Geert Uytterhoeven [off-list ref] wrote:

CC crypto keys people

TL;DR: CONFIG_CRYPTO_DH=y is reported to cause boot delays of several
minutes on old and slow machines.

Why is it doing that?  It doesn't do anything unless it is called, so
something must be calling it.

Can KEY_DH_OPERATIONS be made tristate?

Um.  It's non-trivial since it's implementing a keyctl() function for
userspace to call and there's currently no ops table to jump through.

David