defconfig: turn on required crypto_SHA256 by ics