diff --git a/debian/changelog b/debian/changelog
index da4d8cfc2..013a1cbf8 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -6,7 +6,7 @@ linux (4.15~rc8-1~exp2) UNRELEASED; urgency=medium
   * Enable NUMA_BALANCING_DEFAULT_ENABLED, enabled by all others.
   * Enable INET_ESP_OFFLOAD, INET6_ESP_OFFLOAD, IPV6_SEG6_LWTUNNEL,
     IPV6_SEG6_HMAC, NF_LOG_NETDEV, IP_SET_HASH_IPMAC, NET_ACT_SAMPLE,
-    IPVTAP, VIRTIO_MMIO.
+    IPVTAP, VIRTIO_MMIO, CRYPTO_RSA, CRYPTO_DH, CRYPTO_ECDH.
 
  -- Bastian Blank <waldi@debian.org>  Thu, 18 Jan 2018 09:14:57 +0100
 
diff --git a/debian/config/config b/debian/config/config
index 3936b5573..78efe4645 100644
--- a/debian/config/config
+++ b/debian/config/config
@@ -78,6 +78,9 @@ CONFIG_SYSTEM_TRUSTED_KEYS="debian/certs/benh@debian.org.cert.pem"
 ##
 CONFIG_CRYPTO=y
 CONFIG_CRYPTO_FIPS=y
+CONFIG_CRYPTO_RSA=m
+CONFIG_CRYPTO_DH=m
+CONFIG_CRYPTO_ECDH=m
 CONFIG_CRYPTO_MANAGER=y
 CONFIG_CRYPTO_USER=m
 # CONFIG_CRYPTO_MANAGER_DISABLE_TESTS is not set