diff --git a/pmb/config/__init__.py b/pmb/config/__init__.py
index 09401a3f..7a82aaba 100644
--- a/pmb/config/__init__.py
+++ b/pmb/config/__init__.py
@@ -265,9 +265,11 @@ necessary_kconfig_options = {
             "ANDROID_PARANOID_NETWORK": False,
             "BLK_DEV_INITRD": True,
             "CGROUPS": True,
+            "CRYPTO_AES": True,
             "CRYPTO_XTS": True,
             "DEVTMPFS": True,
             "DM_CRYPT": True,
+            "INPUT_EVDEV": True,
             "EXT4_FS": True,
             "KINETO_GAN": False,
             "PFT": False,
diff --git a/test/testdata/kconfig_check/good b/test/testdata/kconfig_check/good
index fdaf6094..0ca7925d 100644
--- a/test/testdata/kconfig_check/good
+++ b/test/testdata/kconfig_check/good
@@ -25,10 +25,12 @@ CONFIG_BLK_DEV_INITRD=y
 CONFIG_CGROUPS=y
 CONFIG_DEVTMPFS=y
 CONFIG_DM_CRYPT=y
+CONFIG_INPUT_EVDEV=y
 CONFIG_SYSVIPC=y
 CONFIG_VT=y
 CONFIG_UEVENT_HELPER=y
 CONFIG_LBDAF=y
+CONFIG_CRYPTO_AES=y
 CONFIG_CRYPTO_XTS=y
 CONFIG_TMPFS_POSIX_ACL=y
 ### here's one explicitely disabled:
diff --git a/test/testdata/kconfig_check/good-anbox b/test/testdata/kconfig_check/good-anbox
index 4d3b5895..5c204998 100644
--- a/test/testdata/kconfig_check/good-anbox
+++ b/test/testdata/kconfig_check/good-anbox
@@ -25,10 +25,12 @@ CONFIG_BLK_DEV_INITRD=y
 CONFIG_CGROUPS=y
 CONFIG_DEVTMPFS=y
 CONFIG_DM_CRYPT=y
+CONFIG_INPUT_EVDEV=y
 CONFIG_SYSVIPC=y
 CONFIG_VT=y
 CONFIG_UEVENT_HELPER=y
 CONFIG_LBDAF=y
+CONFIG_CRYPTO_AES=y
 CONFIG_CRYPTO_XTS=y
 CONFIG_TMPFS_POSIX_ACL=y
 CONFIG_EXT4_FS=y
diff --git a/test/testdata/kconfig_check/good-nftables b/test/testdata/kconfig_check/good-nftables
index 4ff44acf..39becec2 100644
--- a/test/testdata/kconfig_check/good-nftables
+++ b/test/testdata/kconfig_check/good-nftables
@@ -8,10 +8,12 @@ CONFIG_BLK_DEV_INITRD=y
 CONFIG_CGROUPS=y
 CONFIG_DEVTMPFS=y
 CONFIG_DM_CRYPT=y
+CONFIG_INPUT_EVDEV=y
 CONFIG_SYSVIPC=y
 CONFIG_VT=y
 CONFIG_UEVENT_HELPER=y
 CONFIG_LBDAF=y
+CONFIG_CRYPTO_AES=y
 CONFIG_CRYPTO_XTS=y
 CONFIG_TMPFS_POSIX_ACL=y
 ### here's one explicitely disabled:
diff --git a/test/testdata/kconfig_check/good-zram b/test/testdata/kconfig_check/good-zram
index f2c04874..8c7b5cc4 100644
--- a/test/testdata/kconfig_check/good-zram
+++ b/test/testdata/kconfig_check/good-zram
@@ -31,10 +31,12 @@ CONFIG_BLK_DEV_INITRD=y
 CONFIG_CGROUPS=y
 CONFIG_DEVTMPFS=y
 CONFIG_DM_CRYPT=y
+CONFIG_INPUT_EVDEV=y
 CONFIG_SYSVIPC=y
 CONFIG_VT=y
 CONFIG_UEVENT_HELPER=y
 CONFIG_LBDAF=y
+CONFIG_CRYPTO_AES=y
 CONFIG_CRYPTO_XTS=y
 CONFIG_TMPFS_POSIX_ACL=y
 ### here's one explicitely disabled: