ENCRYPTED_KEYS || ENCRYPTED_KEYS=n)
|
|
select CRYPTO_ECB
|
|
select CRYPTO_CBC
|
|
select CRYPTO_MD5
|
|
select CRYPTO_SHA256
|
|
help
|
|
Encrypted filesystem that operates on the VFS layer. See
|
|
<file:Documentation/filesystems/ecryptfs.txt> to learn more about
|
|
eCryptfs. Userspace components are required and can be
|
|
obtained from <http://ecryptfs.sf.net>.
|
|
|
|
To compile this file system support as a module, choose M here: the
|
|
module will be called ecryptfs.
|
|
|
|
config ECRYPT_FS_MESSAGING
|
|
bool "Enable notifications for userspace key wrap/unwrap"
|
|
depends on ECRYPT_FS
|
|
help
|
|
Enables the /dev/ecryptfs entry for use by ecryptfsd. This allows
|
|
for userspace to wrap/unwrap file encryption keys by other
|
|
backends, like OpenSSL.
|
|
|
|
config WTL_ENCRYPTION_FILTER
|
|
bool "Enables filtering for some files not to encrypt on eCryptfs"
|
|
default n
|
|
depends on ECRYPT_FS
|
|
help
|
|
Modification of encrypted filesystem for SD card encryption
|
|
|
|
config ECRYPTFS_FEK_INTEGRITY
|
|
bool "Enable check integrity of FEK(File encrypiton key) via HMAC"
|
|
default n
|
|
depends on ECRYPT_FS
|
|
help
|
|
MDFPP requirements: During file decryption of ecrypts, it should check integrity of FEK(File encrypiton key) via HMAC as per
|
|
|