env: Migrate CONFIG_ENV_AES to Kconfig and deprecate

[platform/kernel/u-boot.git] / env / Kconfig

diff --git a/env/Kconfig b/env/Kconfig
index f12ef28..024d4d7 100644 (file)
--- a/env/Kconfig
+++ b/env/Kconfig
@@ -375,6 +375,14 @@ config ENV_IS_IN_UBI
 
 endchoice
 
+config ENV_AES
+       bool "AES-128 encryption for stored environment (DEPRECATED)"
+       help
+         Enable this to have the on-device stored environment be encrypted
+         with AES-128.  The implementation here however has security
+         complications and is not recommended for use.  Please see
+         CVE-2017-3225 and CVE-2017-3226 for more details.
+
 config ENV_FAT_INTERFACE
        string "Name of the block device for the environment"
        depends on ENV_IS_IN_FAT