blob: 97fb7360207b8df84f27029e86982220ad8fabb7 [file] [log] [blame]
Linus Torvalds1da177e2005-04-16 15:20:36 -07001#
Dan Williams685784a2007-07-09 11:56:42 -07002# Generic algorithms support
3#
4config XOR_BLOCKS
5 tristate
6
7#
Dan Williams9bc89cd2007-01-02 11:10:44 -07008# async_tx api: hardware offloaded memory transfer/transform support
9#
10source "crypto/async_tx/Kconfig"
11
12#
Linus Torvalds1da177e2005-04-16 15:20:36 -070013# Cryptographic API Configuration
14#
Jan Engelhardt2e290f42007-05-18 15:11:01 +100015menuconfig CRYPTO
Sebastian Siewiorc3715cb92008-03-30 16:36:09 +080016 tristate "Cryptographic API"
Linus Torvalds1da177e2005-04-16 15:20:36 -070017 help
18 This option provides the core Cryptographic API.
19
Herbert Xucce9e062006-08-21 21:08:13 +100020if CRYPTO
21
Sebastian Siewior584fffc2008-04-05 21:04:48 +080022comment "Crypto core or helper"
23
Neil Hormanccb778e2008-08-05 14:13:08 +080024config CRYPTO_FIPS
25 bool "FIPS 200 compliance"
Herbert Xuf2c89a12014-07-04 22:15:08 +080026 depends on (CRYPTO_ANSI_CPRNG || CRYPTO_DRBG) && !CRYPTO_MANAGER_DISABLE_TESTS
Alec Ari1f696092016-10-04 19:34:30 -030027 depends on (MODULE_SIG || !MODULES)
Neil Hormanccb778e2008-08-05 14:13:08 +080028 help
29 This options enables the fips boot option which is
30 required if you want to system to operate in a FIPS 200
31 certification. You should say no unless you know what
Chuck Ebberte84c5482010-09-03 19:17:49 +080032 this is.
Neil Hormanccb778e2008-08-05 14:13:08 +080033
Herbert Xucce9e062006-08-21 21:08:13 +100034config CRYPTO_ALGAPI
35 tristate
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110036 select CRYPTO_ALGAPI2
Herbert Xucce9e062006-08-21 21:08:13 +100037 help
38 This option provides the API for cryptographic algorithms.
39
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110040config CRYPTO_ALGAPI2
41 tristate
42
Herbert Xu1ae97822007-08-30 15:36:14 +080043config CRYPTO_AEAD
44 tristate
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110045 select CRYPTO_AEAD2
Herbert Xu1ae97822007-08-30 15:36:14 +080046 select CRYPTO_ALGAPI
47
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110048config CRYPTO_AEAD2
49 tristate
50 select CRYPTO_ALGAPI2
Herbert Xu149a3972015-08-13 17:28:58 +080051 select CRYPTO_NULL2
52 select CRYPTO_RNG2
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110053
Herbert Xu5cde0af2006-08-22 00:07:53 +100054config CRYPTO_BLKCIPHER
55 tristate
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110056 select CRYPTO_BLKCIPHER2
Herbert Xu5cde0af2006-08-22 00:07:53 +100057 select CRYPTO_ALGAPI
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110058
59config CRYPTO_BLKCIPHER2
60 tristate
61 select CRYPTO_ALGAPI2
62 select CRYPTO_RNG2
Huang Ying0a2e8212009-02-19 14:44:02 +080063 select CRYPTO_WORKQUEUE
Herbert Xu5cde0af2006-08-22 00:07:53 +100064
Herbert Xu055bcee2006-08-19 22:24:23 +100065config CRYPTO_HASH
66 tristate
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110067 select CRYPTO_HASH2
Herbert Xu055bcee2006-08-19 22:24:23 +100068 select CRYPTO_ALGAPI
69
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110070config CRYPTO_HASH2
71 tristate
72 select CRYPTO_ALGAPI2
73
Neil Horman17f0f4a2008-08-14 22:15:52 +100074config CRYPTO_RNG
75 tristate
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110076 select CRYPTO_RNG2
Neil Horman17f0f4a2008-08-14 22:15:52 +100077 select CRYPTO_ALGAPI
78
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110079config CRYPTO_RNG2
80 tristate
81 select CRYPTO_ALGAPI2
82
Herbert Xu401e4232015-06-03 14:49:31 +080083config CRYPTO_RNG_DEFAULT
84 tristate
85 select CRYPTO_DRBG_MENU
86
Tadeusz Struk3c339ab2015-06-16 10:30:55 -070087config CRYPTO_AKCIPHER2
88 tristate
89 select CRYPTO_ALGAPI2
90
91config CRYPTO_AKCIPHER
92 tristate
93 select CRYPTO_AKCIPHER2
94 select CRYPTO_ALGAPI
95
Salvatore Benedetto4e5f2c42016-06-22 17:49:13 +010096config CRYPTO_KPP2
97 tristate
98 select CRYPTO_ALGAPI2
99
100config CRYPTO_KPP
101 tristate
102 select CRYPTO_ALGAPI
103 select CRYPTO_KPP2
104
Giovanni Cabiddu2ebda742016-10-21 13:19:47 +0100105config CRYPTO_ACOMP2
106 tristate
107 select CRYPTO_ALGAPI2
108
109config CRYPTO_ACOMP
110 tristate
111 select CRYPTO_ALGAPI
112 select CRYPTO_ACOMP2
113
Tadeusz Strukcfc2bb32015-06-16 10:31:01 -0700114config CRYPTO_RSA
115 tristate "RSA algorithm"
Tadeusz Struk425e0172015-06-19 10:27:39 -0700116 select CRYPTO_AKCIPHER
Tadeusz Struk58446fe2016-05-04 06:38:46 -0700117 select CRYPTO_MANAGER
Tadeusz Strukcfc2bb32015-06-16 10:31:01 -0700118 select MPILIB
119 select ASN1
120 help
121 Generic implementation of the RSA public key algorithm.
122
Salvatore Benedetto802c7f12016-06-22 17:49:14 +0100123config CRYPTO_DH
124 tristate "Diffie-Hellman algorithm"
125 select CRYPTO_KPP
126 select MPILIB
127 help
128 Generic implementation of the Diffie-Hellman algorithm.
129
Salvatore Benedetto3c4b2392016-06-22 17:49:15 +0100130config CRYPTO_ECDH
131 tristate "ECDH algorithm"
132 select CRYTPO_KPP
Tudor-Dan Ambarus6755fd22017-05-30 17:52:48 +0300133 select CRYPTO_RNG_DEFAULT
Salvatore Benedetto3c4b2392016-06-22 17:49:15 +0100134 help
135 Generic implementation of the ECDH algorithm
Salvatore Benedetto802c7f12016-06-22 17:49:14 +0100136
Herbert Xu2b8c19d2006-09-21 11:31:44 +1000137config CRYPTO_MANAGER
138 tristate "Cryptographic algorithm manager"
Herbert Xu6a0fcbb2008-12-10 23:29:44 +1100139 select CRYPTO_MANAGER2
Herbert Xu2b8c19d2006-09-21 11:31:44 +1000140 help
141 Create default cryptographic template instantiations such as
142 cbc(aes).
143
Herbert Xu6a0fcbb2008-12-10 23:29:44 +1100144config CRYPTO_MANAGER2
145 def_tristate CRYPTO_MANAGER || (CRYPTO_MANAGER!=n && CRYPTO_ALGAPI=y)
146 select CRYPTO_AEAD2
147 select CRYPTO_HASH2
148 select CRYPTO_BLKCIPHER2
Tadeusz Struk946cc462015-06-16 10:31:06 -0700149 select CRYPTO_AKCIPHER2
Salvatore Benedetto4e5f2c42016-06-22 17:49:13 +0100150 select CRYPTO_KPP2
Giovanni Cabiddu2ebda742016-10-21 13:19:47 +0100151 select CRYPTO_ACOMP2
Herbert Xu6a0fcbb2008-12-10 23:29:44 +1100152
Steffen Klasserta38f7902011-09-27 07:23:50 +0200153config CRYPTO_USER
154 tristate "Userspace cryptographic algorithm configuration"
Herbert Xu5db017a2011-11-01 12:12:43 +1100155 depends on NET
Steffen Klasserta38f7902011-09-27 07:23:50 +0200156 select CRYPTO_MANAGER
157 help
Valdis.Kletnieks@vt.edud19978f2011-11-09 01:29:20 -0500158 Userspace configuration for cryptographic instantiations such as
Steffen Klasserta38f7902011-09-27 07:23:50 +0200159 cbc(aes).
160
Herbert Xu326a6342010-08-06 09:40:28 +0800161config CRYPTO_MANAGER_DISABLE_TESTS
162 bool "Disable run-time self tests"
Herbert Xu00ca28a2010-08-06 10:34:00 +0800163 default y
164 depends on CRYPTO_MANAGER2
Alexander Shishkin0b767f92010-06-03 20:53:43 +1000165 help
Herbert Xu326a6342010-08-06 09:40:28 +0800166 Disable run-time self tests that normally take place at
167 algorithm registration.
Alexander Shishkin0b767f92010-06-03 20:53:43 +1000168
Rik Snelc494e072006-11-29 18:59:44 +1100169config CRYPTO_GF128MUL
Jussi Kivilinna08c70fc2011-12-13 12:53:22 +0200170 tristate "GF(2^128) multiplication functions"
Rik Snelc494e072006-11-29 18:59:44 +1100171 help
172 Efficient table driven implementation of multiplications in the
173 field GF(2^128). This is needed by some cypher modes. This
174 option will be selected automatically if you select such a
175 cipher mode. Only select this option by hand if you expect to load
176 an external module that requires these functions.
177
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800178config CRYPTO_NULL
179 tristate "Null algorithms"
Herbert Xu149a3972015-08-13 17:28:58 +0800180 select CRYPTO_NULL2
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800181 help
182 These are 'Null' algorithms, used by IPsec, which do nothing.
183
Herbert Xu149a3972015-08-13 17:28:58 +0800184config CRYPTO_NULL2
Herbert Xudd43c4e2015-08-17 20:39:40 +0800185 tristate
Herbert Xu149a3972015-08-13 17:28:58 +0800186 select CRYPTO_ALGAPI2
187 select CRYPTO_BLKCIPHER2
188 select CRYPTO_HASH2
189
Steffen Klassert5068c7a2010-01-07 15:57:19 +1100190config CRYPTO_PCRYPT
Kees Cook3b4afaf2012-10-02 11:16:49 -0700191 tristate "Parallel crypto engine"
192 depends on SMP
Steffen Klassert5068c7a2010-01-07 15:57:19 +1100193 select PADATA
194 select CRYPTO_MANAGER
195 select CRYPTO_AEAD
196 help
197 This converts an arbitrary crypto algorithm into a parallel
198 algorithm that executes in kernel threads.
199
Huang Ying25c38d32009-02-19 14:33:40 +0800200config CRYPTO_WORKQUEUE
201 tristate
202
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800203config CRYPTO_CRYPTD
204 tristate "Software async crypto daemon"
Herbert Xudb131ef2006-09-21 11:44:08 +1000205 select CRYPTO_BLKCIPHER
Loc Hob8a28252008-05-14 21:23:00 +0800206 select CRYPTO_HASH
Herbert Xu43518402006-10-16 21:28:58 +1000207 select CRYPTO_MANAGER
Huang Ying254eff72009-02-19 14:42:19 +0800208 select CRYPTO_WORKQUEUE
Herbert Xudb131ef2006-09-21 11:44:08 +1000209 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800210 This is a generic software asynchronous crypto daemon that
211 converts an arbitrary synchronous software crypto algorithm
212 into an asynchronous algorithm that executes in a kernel thread.
213
Tim Chen1e65b812014-07-31 10:29:51 -0700214config CRYPTO_MCRYPTD
215 tristate "Software async multi-buffer crypto daemon"
216 select CRYPTO_BLKCIPHER
217 select CRYPTO_HASH
218 select CRYPTO_MANAGER
219 select CRYPTO_WORKQUEUE
220 help
221 This is a generic software asynchronous crypto daemon that
222 provides the kernel thread to assist multi-buffer crypto
223 algorithms for submitting jobs and flushing jobs in multi-buffer
224 crypto algorithms. Multi-buffer crypto algorithms are executed
225 in the context of this kernel thread and drivers can post
Ted Percival0e566732014-09-04 15:18:21 +0800226 their crypto request asynchronously to be processed by this daemon.
