blob: 989304ca3eaba8df85d24861feeddbb5d981ac34 [file] [log] [blame]
Linus Torvalds1da177e2005-04-16 15:20:36 -07001#
Dan Williams685784a2007-07-09 11:56:42 -07002# Generic algorithms support
3#
4config XOR_BLOCKS
5 tristate
6
7#
Dan Williams9bc89cd2007-01-02 11:10:44 -07008# async_tx api: hardware offloaded memory transfer/transform support
9#
10source "crypto/async_tx/Kconfig"
11
12#
Linus Torvalds1da177e2005-04-16 15:20:36 -070013# Cryptographic API Configuration
14#
Jan Engelhardt2e290f42007-05-18 15:11:01 +100015menuconfig CRYPTO
Sebastian Siewiorc3715cb92008-03-30 16:36:09 +080016 tristate "Cryptographic API"
Linus Torvalds1da177e2005-04-16 15:20:36 -070017 help
18 This option provides the core Cryptographic API.
19
Herbert Xucce9e062006-08-21 21:08:13 +100020if CRYPTO
21
Sebastian Siewior584fffc2008-04-05 21:04:48 +080022comment "Crypto core or helper"
23
Neil Hormanccb778e2008-08-05 14:13:08 +080024config CRYPTO_FIPS
25 bool "FIPS 200 compliance"
26 help
27 This options enables the fips boot option which is
28 required if you want to system to operate in a FIPS 200
29 certification. You should say no unless you know what
30 this is.
31
Herbert Xucce9e062006-08-21 21:08:13 +100032config CRYPTO_ALGAPI
33 tristate
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110034 select CRYPTO_ALGAPI2
Herbert Xucce9e062006-08-21 21:08:13 +100035 help
36 This option provides the API for cryptographic algorithms.
37
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110038config CRYPTO_ALGAPI2
39 tristate
40
Herbert Xu1ae97822007-08-30 15:36:14 +080041config CRYPTO_AEAD
42 tristate
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110043 select CRYPTO_AEAD2
Herbert Xu1ae97822007-08-30 15:36:14 +080044 select CRYPTO_ALGAPI
45
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110046config CRYPTO_AEAD2
47 tristate
48 select CRYPTO_ALGAPI2
49
Herbert Xu5cde0af2006-08-22 00:07:53 +100050config CRYPTO_BLKCIPHER
51 tristate
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110052 select CRYPTO_BLKCIPHER2
Herbert Xu5cde0af2006-08-22 00:07:53 +100053 select CRYPTO_ALGAPI
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110054
55config CRYPTO_BLKCIPHER2
56 tristate
57 select CRYPTO_ALGAPI2
58 select CRYPTO_RNG2
Herbert Xu5cde0af2006-08-22 00:07:53 +100059
Herbert Xu055bcee2006-08-19 22:24:23 +100060config CRYPTO_HASH
61 tristate
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110062 select CRYPTO_HASH2
Herbert Xu055bcee2006-08-19 22:24:23 +100063 select CRYPTO_ALGAPI
64
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110065config CRYPTO_HASH2
66 tristate
67 select CRYPTO_ALGAPI2
68
Neil Horman17f0f4a2008-08-14 22:15:52 +100069config CRYPTO_RNG
70 tristate
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110071 select CRYPTO_RNG2
Neil Horman17f0f4a2008-08-14 22:15:52 +100072 select CRYPTO_ALGAPI
73
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110074config CRYPTO_RNG2
75 tristate
76 select CRYPTO_ALGAPI2
77
Herbert Xu2b8c19d2006-09-21 11:31:44 +100078config CRYPTO_MANAGER
79 tristate "Cryptographic algorithm manager"
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110080 select CRYPTO_MANAGER2
Herbert Xu2b8c19d2006-09-21 11:31:44 +100081 help
82 Create default cryptographic template instantiations such as
83 cbc(aes).
84
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110085config CRYPTO_MANAGER2
86 def_tristate CRYPTO_MANAGER || (CRYPTO_MANAGER!=n && CRYPTO_ALGAPI=y)
87 select CRYPTO_AEAD2
88 select CRYPTO_HASH2
89 select CRYPTO_BLKCIPHER2
90
Rik Snelc494e072006-11-29 18:59:44 +110091config CRYPTO_GF128MUL
92 tristate "GF(2^128) multiplication functions (EXPERIMENTAL)"
93 depends on EXPERIMENTAL
94 help
95 Efficient table driven implementation of multiplications in the
96 field GF(2^128). This is needed by some cypher modes. This
97 option will be selected automatically if you select such a
98 cipher mode. Only select this option by hand if you expect to load
99 an external module that requires these functions.
