summary refs log tree commit diff
path: root/pkgs/os-specific/linux/kernel/common-config.nix
diff options
context:
space:
mode:
authorFabián Heredia Montiel <fabianhjr@protonmail.com>2023-11-13 14:31:51 -0600
committerFabián Heredia Montiel <fabianhjr@protonmail.com>2023-11-13 14:31:51 -0600
commit884449105ea418fb8d205c0e1cd37a32b49c18db (patch)
tree20dce878c7b27691383a4da487379b4a04eb81ba /pkgs/os-specific/linux/kernel/common-config.nix
parentc1eb661271bf5c3e0baa7b32ebd9d455883d95d0 (diff)
parent5c6e85ee472d37c904dd43f8f76b680602b9128f (diff)
downloadnixpkgs-884449105ea418fb8d205c0e1cd37a32b49c18db.tar
nixpkgs-884449105ea418fb8d205c0e1cd37a32b49c18db.tar.gz
nixpkgs-884449105ea418fb8d205c0e1cd37a32b49c18db.tar.bz2
nixpkgs-884449105ea418fb8d205c0e1cd37a32b49c18db.tar.lz
nixpkgs-884449105ea418fb8d205c0e1cd37a32b49c18db.tar.xz
nixpkgs-884449105ea418fb8d205c0e1cd37a32b49c18db.tar.zst
nixpkgs-884449105ea418fb8d205c0e1cd37a32b49c18db.zip
Merge remote-tracking branch 'origin/master' into staging-next
Diffstat (limited to 'pkgs/os-specific/linux/kernel/common-config.nix')
-rw-r--r--pkgs/os-specific/linux/kernel/common-config.nix8
1 files changed, 7 insertions, 1 deletions
diff --git a/pkgs/os-specific/linux/kernel/common-config.nix b/pkgs/os-specific/linux/kernel/common-config.nix
index 8ca01c5be4f..2954ee8f78b 100644
--- a/pkgs/os-specific/linux/kernel/common-config.nix
+++ b/pkgs/os-specific/linux/kernel/common-config.nix
@@ -562,6 +562,13 @@ let
       KEYS_REQUEST_CACHE               = whenAtLeast "5.3" yes;
       # randomized slab caches
       RANDOM_KMALLOC_CACHES            = whenAtLeast "6.6" yes;
+
+      # NIST SP800-90A DRBG modes - enabled by most distributions
+      #   and required by some out-of-tree modules (ShuffleCake)
+      #   This does not include the NSA-backdoored Dual-EC mode from the same NIST publication.
+      CRYPTO_DRBG_HASH                 = yes;
+      CRYPTO_DRBG_CTR                  = yes;
+
     } // optionalAttrs stdenv.hostPlatform.isx86_64 {
       # Enable Intel SGX
       X86_SGX     = whenAtLeast "5.11" yes;
@@ -715,7 +722,6 @@ let
       ZSWAP          = option yes;
       ZPOOL          = yes;
       ZBUD           = option yes;
-      ZSMALLOC       = module;
     };
 
     brcmfmac = {