Tim Chen1e65b812014-07-31 10:29:51 -0700227
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800228config CRYPTO_AUTHENC
229 tristate "Authenc support"
230 select CRYPTO_AEAD
231 select CRYPTO_BLKCIPHER
232 select CRYPTO_MANAGER
233 select CRYPTO_HASH
Herbert Xue94c6a72015-08-04 21:23:14 +0800234 select CRYPTO_NULL
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800235 help
236 Authenc: Combined mode wrapper for IPsec.
237 This is required for IPSec.
238
239config CRYPTO_TEST
240 tristate "Testing module"
241 depends on m
Herbert Xuda7f0332008-07-31 17:08:25 +0800242 select CRYPTO_MANAGER
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800243 help
244 Quick & dirty crypto test module.
245
Ard Biesheuvela62b01c2013-09-20 09:55:40 +0200246config CRYPTO_ABLK_HELPER
Jussi Kivilinnaffaf9152012-06-18 14:06:58 +0300247 tristate
Jussi Kivilinnaffaf9152012-06-18 14:06:58 +0300248 select CRYPTO_CRYPTD
249
Herbert Xu266d0512016-11-22 20:08:25 +0800250config CRYPTO_SIMD
251 tristate
252 select CRYPTO_CRYPTD
253
Jussi Kivilinna596d8752012-06-18 14:07:19 +0300254config CRYPTO_GLUE_HELPER_X86
255 tristate
256 depends on X86
Herbert Xu065ce322016-11-22 20:08:29 +0800257 select CRYPTO_BLKCIPHER
Jussi Kivilinna596d8752012-06-18 14:07:19 +0300258
Baolin Wang735d37b2016-01-26 20:25:39 +0800259config CRYPTO_ENGINE
260 tristate
261
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800262comment "Authenticated Encryption with Associated Data"
263
264config CRYPTO_CCM
265 tristate "CCM support"
266 select CRYPTO_CTR
Ard Biesheuvelf15f05b2017-02-03 14:49:36 +0000267 select CRYPTO_HASH
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800268 select CRYPTO_AEAD
269 help
270 Support for Counter with CBC MAC. Required for IPsec.
271
272config CRYPTO_GCM
273 tristate "GCM/GMAC support"
274 select CRYPTO_CTR
275 select CRYPTO_AEAD
Huang Ying9382d972009-08-06 15:34:26 +1000276 select CRYPTO_GHASH
Jussi Kivilinna9489667d2013-04-07 16:43:41 +0300277 select CRYPTO_NULL
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800278 help
279 Support for Galois/Counter Mode (GCM) and Galois Message
280 Authentication Code (GMAC). Required for IPSec.
281
Martin Willi71ebc4d2015-06-01 13:44:00 +0200282config CRYPTO_CHACHA20POLY1305
283 tristate "ChaCha20-Poly1305 AEAD support"
284 select CRYPTO_CHACHA20
285 select CRYPTO_POLY1305
286 select CRYPTO_AEAD
287 help
288 ChaCha20-Poly1305 AEAD support, RFC7539.
289
290 Support for the AEAD wrapper using the ChaCha20 stream cipher combined
291 with the Poly1305 authenticator. It is defined in RFC7539 for use in
292 IETF protocols.
293
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800294config CRYPTO_SEQIV
295 tristate "Sequence Number IV Generator"
296 select CRYPTO_AEAD
297 select CRYPTO_BLKCIPHER
Herbert Xu856e3f402015-05-21 15:11:13 +0800298 select CRYPTO_NULL
Herbert Xu401e4232015-06-03 14:49:31 +0800299 select CRYPTO_RNG_DEFAULT
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800300 help
301 This IV generator generates an IV based on a sequence number by
302 xoring it with a salt. This algorithm is mainly useful for CTR
303
Herbert Xua10f5542015-05-21 15:11:15 +0800304config CRYPTO_ECHAINIV
305 tristate "Encrypted Chain IV Generator"
306 select CRYPTO_AEAD
307 select CRYPTO_NULL
Herbert Xu401e4232015-06-03 14:49:31 +0800308 select CRYPTO_RNG_DEFAULT
Herbert Xu34912442015-06-03 14:49:29 +0800309 default m
Herbert Xua10f5542015-05-21 15:11:15 +0800310 help
311 This IV generator generates an IV based on the encryption of
312 a sequence number xored with a salt. This is the default
313 algorithm for CBC.
314
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800315comment "Block modes"
Herbert Xudb131ef2006-09-21 11:44:08 +1000316
317config CRYPTO_CBC
318 tristate "CBC support"
319 select CRYPTO_BLKCIPHER
Herbert Xu43518402006-10-16 21:28:58 +1000320 select CRYPTO_MANAGER
Herbert Xudb131ef2006-09-21 11:44:08 +1000321 help
322 CBC: Cipher Block Chaining mode
323 This block cipher algorithm is required for IPSec.
324
Joy Latten23e353c2007-10-23 08:50:32 +0800325config CRYPTO_CTR
326 tristate "CTR support"
327 select CRYPTO_BLKCIPHER
Herbert Xu0a270322007-11-30 21:38:37 +1100328 select CRYPTO_SEQIV
Joy Latten23e353c2007-10-23 08:50:32 +0800329 select CRYPTO_MANAGER
Joy Latten23e353c2007-10-23 08:50:32 +0800330 help
331 CTR: Counter mode
332 This block cipher algorithm is required for IPSec.
333
Kevin Coffman76cb9522008-03-24 21:26:16 +0800334config CRYPTO_CTS
335 tristate "CTS support"
336 select CRYPTO_BLKCIPHER
337 help
338 CTS: Cipher Text Stealing
339 This is the Cipher Text Stealing mode as described by
340 Section 8 of rfc2040 and referenced by rfc3962.
341 (rfc3962 includes errata information in its Appendix A)
342 This mode is required for Kerberos gss mechanism support
343 for AES encryption.
344
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800345config CRYPTO_ECB
346 tristate "ECB support"
Herbert Xu653ebd92007-11-27 19:48:27 +0800347 select CRYPTO_BLKCIPHER
Herbert Xu124b53d2007-04-16 20:49:20 +1000348 select CRYPTO_MANAGER
349 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800350 ECB: Electronic CodeBook mode
351 This is the simplest block cipher algorithm. It simply encrypts
352 the input block by block.
Herbert Xu124b53d2007-04-16 20:49:20 +1000353
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800354config CRYPTO_LRW
Jussi Kivilinna2470a2b2011-12-13 12:52:51 +0200355 tristate "LRW support"
David Howells90831632006-12-16 12:13:14 +1100356 select CRYPTO_BLKCIPHER
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800357 select CRYPTO_MANAGER
358 select CRYPTO_GF128MUL
David Howells90831632006-12-16 12:13:14 +1100359 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800360 LRW: Liskov Rivest Wagner, a tweakable, non malleable, non movable
361 narrow block cipher mode for dm-crypt. Use it with cipher
362 specification string aes-lrw-benbi, the key must be 256, 320 or 384.
363 The first 128, 192 or 256 bits in the key are used for AES and the
364 rest is used to tie each cipher block to its logical position.
David Howells90831632006-12-16 12:13:14 +1100365
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800366config CRYPTO_PCBC
367 tristate "PCBC support"
368 select CRYPTO_BLKCIPHER
369 select CRYPTO_MANAGER
370 help
371 PCBC: Propagating Cipher Block Chaining mode
372 This block cipher algorithm is required for RxRPC.
373
374config CRYPTO_XTS
Jussi Kivilinna5bcf8e62011-12-13 12:52:56 +0200375 tristate "XTS support"
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800376 select CRYPTO_BLKCIPHER
377 select CRYPTO_MANAGER
Milan Broz12cb3a12017-02-23 08:38:26 +0100378 select CRYPTO_ECB
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800379 help
380 XTS: IEEE1619/D16 narrow block cipher use with aes-xts-plain,
381 key size 256, 384 or 512 bits. This implementation currently
382 can't handle a sectorsize which is not a multiple of 16 bytes.
383
Stephan Mueller1c49678e2015-09-21 20:58:56 +0200384config CRYPTO_KEYWRAP
385 tristate "Key wrapping support"
386 select CRYPTO_BLKCIPHER
387 help
388 Support for key wrapping (NIST SP800-38F / RFC3394) without
389 padding.
390
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800391comment "Hash modes"
392
Jussi Kivilinna93b5e862013-04-08 10:48:44 +0300393config CRYPTO_CMAC
394 tristate "CMAC support"
395 select CRYPTO_HASH
396 select CRYPTO_MANAGER
397 help
398 Cipher-based Message Authentication Code (CMAC) specified by
399 The National Institute of Standards and Technology (NIST).
400
401 https://tools.ietf.org/html/rfc4493
402 http://csrc.nist.gov/publications/nistpubs/800-38B/SP_800-38B.pdf
403
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800404config CRYPTO_HMAC
405 tristate "HMAC support"
406 select CRYPTO_HASH
407 select CRYPTO_MANAGER
408 help
409 HMAC: Keyed-Hashing for Message Authentication (RFC2104).
410 This is required for IPSec.
411
412config CRYPTO_XCBC
413 tristate "XCBC support"
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800414 select CRYPTO_HASH
415 select CRYPTO_MANAGER
416 help
417 XCBC: Keyed-Hashing with encryption algorithm
418 http://www.ietf.org/rfc/rfc3566.txt
419 http://csrc.nist.gov/encryption/modes/proposedmodes/
420 xcbc-mac/xcbc-mac-spec.pdf
421
Shane Wangf1939f72009-09-02 20:05:22 +1000422config CRYPTO_VMAC
423 tristate "VMAC support"
Shane Wangf1939f72009-09-02 20:05:22 +1000424 select CRYPTO_HASH
425 select CRYPTO_MANAGER
426 help
427 VMAC is a message authentication algorithm designed for
428 very high speed on 64-bit architectures.
429
430 See also:
431 <http://fastcrypto.org/vmac>
432
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800433comment "Digest"
434
435config CRYPTO_CRC32C
436 tristate "CRC32c CRC algorithm"
Herbert Xu5773a3e2008-07-08 20:54:28 +0800437 select CRYPTO_HASH
Darrick J. Wong6a0962b2012-03-23 15:02:25 -0700438 select CRC32
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800439 help
440 Castagnoli, et al Cyclic Redundancy-Check Algorithm. Used
441 by iSCSI for header and data digests and by others.
Herbert Xu69c35ef2008-11-07 15:11:47 +0800442 See Castagnoli93. Module will be crc32c.
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800443
Austin Zhang8cb51ba2008-08-07 09:57:03 +0800444config CRYPTO_CRC32C_INTEL
445 tristate "CRC32c INTEL hardware acceleration"
446 depends on X86
447 select CRYPTO_HASH
448 help
449 In Intel processor with SSE4.2 supported, the processor will
450 support CRC32C implementation using hardware accelerated CRC32
451 instruction. This option will create 'crc32c-intel' module,
452 which will enable any routine to use the CRC32 instruction to
453 gain performance compared with software implementation.
454 Module will be crc32c-intel.
455
Jean Delvare7cf31862016-11-22 10:32:44 +0100456config CRYPTO_CRC32C_VPMSUM
Anton Blanchard6dd7a822016-07-01 08:19:45 +1000457 tristate "CRC32c CRC algorithm (powerpc64)"
Michael Ellermanc12abf32016-08-09 08:46:15 +1000458 depends on PPC64 && ALTIVEC
Anton Blanchard6dd7a822016-07-01 08:19:45 +1000459 select CRYPTO_HASH
460 select CRC32
461 help
462 CRC32c algorithm implemented using vector polynomial multiply-sum
463 (vpmsum) instructions, introduced in POWER8. Enable on POWER8
464 and newer processors for improved performance.
