blob: a379dada495cea17ca4756e8f5dfbd1375751cca [file] [log] [blame]
Linus Torvalds1da177e2005-04-16 15:20:36 -07001#
Dan Williams685784a2007-07-09 11:56:42 -07002# Generic algorithms support
3#
4config XOR_BLOCKS
5 tristate
6
7#
Dan Williams9bc89cd2007-01-02 11:10:44 -07008# async_tx api: hardware offloaded memory transfer/transform support
9#
10source "crypto/async_tx/Kconfig"
11
12#
Linus Torvalds1da177e2005-04-16 15:20:36 -070013# Cryptographic API Configuration
14#
Jan Engelhardt2e290f42007-05-18 15:11:01 +100015menuconfig CRYPTO
Sebastian Siewiorc3715cb92008-03-30 16:36:09 +080016 tristate "Cryptographic API"
Linus Torvalds1da177e2005-04-16 15:20:36 -070017 help
18 This option provides the core Cryptographic API.
19
Herbert Xucce9e062006-08-21 21:08:13 +100020if CRYPTO
21
Sebastian Siewior584fffc2008-04-05 21:04:48 +080022comment "Crypto core or helper"
23
Neil Hormanccb778e2008-08-05 14:13:08 +080024config CRYPTO_FIPS
25 bool "FIPS 200 compliance"
Chuck Ebberte84c5482010-09-03 19:17:49 +080026 depends on CRYPTO_ANSI_CPRNG && !CRYPTO_MANAGER_DISABLE_TESTS
Neil Hormanccb778e2008-08-05 14:13:08 +080027 help
28 This options enables the fips boot option which is
29 required if you want to system to operate in a FIPS 200
30 certification. You should say no unless you know what
Chuck Ebberte84c5482010-09-03 19:17:49 +080031 this is.
Neil Hormanccb778e2008-08-05 14:13:08 +080032
Herbert Xucce9e062006-08-21 21:08:13 +100033config CRYPTO_ALGAPI
34 tristate
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110035 select CRYPTO_ALGAPI2
Herbert Xucce9e062006-08-21 21:08:13 +100036 help
37 This option provides the API for cryptographic algorithms.
38
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110039config CRYPTO_ALGAPI2
40 tristate
41
Herbert Xu1ae97822007-08-30 15:36:14 +080042config CRYPTO_AEAD
43 tristate
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110044 select CRYPTO_AEAD2
Herbert Xu1ae97822007-08-30 15:36:14 +080045 select CRYPTO_ALGAPI
46
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110047config CRYPTO_AEAD2
48 tristate
49 select CRYPTO_ALGAPI2
50
Herbert Xu5cde0af2006-08-22 00:07:53 +100051config CRYPTO_BLKCIPHER
52 tristate
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110053 select CRYPTO_BLKCIPHER2
Herbert Xu5cde0af2006-08-22 00:07:53 +100054 select CRYPTO_ALGAPI
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110055
56config CRYPTO_BLKCIPHER2
57 tristate
58 select CRYPTO_ALGAPI2
59 select CRYPTO_RNG2
Huang Ying0a2e8212009-02-19 14:44:02 +080060 select CRYPTO_WORKQUEUE
Herbert Xu5cde0af2006-08-22 00:07:53 +100061
Herbert Xu055bcee2006-08-19 22:24:23 +100062config CRYPTO_HASH
63 tristate
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110064 select CRYPTO_HASH2
Herbert Xu055bcee2006-08-19 22:24:23 +100065 select CRYPTO_ALGAPI
66
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110067config CRYPTO_HASH2
68 tristate
69 select CRYPTO_ALGAPI2
70
Neil Horman17f0f4a2008-08-14 22:15:52 +100071config CRYPTO_RNG
72 tristate
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110073 select CRYPTO_RNG2
Neil Horman17f0f4a2008-08-14 22:15:52 +100074 select CRYPTO_ALGAPI
75
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110076config CRYPTO_RNG2
77 tristate
78 select CRYPTO_ALGAPI2
79
Geert Uytterhoevena1d2f092009-03-04 15:05:33 +080080config CRYPTO_PCOMP
81 tristate
Herbert Xubc94e592010-06-03 20:33:06 +100082 select CRYPTO_PCOMP2
83 select CRYPTO_ALGAPI
84
85config CRYPTO_PCOMP2
86 tristate
Geert Uytterhoevena1d2f092009-03-04 15:05:33 +080087 select CRYPTO_ALGAPI2
88
Herbert Xu2b8c19d2006-09-21 11:31:44 +100089config CRYPTO_MANAGER
90 tristate "Cryptographic algorithm manager"
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110091 select CRYPTO_MANAGER2
Herbert Xu2b8c19d2006-09-21 11:31:44 +100092 help
93 Create default cryptographic template instantiations such as
94 cbc(aes).