100
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800101config CRYPTO_NULL
102 tristate "Null algorithms"
103 select CRYPTO_ALGAPI
104 select CRYPTO_BLKCIPHER
Herbert Xud35d2452008-11-08 08:09:56 +0800105 select CRYPTO_HASH
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800106 help
107 These are 'Null' algorithms, used by IPsec, which do nothing.
108
109config CRYPTO_CRYPTD
110 tristate "Software async crypto daemon"
Herbert Xudb131ef2006-09-21 11:44:08 +1000111 select CRYPTO_BLKCIPHER
Loc Hob8a28252008-05-14 21:23:00 +0800112 select CRYPTO_HASH
Herbert Xu43518402006-10-16 21:28:58 +1000113 select CRYPTO_MANAGER
Herbert Xudb131ef2006-09-21 11:44:08 +1000114 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800115 This is a generic software asynchronous crypto daemon that
116 converts an arbitrary synchronous software crypto algorithm
117 into an asynchronous algorithm that executes in a kernel thread.
118
119config CRYPTO_AUTHENC
120 tristate "Authenc support"
121 select CRYPTO_AEAD
122 select CRYPTO_BLKCIPHER
123 select CRYPTO_MANAGER
124 select CRYPTO_HASH
125 help
126 Authenc: Combined mode wrapper for IPsec.
127 This is required for IPSec.
128
129config CRYPTO_TEST
130 tristate "Testing module"
131 depends on m
Herbert Xuda7f0332008-07-31 17:08:25 +0800132 select CRYPTO_MANAGER
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800133 help
134 Quick & dirty crypto test module.
135
136comment "Authenticated Encryption with Associated Data"
137
138config CRYPTO_CCM
139 tristate "CCM support"
140 select CRYPTO_CTR
141 select CRYPTO_AEAD
142 help
143 Support for Counter with CBC MAC. Required for IPsec.
144
145config CRYPTO_GCM
146 tristate "GCM/GMAC support"
147 select CRYPTO_CTR
148 select CRYPTO_AEAD
149 select CRYPTO_GF128MUL
150 help
151 Support for Galois/Counter Mode (GCM) and Galois Message
152 Authentication Code (GMAC). Required for IPSec.
153
154config CRYPTO_SEQIV
155 tristate "Sequence Number IV Generator"
156 select CRYPTO_AEAD
157 select CRYPTO_BLKCIPHER
Herbert Xua0f000e2008-08-14 22:21:31 +1000158 select CRYPTO_RNG
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800159 help
160 This IV generator generates an IV based on a sequence number by
161 xoring it with a salt. This algorithm is mainly useful for CTR
162
163comment "Block modes"
Herbert Xudb131ef2006-09-21 11:44:08 +1000164
165config CRYPTO_CBC
166 tristate "CBC support"
167 select CRYPTO_BLKCIPHER
Herbert Xu43518402006-10-16 21:28:58 +1000168 select CRYPTO_MANAGER
Herbert Xudb131ef2006-09-21 11:44:08 +1000169 help
170 CBC: Cipher Block Chaining mode
171 This block cipher algorithm is required for IPSec.
172
Joy Latten23e353c2007-10-23 08:50:32 +0800173config CRYPTO_CTR
174 tristate "CTR support"
175 select CRYPTO_BLKCIPHER
Herbert Xu0a270322007-11-30 21:38:37 +1100176 select CRYPTO_SEQIV
Joy Latten23e353c2007-10-23 08:50:32 +0800177 select CRYPTO_MANAGER
Joy Latten23e353c2007-10-23 08:50:32 +0800178 help
179 CTR: Counter mode
180 This block cipher algorithm is required for IPSec.
181
Kevin Coffman76cb9522008-03-24 21:26:16 +0800182config CRYPTO_CTS
183 tristate "CTS support"
184 select CRYPTO_BLKCIPHER
185 help
186 CTS: Cipher Text Stealing
187 This is the Cipher Text Stealing mode as described by
188 Section 8 of rfc2040 and referenced by rfc3962.
189 (rfc3962 includes errata information in its Appendix A)
190 This mode is required for Kerberos gss mechanism support
191 for AES encryption.