465
466
David S. Miller442a7c42012-08-22 20:47:36 -0700467config CRYPTO_CRC32C_SPARC64
468 tristate "CRC32c CRC algorithm (SPARC64)"
469 depends on SPARC64
470 select CRYPTO_HASH
471 select CRC32
472 help
473 CRC32c CRC algorithm implemented using sparc64 crypto instructions,
474 when available.
475
Alexander Boyko78c37d12013-01-10 18:54:59 +0400476config CRYPTO_CRC32
477 tristate "CRC32 CRC algorithm"
478 select CRYPTO_HASH
479 select CRC32
480 help
481 CRC-32-IEEE 802.3 cyclic redundancy-check algorithm.
482 Shash crypto api wrappers to crc32_le function.
483
484config CRYPTO_CRC32_PCLMUL
485 tristate "CRC32 PCLMULQDQ hardware acceleration"
486 depends on X86
487 select CRYPTO_HASH
488 select CRC32
489 help
490 From Intel Westmere and AMD Bulldozer processor with SSE4.2
491 and PCLMULQDQ supported, the processor will support
492 CRC32 PCLMULQDQ implementation using hardware accelerated PCLMULQDQ
493 instruction. This option will create 'crc32-plcmul' module,
494 which will enable any routine to use the CRC-32-IEEE 802.3 checksum
495 and gain better performance as compared with the table implementation.
496
Herbert Xu684115212013-09-07 12:56:26 +1000497config CRYPTO_CRCT10DIF
498 tristate "CRCT10DIF algorithm"
499 select CRYPTO_HASH
500 help
501 CRC T10 Data Integrity Field computation is being cast as
502 a crypto transform. This allows for faster crc t10 diff
503 transforms to be used if they are available.
504
505config CRYPTO_CRCT10DIF_PCLMUL
506 tristate "CRCT10DIF PCLMULQDQ hardware acceleration"
507 depends on X86 && 64BIT && CRC_T10DIF
508 select CRYPTO_HASH
509 help
510 For x86_64 processors with SSE4.2 and PCLMULQDQ supported,
511 CRC T10 DIF PCLMULQDQ computation can be hardware
512 accelerated PCLMULQDQ instruction. This option will create
513 'crct10dif-plcmul' module, which is faster when computing the
514 crct10dif checksum as compared with the generic table implementation.
515
Daniel Axtensb01df1c2017-03-15 23:37:36 +1100516config CRYPTO_CRCT10DIF_VPMSUM
517 tristate "CRC32T10DIF powerpc64 hardware acceleration"
518 depends on PPC64 && ALTIVEC && CRC_T10DIF
519 select CRYPTO_HASH
520 help
521 CRC10T10DIF algorithm implemented using vector polynomial
522 multiply-sum (vpmsum) instructions, introduced in POWER8. Enable on
523 POWER8 and newer processors for improved performance.
524
Daniel Axtens146c8682017-03-15 23:37:37 +1100525config CRYPTO_VPMSUM_TESTER
526 tristate "Powerpc64 vpmsum hardware acceleration tester"
527 depends on CRYPTO_CRCT10DIF_VPMSUM && CRYPTO_CRC32C_VPMSUM
528 help
529 Stress test for CRC32c and CRC-T10DIF algorithms implemented with
530 POWER8 vpmsum instructions.
531 Unless you are testing these algorithms, you don't need this.
532
Huang Ying2cdc6892009-08-06 15:32:38 +1000533config CRYPTO_GHASH
534 tristate "GHASH digest algorithm"
Huang Ying2cdc6892009-08-06 15:32:38 +1000535 select CRYPTO_GF128MUL
Arnd Bergmann578c60f2016-01-25 17:51:21 +0100536 select CRYPTO_HASH
Huang Ying2cdc6892009-08-06 15:32:38 +1000537 help
538 GHASH is message digest algorithm for GCM (Galois/Counter Mode).
539
Martin Willif979e012015-06-01 13:43:58 +0200540config CRYPTO_POLY1305
541 tristate "Poly1305 authenticator algorithm"
Arnd Bergmann578c60f2016-01-25 17:51:21 +0100542 select CRYPTO_HASH
Martin Willif979e012015-06-01 13:43:58 +0200543 help
544 Poly1305 authenticator algorithm, RFC7539.
545
546 Poly1305 is an authenticator algorithm designed by Daniel J. Bernstein.
547 It is used for the ChaCha20-Poly1305 AEAD, specified in RFC7539 for use
548 in IETF protocols. This is the portable C implementation of Poly1305.
549
Martin Willic70f4ab2015-07-16 19:14:06 +0200550config CRYPTO_POLY1305_X86_64
Martin Willib1ccc8f2015-07-16 19:14:08 +0200551 tristate "Poly1305 authenticator algorithm (x86_64/SSE2/AVX2)"
Martin Willic70f4ab2015-07-16 19:14:06 +0200552 depends on X86 && 64BIT
553 select CRYPTO_POLY1305
554 help
555 Poly1305 authenticator algorithm, RFC7539.
556
557 Poly1305 is an authenticator algorithm designed by Daniel J. Bernstein.
558 It is used for the ChaCha20-Poly1305 AEAD, specified in RFC7539 for use
559 in IETF protocols. This is the x86_64 assembler implementation using SIMD
560 instructions.
561
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800562config CRYPTO_MD4
563 tristate "MD4 digest algorithm"
Adrian-Ken Rueegsegger808a1762008-12-03 19:55:27 +0800564 select CRYPTO_HASH
Linus Torvalds1da177e2005-04-16 15:20:36 -0700565 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800566 MD4 message digest algorithm (RFC1320).
Linus Torvalds1da177e2005-04-16 15:20:36 -0700567
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800568config CRYPTO_MD5
569 tristate "MD5 digest algorithm"
Adrian-Ken Rueegsegger14b75ba2008-12-03 19:57:12 +0800570 select CRYPTO_HASH
Linus Torvalds1da177e2005-04-16 15:20:36 -0700571 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800572 MD5 message digest algorithm (RFC1321).
Linus Torvalds1da177e2005-04-16 15:20:36 -0700573
Aaro Koskinend69e75d2014-12-21 22:54:02 +0200574config CRYPTO_MD5_OCTEON
575 tristate "MD5 digest algorithm (OCTEON)"
576 depends on CPU_CAVIUM_OCTEON
577 select CRYPTO_MD5
578 select CRYPTO_HASH
579 help
580 MD5 message digest algorithm (RFC1321) implemented
581 using OCTEON crypto instructions, when available.
582
Markus Stockhausene8e59952015-03-01 19:30:46 +0100583config CRYPTO_MD5_PPC
584 tristate "MD5 digest algorithm (PPC)"
585 depends on PPC
586 select CRYPTO_HASH
587 help
588 MD5 message digest algorithm (RFC1321) implemented
589 in PPC assembler.
590
David S. Millerfa4dfed2012-08-19 21:51:26 -0700591config CRYPTO_MD5_SPARC64
592 tristate "MD5 digest algorithm (SPARC64)"
593 depends on SPARC64
594 select CRYPTO_MD5
595 select CRYPTO_HASH
596 help
597 MD5 message digest algorithm (RFC1321) implemented
598 using sparc64 crypto instructions, when available.
599
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800600config CRYPTO_MICHAEL_MIC
601 tristate "Michael MIC keyed digest algorithm"
Adrian-Ken Rueegsegger19e2bf12008-12-07 19:35:38 +0800602 select CRYPTO_HASH
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800603 help
604 Michael MIC is used for message integrity protection in TKIP
605 (IEEE 802.11i). This algorithm is required for TKIP, but it
606 should not be used for other purposes because of the weakness
607 of the algorithm.
608
Adrian-Ken Rueegsegger82798f92008-05-07 22:17:37 +0800609config CRYPTO_RMD128
Adrian Bunkb6d44342008-07-16 19:28:00 +0800610 tristate "RIPEMD-128 digest algorithm"
Herbert Xu7c4468b2008-11-08 09:10:40 +0800611 select CRYPTO_HASH
Adrian Bunkb6d44342008-07-16 19:28:00 +0800612 help
613 RIPEMD-128 (ISO/IEC 10118-3:2004).
Adrian-Ken Rueegsegger82798f92008-05-07 22:17:37 +0800614
Adrian Bunkb6d44342008-07-16 19:28:00 +0800615 RIPEMD-128 is a 128-bit cryptographic hash function. It should only
Michael Witten35ed4b32011-07-09 04:02:31 +0000616 be used as a secure replacement for RIPEMD. For other use cases,
Adrian Bunkb6d44342008-07-16 19:28:00 +0800617 RIPEMD-160 should be used.
Adrian-Ken Rueegsegger82798f92008-05-07 22:17:37 +0800618
Adrian Bunkb6d44342008-07-16 19:28:00 +0800619 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
Justin P. Mattock6d8de742010-09-12 10:42:47 +0800620 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
Adrian-Ken Rueegsegger82798f92008-05-07 22:17:37 +0800621
622config CRYPTO_RMD160
Adrian Bunkb6d44342008-07-16 19:28:00 +0800623 tristate "RIPEMD-160 digest algorithm"
Herbert Xue5835fb2008-11-08 09:18:51 +0800624 select CRYPTO_HASH
Adrian Bunkb6d44342008-07-16 19:28:00 +0800625 help
626 RIPEMD-160 (ISO/IEC 10118-3:2004).
Adrian-Ken Rueegsegger82798f92008-05-07 22:17:37 +0800627
Adrian Bunkb6d44342008-07-16 19:28:00 +0800628 RIPEMD-160 is a 160-bit cryptographic hash function. It is intended
629 to be used as a secure replacement for the 128-bit hash functions
630 MD4, MD5 and it's predecessor RIPEMD
631 (not to be confused with RIPEMD-128).
Adrian-Ken Rueegsegger82798f92008-05-07 22:17:37 +0800632
Adrian Bunkb6d44342008-07-16 19:28:00 +0800633 It's speed is comparable to SHA1 and there are no known attacks
634 against RIPEMD-160.
Adrian-Ken Rueegsegger534fe2c2008-05-09 21:30:27 +0800635
Adrian Bunkb6d44342008-07-16 19:28:00 +0800636 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
Justin P. Mattock6d8de742010-09-12 10:42:47 +0800637 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
Adrian-Ken Rueegsegger534fe2c2008-05-09 21:30:27 +0800638
639config CRYPTO_RMD256
Adrian Bunkb6d44342008-07-16 19:28:00 +0800640 tristate "RIPEMD-256 digest algorithm"
Herbert Xud8a5e2e2008-11-08 09:58:10 +0800641 select CRYPTO_HASH
Adrian Bunkb6d44342008-07-16 19:28:00 +0800642 help
643 RIPEMD-256 is an optional extension of RIPEMD-128 with a
644 256 bit hash. It is intended for applications that require
645 longer hash-results, without needing a larger security level
646 (than RIPEMD-128).
Adrian-Ken Rueegsegger534fe2c2008-05-09 21:30:27 +0800647
Adrian Bunkb6d44342008-07-16 19:28:00 +0800648 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
Justin P. Mattock6d8de742010-09-12 10:42:47 +0800649 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
Adrian-Ken Rueegsegger534fe2c2008-05-09 21:30:27 +0800650
651config CRYPTO_RMD320
Adrian Bunkb6d44342008-07-16 19:28:00 +0800652 tristate "RIPEMD-320 digest algorithm"
Herbert Xu3b8efb42008-11-08 10:11:09 +0800653 select CRYPTO_HASH
Adrian Bunkb6d44342008-07-16 19:28:00 +0800654 help
655 RIPEMD-320 is an optional extension of RIPEMD-160 with a
656 320 bit hash. It is intended for applications that require
657 longer hash-results, without needing a larger security level
658 (than RIPEMD-160).
Adrian-Ken Rueegsegger534fe2c2008-05-09 21:30:27 +0800659
Adrian Bunkb6d44342008-07-16 19:28:00 +0800660 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
Justin P. Mattock6d8de742010-09-12 10:42:47 +0800661 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
Adrian-Ken Rueegsegger82798f92008-05-07 22:17:37 +0800662
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800663config CRYPTO_SHA1
664 tristate "SHA1 digest algorithm"
Adrian-Ken Rueegsegger54ccb362008-12-02 21:08:20 +0800665 select CRYPTO_HASH
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800666 help
667 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2).
