[source] x86/64: enable AES-NI support in kernel

[LEDE Commits]

stintel pushed a commit to source.git, branch master:
https://git.lede-project.org/301301da2b2998177d4c34521f933c828972a985

commit 301301da2b2998177d4c34521f933c828972a985
Author: Stijn Tintel <stijn at linux-ipv6.be>
AuthorDate: Wed Jan 4 00:15:23 2017 +0100

    x86/64: enable AES-NI support in kernel
    
    The kernel will detect if the host supports this, so we can just enable
    it in the kernel config.
    
    Tested on an APU2 with AES-NI support and a KVM VM on a Xeon E5520 host
    without AES-NI support.
    
    Throughput over an IPsec tunnel between these 2 hosts increased from
    ~63Mbps to ~140Mbps. Ciphers: AES_GCM_16_256/PRF_HMAC_SHA2_512/ECP_521.
    
    Signed-off-by: Stijn Tintel <stijn at linux-ipv6.be>
---
 target/linux/x86/64/config-default | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/target/linux/x86/64/config-default b/target/linux/x86/64/config-default
index 5cdbc74..791c1f2 100644
--- a/target/linux/x86/64/config-default
+++ b/target/linux/x86/64/config-default
@@ -52,7 +52,8 @@ CONFIG_CALGARY_IOMMU_ENABLED_BY_DEFAULT=y
 CONFIG_CONNECTOR=y
 CONFIG_CPU_RMAP=y
 CONFIG_CRC_T10DIF=y
-# CONFIG_CRYPTO_AES_X86_64 is not set
+CONFIG_CRYPTO_AES_X86_64=y
+CONFIG_CRYPTO_AES_NI_INTEL=y
 # CONFIG_CRYPTO_BLOWFISH_X86_64 is not set
 # CONFIG_CRYPTO_CAMELLIA_AESNI_AVX2_X86_64 is not set
 # CONFIG_CRYPTO_CAMELLIA_AESNI_AVX_X86_64 is not set