main/linux-lts: upgrade to 5.4.34

enable PKCS8 for architectures for which had it enabled.

enable other default crypto options on architectures which had it
disabled.

13 files changed, 103 insertions, 49 deletions

diff --git a/main/linux-lts/APKBUILD b/main/linux-lts/APKBUILD
index 9690ac02a6..08f60c69f0 100644
--- a/main/linux-lts/APKBUILD
+++ b/main/linux-lts/APKBUILD
@@ -2,7 +2,7 @@
 
 _flavor=lts
 pkgname=linux-${_flavor}
-pkgver=5.4.33
+pkgver=5.4.34
 case $pkgver in
 	*.*.*)	_kernver=${pkgver%.*};;
 	*.*) _kernver=$pkgver;;
@@ -223,16 +223,16 @@ _dev() {
 
 sha512sums="9f60f77e8ab972b9438ac648bed17551c8491d6585a5e85f694b2eaa4c623fbc61eb18419b2656b6795eac5deec0edaa04547fc6723fbda52256bd7f3486898f  linux-5.4.tar.xz
 d19365fe94431008768c96a2c88955652f70b6df6677457ee55ee95246a64fdd2c6fed9b3bef37c29075178294a7fc91f148ead636382530ebfa822be4ad8c2f  0002-powerpc-config-defang-gcc-check-for-stack-protector-.patch
-bc95b8e5ec78582d1d10132b3b5ff274cf656706ab4d3bf134175fc1129e957ffd7ca1bbffeff11db437c3cdb547a5e64233030383f461ac62af5dcd02cd483f  config-lts.aarch64
-43a240f3d919a699250aef5f80775d620ccf53da038994f464cecf95d5531af0be60bb7639a25274f264f92bf11337967ae2590a99e8f33ac8458a051675035b  config-lts.armv7
-4c27c1c684df788e163916ba2beab2e2eae590025603a82018e0507826e1207d1bbb3977debe73424cfce2a975a9fe2581102642653227c0e708107e6ca1bde7  config-lts.x86
-cf728062d4fd977b737cd829fee3c2eacfd7dad33ab45caf505ab5e982f69b3df1c1bda1eceddbb8593ca5ed5fc97fc6d1355b317520c51b5b4fc6c46b84ffca  config-lts.x86_64
-b0542c282f28a689c94f7d8675e6037b1030c45af6be2db223d9cc8b3b5b9b7940133d9884309272277196a051eb59c2e4af26c753a07a8f691e2b38b4372904  config-lts.ppc64le
-6a397db7959e3ffafdd9de0a00fae24c6b3cf1492dae6193dc8cf57f259687120598633ca92bb32530fd598687d0c8894a5eb97ec6ecb8d59d459da39f6775ca  config-lts.s390x
-af57a893bea550279224d5478c699ccea3e30944b3a036e6bac09b33aae7931258b7a7b8dd193d5bcbaf1ed4160d3ad24bdf36360f4050565887e516e4f3e623  config-lts.mips64
-3b336e66b3239ff00d298d0344f7316f234aa7a455cdfcececa1cc4d7d81c8396e3b8660d4ec4baca9ae47f3beb830434631f6126eb69501c1b9b62a8354a7aa  config-lts.mips
-48ca44ccc9cf2767bf89a5ffffd6408c02151e74edb5710511d09296f3fed76d62ea4410a90c3b78b43f94f2274ca3232319405818d0946c3653ba8695e49bea  config-virt.aarch64
-b5b7fdcde21107ede68308034d9e3ab048faa56841a1bfe5362ba3e5e663d0fa1be822e3c394be447c058c58aaa366d9c68d71b87f35c1b2fad0afec6c4b69b2  config-virt.armv7
-be0c66877e7d2d987744d52669086702424c0681653a0fc6ab4c487df3b090cdd9bbbedbfd0134e4a83231971d667ff4fb2f9b8d60394ce86653ffb2cbcb0283  config-virt.x86
