Kconfig 44 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919920921922923924925926927928929930931932933934935936937938939940941942943944945946947948949950951952953954955956957958959960961962963964965966967968969970971972973974975976977978979980981982983984985986987988989990991992993994995996997998999100010011002100310041005100610071008100910101011101210131014101510161017101810191020102110221023102410251026102710281029103010311032103310341035103610371038103910401041104210431044104510461047104810491050105110521053105410551056105710581059106010611062106310641065106610671068106910701071107210731074107510761077107810791080108110821083108410851086108710881089109010911092109310941095109610971098109911001101110211031104110511061107110811091110111111121113111411151116111711181119112011211122112311241125112611271128112911301131113211331134113511361137113811391140114111421143114411451146114711481149115011511152115311541155115611571158115911601161116211631164116511661167116811691170117111721173117411751176117711781179118011811182118311841185118611871188118911901191119211931194119511961197119811991200120112021203120412051206120712081209121012111212121312141215121612171218121912201221122212231224122512261227122812291230123112321233123412351236123712381239124012411242124312441245124612471248124912501251125212531254125512561257125812591260126112621263126412651266126712681269127012711272127312741275127612771278127912801281128212831284128512861287128812891290129112921293129412951296129712981299130013011302130313041305130613071308130913101311131213131314131513161317131813191320132113221323132413251326132713281329133013311332133313341335133613371338133913401341134213431344134513461347134813491350135113521353135413551356135713581359136013611362136313641365136613671368136913701371137213731374137513761377137813791380138113821383138413851386138713881389139013911392139313941395139613971398139914001401140214031404140514061407140814091410141114121413141414151416141714181419142014211422142314241425142614271428142914301431143214331434143514361437143814391440144114421443144414451446144714481449145014511452145314541455145614571458145914601461146214631464146514661467146814691470147114721473147414751476147714781479148014811482148314841485148614871488148914901491149214931494149514961497149814991500150115021503150415051506150715081509151015111512151315141515151615171518151915201521152215231524152515261527152815291530153115321533
  1. #
  2. # Generic algorithms support
  3. #
  4. config XOR_BLOCKS
  5. tristate
  6. #
  7. # async_tx api: hardware offloaded memory transfer/transform support
  8. #
  9. source "crypto/async_tx/Kconfig"
  10. #
  11. # Cryptographic API Configuration
  12. #
  13. menuconfig CRYPTO
  14. tristate "Cryptographic API"
  15. help
  16. This option provides the core Cryptographic API.
  17. if CRYPTO
  18. comment "Crypto core or helper"
  19. config CRYPTO_FIPS
  20. bool "FIPS 200 compliance"
  21. depends on (CRYPTO_ANSI_CPRNG || CRYPTO_DRBG) && !CRYPTO_MANAGER_DISABLE_TESTS
  22. depends on MODULE_SIG
  23. help
  24. This options enables the fips boot option which is
  25. required if you want to system to operate in a FIPS 200
  26. certification. You should say no unless you know what
  27. this is.
  28. config CRYPTO_ALGAPI
  29. tristate
  30. select CRYPTO_ALGAPI2
  31. help
  32. This option provides the API for cryptographic algorithms.
  33. config CRYPTO_ALGAPI2
  34. tristate
  35. config CRYPTO_AEAD
  36. tristate
  37. select CRYPTO_AEAD2
  38. select CRYPTO_ALGAPI
  39. config CRYPTO_AEAD2
  40. tristate
  41. select CRYPTO_ALGAPI2
  42. config CRYPTO_BLKCIPHER
  43. tristate
  44. select CRYPTO_BLKCIPHER2
  45. select CRYPTO_ALGAPI
  46. config CRYPTO_BLKCIPHER2
  47. tristate
  48. select CRYPTO_ALGAPI2
  49. select CRYPTO_RNG2
  50. select CRYPTO_WORKQUEUE
  51. config CRYPTO_HASH
  52. tristate
  53. select CRYPTO_HASH2
  54. select CRYPTO_ALGAPI
  55. config CRYPTO_HASH2
  56. tristate
  57. select CRYPTO_ALGAPI2
  58. config CRYPTO_RNG
  59. tristate
  60. select CRYPTO_RNG2
  61. select CRYPTO_ALGAPI
  62. config CRYPTO_RNG2
  63. tristate
  64. select CRYPTO_ALGAPI2
  65. config CRYPTO_PCOMP
  66. tristate
  67. select CRYPTO_PCOMP2
  68. select CRYPTO_ALGAPI
  69. config CRYPTO_PCOMP2
  70. tristate
  71. select CRYPTO_ALGAPI2
  72. config CRYPTO_MANAGER
  73. tristate "Cryptographic algorithm manager"
  74. select CRYPTO_MANAGER2
  75. help
  76. Create default cryptographic template instantiations such as
  77. cbc(aes).
  78. config CRYPTO_MANAGER2
  79. def_tristate CRYPTO_MANAGER || (CRYPTO_MANAGER!=n && CRYPTO_ALGAPI=y)
  80. select CRYPTO_AEAD2
  81. select CRYPTO_HASH2
  82. select CRYPTO_BLKCIPHER2
  83. select CRYPTO_PCOMP2
  84. config CRYPTO_USER
  85. tristate "Userspace cryptographic algorithm configuration"
  86. depends on NET
  87. select CRYPTO_MANAGER
  88. help
  89. Userspace configuration for cryptographic instantiations such as
  90. cbc(aes).
  91. config CRYPTO_MANAGER_DISABLE_TESTS
  92. bool "Disable run-time self tests"
  93. default y
  94. depends on CRYPTO_MANAGER2
  95. help
  96. Disable run-time self tests that normally take place at
  97. algorithm registration.
  98. config CRYPTO_GF128MUL
  99. tristate "GF(2^128) multiplication functions"
  100. help
  101. Efficient table driven implementation of multiplications in the
  102. field GF(2^128). This is needed by some cypher modes. This
  103. option will be selected automatically if you select such a
  104. cipher mode. Only select this option by hand if you expect to load
  105. an external module that requires these functions.
  106. config CRYPTO_NULL
  107. tristate "Null algorithms"
  108. select CRYPTO_ALGAPI
  109. select CRYPTO_BLKCIPHER
  110. select CRYPTO_HASH
  111. help
  112. These are 'Null' algorithms, used by IPsec, which do nothing.
  113. config CRYPTO_PCRYPT
  114. tristate "Parallel crypto engine"
  115. depends on SMP
  116. select PADATA
  117. select CRYPTO_MANAGER
  118. select CRYPTO_AEAD
  119. help
  120. This converts an arbitrary crypto algorithm into a parallel
  121. algorithm that executes in kernel threads.
  122. config CRYPTO_WORKQUEUE
  123. tristate
  124. config CRYPTO_CRYPTD
  125. tristate "Software async crypto daemon"
  126. select CRYPTO_BLKCIPHER
  127. select CRYPTO_HASH
  128. select CRYPTO_MANAGER
  129. select CRYPTO_WORKQUEUE
  130. help
  131. This is a generic software asynchronous crypto daemon that
  132. converts an arbitrary synchronous software crypto algorithm
  133. into an asynchronous algorithm that executes in a kernel thread.
  134. config CRYPTO_MCRYPTD
  135. tristate "Software async multi-buffer crypto daemon"
  136. select CRYPTO_BLKCIPHER
  137. select CRYPTO_HASH
  138. select CRYPTO_MANAGER
  139. select CRYPTO_WORKQUEUE
  140. help
  141. This is a generic software asynchronous crypto daemon that
  142. provides the kernel thread to assist multi-buffer crypto
  143. algorithms for submitting jobs and flushing jobs in multi-buffer
  144. crypto algorithms. Multi-buffer crypto algorithms are executed
  145. in the context of this kernel thread and drivers can post
  146. their crypto request asynchronously to be processed by this daemon.
