I struggled with this for quite a while, trying to enable the CRYPTO_USER feature.
It is possible to do completely in a private layer. Assuming you have your own layer
referenced in conf/bblayers.conf (which you should, makes things much easier)...
a) use menuconfig and diffconfig to create a fragment.
b) Create a layer with a linux-qoriq_1_3.12.bbappend (or other version if yours is different)
c) VERIFY WITH bitbake-layers show-appends that your file is being pulled in
d) In the bbappend dir, save the fragment under files/build (IMPORTANT) i.e files/build/myfragment.cfg
e) in the bbappend file, add...
FILESEXTRAPATHS_prepend := "${THISDIR}/files:"
SRC_URI += "file://build/myfragment.cfg "
DELTA_KERNEL_DEFCONFIG += " myfragment.cfg "
Note build is in the SRC_URI, not in DELTA_KERNEL_DEFCONFG. Finding out
where do_configure() actually ran took a bit of effort.
Hope this helps someone...
Cary