-46f389ba3190c917ec5dde342524345561dc4d0c6e8e1ce4c320ffbb34799734f5999b40d0707068896f1a50dbe8f84b281d70e8fb23dc19fc84947f394029f7  config-virt.x86_64
-566829f94ccce6ee98fde8338b6fd58792422f1676ed72cad9dcdd2c0e79a7e50408b7b3a967829a96f98717ad39b35d6c9007cdf58c0c22a0d6592bddf354cd  patch-5.4.33.xz"
+1d06ba4480a547c33f16054d8e556e74b1fd0d9a03023f4e66560a9f282056ec5782ab0eb309ff7b551b52c24fbd453603678631f90713164b5cb11bdad005ff  config-lts.aarch64
+76d29004ebe0d73566bd9a3d8ed177815f9340678fa1f4fb58999d701c8659aa779a51d2d5ed355dfae993728ecfddc7f89488946b5cd90f7e54d5f2af1feb4a  config-lts.armv7
+fba2e913421fc4598b3fde368a9a403ae6aba7380aaf370681a0ce7881d2b2ae1468d9eb69c1a6883725d7a20983c59cac0ebd8338fd5c257c7e40edc521b828  config-lts.x86
+0c53a969414a079ac88f23a2a80da4666e7f0bb4b2417015fab2f783a10ab3037e4e7b2335c2b0b788b98345c63f80b313c2b1583edb7ecdf5c246bba625f0ff  config-lts.x86_64
+b843b6965bd82354170615ad560774d1f3c4c397eb5f973c0739873ee7ee75701ab6da0535751f1f1a147cbbed227e604c72532072f992ed7b7779b44c4a3b69  config-lts.ppc64le
+e6624e4ac64bd7bf44891db562620953404275e9fd09ff3b0553890e951f04a15f49af92b10b4694bc547b1d4bcad4958300589137a50596db98ee5adc3262bd  config-lts.s390x
+3809ae11d08ee672888e9545ff54dfb6c61a3bb4b8b0939a929fd6e728775ac270cd34a75647ade44467d8ebe626c4b32d14e4cbd8e2a49726c3141ddae53f22  config-lts.mips64
+90b3d7fcf83377bae5a839d286fd6c9ea20eefa5b4062cc99307837c80d0dd6eb6352057ccbcf9f9b95f4875eb77e3f883dc65eb1bdd34162e8a10df7f0c632e  config-lts.mips
+4603b18dcc2e56332ae343f85cb5be4b320d8ce70ce343a5471363a252b1ca7a5eb8cf8377fb9df98cd5d62806278431ddf955ab87ae79fba037dac9b1ce9ef1  config-virt.aarch64
+59a8c29db5761b5c4737c58ae3465b1398548250e885c70d99d3531ce9b6210114e511068a29503134e404ab33c4c2a6cb365809164d8dd0a9f207a2ae2a00b7  config-virt.armv7
+19c2176a81191d5bfc1adaf037e5f50a8cb20e5c8aa20a87e2364ffae75f62e6af28cad865e22fbb7b20aa698ce38f06b371fd7c1c6985b24a474b2531a27c0d  config-virt.x86
+76d4fac5578035b34abaf4c0f74f469d252f992d305f83a6a87b8155574c2346efbefb7943d5ebe38641f2fbd4aee67808883fe6f03df1b758426e7b8e1303a8  config-virt.x86_64
+d4e276f2ae648446651dac5b0547dc42d3d7449ea6d629057f4071d6b9225dd9cd2be6ad01f786114acc4a789a62b59e8bc67b6b1e5480d4b4625258a501f4b4  patch-5.4.34.xz"
diff --git a/main/linux-lts/config-lts.aarch64 b/main/linux-lts/config-lts.aarch64
index 34d44beb08..5ebea00b80 100644
--- a/main/linux-lts/config-lts.aarch64
+++ b/main/linux-lts/config-lts.aarch64
@@ -1,6 +1,6 @@
 #
 # Automatically generated file; DO NOT EDIT.
-# Linux/arm64 5.4.32 Kernel Configuration
+# Linux/arm64 5.4.34 Kernel Configuration
 #
 