  147. config CRYPTO_AUTHENC
  148. tristate "Authenc support"
  149. select CRYPTO_AEAD
  150. select CRYPTO_BLKCIPHER
  151. select CRYPTO_MANAGER
  152. select CRYPTO_HASH
  153. help
  154. Authenc: Combined mode wrapper for IPsec.
  155. This is required for IPSec.
  156. config CRYPTO_TEST
  157. tristate "Testing module"
  158. depends on m
  159. select CRYPTO_MANAGER
  160. help
  161. Quick & dirty crypto test module.
  162. config CRYPTO_ABLK_HELPER
  163. tristate
  164. select CRYPTO_CRYPTD
  165. config CRYPTO_GLUE_HELPER_X86
  166. tristate
  167. depends on X86
  168. select CRYPTO_ALGAPI
  169. comment "Authenticated Encryption with Associated Data"
  170. config CRYPTO_CCM
  171. tristate "CCM support"
  172. select CRYPTO_CTR
  173. select CRYPTO_AEAD
  174. help
  175. Support for Counter with CBC MAC. Required for IPsec.
  176. config CRYPTO_GCM
  177. tristate "GCM/GMAC support"
  178. select CRYPTO_CTR
  179. select CRYPTO_AEAD
  180. select CRYPTO_GHASH
  181. select CRYPTO_NULL
  182. help
  183. Support for Galois/Counter Mode (GCM) and Galois Message
  184. Authentication Code (GMAC). Required for IPSec.
  185. config CRYPTO_SEQIV
  186. tristate "Sequence Number IV Generator"
  187. select CRYPTO_AEAD
  188. select CRYPTO_BLKCIPHER
  189. select CRYPTO_RNG
  190. help
  191. This IV generator generates an IV based on a sequence number by
  192. xoring it with a salt. This algorithm is mainly useful for CTR
  193. comment "Block modes"
  194. config CRYPTO_CBC
  195. tristate "CBC support"
  196. select CRYPTO_BLKCIPHER
  197. select CRYPTO_MANAGER
  198. help
  199. CBC: Cipher Block Chaining mode
  200. This block cipher algorithm is required for IPSec.
  201. config CRYPTO_CTR
  202. tristate "CTR support"
  203. select CRYPTO_BLKCIPHER
  204. select CRYPTO_SEQIV
  205. select CRYPTO_MANAGER
  206. help
  207. CTR: Counter mode
  208. This block cipher algorithm is required for IPSec.
  209. config CRYPTO_CTS
  210. tristate "CTS support"
  211. select CRYPTO_BLKCIPHER
  212. help
  213. CTS: Cipher Text Stealing
  214. This is the Cipher Text Stealing mode as described by
  215. Section 8 of rfc2040 and referenced by rfc3962.
  216. (rfc3962 includes errata information in its Appendix A)
  217. This mode is required for Kerberos gss mechanism support
  218. for AES encryption.
  219. config CRYPTO_ECB
  220. tristate "ECB support"
  221. select CRYPTO_BLKCIPHER
  222. select CRYPTO_MANAGER
  223. help
  224. ECB: Electronic CodeBook mode
  225. This is the simplest block cipher algorithm. It simply encrypts
  226. the input block by block.
  227. config CRYPTO_LRW
  228. tristate "LRW support"
  229. select CRYPTO_BLKCIPHER
  230. select CRYPTO_MANAGER
  231. select CRYPTO_GF128MUL
  232. help
  233. LRW: Liskov Rivest Wagner, a tweakable, non malleable, non movable
  234. narrow block cipher mode for dm-crypt. Use it with cipher
  235. specification string aes-lrw-benbi, the key must be 256, 320 or 384.
  236. The first 128, 192 or 256 bits in the key are used for AES and the
  237. rest is used to tie each cipher block to its logical position.
  238. config CRYPTO_PCBC
  239. tristate "PCBC support"
  240. select CRYPTO_BLKCIPHER
  241. select CRYPTO_MANAGER
  242. help
  243. PCBC: Propagating Cipher Block Chaining mode
  244. This block cipher algorithm is required for RxRPC.
  245. config CRYPTO_XTS
  246. tristate "XTS support"
  247. select CRYPTO_BLKCIPHER
  248. select CRYPTO_MANAGER
  249. select CRYPTO_GF128MUL
  250. help
  251. XTS: IEEE1619/D16 narrow block cipher use with aes-xts-plain,
  252. key size 256, 384 or 512 bits. This implementation currently
  253. can't handle a sectorsize which is not a multiple of 16 bytes.
  254. comment "Hash modes"
  255. config CRYPTO_CMAC
  256. tristate "CMAC support"
  257. select CRYPTO_HASH
  258. select CRYPTO_MANAGER
  259. help
  260. Cipher-based Message Authentication Code (CMAC) specified by
  261. The National Institute of Standards and Technology (NIST).
  262. https://tools.ietf.org/html/rfc4493
  263. http://csrc.nist.gov/publications/nistpubs/800-38B/SP_800-38B.pdf
  264. config CRYPTO_HMAC
  265. tristate "HMAC support"
  266. select CRYPTO_HASH
  267. select CRYPTO_MANAGER
  268. help
  269. HMAC: Keyed-Hashing for Message Authentication (RFC2104).
  270. This is required for IPSec.
  271. config CRYPTO_XCBC
  272. tristate "XCBC support"
  273. select CRYPTO_HASH
  274. select CRYPTO_MANAGER
  275. help
  276. XCBC: Keyed-Hashing with encryption algorithm
  277. http://www.ietf.org/rfc/rfc3566.txt
  278. http://csrc.nist.gov/encryption/modes/proposedmodes/
  279. xcbc-mac/xcbc-mac-spec.pdf
  280. config CRYPTO_VMAC
  281. tristate "VMAC support"
  282. select CRYPTO_HASH
  283. select CRYPTO_MANAGER
  284. help
  285. VMAC is a message authentication algorithm designed for
  286. very high speed on 64-bit architectures.
  287. See also:
  288. <http://fastcrypto.org/vmac>
  289. comment "Digest"
  290. config CRYPTO_CRC32C
  291. tristate "CRC32c CRC algorithm"
  292. select CRYPTO_HASH
  293. select CRC32
  294. help
  295. Castagnoli, et al Cyclic Redundancy-Check Algorithm. Used
  296. by iSCSI for header and data digests and by others.
  297. See Castagnoli93. Module will be crc32c.
  298. config CRYPTO_CRC32C_INTEL
  299. tristate "CRC32c INTEL hardware acceleration"
  300. depends on X86
  301. select CRYPTO_HASH
  302. help
  303. In Intel processor with SSE4.2 supported, the processor will
  304. support CRC32C implementation using hardware accelerated CRC32
  305. instruction. This option will create 'crc32c-intel' module,
  306. which will enable any routine to use the CRC32 instruction to
  307. gain performance compared with software implementation.
  308. Module will be crc32c-intel.
  309. config CRYPTO_CRC32C_SPARC64
  310. tristate "CRC32c CRC algorithm (SPARC64)"
  311. depends on SPARC64
  312. select CRYPTO_HASH
  313. select CRC32
  314. help
  315. CRC32c CRC algorithm implemented using sparc64 crypto instructions,
  316. when available.