192
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800193config CRYPTO_ECB
194 tristate "ECB support"
Herbert Xu653ebd92007-11-27 19:48:27 +0800195 select CRYPTO_BLKCIPHER
Herbert Xu124b53d2007-04-16 20:49:20 +1000196 select CRYPTO_MANAGER
197 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800198 ECB: Electronic CodeBook mode
199 This is the simplest block cipher algorithm. It simply encrypts
200 the input block by block.
Herbert Xu124b53d2007-04-16 20:49:20 +1000201
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800202config CRYPTO_LRW
203 tristate "LRW support (EXPERIMENTAL)"
204 depends on EXPERIMENTAL
David Howells90831632006-12-16 12:13:14 +1100205 select CRYPTO_BLKCIPHER
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800206 select CRYPTO_MANAGER
207 select CRYPTO_GF128MUL
David Howells90831632006-12-16 12:13:14 +1100208 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800209 LRW: Liskov Rivest Wagner, a tweakable, non malleable, non movable
210 narrow block cipher mode for dm-crypt. Use it with cipher
211 specification string aes-lrw-benbi, the key must be 256, 320 or 384.
212 The first 128, 192 or 256 bits in the key are used for AES and the
213 rest is used to tie each cipher block to its logical position.
David Howells90831632006-12-16 12:13:14 +1100214
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800215config CRYPTO_PCBC
216 tristate "PCBC support"
217 select CRYPTO_BLKCIPHER
218 select CRYPTO_MANAGER
219 help
220 PCBC: Propagating Cipher Block Chaining mode
221 This block cipher algorithm is required for RxRPC.
222
223config CRYPTO_XTS
224 tristate "XTS support (EXPERIMENTAL)"
225 depends on EXPERIMENTAL
226 select CRYPTO_BLKCIPHER
227 select CRYPTO_MANAGER
228 select CRYPTO_GF128MUL
229 help
230 XTS: IEEE1619/D16 narrow block cipher use with aes-xts-plain,
231 key size 256, 384 or 512 bits. This implementation currently
232 can't handle a sectorsize which is not a multiple of 16 bytes.
233
234comment "Hash modes"
235
236config CRYPTO_HMAC
237 tristate "HMAC support"
238 select CRYPTO_HASH
239 select CRYPTO_MANAGER
240 help
241 HMAC: Keyed-Hashing for Message Authentication (RFC2104).
242 This is required for IPSec.
243
244config CRYPTO_XCBC
245 tristate "XCBC support"
246 depends on EXPERIMENTAL
247 select CRYPTO_HASH
248 select CRYPTO_MANAGER
249 help
250 XCBC: Keyed-Hashing with encryption algorithm
251 http://www.ietf.org/rfc/rfc3566.txt
252 http://csrc.nist.gov/encryption/modes/proposedmodes/
253 xcbc-mac/xcbc-mac-spec.pdf
254
255comment "Digest"
256
257config CRYPTO_CRC32C
258 tristate "CRC32c CRC algorithm"
Herbert Xu5773a3e2008-07-08 20:54:28 +0800259 select CRYPTO_HASH
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800260 help
261 Castagnoli, et al Cyclic Redundancy-Check Algorithm. Used
262 by iSCSI for header and data digests and by others.
Herbert Xu69c35ef2008-11-07 15:11:47 +0800263 See Castagnoli93. Module will be crc32c.
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800264
Austin Zhang8cb51ba2008-08-07 09:57:03 +0800265config CRYPTO_CRC32C_INTEL
266 tristate "CRC32c INTEL hardware acceleration"
267 depends on X86
268 select CRYPTO_HASH
269 help
270 In Intel processor with SSE4.2 supported, the processor will
271 support CRC32C implementation using hardware accelerated CRC32
272 instruction. This option will create 'crc32c-intel' module,
273 which will enable any routine to use the CRC32 instruction to
274 gain performance compared with software implementation.
275 Module will be crc32c-intel.
276
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800277config CRYPTO_MD4
278 tristate "MD4 digest algorithm"
Adrian-Ken Rueegsegger808a1762008-12-03 19:55:27 +0800279 select CRYPTO_HASH
Linus Torvalds1da177e2005-04-16 15:20:36 -0700280 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800281 MD4 message digest algorithm (RFC1320).
Linus Torvalds1da177e2005-04-16 15:20:36 -0700282
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800283config CRYPTO_MD5
284 tristate "MD5 digest algorithm"
Adrian-Ken Rueegsegger14b75ba2008-12-03 19:57:12 +0800285 select CRYPTO_HASH
Linus Torvalds1da177e2005-04-16 15:20:36 -0700286 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800287 MD5 message digest algorithm (RFC1321).