 #
diff --git a/main/linux-lts/config-lts.armv7 b/main/linux-lts/config-lts.armv7
index cabc85b7a3..7b2e01b0b1 100644
--- a/main/linux-lts/config-lts.armv7
+++ b/main/linux-lts/config-lts.armv7
@@ -1,6 +1,6 @@
 #
 # Automatically generated file; DO NOT EDIT.
-# Linux/arm 5.4.32 Kernel Configuration
+# Linux/arm 5.4.34 Kernel Configuration
 #
 
 #
@@ -536,7 +536,7 @@ CONFIG_ARM_ERRATA_852423=y
 #
 # Bus support
 #
-# CONFIG_ARM_ERRATA_814220 is not set
+CONFIG_ARM_ERRATA_814220=y
 # end of Bus support
 
 #
diff --git a/main/linux-lts/config-lts.mips b/main/linux-lts/config-lts.mips
index 9bb66a9682..9bece7492e 100644
--- a/main/linux-lts/config-lts.mips
+++ b/main/linux-lts/config-lts.mips
@@ -1,6 +1,6 @@
 #
 # Automatically generated file; DO NOT EDIT.
-# Linux/mips 5.4.32 Kernel Configuration
+# Linux/mips 5.4.34 Kernel Configuration
 #
 
 #
@@ -207,6 +207,7 @@ CONFIG_SLAB=y
 CONFIG_SLAB_MERGE_DEFAULT=y
 # CONFIG_SLAB_FREELIST_RANDOM is not set
 # CONFIG_SHUFFLE_PAGE_ALLOCATOR is not set
+CONFIG_SYSTEM_DATA_VERIFICATION=y
 # CONFIG_PROFILING is not set
 # end of General setup
 
@@ -577,6 +578,7 @@ CONFIG_MQ_IOSCHED_KYBER=y
 # CONFIG_IOSCHED_BFQ is not set
 # end of IO Schedulers
 
+CONFIG_ASN1=y
 CONFIG_INLINE_SPIN_UNLOCK_IRQ=y
 CONFIG_INLINE_READ_UNLOCK=y
 CONFIG_INLINE_READ_UNLOCK_IRQ=y
@@ -2756,6 +2758,7 @@ CONFIG_CRYPTO_RNG=m
 CONFIG_CRYPTO_RNG2=y
 CONFIG_CRYPTO_RNG_DEFAULT=m
 CONFIG_CRYPTO_AKCIPHER2=y
+CONFIG_CRYPTO_AKCIPHER=y
 CONFIG_CRYPTO_KPP2=y
 CONFIG_CRYPTO_ACOMP2=y
 CONFIG_CRYPTO_MANAGER=y
@@ -2773,7 +2776,7 @@ CONFIG_CRYPTO_AUTHENC=m
 #
 # Public-key cryptography
 #
-# CONFIG_CRYPTO_RSA is not set
+CONFIG_CRYPTO_RSA=y
 # CONFIG_CRYPTO_DH is not set
 # CONFIG_CRYPTO_ECDH is not set
 # CONFIG_CRYPTO_ECRDSA is not set
@@ -2829,8 +2832,8 @@ CONFIG_CRYPTO_MICHAEL_MIC=m
 # CONFIG_CRYPTO_RMD256 is not set
 # CONFIG_CRYPTO_RMD320 is not set
 CONFIG_CRYPTO_SHA1=m
-CONFIG_CRYPTO_LIB_SHA256=m
-CONFIG_CRYPTO_SHA256=m
+CONFIG_CRYPTO_LIB_SHA256=y
+CONFIG_CRYPTO_SHA256=y
 CONFIG_CRYPTO_SHA512=m
 # CONFIG_CRYPTO_SHA3 is not set
 # CONFIG_CRYPTO_SM3 is not set
@@ -2890,12 +2893,23 @@ CONFIG_CRYPTO_JITTERENTROPY=m
 # CONFIG_CRYPTO_USER_API_SKCIPHER is not set
 # CONFIG_CRYPTO_USER_API_RNG is not set
 # CONFIG_CRYPTO_USER_API_AEAD is not set
+CONFIG_CRYPTO_HASH_INFO=y
 # CONFIG_CRYPTO_HW is not set
-# CONFIG_ASYMMETRIC_KEY_TYPE is not set
+CONFIG_ASYMMETRIC_KEY_TYPE=y
+CONFIG_ASYMMETRIC_PUBLIC_KEY_SUBTYPE=y
+CONFIG_X509_CERTIFICATE_PARSER=y
+CONFIG_PKCS8_PRIVATE_KEY_PARSER=m
+CONFIG_PKCS7_MESSAGE_PARSER=y
+# CONFIG_PKCS7_TEST_KEY is not set
+# CONFIG_SIGNED_PE_FILE_VERIFICATION is not set
 