  317. config CRYPTO_CRC32
  318. tristate "CRC32 CRC algorithm"
  319. select CRYPTO_HASH
  320. select CRC32
  321. help
  322. CRC-32-IEEE 802.3 cyclic redundancy-check algorithm.
  323. Shash crypto api wrappers to crc32_le function.
  324. config CRYPTO_CRC32_PCLMUL
  325. tristate "CRC32 PCLMULQDQ hardware acceleration"
  326. depends on X86
  327. select CRYPTO_HASH
  328. select CRC32
  329. help
  330. From Intel Westmere and AMD Bulldozer processor with SSE4.2
  331. and PCLMULQDQ supported, the processor will support
  332. CRC32 PCLMULQDQ implementation using hardware accelerated PCLMULQDQ
  333. instruction. This option will create 'crc32-plcmul' module,
  334. which will enable any routine to use the CRC-32-IEEE 802.3 checksum
  335. and gain better performance as compared with the table implementation.
  336. config CRYPTO_CRCT10DIF
  337. tristate "CRCT10DIF algorithm"
  338. select CRYPTO_HASH
  339. help
  340. CRC T10 Data Integrity Field computation is being cast as
  341. a crypto transform. This allows for faster crc t10 diff
  342. transforms to be used if they are available.
  343. config CRYPTO_CRCT10DIF_PCLMUL
  344. tristate "CRCT10DIF PCLMULQDQ hardware acceleration"
  345. depends on X86 && 64BIT && CRC_T10DIF
  346. select CRYPTO_HASH
  347. help
  348. For x86_64 processors with SSE4.2 and PCLMULQDQ supported,
  349. CRC T10 DIF PCLMULQDQ computation can be hardware
  350. accelerated PCLMULQDQ instruction. This option will create
  351. 'crct10dif-plcmul' module, which is faster when computing the
  352. crct10dif checksum as compared with the generic table implementation.
  353. config CRYPTO_GHASH
  354. tristate "GHASH digest algorithm"
  355. select CRYPTO_GF128MUL
  356. help
  357. GHASH is message digest algorithm for GCM (Galois/Counter Mode).
  358. config CRYPTO_MD4
  359. tristate "MD4 digest algorithm"
  360. select CRYPTO_HASH
  361. help
  362. MD4 message digest algorithm (RFC1320).
  363. config CRYPTO_MD5
  364. tristate "MD5 digest algorithm"
  365. select CRYPTO_HASH
  366. help
  367. MD5 message digest algorithm (RFC1321).
  368. config CRYPTO_MD5_SPARC64
  369. tristate "MD5 digest algorithm (SPARC64)"
  370. depends on SPARC64
  371. select CRYPTO_MD5
  372. select CRYPTO_HASH
  373. help
  374. MD5 message digest algorithm (RFC1321) implemented
  375. using sparc64 crypto instructions, when available.
  376. config CRYPTO_MICHAEL_MIC
  377. tristate "Michael MIC keyed digest algorithm"
  378. select CRYPTO_HASH
  379. help
  380. Michael MIC is used for message integrity protection in TKIP
  381. (IEEE 802.11i). This algorithm is required for TKIP, but it
  382. should not be used for other purposes because of the weakness
  383. of the algorithm.
  384. config CRYPTO_RMD128
  385. tristate "RIPEMD-128 digest algorithm"
  386. select CRYPTO_HASH
  387. help
  388. RIPEMD-128 (ISO/IEC 10118-3:2004).
  389. RIPEMD-128 is a 128-bit cryptographic hash function. It should only
  390. be used as a secure replacement for RIPEMD. For other use cases,
  391. RIPEMD-160 should be used.
  392. Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
  393. See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
  394. config CRYPTO_RMD160
  395. tristate "RIPEMD-160 digest algorithm"
  396. select CRYPTO_HASH
  397. help
  398. RIPEMD-160 (ISO/IEC 10118-3:2004).
  399. RIPEMD-160 is a 160-bit cryptographic hash function. It is intended
  400. to be used as a secure replacement for the 128-bit hash functions
  401. MD4, MD5 and it's predecessor RIPEMD
  402. (not to be confused with RIPEMD-128).
  403. It's speed is comparable to SHA1 and there are no known attacks
  404. against RIPEMD-160.
  405. Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
  406. See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
  407. config CRYPTO_RMD256
  408. tristate "RIPEMD-256 digest algorithm"
  409. select CRYPTO_HASH
  410. help
  411. RIPEMD-256 is an optional extension of RIPEMD-128 with a
  412. 256 bit hash. It is intended for applications that require
  413. longer hash-results, without needing a larger security level
  414. (than RIPEMD-128).
  415. Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
  416. See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
  417. config CRYPTO_RMD320
  418. tristate "RIPEMD-320 digest algorithm"
  419. select CRYPTO_HASH
  420. help
  421. RIPEMD-320 is an optional extension of RIPEMD-160 with a
  422. 320 bit hash. It is intended for applications that require
  423. longer hash-results, without needing a larger security level
  424. (than RIPEMD-160).
  425. Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
  426. See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
  427. config CRYPTO_SHA1
  428. tristate "SHA1 digest algorithm"
  429. select CRYPTO_HASH
  430. help
  431. SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2).
  432. config CRYPTO_SHA1_SSSE3
  433. tristate "SHA1 digest algorithm (SSSE3/AVX/AVX2)"
  434. depends on X86 && 64BIT
  435. select CRYPTO_SHA1
  436. select CRYPTO_HASH
  437. help
  438. SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented
  439. using Supplemental SSE3 (SSSE3) instructions or Advanced Vector
  440. Extensions (AVX/AVX2), when available.
  441. config CRYPTO_SHA256_SSSE3
  442. tristate "SHA256 digest algorithm (SSSE3/AVX/AVX2)"
  443. depends on X86 && 64BIT
  444. select CRYPTO_SHA256
  445. select CRYPTO_HASH
  446. help
  447. SHA-256 secure hash standard (DFIPS 180-2) implemented
  448. using Supplemental SSE3 (SSSE3) instructions, or Advanced Vector
  449. Extensions version 1 (AVX1), or Advanced Vector Extensions
  450. version 2 (AVX2) instructions, when available.
  451. config CRYPTO_SHA512_SSSE3
  452. tristate "SHA512 digest algorithm (SSSE3/AVX/AVX2)"
  453. depends on X86 && 64BIT
  454. select CRYPTO_SHA512
  455. select CRYPTO_HASH
  456. help
  457. SHA-512 secure hash standard (DFIPS 180-2) implemented
  458. using Supplemental SSE3 (SSSE3) instructions, or Advanced Vector
  459. Extensions version 1 (AVX1), or Advanced Vector Extensions
  460. version 2 (AVX2) instructions, when available.
  461. config CRYPTO_SHA1_SPARC64
  462. tristate "SHA1 digest algorithm (SPARC64)"
  463. depends on SPARC64
  464. select CRYPTO_SHA1
  465. select CRYPTO_HASH
  466. help
  467. SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented
  468. using sparc64 crypto instructions, when available.
  469. config CRYPTO_SHA1_ARM
  470. tristate "SHA1 digest algorithm (ARM-asm)"
  471. depends on ARM
  472. select CRYPTO_SHA1
  473. select CRYPTO_HASH
  474. help
  475. SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented
  476. using optimized ARM assembler.
  477. config CRYPTO_SHA1_ARM_NEON
  478. tristate "SHA1 digest algorithm (ARM NEON)"
  479. depends on ARM && KERNEL_MODE_NEON
  480. select CRYPTO_SHA1_ARM
  481. select CRYPTO_SHA1
  482. select CRYPTO_HASH
  483. help
  484. SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented
  485. using optimized ARM NEON assembly, when NEON instructions are
  486. available.