Linus Torvalds1da177e2005-04-16 15:20:36 -0700288
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800289config CRYPTO_MICHAEL_MIC
290 tristate "Michael MIC keyed digest algorithm"
291 select CRYPTO_ALGAPI
292 help
293 Michael MIC is used for message integrity protection in TKIP
294 (IEEE 802.11i). This algorithm is required for TKIP, but it
295 should not be used for other purposes because of the weakness
296 of the algorithm.
297
Adrian-Ken Rueegsegger82798f92008-05-07 22:17:37 +0800298config CRYPTO_RMD128
Adrian Bunkb6d44342008-07-16 19:28:00 +0800299 tristate "RIPEMD-128 digest algorithm"
Herbert Xu7c4468b2008-11-08 09:10:40 +0800300 select CRYPTO_HASH
Adrian Bunkb6d44342008-07-16 19:28:00 +0800301 help
302 RIPEMD-128 (ISO/IEC 10118-3:2004).
Adrian-Ken Rueegsegger82798f92008-05-07 22:17:37 +0800303
Adrian Bunkb6d44342008-07-16 19:28:00 +0800304 RIPEMD-128 is a 128-bit cryptographic hash function. It should only
305 to be used as a secure replacement for RIPEMD. For other use cases
306 RIPEMD-160 should be used.
Adrian-Ken Rueegsegger82798f92008-05-07 22:17:37 +0800307
Adrian Bunkb6d44342008-07-16 19:28:00 +0800308 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
309 See <http://home.esat.kuleuven.be/~bosselae/ripemd160.html>
Adrian-Ken Rueegsegger82798f92008-05-07 22:17:37 +0800310
311config CRYPTO_RMD160
Adrian Bunkb6d44342008-07-16 19:28:00 +0800312 tristate "RIPEMD-160 digest algorithm"
Herbert Xue5835fb2008-11-08 09:18:51 +0800313 select CRYPTO_HASH
Adrian Bunkb6d44342008-07-16 19:28:00 +0800314 help
315 RIPEMD-160 (ISO/IEC 10118-3:2004).
Adrian-Ken Rueegsegger82798f92008-05-07 22:17:37 +0800316
Adrian Bunkb6d44342008-07-16 19:28:00 +0800317 RIPEMD-160 is a 160-bit cryptographic hash function. It is intended
318 to be used as a secure replacement for the 128-bit hash functions
319 MD4, MD5 and it's predecessor RIPEMD
320 (not to be confused with RIPEMD-128).
Adrian-Ken Rueegsegger82798f92008-05-07 22:17:37 +0800321
Adrian Bunkb6d44342008-07-16 19:28:00 +0800322 It's speed is comparable to SHA1 and there are no known attacks
323 against RIPEMD-160.
Adrian-Ken Rueegsegger534fe2c2008-05-09 21:30:27 +0800324
Adrian Bunkb6d44342008-07-16 19:28:00 +0800325 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
326 See <http://home.esat.kuleuven.be/~bosselae/ripemd160.html>
Adrian-Ken Rueegsegger534fe2c2008-05-09 21:30:27 +0800327
328config CRYPTO_RMD256
Adrian Bunkb6d44342008-07-16 19:28:00 +0800329 tristate "RIPEMD-256 digest algorithm"
Herbert Xud8a5e2e2008-11-08 09:58:10 +0800330 select CRYPTO_HASH
Adrian Bunkb6d44342008-07-16 19:28:00 +0800331 help
332 RIPEMD-256 is an optional extension of RIPEMD-128 with a
333 256 bit hash. It is intended for applications that require
334 longer hash-results, without needing a larger security level
335 (than RIPEMD-128).
Adrian-Ken Rueegsegger534fe2c2008-05-09 21:30:27 +0800336
Adrian Bunkb6d44342008-07-16 19:28:00 +0800337 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
338 See <http://home.esat.kuleuven.be/~bosselae/ripemd160.html>
Adrian-Ken Rueegsegger534fe2c2008-05-09 21:30:27 +0800339
340config CRYPTO_RMD320
Adrian Bunkb6d44342008-07-16 19:28:00 +0800341 tristate "RIPEMD-320 digest algorithm"
Herbert Xu3b8efb42008-11-08 10:11:09 +0800342 select CRYPTO_HASH
Adrian Bunkb6d44342008-07-16 19:28:00 +0800343 help
344 RIPEMD-320 is an optional extension of RIPEMD-160 with a
345 320 bit hash. It is intended for applications that require
346 longer hash-results, without needing a larger security level
347 (than RIPEMD-160).