95
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110096config CRYPTO_MANAGER2
97 def_tristate CRYPTO_MANAGER || (CRYPTO_MANAGER!=n && CRYPTO_ALGAPI=y)
98 select CRYPTO_AEAD2
99 select CRYPTO_HASH2
100 select CRYPTO_BLKCIPHER2
Herbert Xubc94e592010-06-03 20:33:06 +1000101 select CRYPTO_PCOMP2
Herbert Xu6a0fcbb2008-12-10 23:29:44 +1100102
Steffen Klasserta38f7902011-09-27 07:23:50 +0200103config CRYPTO_USER
104 tristate "Userspace cryptographic algorithm configuration"
Herbert Xu5db017a2011-11-01 12:12:43 +1100105 depends on NET
Steffen Klasserta38f7902011-09-27 07:23:50 +0200106 select CRYPTO_MANAGER
107 help
Valdis.Kletnieks@vt.edud19978f2011-11-09 01:29:20 -0500108 Userspace configuration for cryptographic instantiations such as
Steffen Klasserta38f7902011-09-27 07:23:50 +0200109 cbc(aes).
110
Herbert Xu326a6342010-08-06 09:40:28 +0800111config CRYPTO_MANAGER_DISABLE_TESTS
112 bool "Disable run-time self tests"
Herbert Xu00ca28a2010-08-06 10:34:00 +0800113 default y
114 depends on CRYPTO_MANAGER2
Alexander Shishkin0b767f92010-06-03 20:53:43 +1000115 help
Herbert Xu326a6342010-08-06 09:40:28 +0800116 Disable run-time self tests that normally take place at
117 algorithm registration.
Alexander Shishkin0b767f92010-06-03 20:53:43 +1000118
Rik Snelc494e072006-11-29 18:59:44 +1100119config CRYPTO_GF128MUL
Jussi Kivilinna08c70fc2011-12-13 12:53:22 +0200120 tristate "GF(2^128) multiplication functions"
Rik Snelc494e072006-11-29 18:59:44 +1100121 help
122 Efficient table driven implementation of multiplications in the
123 field GF(2^128). This is needed by some cypher modes. This
124 option will be selected automatically if you select such a
125 cipher mode. Only select this option by hand if you expect to load
126 an external module that requires these functions.
127
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800128config CRYPTO_NULL
129 tristate "Null algorithms"
130 select CRYPTO_ALGAPI
131 select CRYPTO_BLKCIPHER
Herbert Xud35d2452008-11-08 08:09:56 +0800132 select CRYPTO_HASH
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800133 help
134 These are 'Null' algorithms, used by IPsec, which do nothing.
135
Steffen Klassert5068c7a2010-01-07 15:57:19 +1100136config CRYPTO_PCRYPT
Kees Cook3b4afaf2012-10-02 11:16:49 -0700137 tristate "Parallel crypto engine"
138 depends on SMP
Steffen Klassert5068c7a2010-01-07 15:57:19 +1100139 select PADATA
140 select CRYPTO_MANAGER
141 select CRYPTO_AEAD
142 help
143 This converts an arbitrary crypto algorithm into a parallel
144 algorithm that executes in kernel threads.
145
Huang Ying25c38d32009-02-19 14:33:40 +0800146config CRYPTO_WORKQUEUE
147 tristate
148
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800149config CRYPTO_CRYPTD
150 tristate "Software async crypto daemon"
Herbert Xudb131ef2006-09-21 11:44:08 +1000151 select CRYPTO_BLKCIPHER
Loc Hob8a28252008-05-14 21:23:00 +0800152 select CRYPTO_HASH
Herbert Xu43518402006-10-16 21:28:58 +1000153 select CRYPTO_MANAGER
Huang Ying254eff72009-02-19 14:42:19 +0800154 select CRYPTO_WORKQUEUE
Herbert Xudb131ef2006-09-21 11:44:08 +1000155 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800156 This is a generic software asynchronous crypto daemon that
157 converts an arbitrary synchronous software crypto algorithm
158 into an asynchronous algorithm that executes in a kernel thread.