  487. config CRYPTO_SHA1_PPC
  488. tristate "SHA1 digest algorithm (powerpc)"
  489. depends on PPC
  490. help
  491. This is the powerpc hardware accelerated implementation of the
  492. SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2).
  493. config CRYPTO_SHA1_MB
  494. tristate "SHA1 digest algorithm (x86_64 Multi-Buffer, Experimental)"
  495. depends on X86 && 64BIT
  496. select CRYPTO_SHA1
  497. select CRYPTO_HASH
  498. select CRYPTO_MCRYPTD
  499. help
  500. SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented
  501. using multi-buffer technique. This algorithm computes on
  502. multiple data lanes concurrently with SIMD instructions for
  503. better throughput. It should not be enabled by default but
  504. used when there is significant amount of work to keep the keep
  505. the data lanes filled to get performance benefit. If the data
  506. lanes remain unfilled, a flush operation will be initiated to
  507. process the crypto jobs, adding a slight latency.
  508. config CRYPTO_SHA256
  509. tristate "SHA224 and SHA256 digest algorithm"
  510. select CRYPTO_HASH
  511. help
  512. SHA256 secure hash standard (DFIPS 180-2).
  513. This version of SHA implements a 256 bit hash with 128 bits of
  514. security against collision attacks.
  515. This code also includes SHA-224, a 224 bit hash with 112 bits
  516. of security against collision attacks.
  517. config CRYPTO_SHA256_SPARC64
  518. tristate "SHA224 and SHA256 digest algorithm (SPARC64)"
  519. depends on SPARC64
  520. select CRYPTO_SHA256
  521. select CRYPTO_HASH
  522. help
  523. SHA-256 secure hash standard (DFIPS 180-2) implemented
  524. using sparc64 crypto instructions, when available.
  525. config CRYPTO_SHA512
  526. tristate "SHA384 and SHA512 digest algorithms"
  527. select CRYPTO_HASH
  528. help
  529. SHA512 secure hash standard (DFIPS 180-2).
  530. This version of SHA implements a 512 bit hash with 256 bits of
  531. security against collision attacks.
  532. This code also includes SHA-384, a 384 bit hash with 192 bits
  533. of security against collision attacks.
  534. config CRYPTO_SHA512_SPARC64
  535. tristate "SHA384 and SHA512 digest algorithm (SPARC64)"
  536. depends on SPARC64
  537. select CRYPTO_SHA512
  538. select CRYPTO_HASH
  539. help
  540. SHA-512 secure hash standard (DFIPS 180-2) implemented
  541. using sparc64 crypto instructions, when available.
  542. config CRYPTO_SHA512_ARM_NEON
  543. tristate "SHA384 and SHA512 digest algorithm (ARM NEON)"
  544. depends on ARM && KERNEL_MODE_NEON
  545. select CRYPTO_SHA512
  546. select CRYPTO_HASH
  547. help
  548. SHA-512 secure hash standard (DFIPS 180-2) implemented
  549. using ARM NEON instructions, when available.
  550. This version of SHA implements a 512 bit hash with 256 bits of
  551. security against collision attacks.
  552. This code also includes SHA-384, a 384 bit hash with 192 bits
  553. of security against collision attacks.
  554. config CRYPTO_TGR192
  555. tristate "Tiger digest algorithms"
  556. select CRYPTO_HASH
  557. help
  558. Tiger hash algorithm 192, 160 and 128-bit hashes
  559. Tiger is a hash function optimized for 64-bit processors while
  560. still having decent performance on 32-bit processors.
  561. Tiger was developed by Ross Anderson and Eli Biham.
  562. See also:
  563. <http://www.cs.technion.ac.il/~biham/Reports/Tiger/>.
  564. config CRYPTO_WP512
  565. tristate "Whirlpool digest algorithms"
  566. select CRYPTO_HASH
  567. help
  568. Whirlpool hash algorithm 512, 384 and 256-bit hashes
  569. Whirlpool-512 is part of the NESSIE cryptographic primitives.
  570. Whirlpool will be part of the ISO/IEC 10118-3:2003(E) standard
  571. See also:
  572. <http://www.larc.usp.br/~pbarreto/WhirlpoolPage.html>
  573. config CRYPTO_GHASH_CLMUL_NI_INTEL
  574. tristate "GHASH digest algorithm (CLMUL-NI accelerated)"
  575. depends on X86 && 64BIT
  576. select CRYPTO_CRYPTD
  577. help
  578. GHASH is message digest algorithm for GCM (Galois/Counter Mode).
  579. The implementation is accelerated by CLMUL-NI of Intel.
  580. comment "Ciphers"
  581. config CRYPTO_AES
  582. tristate "AES cipher algorithms"
  583. select CRYPTO_ALGAPI
  584. help
  585. AES cipher algorithms (FIPS-197). AES uses the Rijndael
  586. algorithm.
  587. Rijndael appears to be consistently a very good performer in
  588. both hardware and software across a wide range of computing
  589. environments regardless of its use in feedback or non-feedback
  590. modes. Its key setup time is excellent, and its key agility is
  591. good. Rijndael's very low memory requirements make it very well
  592. suited for restricted-space environments, in which it also
  593. demonstrates excellent performance. Rijndael's operations are
  594. among the easiest to defend against power and timing attacks.
  595. The AES specifies three key sizes: 128, 192 and 256 bits
  596. See <http://csrc.nist.gov/CryptoToolkit/aes/> for more information.
  597. config CRYPTO_AES_586
  598. tristate "AES cipher algorithms (i586)"
  599. depends on (X86 || UML_X86) && !64BIT
  600. select CRYPTO_ALGAPI
  601. select CRYPTO_AES
  602. help
  603. AES cipher algorithms (FIPS-197). AES uses the Rijndael
  604. algorithm.
  605. Rijndael appears to be consistently a very good performer in
  606. both hardware and software across a wide range of computing
  607. environments regardless of its use in feedback or non-feedback
  608. modes. Its key setup time is excellent, and its key agility is
  609. good. Rijndael's very low memory requirements make it very well
  610. suited for restricted-space environments, in which it also
  611. demonstrates excellent performance. Rijndael's operations are
  612. among the easiest to defend against power and timing attacks.
  613. The AES specifies three key sizes: 128, 192 and 256 bits
  614. See <http://csrc.nist.gov/encryption/aes/> for more information.
  615. config CRYPTO_AES_X86_64
  616. tristate "AES cipher algorithms (x86_64)"
  617. depends on (X86 || UML_X86) && 64BIT
  618. select CRYPTO_ALGAPI
  619. select CRYPTO_AES
  620. help
  621. AES cipher algorithms (FIPS-197). AES uses the Rijndael
  622. algorithm.
  623. Rijndael appears to be consistently a very good performer in
  624. both hardware and software across a wide range of computing
  625. environments regardless of its use in feedback or non-feedback
  626. modes. Its key setup time is excellent, and its key agility is
  627. good. Rijndael's very low memory requirements make it very well
  628. suited for restricted-space environments, in which it also
  629. demonstrates excellent performance. Rijndael's operations are
  630. among the easiest to defend against power and timing attacks.
  631. The AES specifies three key sizes: 128, 192 and 256 bits
  632. See <http://csrc.nist.gov/encryption/aes/> for more information.
  633. config CRYPTO_AES_NI_INTEL
  634. tristate "AES cipher algorithms (AES-NI)"
  635. depends on X86
  636. select CRYPTO_AES_X86_64 if 64BIT
  637. select CRYPTO_AES_586 if !64BIT
  638. select CRYPTO_CRYPTD
  639. select CRYPTO_ABLK_HELPER
  640. select CRYPTO_ALGAPI
  641. select CRYPTO_GLUE_HELPER_X86 if 64BIT
  642. select CRYPTO_LRW
  643. select CRYPTO_XTS
  644. help
  645. Use Intel AES-NI instructions for AES algorithm.
  646. AES cipher algorithms (FIPS-197). AES uses the Rijndael
  647. algorithm.
