{ lib, hostPlatform, ... }:
with lib.kernel;
{
  WIRELESS = yes;
  CFG80211 = yes;
  CFG80211_DEFAULT_PS = yes;
  CFG80211_CRDA_SUPPORT = yes;
  MAC80211 = yes;
  MAC80211_RC_MINSTREL = yes;
  MAC80211_RC_DEFAULT_MINSTREL = yes;
  MAC80211_LEDS = yes;

  BT = yes;
  BT_BREDR = yes;
  BT_RFCOMM = yes;
  BT_HIDP = yes;
  BT_LE = yes;
  BT_LEDS = yes;

  BT_HCIBTUSB_AUTOSUSPEND = option yes;
  BT_HCIBTUSB_BCM = option no;
  BT_HCIBTUSB_RTL = option no;

  RFKILL = yes;
  RFKILL_INPUT = yes;

  # iwd
  KEYS = yes;
  CRYPTO_USER_API_SKCIPHER = yes;
  CRYPTO_USER_API_HASH = yes;
  CRYPTO_HMAC = yes;
  CRYPTO_CMAC = yes;
  CRYPTO_MD4 = yes;
  CRYPTO_MD5 = yes;
  CRYPTO_SHA1 = yes;
  CRYPTO_SHA256 = yes;
  CRYPTO_SHA512 = yes;
  CRYPTO_AES = yes;
  CRYPTO_ECB = yes;
  CRYPTO_DES = yes;
  CRYPTO_CBC = yes;

  ASYMMETRIC_KEY_TYPE = option yes;
  ASYMMETRIC_PUBLIC_KEY_SUBTYPE = option yes;
  X509_CERTIFICATE_PARSER = option yes;
  PKCS7_MESSAGE_PARSER = option yes;
  PKCS8_PRIVATE_KEY_PARSER = option yes;
}
// lib.optionalAttrs hostPlatform.isx86_64 {
  CRYPTO_AES_NI_INTEL = option yes;
  CRYPTO_DES3_EDE_X86_64 = option yes;
  CRYPTO_SHA1_SSSE3 = option yes;
  CRYPTO_SHA256_SSSE3 = option yes;
  CRYPTO_SHA512_SSSE3 = option yes;
}
// lib.optionalAttrs hostPlatform.isRiscV64 {
  CRYPTO_AES_RISCV64 = option yes;
  CRYPTO_SHA256_RISCV64 = option yes;
  CRYPTO_SHA512_RISCV64 = option yes;
}
// lib.optionalAttrs hostPlatform.isAarch64 {
  CRYPTO_AES_ARM64_CE = option yes;
  CRYPTO_AES_ARM64_CE_BLK = option yes;
  CRYPTO_SHA1_ARM64_CE = option yes;
  CRYPTO_SHA256_ARM64 = option yes;
  CRYPTO_SHA2_ARM64_CE = option yes;
  CRYPTO_SHA512_ARM64 = option yes;
  CRYPTO_SHA512_ARM64_CE = option yes;
}