diff --git a/security/integrity/evm/Kconfig b/security/integrity/evm/Kconfig
index 844f2686cce759c8b90cd531284eff5d3c51c5f1..b9a6eb651acfcdfdc7181262c6d8e5441141efd7 100644
--- a/security/integrity/evm/Kconfig
+++ b/security/integrity/evm/Kconfig
@@ -35,6 +35,10 @@ choice
 	config EVM_DEFAULT_HASH_WP512
 		bool "WP512"
 		depends on CRYPTO_WP512=y
+
+	config EVM_DEFAULT_HASH_SM3
+		bool "SM3"
+		depends on CRYPTO_SM3=y
 endchoice
 
 config EVM_DEFAULT_HASH
@@ -44,6 +48,7 @@ config EVM_DEFAULT_HASH
 	default "sha256" if EVM_DEFAULT_HASH_SHA256
 	default "sha512" if EVM_DEFAULT_HASH_SHA512
 	default "wp512" if EVM_DEFAULT_HASH_WP512
+	default "sm3" if EVM_DEFAULT_HASH_SM3
 
 config EVM_ATTR_FSUUID
 	bool "FSUUID (version 2)"