  648. Rijndael appears to be consistently a very good performer in
  649. both hardware and software across a wide range of computing
  650. environments regardless of its use in feedback or non-feedback
  651. modes. Its key setup time is excellent, and its key agility is
  652. good. Rijndael's very low memory requirements make it very well
  653. suited for restricted-space environments, in which it also
  654. demonstrates excellent performance. Rijndael's operations are
  655. among the easiest to defend against power and timing attacks.
  656. The AES specifies three key sizes: 128, 192 and 256 bits
  657. See <http://csrc.nist.gov/encryption/aes/> for more information.
  658. In addition to AES cipher algorithm support, the acceleration
  659. for some popular block cipher mode is supported too, including
  660. ECB, CBC, LRW, PCBC, XTS. The 64 bit version has additional
  661. acceleration for CTR.
  662. config CRYPTO_AES_SPARC64
  663. tristate "AES cipher algorithms (SPARC64)"
  664. depends on SPARC64
  665. select CRYPTO_CRYPTD
  666. select CRYPTO_ALGAPI
  667. help
  668. Use SPARC64 crypto opcodes for AES algorithm.
  669. AES cipher algorithms (FIPS-197). AES uses the Rijndael
  670. algorithm.
  671. Rijndael appears to be consistently a very good performer in
  672. both hardware and software across a wide range of computing
  673. environments regardless of its use in feedback or non-feedback
  674. modes. Its key setup time is excellent, and its key agility is
  675. good. Rijndael's very low memory requirements make it very well
  676. suited for restricted-space environments, in which it also
  677. demonstrates excellent performance. Rijndael's operations are
  678. among the easiest to defend against power and timing attacks.
  679. The AES specifies three key sizes: 128, 192 and 256 bits
  680. See <http://csrc.nist.gov/encryption/aes/> for more information.
  681. In addition to AES cipher algorithm support, the acceleration
  682. for some popular block cipher mode is supported too, including
  683. ECB and CBC.
  684. config CRYPTO_AES_ARM
  685. tristate "AES cipher algorithms (ARM-asm)"
  686. depends on ARM
  687. select CRYPTO_ALGAPI
  688. select CRYPTO_AES
  689. help
  690. Use optimized AES assembler routines for ARM platforms.
  691. AES cipher algorithms (FIPS-197). AES uses the Rijndael
  692. algorithm.
  693. Rijndael appears to be consistently a very good performer in
  694. both hardware and software across a wide range of computing
  695. environments regardless of its use in feedback or non-feedback
  696. modes. Its key setup time is excellent, and its key agility is
  697. good. Rijndael's very low memory requirements make it very well
  698. suited for restricted-space environments, in which it also
  699. demonstrates excellent performance. Rijndael's operations are
  700. among the easiest to defend against power and timing attacks.
  701. The AES specifies three key sizes: 128, 192 and 256 bits
  702. See <http://csrc.nist.gov/encryption/aes/> for more information.
  703. config CRYPTO_AES_ARM_BS
  704. tristate "Bit sliced AES using NEON instructions"
  705. depends on ARM && KERNEL_MODE_NEON
  706. select CRYPTO_ALGAPI
  707. select CRYPTO_AES_ARM
  708. select CRYPTO_ABLK_HELPER
  709. help
  710. Use a faster and more secure NEON based implementation of AES in CBC,
  711. CTR and XTS modes
  712. Bit sliced AES gives around 45% speedup on Cortex-A15 for CTR mode
  713. and for XTS mode encryption, CBC and XTS mode decryption speedup is
  714. around 25%. (CBC encryption speed is not affected by this driver.)
  715. This implementation does not rely on any lookup tables so it is
  716. believed to be invulnerable to cache timing attacks.
  717. config CRYPTO_AES_ARM32_CE
  718. tristate "AES cipher using ARMv8 32bits Crypto Extensions"
  719. depends on ARM && KERNEL_MODE_NEON
  720. select CRYPTO_ABLK_HELPER
  721. help
  722. ARMv8 32bits Crypto Extensions.
  723. AES cipher using ARMv8 32bits Crypto Extensions to
  724. accelerate encryption/decryption.
  725. Such as AES, AES_CBC.
  726. config CRYPTO_ANUBIS
  727. tristate "Anubis cipher algorithm"
  728. select CRYPTO_ALGAPI
  729. help
  730. Anubis cipher algorithm.
  731. Anubis is a variable key length cipher which can use keys from
  732. 128 bits to 320 bits in length. It was evaluated as a entrant
  733. in the NESSIE competition.
  734. See also:
  735. <https://www.cosic.esat.kuleuven.be/nessie/reports/>
  736. <http://www.larc.usp.br/~pbarreto/AnubisPage.html>
  737. config CRYPTO_ARC4
  738. tristate "ARC4 cipher algorithm"
  739. select CRYPTO_BLKCIPHER
  740. help
  741. ARC4 cipher algorithm.
  742. ARC4 is a stream cipher using keys ranging from 8 bits to 2048
  743. bits in length. This algorithm is required for driver-based
  744. WEP, but it should not be for other purposes because of the
  745. weakness of the algorithm.
  746. config CRYPTO_BLOWFISH
  747. tristate "Blowfish cipher algorithm"
  748. select CRYPTO_ALGAPI
  749. select CRYPTO_BLOWFISH_COMMON
  750. help
  751. Blowfish cipher algorithm, by Bruce Schneier.
  752. This is a variable key length cipher which can use keys from 32
  753. bits to 448 bits in length. It's fast, simple and specifically
  754. designed for use on "large microprocessors".
  755. See also:
  756. <http://www.schneier.com/blowfish.html>
  757. config CRYPTO_BLOWFISH_COMMON
  758. tristate
  759. help
  760. Common parts of the Blowfish cipher algorithm shared by the
  761. generic c and the assembler implementations.
  762. See also:
  763. <http://www.schneier.com/blowfish.html>
  764. config CRYPTO_BLOWFISH_X86_64
  765. tristate "Blowfish cipher algorithm (x86_64)"
  766. depends on X86 && 64BIT
  767. select CRYPTO_ALGAPI
  768. select CRYPTO_BLOWFISH_COMMON
  769. help
  770. Blowfish cipher algorithm (x86_64), by Bruce Schneier.
  771. This is a variable key length cipher which can use keys from 32
  772. bits to 448 bits in length. It's fast, simple and specifically
  773. designed for use on "large microprocessors".
  774. See also:
  775. <http://www.schneier.com/blowfish.html>
  776. config CRYPTO_CAMELLIA
  777. tristate "Camellia cipher algorithms"
  778. depends on CRYPTO
  779. select CRYPTO_ALGAPI
  780. help
  781. Camellia cipher algorithms module.
  782. Camellia is a symmetric key block cipher developed jointly
  783. at NTT and Mitsubishi Electric Corporation.
  784. The Camellia specifies three key sizes: 128, 192 and 256 bits.
  785. See also:
  786. <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
  787. config CRYPTO_CAMELLIA_X86_64
  788. tristate "Camellia cipher algorithm (x86_64)"
  789. depends on X86 && 64BIT
  790. depends on CRYPTO
  791. select CRYPTO_ALGAPI
  792. select CRYPTO_GLUE_HELPER_X86
  793. select CRYPTO_LRW
  794. select CRYPTO_XTS
  795. help
  796. Camellia cipher algorithm module (x86_64).
  797. Camellia is a symmetric key block cipher developed jointly
  798. at NTT and Mitsubishi Electric Corporation.