Adrian-Ken Rueegsegger534fe2c2008-05-09 21:30:27 +0800348
Adrian Bunkb6d44342008-07-16 19:28:00 +0800349 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
350 See <http://home.esat.kuleuven.be/~bosselae/ripemd160.html>
Adrian-Ken Rueegsegger82798f92008-05-07 22:17:37 +0800351
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800352config CRYPTO_SHA1
353 tristate "SHA1 digest algorithm"
Adrian-Ken Rueegsegger54ccb362008-12-02 21:08:20 +0800354 select CRYPTO_HASH
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800355 help
356 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2).
357
358config CRYPTO_SHA256
359 tristate "SHA224 and SHA256 digest algorithm"
360 select CRYPTO_ALGAPI
361 help
362 SHA256 secure hash standard (DFIPS 180-2).
363
364 This version of SHA implements a 256 bit hash with 128 bits of
365 security against collision attacks.
366
Adrian Bunkb6d44342008-07-16 19:28:00 +0800367 This code also includes SHA-224, a 224 bit hash with 112 bits
368 of security against collision attacks.
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800369
370config CRYPTO_SHA512
371 tristate "SHA384 and SHA512 digest algorithms"
372 select CRYPTO_ALGAPI
373 help
374 SHA512 secure hash standard (DFIPS 180-2).
375
376 This version of SHA implements a 512 bit hash with 256 bits of
377 security against collision attacks.
378
379 This code also includes SHA-384, a 384 bit hash with 192 bits
380 of security against collision attacks.
381
382config CRYPTO_TGR192
383 tristate "Tiger digest algorithms"
384 select CRYPTO_ALGAPI
385 help
386 Tiger hash algorithm 192, 160 and 128-bit hashes
387
388 Tiger is a hash function optimized for 64-bit processors while
389 still having decent performance on 32-bit processors.
390 Tiger was developed by Ross Anderson and Eli Biham.
Linus Torvalds1da177e2005-04-16 15:20:36 -0700391
392 See also:
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800393 <http://www.cs.technion.ac.il/~biham/Reports/Tiger/>.
394
395config CRYPTO_WP512
396 tristate "Whirlpool digest algorithms"
397 select CRYPTO_ALGAPI
398 help
399 Whirlpool hash algorithm 512, 384 and 256-bit hashes
400
401 Whirlpool-512 is part of the NESSIE cryptographic primitives.
402 Whirlpool will be part of the ISO/IEC 10118-3:2003(E) standard
403
404 See also:
405 <http://planeta.terra.com.br/informatica/paulobarreto/WhirlpoolPage.html>
406
407comment "Ciphers"
Linus Torvalds1da177e2005-04-16 15:20:36 -0700408
409config CRYPTO_AES
410 tristate "AES cipher algorithms"
Herbert Xucce9e062006-08-21 21:08:13 +1000411 select CRYPTO_ALGAPI
Linus Torvalds1da177e2005-04-16 15:20:36 -0700412 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800413 AES cipher algorithms (FIPS-197). AES uses the Rijndael
Linus Torvalds1da177e2005-04-16 15:20:36 -0700414 algorithm.
415
416 Rijndael appears to be consistently a very good performer in
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800417 both hardware and software across a wide range of computing
418 environments regardless of its use in feedback or non-feedback
419 modes. Its key setup time is excellent, and its key agility is
420 good. Rijndael's very low memory requirements make it very well
421 suited for restricted-space environments, in which it also
422 demonstrates excellent performance. Rijndael's operations are
423 among the easiest to defend against power and timing attacks.
Linus Torvalds1da177e2005-04-16 15:20:36 -0700424
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800425 The AES specifies three key sizes: 128, 192 and 256 bits
Linus Torvalds1da177e2005-04-16 15:20:36 -0700426
427 See <http://csrc.nist.gov/CryptoToolkit/aes/> for more information.
428
429config CRYPTO_AES_586
430 tristate "AES cipher algorithms (i586)"
Herbert Xucce9e062006-08-21 21:08:13 +1000431 depends on (X86 || UML_X86) && !64BIT
432 select CRYPTO_ALGAPI
Sebastian Siewior5157dea2007-11-10 19:07:16 +0800433 select CRYPTO_AES
Linus Torvalds1da177e2005-04-16 15:20:36 -0700434 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800435 AES cipher algorithms (FIPS-197). AES uses the Rijndael
Linus Torvalds1da177e2005-04-16 15:20:36 -0700436 algorithm.
