Diffstat (limited to 'security/Kconfig')
1 files changed, 15 insertions, 0 deletions
diff --git a/security/Kconfig b/security/Kconfig
index e80da955e68..24b8f9b491b 100644
@@ -21,6 +21,21 @@ config KEYS
If you are unsure as to whether this is required, answer N.
+ tristate "TRUSTED KEYS"
+ depends on KEYS && TCG_TPM
+ select CRYPTO
+ select CRYPTO_HMAC
+ select CRYPTO_SHA1
+ This option provides support for creating, sealing, and unsealing
+ keys in the kernel. Trusted keys are random number symmetric keys,
+ generated and RSA-sealed by the TPM. The TPM only unseals the keys,
+ if the boot PCRs and other criteria match. Userspace will only ever
+ see encrypted blobs.
+ If you are unsure as to whether this is required, answer N.
bool "Enable the /proc/keys file by which keys may be viewed"
depends on KEYS