  799. The Camellia specifies three key sizes: 128, 192 and 256 bits.
  800. See also:
  801. <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
  802. config CRYPTO_CAMELLIA_AESNI_AVX_X86_64
  803. tristate "Camellia cipher algorithm (x86_64/AES-NI/AVX)"
  804. depends on X86 && 64BIT
  805. depends on CRYPTO
  806. select CRYPTO_ALGAPI
  807. select CRYPTO_CRYPTD
  808. select CRYPTO_ABLK_HELPER
  809. select CRYPTO_GLUE_HELPER_X86
  810. select CRYPTO_CAMELLIA_X86_64
  811. select CRYPTO_LRW
  812. select CRYPTO_XTS
  813. help
  814. Camellia cipher algorithm module (x86_64/AES-NI/AVX).
  815. Camellia is a symmetric key block cipher developed jointly
  816. at NTT and Mitsubishi Electric Corporation.
  817. The Camellia specifies three key sizes: 128, 192 and 256 bits.
  818. See also:
  819. <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
  820. config CRYPTO_CAMELLIA_AESNI_AVX2_X86_64
  821. tristate "Camellia cipher algorithm (x86_64/AES-NI/AVX2)"
  822. depends on X86 && 64BIT
  823. depends on CRYPTO
  824. select CRYPTO_ALGAPI
  825. select CRYPTO_CRYPTD
  826. select CRYPTO_ABLK_HELPER
  827. select CRYPTO_GLUE_HELPER_X86
  828. select CRYPTO_CAMELLIA_X86_64
  829. select CRYPTO_CAMELLIA_AESNI_AVX_X86_64
  830. select CRYPTO_LRW
  831. select CRYPTO_XTS
  832. help
  833. Camellia cipher algorithm module (x86_64/AES-NI/AVX2).
  834. Camellia is a symmetric key block cipher developed jointly
  835. at NTT and Mitsubishi Electric Corporation.
  836. The Camellia specifies three key sizes: 128, 192 and 256 bits.
  837. See also:
  838. <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
  839. config CRYPTO_CAMELLIA_SPARC64
  840. tristate "Camellia cipher algorithm (SPARC64)"
  841. depends on SPARC64
  842. depends on CRYPTO
  843. select CRYPTO_ALGAPI
  844. help
  845. Camellia cipher algorithm module (SPARC64).
  846. Camellia is a symmetric key block cipher developed jointly
  847. at NTT and Mitsubishi Electric Corporation.
  848. The Camellia specifies three key sizes: 128, 192 and 256 bits.
  849. See also:
  850. <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
  851. config CRYPTO_CAST_COMMON
  852. tristate
  853. help
  854. Common parts of the CAST cipher algorithms shared by the
  855. generic c and the assembler implementations.
  856. config CRYPTO_CAST5
  857. tristate "CAST5 (CAST-128) cipher algorithm"
  858. select CRYPTO_ALGAPI
  859. select CRYPTO_CAST_COMMON
  860. help
  861. The CAST5 encryption algorithm (synonymous with CAST-128) is
  862. described in RFC2144.
  863. config CRYPTO_CAST5_AVX_X86_64
  864. tristate "CAST5 (CAST-128) cipher algorithm (x86_64/AVX)"
  865. depends on X86 && 64BIT
  866. select CRYPTO_ALGAPI
  867. select CRYPTO_CRYPTD
  868. select CRYPTO_ABLK_HELPER
  869. select CRYPTO_CAST_COMMON
  870. select CRYPTO_CAST5
  871. help
  872. The CAST5 encryption algorithm (synonymous with CAST-128) is
  873. described in RFC2144.
  874. This module provides the Cast5 cipher algorithm that processes
  875. sixteen blocks parallel using the AVX instruction set.
  876. config CRYPTO_CAST6
  877. tristate "CAST6 (CAST-256) cipher algorithm"
  878. select CRYPTO_ALGAPI
  879. select CRYPTO_CAST_COMMON
  880. help
  881. The CAST6 encryption algorithm (synonymous with CAST-256) is
  882. described in RFC2612.
  883. config CRYPTO_CAST6_AVX_X86_64
  884. tristate "CAST6 (CAST-256) cipher algorithm (x86_64/AVX)"
  885. depends on X86 && 64BIT
  886. select CRYPTO_ALGAPI
  887. select CRYPTO_CRYPTD
  888. select CRYPTO_ABLK_HELPER
  889. select CRYPTO_GLUE_HELPER_X86
  890. select CRYPTO_CAST_COMMON
  891. select CRYPTO_CAST6
  892. select CRYPTO_LRW
  893. select CRYPTO_XTS
  894. help
  895. The CAST6 encryption algorithm (synonymous with CAST-256) is
  896. described in RFC2612.
  897. This module provides the Cast6 cipher algorithm that processes
  898. eight blocks parallel using the AVX instruction set.
  899. config CRYPTO_DES
  900. tristate "DES and Triple DES EDE cipher algorithms"
  901. select CRYPTO_ALGAPI
  902. help
  903. DES cipher algorithm (FIPS 46-2), and Triple DES EDE (FIPS 46-3).
  904. config CRYPTO_DES_SPARC64
  905. tristate "DES and Triple DES EDE cipher algorithms (SPARC64)"
  906. depends on SPARC64
  907. select CRYPTO_ALGAPI
  908. select CRYPTO_DES
  909. help
  910. DES cipher algorithm (FIPS 46-2), and Triple DES EDE (FIPS 46-3),
  911. optimized using SPARC64 crypto opcodes.
  912. config CRYPTO_DES3_EDE_X86_64
  913. tristate "Triple DES EDE cipher algorithm (x86-64)"
  914. depends on X86 && 64BIT
  915. select CRYPTO_ALGAPI
  916. select CRYPTO_DES
  917. help
  918. Triple DES EDE (FIPS 46-3) algorithm.
  919. This module provides implementation of the Triple DES EDE cipher
  920. algorithm that is optimized for x86-64 processors. Two versions of
  921. algorithm are provided; regular processing one input block and
  922. one that processes three blocks parallel.
  923. config CRYPTO_FCRYPT
  924. tristate "FCrypt cipher algorithm"
  925. select CRYPTO_ALGAPI
  926. select CRYPTO_BLKCIPHER
  927. help
  928. FCrypt algorithm used by RxRPC.
  929. config CRYPTO_KHAZAD
  930. tristate "Khazad cipher algorithm"
  931. select CRYPTO_ALGAPI
  932. help
  933. Khazad cipher algorithm.
  934. Khazad was a finalist in the initial NESSIE competition. It is
  935. an algorithm optimized for 64-bit processors with good performance
  936. on 32-bit processors. Khazad uses an 128 bit key size.
  937. See also:
  938. <http://www.larc.usp.br/~pbarreto/KhazadPage.html>
  939. config CRYPTO_SALSA20
  940. tristate "Salsa20 stream cipher algorithm"
  941. select CRYPTO_BLKCIPHER
  942. help
  943. Salsa20 stream cipher algorithm.
  944. Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
  945. Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
  946. The Salsa20 stream cipher algorithm is designed by Daniel J.
  947. Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
  948. config CRYPTO_SALSA20_586
  949. tristate "Salsa20 stream cipher algorithm (i586)"
  950. depends on (X86 || UML_X86) && !64BIT
  951. select CRYPTO_BLKCIPHER
  952. help
  953. Salsa20 stream cipher algorithm.
  954. Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
  955. Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
  956. The Salsa20 stream cipher algorithm is designed by Daniel J.
  957. Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
  958. config CRYPTO_SALSA20_X86_64
  959. tristate "Salsa20 stream cipher algorithm (x86_64)"
  960. depends on (X86 || UML_X86) && 64BIT
  961. select CRYPTO_BLKCIPHER
  962. help
  963. Salsa20 stream cipher algorithm.
  964. Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
  965. Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
  966. The Salsa20 stream cipher algorithm is designed by Daniel J.
  967. Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
  968. config CRYPTO_SEED
  969. tristate "SEED cipher algorithm"
  970. select CRYPTO_ALGAPI
  971. help
  972. SEED cipher algorithm (RFC4269).
  973. SEED is a 128-bit symmetric key block cipher that has been
  974. developed by KISA (Korea Information Security Agency) as a
  975. national standard encryption algorithm of the Republic of Korea.