 #
 # Certificates for signature checking
 #
+CONFIG_SYSTEM_TRUSTED_KEYRING=y
+CONFIG_SYSTEM_TRUSTED_KEYS=""
+# CONFIG_SYSTEM_EXTRA_CERTIFICATE is not set
+# CONFIG_SECONDARY_TRUSTED_KEYRING is not set
 # CONFIG_SYSTEM_BLACKLIST_KEYRING is not set
 # end of Certificates for signature checking
 
@@ -2952,8 +2966,11 @@ CONFIG_GLOB=y
 # CONFIG_GLOB_SELFTEST is not set
 CONFIG_NLATTR=y
 CONFIG_GENERIC_ATOMIC64=y
+CONFIG_CLZ_TAB=y
 # CONFIG_IRQ_POLL is not set
+CONFIG_MPILIB=y
 CONFIG_LIBFDT=y
+CONFIG_OID_REGISTRY=y
 CONFIG_HAVE_GENERIC_VDSO=y
 CONFIG_GENERIC_GETTIMEOFDAY=y
 CONFIG_FONT_SUPPORT=y
diff --git a/main/linux-lts/config-lts.mips64 b/main/linux-lts/config-lts.mips64
index 7225e721ee..68a89f7a6d 100644
--- a/main/linux-lts/config-lts.mips64
+++ b/main/linux-lts/config-lts.mips64
@@ -1,6 +1,6 @@
 #
 # Automatically generated file; DO NOT EDIT.
-# Linux/mips 5.4.32 Kernel Configuration
+# Linux/mips 5.4.34 Kernel Configuration
 #
 
 #
@@ -209,6 +209,7 @@ CONFIG_SLAB=y
 CONFIG_SLAB_MERGE_DEFAULT=y
 # CONFIG_SLAB_FREELIST_RANDOM is not set
 # CONFIG_SHUFFLE_PAGE_ALLOCATOR is not set
+CONFIG_SYSTEM_DATA_VERIFICATION=y
 # CONFIG_PROFILING is not set
 # end of General setup
 
@@ -584,6 +585,7 @@ CONFIG_MQ_IOSCHED_KYBER=y
 # CONFIG_IOSCHED_BFQ is not set
 # end of IO Schedulers
 
