Require that CRYPTO_MD4 not be set
The MD4 digest algorithm is heavily broken and obsolete, and there
shouldn't be any reason for it to be enabled in the kernel's crypto API.
So let's require that it not be enabled.
(Note: explicitly handling MD4 does *not* mean that it's fine to use
every other crypto algorithm. MD4 is just a particularly obvious case,
which previously was unnecessarily enabled in GKI. So there was a good
opportunity to make this change together with disabling it in GKI.)
Bug: 150302692
Test: Treehugger
Change-Id: I8884c24d50cf3e33eb5e3b1db46578cd6c3bfaef
Merged-In: I8884c24d50cf3e33eb5e3b1db46578cd6c3bfaef
diff --git a/android-4.14/android-base.config b/android-4.14/android-base.config
index b1b1d06..5ad9b72 100644
--- a/android-4.14/android-base.config
+++ b/android-4.14/android-base.config
@@ -1,4 +1,5 @@
# KEEP ALPHABETICALLY SORTED
+# CONFIG_CRYPTO_MD4 is not set
# CONFIG_DEVMEM is not set
# CONFIG_FHANDLE is not set
# CONFIG_IP6_NF_NAT is not set
diff --git a/android-4.19/android-base.config b/android-4.19/android-base.config
index cbf2513..261732b 100644
--- a/android-4.19/android-base.config
+++ b/android-4.19/android-base.config
@@ -1,5 +1,6 @@
# KEEP ALPHABETICALLY SORTED
# CONFIG_BPFILTER is not set
+# CONFIG_CRYPTO_MD4 is not set
# CONFIG_DEVMEM is not set
# CONFIG_FHANDLE is not set
# CONFIG_FW_CACHE is not set
diff --git a/android-5.4/android-base.config b/android-5.4/android-base.config
index cfe224b..b8d5690 100644
--- a/android-5.4/android-base.config
+++ b/android-5.4/android-base.config
@@ -1,5 +1,6 @@
# KEEP ALPHABETICALLY SORTED
# CONFIG_BPFILTER is not set
+# CONFIG_CRYPTO_MD4 is not set
# CONFIG_DEVMEM is not set
# CONFIG_FHANDLE is not set
# CONFIG_FW_CACHE is not set