668
Mathias Krause66be8952011-08-04 20:19:25 +0200669config CRYPTO_SHA1_SSSE3
time38b6b72015-09-10 15:27:26 -0700670 tristate "SHA1 digest algorithm (SSSE3/AVX/AVX2/SHA-NI)"
Mathias Krause66be8952011-08-04 20:19:25 +0200671 depends on X86 && 64BIT
672 select CRYPTO_SHA1
673 select CRYPTO_HASH
674 help
675 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented
676 using Supplemental SSE3 (SSSE3) instructions or Advanced Vector
time38b6b72015-09-10 15:27:26 -0700677 Extensions (AVX/AVX2) or SHA-NI(SHA Extensions New Instructions),
678 when available.
Mathias Krause66be8952011-08-04 20:19:25 +0200679
Tim Chen8275d1a2013-03-26 13:59:17 -0700680config CRYPTO_SHA256_SSSE3
time38b6b72015-09-10 15:27:26 -0700681 tristate "SHA256 digest algorithm (SSSE3/AVX/AVX2/SHA-NI)"
Tim Chen8275d1a2013-03-26 13:59:17 -0700682 depends on X86 && 64BIT
683 select CRYPTO_SHA256
684 select CRYPTO_HASH
685 help
686 SHA-256 secure hash standard (DFIPS 180-2) implemented
687 using Supplemental SSE3 (SSSE3) instructions, or Advanced Vector
688 Extensions version 1 (AVX1), or Advanced Vector Extensions
time38b6b72015-09-10 15:27:26 -0700689 version 2 (AVX2) instructions, or SHA-NI (SHA Extensions New
690 Instructions) when available.
Tim Chen8275d1a2013-03-26 13:59:17 -0700691
Tim Chen87de4572013-03-26 14:00:02 -0700692config CRYPTO_SHA512_SSSE3
693 tristate "SHA512 digest algorithm (SSSE3/AVX/AVX2)"
694 depends on X86 && 64BIT
695 select CRYPTO_SHA512
696 select CRYPTO_HASH
697 help
698 SHA-512 secure hash standard (DFIPS 180-2) implemented
699 using Supplemental SSE3 (SSSE3) instructions, or Advanced Vector
700 Extensions version 1 (AVX1), or Advanced Vector Extensions
701 version 2 (AVX2) instructions, when available.
702
Aaro Koskinenefdb6f62015-03-08 22:07:47 +0200703config CRYPTO_SHA1_OCTEON
704 tristate "SHA1 digest algorithm (OCTEON)"
705 depends on CPU_CAVIUM_OCTEON
706 select CRYPTO_SHA1
707 select CRYPTO_HASH
708 help
709 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented
710 using OCTEON crypto instructions, when available.
711
David S. Miller4ff28d42012-08-19 15:41:53 -0700712config CRYPTO_SHA1_SPARC64
713 tristate "SHA1 digest algorithm (SPARC64)"
714 depends on SPARC64
715 select CRYPTO_SHA1
716 select CRYPTO_HASH
717 help
718 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented
719 using sparc64 crypto instructions, when available.
720
Michael Ellerman323a6bf2012-09-13 23:00:49 +0000721config CRYPTO_SHA1_PPC
722 tristate "SHA1 digest algorithm (powerpc)"
723 depends on PPC
724 help
725 This is the powerpc hardware accelerated implementation of the
726 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2).
727
Markus Stockhausend9850fc2015-02-24 20:36:50 +0100728config CRYPTO_SHA1_PPC_SPE
729 tristate "SHA1 digest algorithm (PPC SPE)"
730 depends on PPC && SPE
731 help
732 SHA-1 secure hash standard (DFIPS 180-4) implemented
733 using powerpc SPE SIMD instruction set.
734
Tim Chen1e65b812014-07-31 10:29:51 -0700735config CRYPTO_SHA1_MB
736 tristate "SHA1 digest algorithm (x86_64 Multi-Buffer, Experimental)"
737 depends on X86 && 64BIT
738 select CRYPTO_SHA1
739 select CRYPTO_HASH
740 select CRYPTO_MCRYPTD
741 help
742 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented
743 using multi-buffer technique. This algorithm computes on
744 multiple data lanes concurrently with SIMD instructions for
745 better throughput. It should not be enabled by default but
746 used when there is significant amount of work to keep the keep
747 the data lanes filled to get performance benefit. If the data
748 lanes remain unfilled, a flush operation will be initiated to
749 process the crypto jobs, adding a slight latency.
750
Megha Dey9be7e242016-06-23 18:40:43 -0700751config CRYPTO_SHA256_MB
752 tristate "SHA256 digest algorithm (x86_64 Multi-Buffer, Experimental)"
753 depends on X86 && 64BIT
754 select CRYPTO_SHA256
755 select CRYPTO_HASH
756 select CRYPTO_MCRYPTD
757 help
758 SHA-256 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented
759 using multi-buffer technique. This algorithm computes on
760 multiple data lanes concurrently with SIMD instructions for
761 better throughput. It should not be enabled by default but
762 used when there is significant amount of work to keep the keep
763 the data lanes filled to get performance benefit. If the data
764 lanes remain unfilled, a flush operation will be initiated to
765 process the crypto jobs, adding a slight latency.
766
Megha Dey026bb8a2016-06-27 10:20:05 -0700767config CRYPTO_SHA512_MB
768 tristate "SHA512 digest algorithm (x86_64 Multi-Buffer, Experimental)"
769 depends on X86 && 64BIT
770 select CRYPTO_SHA512
771 select CRYPTO_HASH
772 select CRYPTO_MCRYPTD
773 help
774 SHA-512 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented
775 using multi-buffer technique. This algorithm computes on
776 multiple data lanes concurrently with SIMD instructions for
777 better throughput. It should not be enabled by default but
778 used when there is significant amount of work to keep the keep
779 the data lanes filled to get performance benefit. If the data
780 lanes remain unfilled, a flush operation will be initiated to
781 process the crypto jobs, adding a slight latency.
782
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800783config CRYPTO_SHA256
784 tristate "SHA224 and SHA256 digest algorithm"
Adrian-Ken Rueegsegger50e109b52008-12-03 19:57:49 +0800785 select CRYPTO_HASH
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800786 help
787 SHA256 secure hash standard (DFIPS 180-2).
788
789 This version of SHA implements a 256 bit hash with 128 bits of
790 security against collision attacks.
791
Adrian Bunkb6d44342008-07-16 19:28:00 +0800792 This code also includes SHA-224, a 224 bit hash with 112 bits
793 of security against collision attacks.
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800794
Markus Stockhausen2ecc1e92015-01-30 15:39:34 +0100795config CRYPTO_SHA256_PPC_SPE
796 tristate "SHA224 and SHA256 digest algorithm (PPC SPE)"
797 depends on PPC && SPE
798 select CRYPTO_SHA256
799 select CRYPTO_HASH
800 help
801 SHA224 and SHA256 secure hash standard (DFIPS 180-2)
802 implemented using powerpc SPE SIMD instruction set.
803
Aaro Koskinenefdb6f62015-03-08 22:07:47 +0200804config CRYPTO_SHA256_OCTEON
805 tristate "SHA224 and SHA256 digest algorithm (OCTEON)"
806 depends on CPU_CAVIUM_OCTEON
807 select CRYPTO_SHA256
808 select CRYPTO_HASH
809 help
810 SHA-256 secure hash standard (DFIPS 180-2) implemented
811 using OCTEON crypto instructions, when available.
812
David S. Miller86c93b22012-08-19 17:11:37 -0700813config CRYPTO_SHA256_SPARC64
814 tristate "SHA224 and SHA256 digest algorithm (SPARC64)"
815 depends on SPARC64
816 select CRYPTO_SHA256
817 select CRYPTO_HASH
818 help
819 SHA-256 secure hash standard (DFIPS 180-2) implemented
820 using sparc64 crypto instructions, when available.
821
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800822config CRYPTO_SHA512
823 tristate "SHA384 and SHA512 digest algorithms"
Adrian-Ken Rueegseggerbd9d20d2008-12-17 16:49:02 +1100824 select CRYPTO_HASH
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800825 help
826 SHA512 secure hash standard (DFIPS 180-2).
827
828 This version of SHA implements a 512 bit hash with 256 bits of
829 security against collision attacks.
830
831 This code also includes SHA-384, a 384 bit hash with 192 bits
832 of security against collision attacks.
833
Aaro Koskinenefdb6f62015-03-08 22:07:47 +0200834config CRYPTO_SHA512_OCTEON
835 tristate "SHA384 and SHA512 digest algorithms (OCTEON)"
836 depends on CPU_CAVIUM_OCTEON
837 select CRYPTO_SHA512
838 select CRYPTO_HASH
839 help
840 SHA-512 secure hash standard (DFIPS 180-2) implemented
841 using OCTEON crypto instructions, when available.
842
David S. Miller775e0c62012-08-19 17:37:56 -0700843config CRYPTO_SHA512_SPARC64
844 tristate "SHA384 and SHA512 digest algorithm (SPARC64)"
845 depends on SPARC64
846 select CRYPTO_SHA512
847 select CRYPTO_HASH
848 help
849 SHA-512 secure hash standard (DFIPS 180-2) implemented
850 using sparc64 crypto instructions, when available.
851
Jeff Garzik53964b92016-06-17 10:30:35 +0530852config CRYPTO_SHA3
853 tristate "SHA3 digest algorithm"
854 select CRYPTO_HASH
855 help
856 SHA-3 secure hash standard (DFIPS 202). It's based on
857 cryptographic sponge function family called Keccak.
858
859 References:
860 http://keccak.noekeon.org/
861
Gilad Ben-Yossef4f0fc162017-08-21 13:51:28 +0300862config CRYPTO_SM3
863 tristate "SM3 digest algorithm"
864 select CRYPTO_HASH
865 help
866 SM3 secure hash function as defined by OSCCA GM/T 0004-2012 SM3).
867 It is part of the Chinese Commercial Cryptography suite.
868
869 References:
870 http://www.oscca.gov.cn/UpFile/20101222141857786.pdf
871 https://datatracker.ietf.org/doc/html/draft-shen-sm3-hash
872
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800873config CRYPTO_TGR192
874 tristate "Tiger digest algorithms"
Adrian-Ken Rueegseggerf63fbd32008-12-03 19:58:32 +0800875 select CRYPTO_HASH
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800876 help
877 Tiger hash algorithm 192, 160 and 128-bit hashes
878
879 Tiger is a hash function optimized for 64-bit processors while
880 still having decent performance on 32-bit processors.
881 Tiger was developed by Ross Anderson and Eli Biham.
Linus Torvalds1da177e2005-04-16 15:20:36 -0700882
883 See also:
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800884 <http://www.cs.technion.ac.il/~biham/Reports/Tiger/>.
885
886config CRYPTO_WP512
887 tristate "Whirlpool digest algorithms"
Adrian-Ken Rueegsegger49465102008-12-07 19:34:37 +0800888 select CRYPTO_HASH
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800889 help
890 Whirlpool hash algorithm 512, 384 and 256-bit hashes
891
892 Whirlpool-512 is part of the NESSIE cryptographic primitives.
893 Whirlpool will be part of the ISO/IEC 10118-3:2003(E) standard
894
895 See also:
Justin P. Mattock6d8de742010-09-12 10:42:47 +0800896 <http://www.larc.usp.br/~pbarreto/WhirlpoolPage.html>
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800897
Huang Ying0e1227d2009-10-19 11:53:06 +0900898config CRYPTO_GHASH_CLMUL_NI_INTEL
899 tristate "GHASH digest algorithm (CLMUL-NI accelerated)"
Richard Weinberger8af00862011-06-08 20:56:29 +0800900 depends on X86 && 64BIT
Huang Ying0e1227d2009-10-19 11:53:06 +0900901 select CRYPTO_CRYPTD
902 help
903 GHASH is message digest algorithm for GCM (Galois/Counter Mode).
904 The implementation is accelerated by CLMUL-NI of Intel.
905
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800906comment "Ciphers"
Linus Torvalds1da177e2005-04-16 15:20:36 -0700907
908config CRYPTO_AES
909 tristate "AES cipher algorithms"
Herbert Xucce9e062006-08-21 21:08:13 +1000910 select CRYPTO_ALGAPI
Linus Torvalds1da177e2005-04-16 15:20:36 -0700911 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800912 AES cipher algorithms (FIPS-197). AES uses the Rijndael
Linus Torvalds1da177e2005-04-16 15:20:36 -0700913 algorithm.