+CONFIG_ASN1=y
 CONFIG_INLINE_SPIN_UNLOCK_IRQ=y
 CONFIG_INLINE_READ_UNLOCK=y
 CONFIG_INLINE_READ_UNLOCK_IRQ=y
@@ -2779,6 +2781,7 @@ CONFIG_CRYPTO_RNG=m
 CONFIG_CRYPTO_RNG2=y
 CONFIG_CRYPTO_RNG_DEFAULT=m
 CONFIG_CRYPTO_AKCIPHER2=y
+CONFIG_CRYPTO_AKCIPHER=y
 CONFIG_CRYPTO_KPP2=y
 CONFIG_CRYPTO_ACOMP2=y
 CONFIG_CRYPTO_MANAGER=y
@@ -2796,7 +2799,7 @@ CONFIG_CRYPTO_AUTHENC=m
 #
 # Public-key cryptography
 #
-# CONFIG_CRYPTO_RSA is not set
+CONFIG_CRYPTO_RSA=y
 # CONFIG_CRYPTO_DH is not set
 # CONFIG_CRYPTO_ECDH is not set
 # CONFIG_CRYPTO_ECRDSA is not set
@@ -2852,8 +2855,8 @@ CONFIG_CRYPTO_MICHAEL_MIC=m
 # CONFIG_CRYPTO_RMD256 is not set
 # CONFIG_CRYPTO_RMD320 is not set
 CONFIG_CRYPTO_SHA1=m
-CONFIG_CRYPTO_LIB_SHA256=m
-CONFIG_CRYPTO_SHA256=m
+CONFIG_CRYPTO_LIB_SHA256=y
+CONFIG_CRYPTO_SHA256=y
 CONFIG_CRYPTO_SHA512=m
 # CONFIG_CRYPTO_SHA3 is not set
 # CONFIG_CRYPTO_SM3 is not set
@@ -2913,12 +2916,23 @@ CONFIG_CRYPTO_JITTERENTROPY=m
 # CONFIG_CRYPTO_USER_API_SKCIPHER is not set
 # CONFIG_CRYPTO_USER_API_RNG is not set
 # CONFIG_CRYPTO_USER_API_AEAD is not set
+CONFIG_CRYPTO_HASH_INFO=y
 # CONFIG_CRYPTO_HW is not set
-# CONFIG_ASYMMETRIC_KEY_TYPE is not set
+CONFIG_ASYMMETRIC_KEY_TYPE=y
+CONFIG_ASYMMETRIC_PUBLIC_KEY_SUBTYPE=y
+CONFIG_X509_CERTIFICATE_PARSER=y
+CONFIG_PKCS8_PRIVATE_KEY_PARSER=m
+CONFIG_PKCS7_MESSAGE_PARSER=y
+# CONFIG_PKCS7_TEST_KEY is not set
+# CONFIG_SIGNED_PE_FILE_VERIFICATION is not set
 
 #
 # Certificates for signature checking
 #
+CONFIG_SYSTEM_TRUSTED_KEYRING=y
+CONFIG_SYSTEM_TRUSTED_KEYS=""
+# CONFIG_SYSTEM_EXTRA_CERTIFICATE is not set
+# CONFIG_SECONDARY_TRUSTED_KEYRING is not set
 # CONFIG_SYSTEM_BLACKLIST_KEYRING is not set
 # end of Certificates for signature checking
 
@@ -2976,8 +2990,11 @@ CONFIG_DQL=y
 CONFIG_GLOB=y
 # CONFIG_GLOB_SELFTEST is not set
 CONFIG_NLATTR=y
+CONFIG_CLZ_TAB=y
 # CONFIG_IRQ_POLL is not set
+CONFIG_MPILIB=y
 CONFIG_LIBFDT=y
+CONFIG_OID_REGISTRY=y
 CONFIG_HAVE_GENERIC_VDSO=y
 CONFIG_GENERIC_GETTIMEOFDAY=y
 CONFIG_FONT_SUPPORT=y
diff --git a/main/linux-lts/config-lts.ppc64le b/main/linux-lts/config-lts.ppc64le
index 1b0d20282e..fbe0dc54e2 100644
--- a/main/linux-lts/config-lts.ppc64le
+++ b/main/linux-lts/config-lts.ppc64le
@@ -1,6 +1,6 @@
 #
 # Automatically generated file; DO NOT EDIT.
-# Linux/powerpc 5.4.32 Kernel Configuration
+# Linux/powerpc 5.4.34 Kernel Configuration
 #
 
 #
@@ -219,6 +219,7 @@ CONFIG_SLAB_FREELIST_RANDOM=y
 # CONFIG_SLAB_FREELIST_HARDENED is not set
 # CONFIG_SHUFFLE_PAGE_ALLOCATOR is not set
 CONFIG_SLUB_CPU_PARTIAL=y
+CONFIG_SYSTEM_DATA_VERIFICATION=y
 CONFIG_PROFILING=y
 CONFIG_TRACEPOINTS=y
 # end of General setup
@@ -409,6 +410,7 @@ CONFIG_ARCH_ENABLE_MEMORY_HOTPLUG=y
 CONFIG_ARCH_ENABLE_MEMORY_HOTREMOVE=y
 CONFIG_PPC64_SUPPORTS_MEMORY_FAILURE=y
 CONFIG_KEXEC=y
+# CONFIG_KEXEC_FILE is not set
 # CONFIG_RELOCATABLE is not set
 # CONFIG_CRASH_DUMP is not set
 # CONFIG_FA_DUMP is not set
@@ -648,7 +650,7 @@ CONFIG_MQ_IOSCHED_KYBER=y
 