  976. It is a 16 round block cipher with the key size of 128 bit.
  977. See also:
  978. <http://www.kisa.or.kr/kisa/seed/jsp/seed_eng.jsp>
  979. config CRYPTO_SERPENT
  980. tristate "Serpent cipher algorithm"
  981. select CRYPTO_ALGAPI
  982. help
  983. Serpent cipher algorithm, by Anderson, Biham & Knudsen.
  984. Keys are allowed to be from 0 to 256 bits in length, in steps
  985. of 8 bits. Also includes the 'Tnepres' algorithm, a reversed
  986. variant of Serpent for compatibility with old kerneli.org code.
  987. See also:
  988. <http://www.cl.cam.ac.uk/~rja14/serpent.html>
  989. config CRYPTO_SERPENT_SSE2_X86_64
  990. tristate "Serpent cipher algorithm (x86_64/SSE2)"
  991. depends on X86 && 64BIT
  992. select CRYPTO_ALGAPI
  993. select CRYPTO_CRYPTD
  994. select CRYPTO_ABLK_HELPER
  995. select CRYPTO_GLUE_HELPER_X86
  996. select CRYPTO_SERPENT
  997. select CRYPTO_LRW
  998. select CRYPTO_XTS
  999. help
  1000. Serpent cipher algorithm, by Anderson, Biham & Knudsen.
  1001. Keys are allowed to be from 0 to 256 bits in length, in steps
  1002. of 8 bits.
  1003. This module provides Serpent cipher algorithm that processes eigth
  1004. blocks parallel using SSE2 instruction set.
  1005. See also:
  1006. <http://www.cl.cam.ac.uk/~rja14/serpent.html>
  1007. config CRYPTO_SERPENT_SSE2_586
  1008. tristate "Serpent cipher algorithm (i586/SSE2)"
  1009. depends on X86 && !64BIT
  1010. select CRYPTO_ALGAPI
  1011. select CRYPTO_CRYPTD
  1012. select CRYPTO_ABLK_HELPER
  1013. select CRYPTO_GLUE_HELPER_X86
  1014. select CRYPTO_SERPENT
  1015. select CRYPTO_LRW
  1016. select CRYPTO_XTS
  1017. help
  1018. Serpent cipher algorithm, by Anderson, Biham & Knudsen.
  1019. Keys are allowed to be from 0 to 256 bits in length, in steps
  1020. of 8 bits.
  1021. This module provides Serpent cipher algorithm that processes four
  1022. blocks parallel using SSE2 instruction set.
  1023. See also:
  1024. <http://www.cl.cam.ac.uk/~rja14/serpent.html>
  1025. config CRYPTO_SERPENT_AVX_X86_64
  1026. tristate "Serpent cipher algorithm (x86_64/AVX)"
  1027. depends on X86 && 64BIT
  1028. select CRYPTO_ALGAPI
  1029. select CRYPTO_CRYPTD
  1030. select CRYPTO_ABLK_HELPER
  1031. select CRYPTO_GLUE_HELPER_X86
  1032. select CRYPTO_SERPENT
  1033. select CRYPTO_LRW
  1034. select CRYPTO_XTS
  1035. help
  1036. Serpent cipher algorithm, by Anderson, Biham & Knudsen.
  1037. Keys are allowed to be from 0 to 256 bits in length, in steps
  1038. of 8 bits.
  1039. This module provides the Serpent cipher algorithm that processes
  1040. eight blocks parallel using the AVX instruction set.
  1041. See also:
  1042. <http://www.cl.cam.ac.uk/~rja14/serpent.html>
  1043. config CRYPTO_SERPENT_AVX2_X86_64
  1044. tristate "Serpent cipher algorithm (x86_64/AVX2)"
  1045. depends on X86 && 64BIT
  1046. select CRYPTO_ALGAPI
  1047. select CRYPTO_CRYPTD
  1048. select CRYPTO_ABLK_HELPER
  1049. select CRYPTO_GLUE_HELPER_X86
  1050. select CRYPTO_SERPENT
  1051. select CRYPTO_SERPENT_AVX_X86_64
  1052. select CRYPTO_LRW
  1053. select CRYPTO_XTS
  1054. help
  1055. Serpent cipher algorithm, by Anderson, Biham & Knudsen.
  1056. Keys are allowed to be from 0 to 256 bits in length, in steps
  1057. of 8 bits.
  1058. This module provides Serpent cipher algorithm that processes 16
  1059. blocks parallel using AVX2 instruction set.
  1060. See also:
  1061. <http://www.cl.cam.ac.uk/~rja14/serpent.html>
  1062. config CRYPTO_TEA
  1063. tristate "TEA, XTEA and XETA cipher algorithms"
  1064. select CRYPTO_ALGAPI
  1065. help
  1066. TEA cipher algorithm.
  1067. Tiny Encryption Algorithm is a simple cipher that uses
  1068. many rounds for security. It is very fast and uses
  1069. little memory.
  1070. Xtendend Tiny Encryption Algorithm is a modification to
  1071. the TEA algorithm to address a potential key weakness
  1072. in the TEA algorithm.
  1073. Xtendend Encryption Tiny Algorithm is a mis-implementation
  1074. of the XTEA algorithm for compatibility purposes.
  1075. config CRYPTO_TWOFISH
  1076. tristate "Twofish cipher algorithm"
  1077. select CRYPTO_ALGAPI
  1078. select CRYPTO_TWOFISH_COMMON
  1079. help
  1080. Twofish cipher algorithm.
  1081. Twofish was submitted as an AES (Advanced Encryption Standard)
  1082. candidate cipher by researchers at CounterPane Systems. It is a
  1083. 16 round block cipher supporting key sizes of 128, 192, and 256
  1084. bits.
  1085. See also:
  1086. <http://www.schneier.com/twofish.html>
  1087. config CRYPTO_TWOFISH_COMMON
  1088. tristate
  1089. help
  1090. Common parts of the Twofish cipher algorithm shared by the
  1091. generic c and the assembler implementations.
  1092. config CRYPTO_TWOFISH_586
  1093. tristate "Twofish cipher algorithms (i586)"
  1094. depends on (X86 || UML_X86) && !64BIT
  1095. select CRYPTO_ALGAPI
  1096. select CRYPTO_TWOFISH_COMMON
  1097. help
  1098. Twofish cipher algorithm.
  1099. Twofish was submitted as an AES (Advanced Encryption Standard)
  1100. candidate cipher by researchers at CounterPane Systems. It is a
  1101. 16 round block cipher supporting key sizes of 128, 192, and 256
  1102. bits.
  1103. See also:
  1104. <http://www.schneier.com/twofish.html>
  1105. config CRYPTO_TWOFISH_X86_64
  1106. tristate "Twofish cipher algorithm (x86_64)"
  1107. depends on (X86 || UML_X86) && 64BIT
  1108. select CRYPTO_ALGAPI
  1109. select CRYPTO_TWOFISH_COMMON
  1110. help
  1111. Twofish cipher algorithm (x86_64).
  1112. Twofish was submitted as an AES (Advanced Encryption Standard)
  1113. candidate cipher by researchers at CounterPane Systems. It is a
  1114. 16 round block cipher supporting key sizes of 128, 192, and 256
  1115. bits.