914
915 Rijndael appears to be consistently a very good performer in
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800916 both hardware and software across a wide range of computing
917 environments regardless of its use in feedback or non-feedback
918 modes. Its key setup time is excellent, and its key agility is
919 good. Rijndael's very low memory requirements make it very well
920 suited for restricted-space environments, in which it also
921 demonstrates excellent performance. Rijndael's operations are
922 among the easiest to defend against power and timing attacks.
Linus Torvalds1da177e2005-04-16 15:20:36 -0700923
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800924 The AES specifies three key sizes: 128, 192 and 256 bits
Linus Torvalds1da177e2005-04-16 15:20:36 -0700925
926 See <http://csrc.nist.gov/CryptoToolkit/aes/> for more information.
927
Ard Biesheuvelb5e0b032017-02-02 16:37:40 +0000928config CRYPTO_AES_TI
929 tristate "Fixed time AES cipher"
930 select CRYPTO_ALGAPI
931 help
932 This is a generic implementation of AES that attempts to eliminate
933 data dependent latencies as much as possible without affecting
934 performance too much. It is intended for use by the generic CCM
935 and GCM drivers, and other CTR or CMAC/XCBC based modes that rely
936 solely on encryption (although decryption is supported as well, but
937 with a more dramatic performance hit)
938
939 Instead of using 16 lookup tables of 1 KB each, (8 for encryption and
940 8 for decryption), this implementation only uses just two S-boxes of
941 256 bytes each, and attempts to eliminate data dependent latencies by
942 prefetching the entire table into the cache at the start of each
943 block.
944
Linus Torvalds1da177e2005-04-16 15:20:36 -0700945config CRYPTO_AES_586
946 tristate "AES cipher algorithms (i586)"
Herbert Xucce9e062006-08-21 21:08:13 +1000947 depends on (X86 || UML_X86) && !64BIT
948 select CRYPTO_ALGAPI
Sebastian Siewior5157dea2007-11-10 19:07:16 +0800949 select CRYPTO_AES
Linus Torvalds1da177e2005-04-16 15:20:36 -0700950 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800951 AES cipher algorithms (FIPS-197). AES uses the Rijndael
Linus Torvalds1da177e2005-04-16 15:20:36 -0700952 algorithm.
953
954 Rijndael appears to be consistently a very good performer in
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800955 both hardware and software across a wide range of computing
956 environments regardless of its use in feedback or non-feedback
957 modes. Its key setup time is excellent, and its key agility is
958 good. Rijndael's very low memory requirements make it very well
959 suited for restricted-space environments, in which it also
960 demonstrates excellent performance. Rijndael's operations are
961 among the easiest to defend against power and timing attacks.
Linus Torvalds1da177e2005-04-16 15:20:36 -0700962
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800963 The AES specifies three key sizes: 128, 192 and 256 bits
Linus Torvalds1da177e2005-04-16 15:20:36 -0700964
965 See <http://csrc.nist.gov/encryption/aes/> for more information.
966
Andreas Steinmetza2a892a2005-07-06 13:55:00 -0700967config CRYPTO_AES_X86_64
968 tristate "AES cipher algorithms (x86_64)"
Herbert Xucce9e062006-08-21 21:08:13 +1000969 depends on (X86 || UML_X86) && 64BIT
970 select CRYPTO_ALGAPI
Sebastian Siewior81190b32007-11-08 21:25:04 +0800971 select CRYPTO_AES
Andreas Steinmetza2a892a2005-07-06 13:55:00 -0700972 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800973 AES cipher algorithms (FIPS-197). AES uses the Rijndael
Andreas Steinmetza2a892a2005-07-06 13:55:00 -0700974 algorithm.
975
976 Rijndael appears to be consistently a very good performer in
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800977 both hardware and software across a wide range of computing
978 environments regardless of its use in feedback or non-feedback
979 modes. Its key setup time is excellent, and its key agility is
980 good. Rijndael's very low memory requirements make it very well
981 suited for restricted-space environments, in which it also
982 demonstrates excellent performance. Rijndael's operations are
983 among the easiest to defend against power and timing attacks.
Andreas Steinmetza2a892a2005-07-06 13:55:00 -0700984
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800985 The AES specifies three key sizes: 128, 192 and 256 bits
Andreas Steinmetza2a892a2005-07-06 13:55:00 -0700986
987 See <http://csrc.nist.gov/encryption/aes/> for more information.
988
Huang Ying54b6a1b2009-01-18 16:28:34 +1100989config CRYPTO_AES_NI_INTEL
990 tristate "AES cipher algorithms (AES-NI)"
Richard Weinberger8af00862011-06-08 20:56:29 +0800991 depends on X86
Herbert Xu85671862016-11-22 20:08:33 +0800992 select CRYPTO_AEAD
Mathias Krause0d258ef2010-11-27 16:34:46 +0800993 select CRYPTO_AES_X86_64 if 64BIT
994 select CRYPTO_AES_586 if !64BIT
Huang Ying54b6a1b2009-01-18 16:28:34 +1100995 select CRYPTO_ALGAPI
Herbert Xu85671862016-11-22 20:08:33 +0800996 select CRYPTO_BLKCIPHER
Jussi Kivilinna7643a112013-04-10 18:39:20 +0300997 select CRYPTO_GLUE_HELPER_X86 if 64BIT
Herbert Xu85671862016-11-22 20:08:33 +0800998 select CRYPTO_SIMD
Huang Ying54b6a1b2009-01-18 16:28:34 +1100999 help
1000 Use Intel AES-NI instructions for AES algorithm.
1001
1002 AES cipher algorithms (FIPS-197). AES uses the Rijndael
1003 algorithm.
1004
1005 Rijndael appears to be consistently a very good performer in
1006 both hardware and software across a wide range of computing
1007 environments regardless of its use in feedback or non-feedback
1008 modes. Its key setup time is excellent, and its key agility is
1009 good. Rijndael's very low memory requirements make it very well
1010 suited for restricted-space environments, in which it also
1011 demonstrates excellent performance. Rijndael's operations are
1012 among the easiest to defend against power and timing attacks.
1013
1014 The AES specifies three key sizes: 128, 192 and 256 bits
1015
1016 See <http://csrc.nist.gov/encryption/aes/> for more information.
1017
Mathias Krause0d258ef2010-11-27 16:34:46 +08001018 In addition to AES cipher algorithm support, the acceleration
1019 for some popular block cipher mode is supported too, including
1020 ECB, CBC, LRW, PCBC, XTS. The 64 bit version has additional
1021 acceleration for CTR.
Huang Ying2cf4ac82009-03-29 15:41:20 +08001022
David S. Miller9bf48522012-08-21 03:58:13 -07001023config CRYPTO_AES_SPARC64
1024 tristate "AES cipher algorithms (SPARC64)"
1025 depends on SPARC64
1026 select CRYPTO_CRYPTD
1027 select CRYPTO_ALGAPI
1028 help
1029 Use SPARC64 crypto opcodes for AES algorithm.
1030
1031 AES cipher algorithms (FIPS-197). AES uses the Rijndael
1032 algorithm.
1033
1034 Rijndael appears to be consistently a very good performer in
1035 both hardware and software across a wide range of computing
1036 environments regardless of its use in feedback or non-feedback
1037 modes. Its key setup time is excellent, and its key agility is
1038 good. Rijndael's very low memory requirements make it very well
1039 suited for restricted-space environments, in which it also
1040 demonstrates excellent performance. Rijndael's operations are
1041 among the easiest to defend against power and timing attacks.
1042
1043 The AES specifies three key sizes: 128, 192 and 256 bits
1044
1045 See <http://csrc.nist.gov/encryption/aes/> for more information.
1046
1047 In addition to AES cipher algorithm support, the acceleration
1048 for some popular block cipher mode is supported too, including
1049 ECB and CBC.
1050
Markus Stockhausen504c6142015-02-22 10:00:10 +01001051config CRYPTO_AES_PPC_SPE
1052 tristate "AES cipher algorithms (PPC SPE)"
1053 depends on PPC && SPE
1054 help
1055 AES cipher algorithms (FIPS-197). Additionally the acceleration
1056 for popular block cipher modes ECB, CBC, CTR and XTS is supported.
1057 This module should only be used for low power (router) devices
1058 without hardware AES acceleration (e.g. caam crypto). It reduces the
1059 size of the AES tables from 16KB to 8KB + 256 bytes and mitigates
1060 timining attacks. Nevertheless it might be not as secure as other
1061 architecture specific assembler implementations that work on 1KB
1062 tables or 256 bytes S-boxes.
1063
Sebastian Siewior584fffc2008-04-05 21:04:48 +08001064config CRYPTO_ANUBIS
1065 tristate "Anubis cipher algorithm"
1066 select CRYPTO_ALGAPI
1067 help
1068 Anubis cipher algorithm.
1069
1070 Anubis is a variable key length cipher which can use keys from
1071 128 bits to 320 bits in length. It was evaluated as a entrant
1072 in the NESSIE competition.
1073
1074 See also:
Justin P. Mattock6d8de742010-09-12 10:42:47 +08001075 <https://www.cosic.esat.kuleuven.be/nessie/reports/>
1076 <http://www.larc.usp.br/~pbarreto/AnubisPage.html>
Sebastian Siewior584fffc2008-04-05 21:04:48 +08001077
1078config CRYPTO_ARC4
1079 tristate "ARC4 cipher algorithm"
Sebastian Andrzej Siewiorb9b0f082012-06-26 18:13:46 +02001080 select CRYPTO_BLKCIPHER
Sebastian Siewior584fffc2008-04-05 21:04:48 +08001081 help
1082 ARC4 cipher algorithm.
1083
1084 ARC4 is a stream cipher using keys ranging from 8 bits to 2048
1085 bits in length. This algorithm is required for driver-based
1086 WEP, but it should not be for other purposes because of the
1087 weakness of the algorithm.
1088
1089config CRYPTO_BLOWFISH
1090 tristate "Blowfish cipher algorithm"
1091 select CRYPTO_ALGAPI
Jussi Kivilinna52ba8672011-09-02 01:45:07 +03001092 select CRYPTO_BLOWFISH_COMMON
Sebastian Siewior584fffc2008-04-05 21:04:48 +08001093 help
1094 Blowfish cipher algorithm, by Bruce Schneier.
1095
1096 This is a variable key length cipher which can use keys from 32
1097 bits to 448 bits in length. It's fast, simple and specifically
1098 designed for use on "large microprocessors".
1099
1100 See also:
1101 <http://www.schneier.com/blowfish.html>
1102
Jussi Kivilinna52ba8672011-09-02 01:45:07 +03001103config CRYPTO_BLOWFISH_COMMON
1104 tristate
1105 help
1106 Common parts of the Blowfish cipher algorithm shared by the
1107 generic c and the assembler implementations.
1108
1109 See also:
1110 <http://www.schneier.com/blowfish.html>
1111
Jussi Kivilinna64b94ce2011-09-02 01:45:22 +03001112config CRYPTO_BLOWFISH_X86_64
1113 tristate "Blowfish cipher algorithm (x86_64)"
Al Virof21a7c12012-04-08 20:31:22 -04001114 depends on X86 && 64BIT
Jussi Kivilinna64b94ce2011-09-02 01:45:22 +03001115 select CRYPTO_ALGAPI
1116 select CRYPTO_BLOWFISH_COMMON
1117 help
1118 Blowfish cipher algorithm (x86_64), by Bruce Schneier.
1119
1120 This is a variable key length cipher which can use keys from 32
1121 bits to 448 bits in length. It's fast, simple and specifically
1122 designed for use on "large microprocessors".