 CONFIG_PREEMPT_NOTIFIERS=y
 CONFIG_PADATA=y
-CONFIG_ASN1=m
+CONFIG_ASN1=y
 CONFIG_INLINE_SPIN_UNLOCK_IRQ=y
 CONFIG_INLINE_READ_UNLOCK=y
 CONFIG_INLINE_READ_UNLOCK_IRQ=y
@@ -4104,6 +4106,7 @@ CONFIG_CRYPTO_RNG=m
 CONFIG_CRYPTO_RNG2=y
 CONFIG_CRYPTO_RNG_DEFAULT=m
 CONFIG_CRYPTO_AKCIPHER2=y
+CONFIG_CRYPTO_AKCIPHER=y
 CONFIG_CRYPTO_KPP2=y
 CONFIG_CRYPTO_KPP=y
 CONFIG_CRYPTO_ACOMP2=y
@@ -4123,7 +4126,7 @@ CONFIG_CRYPTO_ENGINE=m
 #
 # Public-key cryptography
 #
-# CONFIG_CRYPTO_RSA is not set
+CONFIG_CRYPTO_RSA=y
 CONFIG_CRYPTO_DH=y
 CONFIG_CRYPTO_ECC=m
 CONFIG_CRYPTO_ECDH=m
@@ -4184,8 +4187,8 @@ CONFIG_CRYPTO_MICHAEL_MIC=m
 # CONFIG_CRYPTO_RMD320 is not set
 CONFIG_CRYPTO_SHA1=y
 # CONFIG_CRYPTO_SHA1_PPC is not set
-CONFIG_CRYPTO_LIB_SHA256=m
-CONFIG_CRYPTO_SHA256=m
+CONFIG_CRYPTO_LIB_SHA256=y
+CONFIG_CRYPTO_SHA256=y
 CONFIG_CRYPTO_SHA512=y
 CONFIG_CRYPTO_SHA3=m
 CONFIG_CRYPTO_SM3=m
@@ -4247,6 +4250,7 @@ CONFIG_CRYPTO_USER_API_SKCIPHER=m
 CONFIG_CRYPTO_USER_API_RNG=m
 CONFIG_CRYPTO_USER_API_AEAD=m
 # CONFIG_CRYPTO_STATS is not set
+CONFIG_CRYPTO_HASH_INFO=y
 CONFIG_CRYPTO_HW=y
 CONFIG_CRYPTO_DEV_NX=y
 CONFIG_CRYPTO_DEV_NX_COMPRESS=y
@@ -4260,11 +4264,21 @@ CONFIG_CRYPTO_DEV_NX_COMPRESS_POWERNV=y
 CONFIG_CRYPTO_DEV_VIRTIO=m
 # CONFIG_CRYPTO_DEV_SAFEXCEL is not set
 # CONFIG_CRYPTO_DEV_CCREE is not set
-# CONFIG_ASYMMETRIC_KEY_TYPE is not set
+CONFIG_ASYMMETRIC_KEY_TYPE=y
+CONFIG_ASYMMETRIC_PUBLIC_KEY_SUBTYPE=y
+CONFIG_X509_CERTIFICATE_PARSER=y
+CONFIG_PKCS8_PRIVATE_KEY_PARSER=m
+CONFIG_PKCS7_MESSAGE_PARSER=y
+# CONFIG_PKCS7_TEST_KEY is not set
+# CONFIG_SIGNED_PE_FILE_VERIFICATION is not set
 
 #
 # Certificates for signature checking
 #
+CONFIG_SYSTEM_TRUSTED_KEYRING=y
+CONFIG_SYSTEM_TRUSTED_KEYS=""
+# CONFIG_SYSTEM_EXTRA_CERTIFICATE is not set
+# CONFIG_SECONDARY_TRUSTED_KEYRING is not set
 # CONFIG_SYSTEM_BLACKLIST_KEYRING is not set
 # end of Certificates for signature checking
 
