diff --git a/debian/changelog b/debian/changelog
index d476739ce..3a495e46d 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -267,6 +267,7 @@ linux (4.11.11-1) UNRELEASED; urgency=medium
   * media: Enable MEDIA_CEC_SUPPORT, VIDEO_VIVID_CEC; USB_PULSE8_CEC as module
     (Closes: #868511)
   * [armhf] udeb: Add sunxi_wdt to kernel-image (Closes: #866130)
+  * crypto: Enable CRYPTO_USER, CRYPTO_USER_API_RNG as modules (Closes: #868291)
 
   [ Uwe Kleine-König ]
   * [arm64] enable FB_SIMPLE
diff --git a/debian/config/config b/debian/config/config
index d81eec889..cb4ac3783 100644
--- a/debian/config/config
+++ b/debian/config/config
@@ -75,6 +75,7 @@ CONFIG_SYSTEM_TRUSTED_KEYS="debian/certs/benh@debian.org.cert.pem"
 CONFIG_CRYPTO=y
 CONFIG_CRYPTO_FIPS=y
 CONFIG_CRYPTO_MANAGER=y
+CONFIG_CRYPTO_USER=m
 # CONFIG_CRYPTO_MANAGER_DISABLE_TESTS is not set
 CONFIG_CRYPTO_GF128MUL=m
 CONFIG_CRYPTO_NULL=m
@@ -145,6 +146,7 @@ CONFIG_CRYPTO_DRBG_MENU=m
 CONFIG_CRYPTO_JITTERENTROPY=m
 CONFIG_CRYPTO_USER_API_HASH=m
 CONFIG_CRYPTO_USER_API_SKCIPHER=m
+CONFIG_CRYPTO_USER_API_RNG=m
 CONFIG_CRYPTO_USER_API_AEAD=m
 
 ##