1123
1124 See also:
1125 <http://www.schneier.com/blowfish.html>
1126
Sebastian Siewior584fffc2008-04-05 21:04:48 +08001127config CRYPTO_CAMELLIA
1128 tristate "Camellia cipher algorithms"
1129 depends on CRYPTO
1130 select CRYPTO_ALGAPI
1131 help
1132 Camellia cipher algorithms module.
1133
1134 Camellia is a symmetric key block cipher developed jointly
1135 at NTT and Mitsubishi Electric Corporation.
1136
1137 The Camellia specifies three key sizes: 128, 192 and 256 bits.
1138
1139 See also:
1140 <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
1141
Jussi Kivilinna0b95ec52012-03-05 20:26:47 +02001142config CRYPTO_CAMELLIA_X86_64
1143 tristate "Camellia cipher algorithm (x86_64)"
Al Virof21a7c12012-04-08 20:31:22 -04001144 depends on X86 && 64BIT
Jussi Kivilinna0b95ec52012-03-05 20:26:47 +02001145 depends on CRYPTO
1146 select CRYPTO_ALGAPI
Jussi Kivilinna964263a2012-06-18 14:07:29 +03001147 select CRYPTO_GLUE_HELPER_X86
Jussi Kivilinna0b95ec52012-03-05 20:26:47 +02001148 select CRYPTO_LRW
1149 select CRYPTO_XTS
1150 help
1151 Camellia cipher algorithm module (x86_64).
1152
1153 Camellia is a symmetric key block cipher developed jointly
1154 at NTT and Mitsubishi Electric Corporation.
1155
1156 The Camellia specifies three key sizes: 128, 192 and 256 bits.
1157
1158 See also:
1159 <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
1160
Jussi Kivilinnad9b1d2e2012-10-26 14:49:01 +03001161config CRYPTO_CAMELLIA_AESNI_AVX_X86_64
1162 tristate "Camellia cipher algorithm (x86_64/AES-NI/AVX)"
1163 depends on X86 && 64BIT
1164 depends on CRYPTO
1165 select CRYPTO_ALGAPI
1166 select CRYPTO_CRYPTD
Ard Biesheuvel801201a2013-09-20 09:55:41 +02001167 select CRYPTO_ABLK_HELPER
Jussi Kivilinnad9b1d2e2012-10-26 14:49:01 +03001168 select CRYPTO_GLUE_HELPER_X86
1169 select CRYPTO_CAMELLIA_X86_64
1170 select CRYPTO_LRW
1171 select CRYPTO_XTS
1172 help
1173 Camellia cipher algorithm module (x86_64/AES-NI/AVX).
1174
1175 Camellia is a symmetric key block cipher developed jointly
1176 at NTT and Mitsubishi Electric Corporation.
1177
1178 The Camellia specifies three key sizes: 128, 192 and 256 bits.
1179
1180 See also:
1181 <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
1182
Jussi Kivilinnaf3f935a2013-04-13 13:47:00 +03001183config CRYPTO_CAMELLIA_AESNI_AVX2_X86_64
1184 tristate "Camellia cipher algorithm (x86_64/AES-NI/AVX2)"
1185 depends on X86 && 64BIT
1186 depends on CRYPTO
1187 select CRYPTO_ALGAPI
1188 select CRYPTO_CRYPTD
Ard Biesheuvel801201a2013-09-20 09:55:41 +02001189 select CRYPTO_ABLK_HELPER
Jussi Kivilinnaf3f935a2013-04-13 13:47:00 +03001190 select CRYPTO_GLUE_HELPER_X86
1191 select CRYPTO_CAMELLIA_X86_64
1192 select CRYPTO_CAMELLIA_AESNI_AVX_X86_64
1193 select CRYPTO_LRW
1194 select CRYPTO_XTS
1195 help
1196 Camellia cipher algorithm module (x86_64/AES-NI/AVX2).
1197
1198 Camellia is a symmetric key block cipher developed jointly
1199 at NTT and Mitsubishi Electric Corporation.
1200
1201 The Camellia specifies three key sizes: 128, 192 and 256 bits.
1202
1203 See also:
1204 <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
1205
David S. Miller81658ad2012-08-28 12:05:54 -07001206config CRYPTO_CAMELLIA_SPARC64
1207 tristate "Camellia cipher algorithm (SPARC64)"
1208 depends on SPARC64
1209 depends on CRYPTO
1210 select CRYPTO_ALGAPI
1211 help
1212 Camellia cipher algorithm module (SPARC64).
1213
1214 Camellia is a symmetric key block cipher developed jointly
1215 at NTT and Mitsubishi Electric Corporation.
1216
1217 The Camellia specifies three key sizes: 128, 192 and 256 bits.
1218
1219 See also:
1220 <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
1221
Jussi Kivilinna044ab522012-11-13 11:43:14 +02001222config CRYPTO_CAST_COMMON
1223 tristate
1224 help
1225 Common parts of the CAST cipher algorithms shared by the
1226 generic c and the assembler implementations.
1227
Linus Torvalds1da177e2005-04-16 15:20:36 -07001228config CRYPTO_CAST5
1229 tristate "CAST5 (CAST-128) cipher algorithm"
Herbert Xucce9e062006-08-21 21:08:13 +10001230 select CRYPTO_ALGAPI
Jussi Kivilinna044ab522012-11-13 11:43:14 +02001231 select CRYPTO_CAST_COMMON
Linus Torvalds1da177e2005-04-16 15:20:36 -07001232 help
1233 The CAST5 encryption algorithm (synonymous with CAST-128) is
1234 described in RFC2144.
1235
Johannes Goetzfried4d6d6a22012-07-11 19:37:37 +02001236config CRYPTO_CAST5_AVX_X86_64
1237 tristate "CAST5 (CAST-128) cipher algorithm (x86_64/AVX)"
1238 depends on X86 && 64BIT
1239 select CRYPTO_ALGAPI
1240 select CRYPTO_CRYPTD
Ard Biesheuvel801201a2013-09-20 09:55:41 +02001241 select CRYPTO_ABLK_HELPER
Jussi Kivilinna044ab522012-11-13 11:43:14 +02001242 select CRYPTO_CAST_COMMON
Johannes Goetzfried4d6d6a22012-07-11 19:37:37 +02001243 select CRYPTO_CAST5
1244 help
1245 The CAST5 encryption algorithm (synonymous with CAST-128) is
1246 described in RFC2144.
1247
1248 This module provides the Cast5 cipher algorithm that processes
1249 sixteen blocks parallel using the AVX instruction set.
1250
Linus Torvalds1da177e2005-04-16 15:20:36 -07001251config CRYPTO_CAST6
1252 tristate "CAST6 (CAST-256) cipher algorithm"
Herbert Xucce9e062006-08-21 21:08:13 +10001253 select CRYPTO_ALGAPI
Jussi Kivilinna044ab522012-11-13 11:43:14 +02001254 select CRYPTO_CAST_COMMON
Linus Torvalds1da177e2005-04-16 15:20:36 -07001255 help
1256 The CAST6 encryption algorithm (synonymous with CAST-256) is
1257 described in RFC2612.
1258
Johannes Goetzfried4ea12772012-07-11 19:38:57 +02001259config CRYPTO_CAST6_AVX_X86_64
1260 tristate "CAST6 (CAST-256) cipher algorithm (x86_64/AVX)"
1261 depends on X86 && 64BIT
1262 select CRYPTO_ALGAPI
1263 select CRYPTO_CRYPTD
Ard Biesheuvel801201a2013-09-20 09:55:41 +02001264 select CRYPTO_ABLK_HELPER
Johannes Goetzfried4ea12772012-07-11 19:38:57 +02001265 select CRYPTO_GLUE_HELPER_X86
Jussi Kivilinna044ab522012-11-13 11:43:14 +02001266 select CRYPTO_CAST_COMMON
Johannes Goetzfried4ea12772012-07-11 19:38:57 +02001267 select CRYPTO_CAST6
1268 select CRYPTO_LRW
1269 select CRYPTO_XTS
1270 help
1271 The CAST6 encryption algorithm (synonymous with CAST-256) is
1272 described in RFC2612.
1273
1274 This module provides the Cast6 cipher algorithm that processes
1275 eight blocks parallel using the AVX instruction set.
1276
Sebastian Siewior584fffc2008-04-05 21:04:48 +08001277config CRYPTO_DES
1278 tristate "DES and Triple DES EDE cipher algorithms"
Herbert Xucce9e062006-08-21 21:08:13 +10001279 select CRYPTO_ALGAPI
Linus Torvalds1da177e2005-04-16 15:20:36 -07001280 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +08001281 DES cipher algorithm (FIPS 46-2), and Triple DES EDE (FIPS 46-3).
Linus Torvalds1da177e2005-04-16 15:20:36 -07001282
David S. Millerc5aac2d2012-08-25 22:37:23 -07001283config CRYPTO_DES_SPARC64
1284 tristate "DES and Triple DES EDE cipher algorithms (SPARC64)"
Dave Jones97da37b2012-10-02 17:13:20 -04001285 depends on SPARC64
David S. Millerc5aac2d2012-08-25 22:37:23 -07001286 select CRYPTO_ALGAPI
1287 select CRYPTO_DES
1288 help
1289 DES cipher algorithm (FIPS 46-2), and Triple DES EDE (FIPS 46-3),
1290 optimized using SPARC64 crypto opcodes.
1291
Jussi Kivilinna6574e6c2014-06-09 20:59:54 +03001292config CRYPTO_DES3_EDE_X86_64
1293 tristate "Triple DES EDE cipher algorithm (x86-64)"
1294 depends on X86 && 64BIT
1295 select CRYPTO_ALGAPI
1296 select CRYPTO_DES
1297 help
1298 Triple DES EDE (FIPS 46-3) algorithm.
1299
1300 This module provides implementation of the Triple DES EDE cipher
1301 algorithm that is optimized for x86-64 processors. Two versions of
1302 algorithm are provided; regular processing one input block and
1303 one that processes three blocks parallel.
1304
Sebastian Siewior584fffc2008-04-05 21:04:48 +08001305config CRYPTO_FCRYPT
1306 tristate "FCrypt cipher algorithm"
Herbert Xucce9e062006-08-21 21:08:13 +10001307 select CRYPTO_ALGAPI
Sebastian Siewior584fffc2008-04-05 21:04:48 +08001308 select CRYPTO_BLKCIPHER
Linus Torvalds1da177e2005-04-16 15:20:36 -07001309 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +08001310 FCrypt algorithm used by RxRPC.
Linus Torvalds1da177e2005-04-16 15:20:36 -07001311
1312config CRYPTO_KHAZAD
1313 tristate "Khazad cipher algorithm"
Herbert Xucce9e062006-08-21 21:08:13 +10001314 select CRYPTO_ALGAPI
Linus Torvalds1da177e2005-04-16 15:20:36 -07001315 help
1316 Khazad cipher algorithm.
1317
1318 Khazad was a finalist in the initial NESSIE competition. It is
1319 an algorithm optimized for 64-bit processors with good performance
1320 on 32-bit processors. Khazad uses an 128 bit key size.