@@ -4358,7 +4372,7 @@ CONFIG_IRQ_POLL=y
 CONFIG_MPILIB=y
 CONFIG_DIMLIB=y
 CONFIG_LIBFDT=y
-CONFIG_OID_REGISTRY=m
+CONFIG_OID_REGISTRY=y
 CONFIG_FONT_SUPPORT=y
 # CONFIG_FONTS is not set
 CONFIG_FONT_8x8=y
diff --git a/main/linux-lts/config-lts.s390x b/main/linux-lts/config-lts.s390x
index da5a9eb694..27d771b1c1 100644
--- a/main/linux-lts/config-lts.s390x
+++ b/main/linux-lts/config-lts.s390x
@@ -1,6 +1,6 @@
 #
 # Automatically generated file; DO NOT EDIT.
-# Linux/s390 5.4.32 Kernel Configuration
+# Linux/s390 5.4.34 Kernel Configuration
 #
 
 #
@@ -224,6 +224,7 @@ CONFIG_SLAB_FREELIST_RANDOM=y
 # CONFIG_SLAB_FREELIST_HARDENED is not set
 # CONFIG_SHUFFLE_PAGE_ALLOCATOR is not set
 CONFIG_SLUB_CPU_PARTIAL=y
+CONFIG_SYSTEM_DATA_VERIFICATION=y
 CONFIG_PROFILING=y
 CONFIG_TRACEPOINTS=y
 # end of General setup
@@ -557,7 +558,7 @@ CONFIG_MQ_IOSCHED_KYBER=y
 
 CONFIG_PREEMPT_NOTIFIERS=y
 CONFIG_PADATA=y
-CONFIG_ASN1=m
+CONFIG_ASN1=y
 CONFIG_ARCH_INLINE_SPIN_TRYLOCK=y
 CONFIG_ARCH_INLINE_SPIN_TRYLOCK_BH=y
 CONFIG_ARCH_INLINE_SPIN_LOCK=y
@@ -3045,7 +3046,7 @@ CONFIG_CRYPTO_RNG=y
 CONFIG_CRYPTO_RNG2=y
 CONFIG_CRYPTO_RNG_DEFAULT=y
 CONFIG_CRYPTO_AKCIPHER2=y
-CONFIG_CRYPTO_AKCIPHER=m
+CONFIG_CRYPTO_AKCIPHER=y
 CONFIG_CRYPTO_KPP2=y
 CONFIG_CRYPTO_KPP=y
 CONFIG_CRYPTO_ACOMP2=y
@@ -3065,7 +3066,7 @@ CONFIG_CRYPTO_ENGINE=m
 #
 # Public-key cryptography
 #
-# CONFIG_CRYPTO_RSA is not set
+CONFIG_CRYPTO_RSA=y
 CONFIG_CRYPTO_DH=y
 CONFIG_CRYPTO_ECC=m
 CONFIG_CRYPTO_ECDH=m
@@ -3205,16 +3206,21 @@ CONFIG_CRYPTO_CRC32_S390=m
 CONFIG_CRYPTO_DEV_VIRTIO=m
 # CONFIG_CRYPTO_DEV_SAFEXCEL is not set
 CONFIG_ASYMMETRIC_KEY_TYPE=y
-CONFIG_ASYMMETRIC_PUBLIC_KEY_SUBTYPE=m
+CONFIG_ASYMMETRIC_PUBLIC_KEY_SUBTYPE=y
 # CONFIG_ASYMMETRIC_TPM_KEY_SUBTYPE is not set
-CONFIG_X509_CERTIFICATE_PARSER=m
+CONFIG_X509_CERTIFICATE_PARSER=y
 # CONFIG_PKCS8_PRIVATE_KEY_PARSER is not set
-CONFIG_PKCS7_MESSAGE_PARSER=m
+CONFIG_PKCS7_MESSAGE_PARSER=y
+# CONFIG_PKCS7_TEST_KEY is not set
+# CONFIG_SIGNED_PE_FILE_VERIFICATION is not set
 
