Re: [PATCH] [v2] crypto: lib/Kconfig: hide library options

[Arnd Bergmann]

On Sun, Mar 30, 2025, at 10:34, Geert Uytterhoeven wrote:
> On Fri, 14 Mar 2025 at 17:05, Arnd Bergmann <arnd@xxxxxxxxxx> wrote:
>
>> --- a/security/keys/Kconfig
>> +++ b/security/keys/Kconfig
>> @@ -60,7 +60,7 @@ config BIG_KEYS
>>         bool "Large payload keys"
>>         depends on KEYS
>>         depends on TMPFS
>> -       depends on CRYPTO_LIB_CHACHA20POLY1305 = y
>> +       select CRYPTO_LIB_CHACHA20POLY1305
>>         help
>>           This option provides support for holding large keys within the kernel
>>           (for example Kerberos ticket caches).  The data may be stored out to
>
> Due to dropping the dependency, this appeared on my radar.
> Should this be selected by one or some of the Kerberos Kconfig symbols?
>

I don't see why: before commit 521fd61c84a1 ("security/keys: rewrite
big_key crypto to use library interface") it was user selectable
without the crypto dependency, and now it got back to that. I think
from the point of view of Kconfig that is how we want it.

     Arnd