437
438 Rijndael appears to be consistently a very good performer in
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800439 both hardware and software across a wide range of computing
440 environments regardless of its use in feedback or non-feedback
441 modes. Its key setup time is excellent, and its key agility is
442 good. Rijndael's very low memory requirements make it very well
443 suited for restricted-space environments, in which it also
444 demonstrates excellent performance. Rijndael's operations are
445 among the easiest to defend against power and timing attacks.
Linus Torvalds1da177e2005-04-16 15:20:36 -0700446
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800447 The AES specifies three key sizes: 128, 192 and 256 bits
Linus Torvalds1da177e2005-04-16 15:20:36 -0700448
449 See <http://csrc.nist.gov/encryption/aes/> for more information.
450
Andreas Steinmetza2a892a2005-07-06 13:55:00 -0700451config CRYPTO_AES_X86_64
452 tristate "AES cipher algorithms (x86_64)"
Herbert Xucce9e062006-08-21 21:08:13 +1000453 depends on (X86 || UML_X86) && 64BIT
454 select CRYPTO_ALGAPI
Sebastian Siewior81190b32007-11-08 21:25:04 +0800455 select CRYPTO_AES
Andreas Steinmetza2a892a2005-07-06 13:55:00 -0700456 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800457 AES cipher algorithms (FIPS-197). AES uses the Rijndael
Andreas Steinmetza2a892a2005-07-06 13:55:00 -0700458 algorithm.
459
460 Rijndael appears to be consistently a very good performer in
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800461 both hardware and software across a wide range of computing
462 environments regardless of its use in feedback or non-feedback
463 modes. Its key setup time is excellent, and its key agility is
464 good. Rijndael's very low memory requirements make it very well
465 suited for restricted-space environments, in which it also
466 demonstrates excellent performance. Rijndael's operations are
467 among the easiest to defend against power and timing attacks.
Andreas Steinmetza2a892a2005-07-06 13:55:00 -0700468
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800469 The AES specifies three key sizes: 128, 192 and 256 bits
Andreas Steinmetza2a892a2005-07-06 13:55:00 -0700470
471 See <http://csrc.nist.gov/encryption/aes/> for more information.
472
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800473config CRYPTO_ANUBIS
474 tristate "Anubis cipher algorithm"
475 select CRYPTO_ALGAPI
476 help
477 Anubis cipher algorithm.
478
479 Anubis is a variable key length cipher which can use keys from
480 128 bits to 320 bits in length. It was evaluated as a entrant
481 in the NESSIE competition.
482
483 See also:
484 <https://www.cosic.esat.kuleuven.ac.be/nessie/reports/>
485 <http://planeta.terra.com.br/informatica/paulobarreto/AnubisPage.html>
486
487config CRYPTO_ARC4
488 tristate "ARC4 cipher algorithm"
489 select CRYPTO_ALGAPI
490 help
491 ARC4 cipher algorithm.
492
493 ARC4 is a stream cipher using keys ranging from 8 bits to 2048
494 bits in length. This algorithm is required for driver-based
495 WEP, but it should not be for other purposes because of the
496 weakness of the algorithm.
497
498config CRYPTO_BLOWFISH
499 tristate "Blowfish cipher algorithm"
500 select CRYPTO_ALGAPI
501 help
502 Blowfish cipher algorithm, by Bruce Schneier.
503
504 This is a variable key length cipher which can use keys from 32
505 bits to 448 bits in length. It's fast, simple and specifically
506 designed for use on "large microprocessors".
507
508 See also:
509 <http://www.schneier.com/blowfish.html>
510
511config CRYPTO_CAMELLIA
512 tristate "Camellia cipher algorithms"
513 depends on CRYPTO
514 select CRYPTO_ALGAPI
515 help
516 Camellia cipher algorithms module.
517
518 Camellia is a symmetric key block cipher developed jointly
519 at NTT and Mitsubishi Electric Corporation.
520
521 The Camellia specifies three key sizes: 128, 192 and 256 bits.
522
523 See also:
524 <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
525
Linus Torvalds1da177e2005-04-16 15:20:36 -0700526config CRYPTO_CAST5
527 tristate "CAST5 (CAST-128) cipher algorithm"
Herbert Xucce9e062006-08-21 21:08:13 +1000528 select CRYPTO_ALGAPI
Linus Torvalds1da177e2005-04-16 15:20:36 -0700529 help
530 The CAST5 encryption algorithm (synonymous with CAST-128) is
531 described in RFC2144.