1321
1322 See also:
Justin P. Mattock6d8de742010-09-12 10:42:47 +08001323 <http://www.larc.usp.br/~pbarreto/KhazadPage.html>
Linus Torvalds1da177e2005-04-16 15:20:36 -07001324
Tan Swee Heng2407d602007-11-23 19:45:00 +08001325config CRYPTO_SALSA20
Kees Cook3b4afaf2012-10-02 11:16:49 -07001326 tristate "Salsa20 stream cipher algorithm"
Tan Swee Heng2407d602007-11-23 19:45:00 +08001327 select CRYPTO_BLKCIPHER
1328 help
1329 Salsa20 stream cipher algorithm.
1330
1331 Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
1332 Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
1333
1334 The Salsa20 stream cipher algorithm is designed by Daniel J.
1335 Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
Linus Torvalds1da177e2005-04-16 15:20:36 -07001336
Tan Swee Heng974e4b72007-12-10 15:52:56 +08001337config CRYPTO_SALSA20_586
Kees Cook3b4afaf2012-10-02 11:16:49 -07001338 tristate "Salsa20 stream cipher algorithm (i586)"
Tan Swee Heng974e4b72007-12-10 15:52:56 +08001339 depends on (X86 || UML_X86) && !64BIT
Tan Swee Heng974e4b72007-12-10 15:52:56 +08001340 select CRYPTO_BLKCIPHER
Tan Swee Heng974e4b72007-12-10 15:52:56 +08001341 help
1342 Salsa20 stream cipher algorithm.
1343
1344 Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
1345 Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
1346
1347 The Salsa20 stream cipher algorithm is designed by Daniel J.
1348 Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
1349
Tan Swee Heng9a7dafb2007-12-18 00:04:40 +08001350config CRYPTO_SALSA20_X86_64
Kees Cook3b4afaf2012-10-02 11:16:49 -07001351 tristate "Salsa20 stream cipher algorithm (x86_64)"
Tan Swee Heng9a7dafb2007-12-18 00:04:40 +08001352 depends on (X86 || UML_X86) && 64BIT
Tan Swee Heng9a7dafb2007-12-18 00:04:40 +08001353 select CRYPTO_BLKCIPHER
Tan Swee Heng9a7dafb2007-12-18 00:04:40 +08001354 help
1355 Salsa20 stream cipher algorithm.
1356
1357 Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
1358 Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
1359
1360 The Salsa20 stream cipher algorithm is designed by Daniel J.
1361 Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
1362
Martin Willic08d0e62015-06-01 13:43:56 +02001363config CRYPTO_CHACHA20
1364 tristate "ChaCha20 cipher algorithm"
1365 select CRYPTO_BLKCIPHER
1366 help
1367 ChaCha20 cipher algorithm, RFC7539.
1368
1369 ChaCha20 is a 256-bit high-speed stream cipher designed by Daniel J.
1370 Bernstein and further specified in RFC7539 for use in IETF protocols.
1371 This is the portable C implementation of ChaCha20.
1372
1373 See also:
1374 <http://cr.yp.to/chacha/chacha-20080128.pdf>
1375
Martin Willic9320b62015-07-16 19:14:01 +02001376config CRYPTO_CHACHA20_X86_64
Martin Willi3d1e93c2015-07-16 19:14:03 +02001377 tristate "ChaCha20 cipher algorithm (x86_64/SSSE3/AVX2)"
Martin Willic9320b62015-07-16 19:14:01 +02001378 depends on X86 && 64BIT
1379 select CRYPTO_BLKCIPHER
1380 select CRYPTO_CHACHA20
1381 help
1382 ChaCha20 cipher algorithm, RFC7539.
1383
1384 ChaCha20 is a 256-bit high-speed stream cipher designed by Daniel J.
1385 Bernstein and further specified in RFC7539 for use in IETF protocols.
1386 This is the x86_64 assembler implementation using SIMD instructions.
1387
1388 See also:
1389 <http://cr.yp.to/chacha/chacha-20080128.pdf>
1390
Sebastian Siewior584fffc2008-04-05 21:04:48 +08001391config CRYPTO_SEED
1392 tristate "SEED cipher algorithm"
1393 select CRYPTO_ALGAPI
1394 help
1395 SEED cipher algorithm (RFC4269).
1396
1397 SEED is a 128-bit symmetric key block cipher that has been
1398 developed by KISA (Korea Information Security Agency) as a
1399 national standard encryption algorithm of the Republic of Korea.
1400 It is a 16 round block cipher with the key size of 128 bit.
1401
1402 See also:
1403 <http://www.kisa.or.kr/kisa/seed/jsp/seed_eng.jsp>
1404
1405config CRYPTO_SERPENT
1406 tristate "Serpent cipher algorithm"
1407 select CRYPTO_ALGAPI
1408 help
1409 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
1410
1411 Keys are allowed to be from 0 to 256 bits in length, in steps
1412 of 8 bits. Also includes the 'Tnepres' algorithm, a reversed
1413 variant of Serpent for compatibility with old kerneli.org code.
1414
1415 See also:
1416 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
1417
Jussi Kivilinna937c30d2011-11-09 16:26:25 +02001418config CRYPTO_SERPENT_SSE2_X86_64
1419 tristate "Serpent cipher algorithm (x86_64/SSE2)"
1420 depends on X86 && 64BIT
1421 select CRYPTO_ALGAPI
Jussi Kivilinna341975b2011-11-24 08:37:41 +02001422 select CRYPTO_CRYPTD
Ard Biesheuvel801201a2013-09-20 09:55:41 +02001423 select CRYPTO_ABLK_HELPER
Jussi Kivilinna596d8752012-06-18 14:07:19 +03001424 select CRYPTO_GLUE_HELPER_X86
Jussi Kivilinna937c30d2011-11-09 16:26:25 +02001425 select CRYPTO_SERPENT
Jussi Kivilinnafeaf0cf2011-12-13 12:53:12 +02001426 select CRYPTO_LRW
1427 select CRYPTO_XTS
Jussi Kivilinna937c30d2011-11-09 16:26:25 +02001428 help
1429 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
1430
1431 Keys are allowed to be from 0 to 256 bits in length, in steps
1432 of 8 bits.
1433
Masanari Iida1e6232f2015-04-04 00:20:30 +09001434 This module provides Serpent cipher algorithm that processes eight
Jussi Kivilinna937c30d2011-11-09 16:26:25 +02001435 blocks parallel using SSE2 instruction set.
1436
1437 See also:
1438 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
1439
Jussi Kivilinna251496d2011-11-09 16:26:31 +02001440config CRYPTO_SERPENT_SSE2_586
1441 tristate "Serpent cipher algorithm (i586/SSE2)"
1442 depends on X86 && !64BIT
1443 select CRYPTO_ALGAPI
Jussi Kivilinna341975b2011-11-24 08:37:41 +02001444 select CRYPTO_CRYPTD
Ard Biesheuvel801201a2013-09-20 09:55:41 +02001445 select CRYPTO_ABLK_HELPER
Jussi Kivilinna596d8752012-06-18 14:07:19 +03001446 select CRYPTO_GLUE_HELPER_X86
Jussi Kivilinna251496d2011-11-09 16:26:31 +02001447 select CRYPTO_SERPENT
Jussi Kivilinnafeaf0cf2011-12-13 12:53:12 +02001448 select CRYPTO_LRW
1449 select CRYPTO_XTS
Jussi Kivilinna251496d2011-11-09 16:26:31 +02001450 help
1451 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
1452
1453 Keys are allowed to be from 0 to 256 bits in length, in steps
1454 of 8 bits.
1455
1456 This module provides Serpent cipher algorithm that processes four
1457 blocks parallel using SSE2 instruction set.
1458
1459 See also:
1460 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
1461
Johannes Goetzfried7efe4072012-06-12 16:47:43 +08001462config CRYPTO_SERPENT_AVX_X86_64
1463 tristate "Serpent cipher algorithm (x86_64/AVX)"
1464 depends on X86 && 64BIT
1465 select CRYPTO_ALGAPI
1466 select CRYPTO_CRYPTD
Ard Biesheuvel801201a2013-09-20 09:55:41 +02001467 select CRYPTO_ABLK_HELPER
Jussi Kivilinna1d0debb2012-06-18 14:07:24 +03001468 select CRYPTO_GLUE_HELPER_X86
Johannes Goetzfried7efe4072012-06-12 16:47:43 +08001469 select CRYPTO_SERPENT
1470 select CRYPTO_LRW
1471 select CRYPTO_XTS
1472 help
1473 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
1474
1475 Keys are allowed to be from 0 to 256 bits in length, in steps
1476 of 8 bits.
1477
1478 This module provides the Serpent cipher algorithm that processes
1479 eight blocks parallel using the AVX instruction set.
1480
1481 See also:
1482 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
1483
Jussi Kivilinna56d76c92013-04-13 13:46:55 +03001484config CRYPTO_SERPENT_AVX2_X86_64
1485 tristate "Serpent cipher algorithm (x86_64/AVX2)"
1486 depends on X86 && 64BIT
1487 select CRYPTO_ALGAPI
1488 select CRYPTO_CRYPTD
Ard Biesheuvel801201a2013-09-20 09:55:41 +02001489 select CRYPTO_ABLK_HELPER
Jussi Kivilinna56d76c92013-04-13 13:46:55 +03001490 select CRYPTO_GLUE_HELPER_X86
1491 select CRYPTO_SERPENT
1492 select CRYPTO_SERPENT_AVX_X86_64
1493 select CRYPTO_LRW
1494 select CRYPTO_XTS
1495 help
1496 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
1497
1498 Keys are allowed to be from 0 to 256 bits in length, in steps
1499 of 8 bits.
1500
1501 This module provides Serpent cipher algorithm that processes 16
1502 blocks parallel using AVX2 instruction set.
1503
1504 See also:
1505 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
1506
Sebastian Siewior584fffc2008-04-05 21:04:48 +08001507config CRYPTO_TEA
1508 tristate "TEA, XTEA and XETA cipher algorithms"
1509 select CRYPTO_ALGAPI
1510 help
1511 TEA cipher algorithm.
1512
1513 Tiny Encryption Algorithm is a simple cipher that uses
1514 many rounds for security. It is very fast and uses
1515 little memory.
1516
1517 Xtendend Tiny Encryption Algorithm is a modification to
1518 the TEA algorithm to address a potential key weakness
1519 in the TEA algorithm.
1520
1521 Xtendend Encryption Tiny Algorithm is a mis-implementation
1522 of the XTEA algorithm for compatibility purposes.
1523
1524config CRYPTO_TWOFISH
1525 tristate "Twofish cipher algorithm"
1526 select CRYPTO_ALGAPI
1527 select CRYPTO_TWOFISH_COMMON
1528 help
1529 Twofish cipher algorithm.
1530
1531 Twofish was submitted as an AES (Advanced Encryption Standard)
1532 candidate cipher by researchers at CounterPane Systems. It is a
1533 16 round block cipher supporting key sizes of 128, 192, and 256
1534 bits.
1535
1536 See also:
1537 <http://www.schneier.com/twofish.html>
1538
1539config CRYPTO_TWOFISH_COMMON
1540 tristate
1541 help
1542 Common parts of the Twofish cipher algorithm shared by the
1543 generic c and the assembler implementations.
1544
1545config CRYPTO_TWOFISH_586
1546 tristate "Twofish cipher algorithms (i586)"
1547 depends on (X86 || UML_X86) && !64BIT
1548 select CRYPTO_ALGAPI
1549 select CRYPTO_TWOFISH_COMMON
1550 help
1551 Twofish cipher algorithm.
1552
1553 Twofish was submitted as an AES (Advanced Encryption Standard)
1554 candidate cipher by researchers at CounterPane Systems. It is a
1555 16 round block cipher supporting key sizes of 128, 192, and 256
1556 bits.
1557
1558 See also:
1559 <http://www.schneier.com/twofish.html>
1560
1561config CRYPTO_TWOFISH_X86_64
1562 tristate "Twofish cipher algorithm (x86_64)"
1563 depends on (X86 || UML_X86) && 64BIT
1564 select CRYPTO_ALGAPI
1565 select CRYPTO_TWOFISH_COMMON
1566 help
1567 Twofish cipher algorithm (x86_64).
1568
1569 Twofish was submitted as an AES (Advanced Encryption Standard)
1570 candidate cipher by researchers at CounterPane Systems. It is a
1571 16 round block cipher supporting key sizes of 128, 192, and 256
1572 bits.
