[redhat] New configs in certs/Kconfig

CKI ARK Botrequested to merge
configs/os-build/2026-02-12/certs/Kconfig into os-build

Fixes: RHEL-148726
Hi,

As part of the ongoing rebase effort, the following configuration options need to be reviewed.

As a reminder, the ARK configuration flow involves moving unreviewed configuration options from the pending directory to the ark directory. In the diff below, options are removed from the pending directory and added to the ark hierarchy. The final options that need to be ACKed are the files that are being added to the ark hierarchy.

If the value for a file that is added should be changed, please reply with a better option.

Symbol: MODULE_SIG_KEY_TYPE_MLDSA_44 [=n]
Type  : bool
Defined at certs/Kconfig:42
  Prompt: ML-DSA-44
  Depends on: CRYPTO [=y] && (MODULE_SIG [=y] || IMA_APPRAISE_MODSIG [=y] && MODULES [=y]) && OPENSSL_SUPPORTS_ML_DSA [=y]
  Location:
    -> Cryptographic API (CRYPTO [=y])
      -> Certificates for signature checking
        -> Type of module signing key to be generated (<choice> [=n])
          -> ML-DSA-44 (MODULE_SIG_KEY_TYPE_MLDSA_44 [=n])
Selects: CRYPTO_MLDSA [=n]

Commit: 0ad9a719 (modsign: Enable ML-DSA module signing)

Symbol: MODULE_SIG_KEY_TYPE_MLDSA_65 [=n]
Type  : bool
Defined at certs/Kconfig:53
  Prompt: ML-DSA-65
  Depends on: CRYPTO [=y] && (MODULE_SIG [=y] || IMA_APPRAISE_MODSIG [=y] && MODULES [=y]) && OPENSSL_SUPPORTS_ML_DSA [=y]
  Location:
    -> Cryptographic API (CRYPTO [=y])
      -> Certificates for signature checking
        -> Type of module signing key to be generated (<choice> [=n])
          -> ML-DSA-65 (MODULE_SIG_KEY_TYPE_MLDSA_65 [=n])
Selects: CRYPTO_MLDSA [=n]

Commit: 0ad9a719 (modsign: Enable ML-DSA module signing)

Symbol: MODULE_SIG_KEY_TYPE_MLDSA_87 [=n]
Type  : bool
Defined at certs/Kconfig:64
  Prompt: ML-DSA-87
  Depends on: CRYPTO [=y] && (MODULE_SIG [=y] || IMA_APPRAISE_MODSIG [=y] && MODULES [=y]) && OPENSSL_SUPPORTS_ML_DSA [=y]
  Location:
    -> Cryptographic API (CRYPTO [=y])
      -> Certificates for signature checking
        -> Type of module signing key to be generated (<choice> [=n])
          -> ML-DSA-87 (MODULE_SIG_KEY_TYPE_MLDSA_87 [=n])
Selects: CRYPTO_MLDSA [=n]

Commit: 0ad9a719 (modsign: Enable ML-DSA module signing)

Signed-off-by: Fedora Kernel Team kernel-team@fedoraproject.org

Edited by CKI KWF Bot

Merge request reports