532
533config CRYPTO_CAST6
534 tristate "CAST6 (CAST-256) cipher algorithm"
Herbert Xucce9e062006-08-21 21:08:13 +1000535 select CRYPTO_ALGAPI
Linus Torvalds1da177e2005-04-16 15:20:36 -0700536 help
537 The CAST6 encryption algorithm (synonymous with CAST-256) is
538 described in RFC2612.
539
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800540config CRYPTO_DES
541 tristate "DES and Triple DES EDE cipher algorithms"
Herbert Xucce9e062006-08-21 21:08:13 +1000542 select CRYPTO_ALGAPI
Linus Torvalds1da177e2005-04-16 15:20:36 -0700543 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800544 DES cipher algorithm (FIPS 46-2), and Triple DES EDE (FIPS 46-3).
Linus Torvalds1da177e2005-04-16 15:20:36 -0700545
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800546config CRYPTO_FCRYPT
547 tristate "FCrypt cipher algorithm"
Herbert Xucce9e062006-08-21 21:08:13 +1000548 select CRYPTO_ALGAPI
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800549 select CRYPTO_BLKCIPHER
Linus Torvalds1da177e2005-04-16 15:20:36 -0700550 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800551 FCrypt algorithm used by RxRPC.
Linus Torvalds1da177e2005-04-16 15:20:36 -0700552
553config CRYPTO_KHAZAD
554 tristate "Khazad cipher algorithm"
Herbert Xucce9e062006-08-21 21:08:13 +1000555 select CRYPTO_ALGAPI
Linus Torvalds1da177e2005-04-16 15:20:36 -0700556 help
557 Khazad cipher algorithm.
558
559 Khazad was a finalist in the initial NESSIE competition. It is
560 an algorithm optimized for 64-bit processors with good performance
561 on 32-bit processors. Khazad uses an 128 bit key size.
562
563 See also:
564 <http://planeta.terra.com.br/informatica/paulobarreto/KhazadPage.html>
565
Tan Swee Heng2407d602007-11-23 19:45:00 +0800566config CRYPTO_SALSA20
567 tristate "Salsa20 stream cipher algorithm (EXPERIMENTAL)"
568 depends on EXPERIMENTAL
569 select CRYPTO_BLKCIPHER
570 help
571 Salsa20 stream cipher algorithm.
572
573 Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
574 Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
575
576 The Salsa20 stream cipher algorithm is designed by Daniel J.
577 Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
Linus Torvalds1da177e2005-04-16 15:20:36 -0700578
Tan Swee Heng974e4b72007-12-10 15:52:56 +0800579config CRYPTO_SALSA20_586
580 tristate "Salsa20 stream cipher algorithm (i586) (EXPERIMENTAL)"
581 depends on (X86 || UML_X86) && !64BIT
582 depends on EXPERIMENTAL
583 select CRYPTO_BLKCIPHER
Tan Swee Heng974e4b72007-12-10 15:52:56 +0800584 help
585 Salsa20 stream cipher algorithm.
586
587 Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
588 Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
589
590 The Salsa20 stream cipher algorithm is designed by Daniel J.
591 Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
592
Tan Swee Heng9a7dafb2007-12-18 00:04:40 +0800593config CRYPTO_SALSA20_X86_64
594 tristate "Salsa20 stream cipher algorithm (x86_64) (EXPERIMENTAL)"
595 depends on (X86 || UML_X86) && 64BIT
596 depends on EXPERIMENTAL
597 select CRYPTO_BLKCIPHER
Tan Swee Heng9a7dafb2007-12-18 00:04:40 +0800598 help
599 Salsa20 stream cipher algorithm.
600
601 Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
602 Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
603
604 The Salsa20 stream cipher algorithm is designed by Daniel J.
605 Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
606
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800607config CRYPTO_SEED
608 tristate "SEED cipher algorithm"
609 select CRYPTO_ALGAPI
610 help
611 SEED cipher algorithm (RFC4269).
612
613 SEED is a 128-bit symmetric key block cipher that has been
614 developed by KISA (Korea Information Security Agency) as a
615 national standard encryption algorithm of the Republic of Korea.
616 It is a 16 round block cipher with the key size of 128 bit.
617
618 See also:
619 <http://www.kisa.or.kr/kisa/seed/jsp/seed_eng.jsp>
620
621config CRYPTO_SERPENT
622 tristate "Serpent cipher algorithm"
623 select CRYPTO_ALGAPI
624 help
625 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
626
627 Keys are allowed to be from 0 to 256 bits in length, in steps
628 of 8 bits. Also includes the 'Tnepres' algorithm, a reversed
629 variant of Serpent for compatibility with old kerneli.org code.