1573
1574 See also:
1575 <http://www.schneier.com/twofish.html>
1576
Jussi Kivilinna8280daa2011-09-26 16:47:25 +03001577config CRYPTO_TWOFISH_X86_64_3WAY
1578 tristate "Twofish cipher algorithm (x86_64, 3-way parallel)"
Al Virof21a7c12012-04-08 20:31:22 -04001579 depends on X86 && 64BIT
Jussi Kivilinna8280daa2011-09-26 16:47:25 +03001580 select CRYPTO_ALGAPI
1581 select CRYPTO_TWOFISH_COMMON
1582 select CRYPTO_TWOFISH_X86_64
Jussi Kivilinna414cb5e2012-06-18 14:07:34 +03001583 select CRYPTO_GLUE_HELPER_X86
Jussi Kivilinnae7cda5d2011-12-13 12:53:01 +02001584 select CRYPTO_LRW
1585 select CRYPTO_XTS
Jussi Kivilinna8280daa2011-09-26 16:47:25 +03001586 help
1587 Twofish cipher algorithm (x86_64, 3-way parallel).
1588
1589 Twofish was submitted as an AES (Advanced Encryption Standard)
1590 candidate cipher by researchers at CounterPane Systems. It is a
1591 16 round block cipher supporting key sizes of 128, 192, and 256
1592 bits.
1593
1594 This module provides Twofish cipher algorithm that processes three
1595 blocks parallel, utilizing resources of out-of-order CPUs better.
1596
1597 See also:
1598 <http://www.schneier.com/twofish.html>
1599
Johannes Goetzfried107778b2012-05-28 15:54:24 +02001600config CRYPTO_TWOFISH_AVX_X86_64
1601 tristate "Twofish cipher algorithm (x86_64/AVX)"
1602 depends on X86 && 64BIT
1603 select CRYPTO_ALGAPI
1604 select CRYPTO_CRYPTD
Ard Biesheuvel801201a2013-09-20 09:55:41 +02001605 select CRYPTO_ABLK_HELPER
Jussi Kivilinnaa7378d42012-06-18 14:07:39 +03001606 select CRYPTO_GLUE_HELPER_X86
Johannes Goetzfried107778b2012-05-28 15:54:24 +02001607 select CRYPTO_TWOFISH_COMMON
1608 select CRYPTO_TWOFISH_X86_64
1609 select CRYPTO_TWOFISH_X86_64_3WAY
1610 select CRYPTO_LRW
1611 select CRYPTO_XTS
1612 help
1613 Twofish cipher algorithm (x86_64/AVX).
1614
1615 Twofish was submitted as an AES (Advanced Encryption Standard)
1616 candidate cipher by researchers at CounterPane Systems. It is a
1617 16 round block cipher supporting key sizes of 128, 192, and 256
1618 bits.
1619
1620 This module provides the Twofish cipher algorithm that processes
1621 eight blocks parallel using the AVX Instruction Set.
1622
1623 See also:
1624 <http://www.schneier.com/twofish.html>
1625
Sebastian Siewior584fffc2008-04-05 21:04:48 +08001626comment "Compression"
1627
Linus Torvalds1da177e2005-04-16 15:20:36 -07001628config CRYPTO_DEFLATE
1629 tristate "Deflate compression algorithm"
Herbert Xucce9e062006-08-21 21:08:13 +10001630 select CRYPTO_ALGAPI
Giovanni Cabidduf6ded092016-10-21 13:19:53 +01001631 select CRYPTO_ACOMP2
Linus Torvalds1da177e2005-04-16 15:20:36 -07001632 select ZLIB_INFLATE
1633 select ZLIB_DEFLATE
1634 help
1635 This is the Deflate algorithm (RFC1951), specified for use in
1636 IPSec with the IPCOMP protocol (RFC3173, RFC2394).
Sebastian Siewior584fffc2008-04-05 21:04:48 +08001637
Linus Torvalds1da177e2005-04-16 15:20:36 -07001638 You will most probably want this if using IPSec.
1639
Zoltan Sogor0b77abb2007-12-07 16:53:23 +08001640config CRYPTO_LZO
1641 tristate "LZO compression algorithm"
1642 select CRYPTO_ALGAPI
Giovanni Cabidduac9d2c42016-10-21 13:19:49 +01001643 select CRYPTO_ACOMP2
Zoltan Sogor0b77abb2007-12-07 16:53:23 +08001644 select LZO_COMPRESS
1645 select LZO_DECOMPRESS
1646 help
1647 This is the LZO algorithm.
1648
Seth Jennings35a1fc12012-07-19 09:42:41 -05001649config CRYPTO_842
1650 tristate "842 compression algorithm"
Dan Streetman2062c5b2015-05-07 13:49:15 -04001651 select CRYPTO_ALGAPI
Giovanni Cabiddu6a8de3a2016-10-21 13:19:52 +01001652 select CRYPTO_ACOMP2
Dan Streetman2062c5b2015-05-07 13:49:15 -04001653 select 842_COMPRESS
1654 select 842_DECOMPRESS
Seth Jennings35a1fc12012-07-19 09:42:41 -05001655 help
1656 This is the 842 algorithm.
1657
Chanho Min0ea85302013-07-08 16:01:51 -07001658config CRYPTO_LZ4
1659 tristate "LZ4 compression algorithm"
1660 select CRYPTO_ALGAPI
Giovanni Cabiddu8cd93302016-10-21 13:19:50 +01001661 select CRYPTO_ACOMP2
Chanho Min0ea85302013-07-08 16:01:51 -07001662 select LZ4_COMPRESS
1663 select LZ4_DECOMPRESS
1664 help
1665 This is the LZ4 algorithm.
1666
1667config CRYPTO_LZ4HC
1668 tristate "LZ4HC compression algorithm"
1669 select CRYPTO_ALGAPI
Giovanni Cabiddu91d53d92016-10-21 13:19:51 +01001670 select CRYPTO_ACOMP2
Chanho Min0ea85302013-07-08 16:01:51 -07001671 select LZ4HC_COMPRESS
1672 select LZ4_DECOMPRESS
1673 help
1674 This is the LZ4 high compression mode algorithm.
1675
Neil Horman17f0f4a2008-08-14 22:15:52 +10001676comment "Random Number Generation"
1677
1678config CRYPTO_ANSI_CPRNG
1679 tristate "Pseudo Random Number Generation for Cryptographic modules"
1680 select CRYPTO_AES
1681 select CRYPTO_RNG
Neil Horman17f0f4a2008-08-14 22:15:52 +10001682 help
1683 This option enables the generic pseudo random number generator
1684 for cryptographic modules. Uses the Algorithm specified in
Jiri Kosina7dd607e2010-01-27 01:00:10 +01001685 ANSI X9.31 A.2.4. Note that this option must be enabled if
1686 CRYPTO_FIPS is selected
Neil Horman17f0f4a2008-08-14 22:15:52 +10001687
Herbert Xuf2c89a12014-07-04 22:15:08 +08001688menuconfig CRYPTO_DRBG_MENU
Stephan Mueller419090c2014-05-31 17:22:31 +02001689 tristate "NIST SP800-90A DRBG"
Stephan Mueller419090c2014-05-31 17:22:31 +02001690 help
1691 NIST SP800-90A compliant DRBG. In the following submenu, one or
1692 more of the DRBG types must be selected.
1693
Herbert Xuf2c89a12014-07-04 22:15:08 +08001694if CRYPTO_DRBG_MENU
Stephan Mueller419090c2014-05-31 17:22:31 +02001695
1696config CRYPTO_DRBG_HMAC
Herbert Xu401e4232015-06-03 14:49:31 +08001697 bool
Stephan Mueller419090c2014-05-31 17:22:31 +02001698 default y
Stephan Mueller419090c2014-05-31 17:22:31 +02001699 select CRYPTO_HMAC
Herbert Xu826775b2015-06-11 08:55:10 +08001700 select CRYPTO_SHA256
Stephan Mueller419090c2014-05-31 17:22:31 +02001701
1702config CRYPTO_DRBG_HASH
1703 bool "Enable Hash DRBG"
Herbert Xu826775b2015-06-11 08:55:10 +08001704 select CRYPTO_SHA256
Stephan Mueller419090c2014-05-31 17:22:31 +02001705 help
1706 Enable the Hash DRBG variant as defined in NIST SP800-90A.
1707
1708config CRYPTO_DRBG_CTR
1709 bool "Enable CTR DRBG"
Stephan Mueller419090c2014-05-31 17:22:31 +02001710 select CRYPTO_AES
Stephan Mueller35591282016-06-14 07:34:13 +02001711 depends on CRYPTO_CTR
Stephan Mueller419090c2014-05-31 17:22:31 +02001712 help
1713 Enable the CTR DRBG variant as defined in NIST SP800-90A.
1714
Herbert Xuf2c89a12014-07-04 22:15:08 +08001715config CRYPTO_DRBG
1716 tristate
Herbert Xu401e4232015-06-03 14:49:31 +08001717 default CRYPTO_DRBG_MENU
Herbert Xuf2c89a12014-07-04 22:15:08 +08001718 select CRYPTO_RNG
Stephan Muellerbb5530e2015-05-25 15:10:20 +02001719 select CRYPTO_JITTERENTROPY
Herbert Xuf2c89a12014-07-04 22:15:08 +08001720
1721endif # if CRYPTO_DRBG_MENU
Stephan Mueller419090c2014-05-31 17:22:31 +02001722
Stephan Muellerbb5530e2015-05-25 15:10:20 +02001723config CRYPTO_JITTERENTROPY
1724 tristate "Jitterentropy Non-Deterministic Random Number Generator"
Arnd Bergmann2f313e02016-01-26 14:47:10 +01001725 select CRYPTO_RNG
Stephan Muellerbb5530e2015-05-25 15:10:20 +02001726 help
1727 The Jitterentropy RNG is a noise that is intended
1728 to provide seed to another RNG. The RNG does not
1729 perform any cryptographic whitening of the generated
1730 random numbers. This Jitterentropy RNG registers with
1731 the kernel crypto API and can be used by any caller.
1732
Herbert Xu03c8efc2010-10-19 21:12:39 +08001733config CRYPTO_USER_API
1734 tristate
1735
Herbert Xufe869cd2010-10-19 21:23:00 +08001736config CRYPTO_USER_API_HASH
1737 tristate "User-space interface for hash algorithms"
Herbert Xu74517082010-11-29 22:56:03 +08001738 depends on NET
Herbert Xufe869cd2010-10-19 21:23:00 +08001739 select CRYPTO_HASH
1740 select CRYPTO_USER_API
1741 help
1742 This option enables the user-spaces interface for hash
1743 algorithms.
1744
Herbert Xu8ff59092010-10-19 21:31:55 +08001745config CRYPTO_USER_API_SKCIPHER
1746 tristate "User-space interface for symmetric key cipher algorithms"
Herbert Xu74517082010-11-29 22:56:03 +08001747 depends on NET
Herbert Xu8ff59092010-10-19 21:31:55 +08001748 select CRYPTO_BLKCIPHER
1749 select CRYPTO_USER_API
1750 help
1751 This option enables the user-spaces interface for symmetric
1752 key cipher algorithms.
1753
Stephan Mueller2f3755382014-12-25 23:00:39 +01001754config CRYPTO_USER_API_RNG
1755 tristate "User-space interface for random number generator algorithms"
1756 depends on NET
1757 select CRYPTO_RNG
1758 select CRYPTO_USER_API
1759 help
1760 This option enables the user-spaces interface for random
1761 number generator algorithms.
1762
Herbert Xub64a2d92015-05-28 11:30:35 +08001763config CRYPTO_USER_API_AEAD
1764 tristate "User-space interface for AEAD cipher algorithms"
1765 depends on NET
1766 select CRYPTO_AEAD
Stephan Mueller72548b02017-07-30 14:32:58 +02001767 select CRYPTO_BLKCIPHER
1768 select CRYPTO_NULL
Herbert Xub64a2d92015-05-28 11:30:35 +08001769 select CRYPTO_USER_API
1770 help
1771 This option enables the user-spaces interface for AEAD
1772 cipher algorithms.
1773
Dmitry Kasatkinee089972013-05-06 15:40:01 +03001774config CRYPTO_HASH_INFO
1775 bool
1776
Linus Torvalds1da177e2005-04-16 15:20:36 -07001777source "drivers/crypto/Kconfig"
David Howells964f3b32012-09-13 15:17:21 +01001778source crypto/asymmetric_keys/Kconfig
David Howellscfc411e2015-08-14 15:20:41 +01001779source certs/Kconfig
Linus Torvalds1da177e2005-04-16 15:20:36 -07001780
Herbert Xucce9e062006-08-21 21:08:13 +10001781endif # if CRYPTO