 #
 # Certificates for signature checking
 #
-# CONFIG_SYSTEM_TRUSTED_KEYRING is not set
+CONFIG_SYSTEM_TRUSTED_KEYRING=y
+CONFIG_SYSTEM_TRUSTED_KEYS=""
+# CONFIG_SYSTEM_EXTRA_CERTIFICATE is not set
+# CONFIG_SECONDARY_TRUSTED_KEYRING is not set
 # CONFIG_SYSTEM_BLACKLIST_KEYRING is not set
 # end of Certificates for signature checking
 
@@ -3302,7 +3308,7 @@ CONFIG_CLZ_TAB=y
 CONFIG_IRQ_POLL=y
 CONFIG_MPILIB=y
 CONFIG_DIMLIB=y
-CONFIG_OID_REGISTRY=m
+CONFIG_OID_REGISTRY=y
 CONFIG_SG_POOL=y
 CONFIG_ARCH_STACKWALK=y
 CONFIG_SBITMAP=y
diff --git a/main/linux-lts/config-lts.x86 b/main/linux-lts/config-lts.x86
index 36eb762f83..7f242b74c8 100644
--- a/main/linux-lts/config-lts.x86
+++ b/main/linux-lts/config-lts.x86
@@ -1,6 +1,6 @@
 #
 # Automatically generated file; DO NOT EDIT.
-# Linux/x86 5.4.32 Kernel Configuration
+# Linux/x86 5.4.34 Kernel Configuration
 #
 
 #
diff --git a/main/linux-lts/config-lts.x86_64 b/main/linux-lts/config-lts.x86_64
index 2c1ad037fa..63bbfe2aa4 100644
--- a/main/linux-lts/config-lts.x86_64
+++ b/main/linux-lts/config-lts.x86_64
@@ -1,6 +1,6 @@
 #
 # Automatically generated file; DO NOT EDIT.
-# Linux/x86 5.4.32 Kernel Configuration
+# Linux/x86_64 5.4.34 Kernel Configuration
 #
 
 #
diff --git a/main/linux-lts/config-virt.aarch64 b/main/linux-lts/config-virt.aarch64
index a711faa1b8..03117c5c78 100644
--- a/main/linux-lts/config-virt.aarch64
+++ b/main/linux-lts/config-virt.aarch64
@@ -1,6 +1,6 @@
 #
 # Automatically generated file; DO NOT EDIT.
-# Linux/arm64 5.4.32 Kernel Configuration
+# Linux/arm64 5.4.34 Kernel Configuration
 #
 
 #
diff --git a/main/linux-lts/config-virt.armv7 b/main/linux-lts/config-virt.armv7
index fdb56a783c..e441e18a98 100644
--- a/main/linux-lts/config-virt.armv7
+++ b/main/linux-lts/config-virt.armv7
@@ -1,6 +1,6 @@
 #
 # Automatically generated file; DO NOT EDIT.
-# Linux/arm 5.4.32 Kernel Configuration
+# Linux/arm 5.4.34 Kernel Configuration
 #
 
 #
diff --git a/main/linux-lts/config-virt.x86 b/main/linux-lts/config-virt.x86
index 6b37f0be43..f64f2f408d 100644
--- a/main/linux-lts/config-virt.x86
+++ b/main/linux-lts/config-virt.x86
@@ -1,6 +1,6 @@
 #
 # Automatically generated file; DO NOT EDIT.
-# Linux/x86 5.4.32 Kernel Configuration
+# Linux/x86 5.4.34 Kernel Configuration
 #
 
 #
diff --git a/main/linux-lts/config-virt.x86_64 b/main/linux-lts/config-virt.x86_64
index 67f5afe6ff..cd666b4d93 100644
--- a/main/linux-lts/config-virt.x86_64
+++ b/main/linux-lts/config-virt.x86_64
@@ -1,6 +1,6 @@
 #
 # Automatically generated file; DO NOT EDIT.
-# Linux/x86_64 5.4.32 Kernel Configuration
+# Linux/x86_64 5.4.34 Kernel Configuration
 #
 
 #