  1116. See also:
  1117. <http://www.schneier.com/twofish.html>
  1118. config CRYPTO_TWOFISH_X86_64_3WAY
  1119. tristate "Twofish cipher algorithm (x86_64, 3-way parallel)"
  1120. depends on X86 && 64BIT
  1121. select CRYPTO_ALGAPI
  1122. select CRYPTO_TWOFISH_COMMON
  1123. select CRYPTO_TWOFISH_X86_64
  1124. select CRYPTO_GLUE_HELPER_X86
  1125. select CRYPTO_LRW
  1126. select CRYPTO_XTS
  1127. help
  1128. Twofish cipher algorithm (x86_64, 3-way parallel).
  1129. Twofish was submitted as an AES (Advanced Encryption Standard)
  1130. candidate cipher by researchers at CounterPane Systems. It is a
  1131. 16 round block cipher supporting key sizes of 128, 192, and 256
  1132. bits.
  1133. This module provides Twofish cipher algorithm that processes three
  1134. blocks parallel, utilizing resources of out-of-order CPUs better.
  1135. See also:
  1136. <http://www.schneier.com/twofish.html>
  1137. config CRYPTO_TWOFISH_AVX_X86_64
  1138. tristate "Twofish cipher algorithm (x86_64/AVX)"
  1139. depends on X86 && 64BIT
  1140. select CRYPTO_ALGAPI
  1141. select CRYPTO_CRYPTD
  1142. select CRYPTO_ABLK_HELPER
  1143. select CRYPTO_GLUE_HELPER_X86
  1144. select CRYPTO_TWOFISH_COMMON
  1145. select CRYPTO_TWOFISH_X86_64
  1146. select CRYPTO_TWOFISH_X86_64_3WAY
  1147. select CRYPTO_LRW
  1148. select CRYPTO_XTS
  1149. help
  1150. Twofish cipher algorithm (x86_64/AVX).
  1151. Twofish was submitted as an AES (Advanced Encryption Standard)
  1152. candidate cipher by researchers at CounterPane Systems. It is a
  1153. 16 round block cipher supporting key sizes of 128, 192, and 256
  1154. bits.
  1155. This module provides the Twofish cipher algorithm that processes
  1156. eight blocks parallel using the AVX Instruction Set.
  1157. See also:
  1158. <http://www.schneier.com/twofish.html>
  1159. comment "Compression"
  1160. config CRYPTO_DEFLATE
  1161. tristate "Deflate compression algorithm"
  1162. select CRYPTO_ALGAPI
  1163. select ZLIB_INFLATE
  1164. select ZLIB_DEFLATE
  1165. help
  1166. This is the Deflate algorithm (RFC1951), specified for use in
  1167. IPSec with the IPCOMP protocol (RFC3173, RFC2394).
  1168. You will most probably want this if using IPSec.
  1169. config CRYPTO_ZLIB
  1170. tristate "Zlib compression algorithm"
  1171. select CRYPTO_PCOMP
  1172. select ZLIB_INFLATE
  1173. select ZLIB_DEFLATE
  1174. select NLATTR
  1175. help
  1176. This is the zlib algorithm.
  1177. config CRYPTO_LZO
  1178. tristate "LZO compression algorithm"
  1179. select CRYPTO_ALGAPI
  1180. select LZO_COMPRESS
  1181. select LZO_DECOMPRESS
  1182. help
  1183. This is the LZO algorithm.
  1184. config CRYPTO_LZ4K
  1185. tristate "LZ4K compression algorithm"
  1186. default n
  1187. select CRYPTO_ALGAPI
  1188. help
  1189. Mediatek's proprietary LZ4K algorithm.
  1190. It has better compression ratio than the one in LZO
  1191. with less performance degradation.
  1192. config CRYPTO_842
  1193. tristate "842 compression algorithm"
  1194. depends on CRYPTO_DEV_NX_COMPRESS
  1195. # 842 uses lzo if the hardware becomes unavailable
  1196. select LZO_COMPRESS
  1197. select LZO_DECOMPRESS
  1198. help
  1199. This is the 842 algorithm.
  1200. config CRYPTO_LZ4
  1201. tristate "LZ4 compression algorithm"
  1202. select CRYPTO_ALGAPI
  1203. select LZ4_COMPRESS
  1204. select LZ4_DECOMPRESS
  1205. help
  1206. This is the LZ4 algorithm.
  1207. config CRYPTO_LZ4HC
  1208. tristate "LZ4HC compression algorithm"
  1209. select CRYPTO_ALGAPI
  1210. select LZ4HC_COMPRESS
  1211. select LZ4_DECOMPRESS
  1212. help
  1213. This is the LZ4 high compression mode algorithm.
  1214. comment "Random Number Generation"
  1215. config CRYPTO_ANSI_CPRNG
  1216. tristate "Pseudo Random Number Generation for Cryptographic modules"
  1217. default m
  1218. select CRYPTO_AES
  1219. select CRYPTO_RNG
  1220. help
  1221. This option enables the generic pseudo random number generator
  1222. for cryptographic modules. Uses the Algorithm specified in
  1223. ANSI X9.31 A.2.4. Note that this option must be enabled if
  1224. CRYPTO_FIPS is selected
  1225. menuconfig CRYPTO_DRBG_MENU
  1226. tristate "NIST SP800-90A DRBG"
  1227. help
  1228. NIST SP800-90A compliant DRBG. In the following submenu, one or
  1229. more of the DRBG types must be selected.
  1230. if CRYPTO_DRBG_MENU
  1231. config CRYPTO_DRBG_HMAC
  1232. bool "Enable HMAC DRBG"
  1233. default y
  1234. select CRYPTO_HMAC
  1235. help
  1236. Enable the HMAC DRBG variant as defined in NIST SP800-90A.
  1237. config CRYPTO_DRBG_HASH
  1238. bool "Enable Hash DRBG"
  1239. select CRYPTO_HASH
  1240. help
  1241. Enable the Hash DRBG variant as defined in NIST SP800-90A.
  1242. config CRYPTO_DRBG_CTR
  1243. bool "Enable CTR DRBG"
  1244. select CRYPTO_AES
  1245. help
  1246. Enable the CTR DRBG variant as defined in NIST SP800-90A.
  1247. config CRYPTO_DRBG
  1248. tristate
  1249. default CRYPTO_DRBG_MENU if (CRYPTO_DRBG_HMAC || CRYPTO_DRBG_HASH || CRYPTO_DRBG_CTR)
  1250. select CRYPTO_RNG
  1251. endif # if CRYPTO_DRBG_MENU
  1252. config CRYPTO_USER_API
  1253. tristate
  1254. config CRYPTO_USER_API_HASH
  1255. tristate "User-space interface for hash algorithms"
  1256. depends on NET
  1257. select CRYPTO_HASH
  1258. select CRYPTO_USER_API
  1259. help
  1260. This option enables the user-spaces interface for hash
  1261. algorithms.
  1262. config CRYPTO_USER_API_SKCIPHER
  1263. tristate "User-space interface for symmetric key cipher algorithms"
  1264. depends on NET
  1265. select CRYPTO_BLKCIPHER
  1266. select CRYPTO_USER_API
  1267. help
  1268. This option enables the user-spaces interface for symmetric
  1269. key cipher algorithms.
  1270. config CRYPTO_HASH_INFO
  1271. bool
  1272. source "drivers/crypto/Kconfig"
  1273. source crypto/asymmetric_keys/Kconfig
  1274. endif # if CRYPTO