630
631 See also:
632 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
633
634config CRYPTO_TEA
635 tristate "TEA, XTEA and XETA cipher algorithms"
636 select CRYPTO_ALGAPI
637 help
638 TEA cipher algorithm.
639
640 Tiny Encryption Algorithm is a simple cipher that uses
641 many rounds for security. It is very fast and uses
642 little memory.
643
644 Xtendend Tiny Encryption Algorithm is a modification to
645 the TEA algorithm to address a potential key weakness
646 in the TEA algorithm.
647
648 Xtendend Encryption Tiny Algorithm is a mis-implementation
649 of the XTEA algorithm for compatibility purposes.
650
651config CRYPTO_TWOFISH
652 tristate "Twofish cipher algorithm"
653 select CRYPTO_ALGAPI
654 select CRYPTO_TWOFISH_COMMON
655 help
656 Twofish cipher algorithm.
657
658 Twofish was submitted as an AES (Advanced Encryption Standard)
659 candidate cipher by researchers at CounterPane Systems. It is a
660 16 round block cipher supporting key sizes of 128, 192, and 256
661 bits.
662
663 See also:
664 <http://www.schneier.com/twofish.html>
665
666config CRYPTO_TWOFISH_COMMON
667 tristate
668 help
669 Common parts of the Twofish cipher algorithm shared by the
670 generic c and the assembler implementations.
671
672config CRYPTO_TWOFISH_586
673 tristate "Twofish cipher algorithms (i586)"
674 depends on (X86 || UML_X86) && !64BIT
675 select CRYPTO_ALGAPI
676 select CRYPTO_TWOFISH_COMMON
677 help
678 Twofish cipher algorithm.
679
680 Twofish was submitted as an AES (Advanced Encryption Standard)
681 candidate cipher by researchers at CounterPane Systems. It is a
682 16 round block cipher supporting key sizes of 128, 192, and 256
683 bits.
684
685 See also:
686 <http://www.schneier.com/twofish.html>
687
688config CRYPTO_TWOFISH_X86_64
689 tristate "Twofish cipher algorithm (x86_64)"
690 depends on (X86 || UML_X86) && 64BIT
691 select CRYPTO_ALGAPI
692 select CRYPTO_TWOFISH_COMMON
693 help
694 Twofish cipher algorithm (x86_64).
695
696 Twofish was submitted as an AES (Advanced Encryption Standard)
697 candidate cipher by researchers at CounterPane Systems. It is a
698 16 round block cipher supporting key sizes of 128, 192, and 256
699 bits.
700
701 See also:
702 <http://www.schneier.com/twofish.html>
703
704comment "Compression"
705
Linus Torvalds1da177e2005-04-16 15:20:36 -0700706config CRYPTO_DEFLATE
707 tristate "Deflate compression algorithm"
Herbert Xucce9e062006-08-21 21:08:13 +1000708 select CRYPTO_ALGAPI
Linus Torvalds1da177e2005-04-16 15:20:36 -0700709 select ZLIB_INFLATE
710 select ZLIB_DEFLATE
711 help
712 This is the Deflate algorithm (RFC1951), specified for use in
713 IPSec with the IPCOMP protocol (RFC3173, RFC2394).
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800714
Linus Torvalds1da177e2005-04-16 15:20:36 -0700715 You will most probably want this if using IPSec.
716
Zoltan Sogor0b77abb2007-12-07 16:53:23 +0800717config CRYPTO_LZO
718 tristate "LZO compression algorithm"
719 select CRYPTO_ALGAPI
720 select LZO_COMPRESS
721 select LZO_DECOMPRESS
722 help
723 This is the LZO algorithm.
724
Neil Horman17f0f4a2008-08-14 22:15:52 +1000725comment "Random Number Generation"
726
727config CRYPTO_ANSI_CPRNG
728 tristate "Pseudo Random Number Generation for Cryptographic modules"
729 select CRYPTO_AES
730 select CRYPTO_RNG
731 select CRYPTO_FIPS
732 help
733 This option enables the generic pseudo random number generator
734 for cryptographic modules. Uses the Algorithm specified in
735 ANSI X9.31 A.2.4
736
Linus Torvalds1da177e2005-04-16 15:20:36 -0700737source "drivers/crypto/Kconfig"
Linus Torvalds1da177e2005-04-16 15:20:36 -0700738
Herbert Xucce9e062006-08-21 21:08:13 +1000739endif # if CRYPTO