159
160config CRYPTO_AUTHENC
161 tristate "Authenc support"
162 select CRYPTO_AEAD
163 select CRYPTO_BLKCIPHER
164 select CRYPTO_MANAGER
165 select CRYPTO_HASH
166 help
167 Authenc: Combined mode wrapper for IPsec.
168 This is required for IPSec.
169
170config CRYPTO_TEST
171 tristate "Testing module"
172 depends on m
Herbert Xuda7f0332008-07-31 17:08:25 +0800173 select CRYPTO_MANAGER
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800174 help
175 Quick & dirty crypto test module.
176
Ard Biesheuvela62b01c2013-09-20 09:55:40 +0200177config CRYPTO_ABLK_HELPER
Jussi Kivilinnaffaf9152012-06-18 14:06:58 +0300178 tristate
Jussi Kivilinnaffaf9152012-06-18 14:06:58 +0300179 select CRYPTO_CRYPTD
180
Jussi Kivilinna596d8752012-06-18 14:07:19 +0300181config CRYPTO_GLUE_HELPER_X86
182 tristate
183 depends on X86
184 select CRYPTO_ALGAPI
185
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800186comment "Authenticated Encryption with Associated Data"
187
188config CRYPTO_CCM
189 tristate "CCM support"
190 select CRYPTO_CTR
191 select CRYPTO_AEAD
192 help
193 Support for Counter with CBC MAC. Required for IPsec.
194
195config CRYPTO_GCM
196 tristate "GCM/GMAC support"
197 select CRYPTO_CTR
198 select CRYPTO_AEAD
Huang Ying9382d972009-08-06 15:34:26 +1000199 select CRYPTO_GHASH
Jussi Kivilinna9489667d2013-04-07 16:43:41 +0300200 select CRYPTO_NULL
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800201 help
202 Support for Galois/Counter Mode (GCM) and Galois Message
203 Authentication Code (GMAC). Required for IPSec.
204
205config CRYPTO_SEQIV
206 tristate "Sequence Number IV Generator"
207 select CRYPTO_AEAD
208 select CRYPTO_BLKCIPHER
Herbert Xua0f000e2008-08-14 22:21:31 +1000209 select CRYPTO_RNG
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800210 help
211 This IV generator generates an IV based on a sequence number by
212 xoring it with a salt. This algorithm is mainly useful for CTR
213
214comment "Block modes"
Herbert Xudb131ef2006-09-21 11:44:08 +1000215
216config CRYPTO_CBC
217 tristate "CBC support"
218 select CRYPTO_BLKCIPHER
Herbert Xu43518402006-10-16 21:28:58 +1000219 select CRYPTO_MANAGER
Herbert Xudb131ef2006-09-21 11:44:08 +1000220 help
221 CBC: Cipher Block Chaining mode
222 This block cipher algorithm is required for IPSec.
223
Joy Latten23e353c2007-10-23 08:50:32 +0800224config CRYPTO_CTR
225 tristate "CTR support"
226 select CRYPTO_BLKCIPHER
Herbert Xu0a270322007-11-30 21:38:37 +1100227 select CRYPTO_SEQIV
Joy Latten23e353c2007-10-23 08:50:32 +0800228 select CRYPTO_MANAGER
Joy Latten23e353c2007-10-23 08:50:32 +0800229 help
230 CTR: Counter mode
231 This block cipher algorithm is required for IPSec.
232
Kevin Coffman76cb9522008-03-24 21:26:16 +0800233config CRYPTO_CTS
234 tristate "CTS support"
235 select CRYPTO_BLKCIPHER
236 help
237 CTS: Cipher Text Stealing
238 This is the Cipher Text Stealing mode as described by
239 Section 8 of rfc2040 and referenced by rfc3962.
240 (rfc3962 includes errata information in its Appendix A)
241 This mode is required for Kerberos gss mechanism support
242 for AES encryption.
243
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800244config CRYPTO_ECB
245 tristate "ECB support"
Herbert Xu653ebd92007-11-27 19:48:27 +0800246 select CRYPTO_BLKCIPHER
Herbert Xu124b53d2007-04-16 20:49:20 +1000247 select CRYPTO_MANAGER
248 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800249 ECB: Electronic CodeBook mode
250 This is the simplest block cipher algorithm. It simply encrypts
251 the input block by block.
Herbert Xu124b53d2007-04-16 20:49:20 +1000252
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800253config CRYPTO_LRW
Jussi Kivilinna2470a2b2011-12-13 12:52:51 +0200254 tristate "LRW support"
David Howells90831632006-12-16 12:13:14 +1100255 select CRYPTO_BLKCIPHER
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800256 select CRYPTO_MANAGER
257 select CRYPTO_GF128MUL
David Howells90831632006-12-16 12:13:14 +1100258 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800259 LRW: Liskov Rivest Wagner, a tweakable, non malleable, non movable
260 narrow block cipher mode for dm-crypt. Use it with cipher
261 specification string aes-lrw-benbi, the key must be 256, 320 or 384.
262 The first 128, 192 or 256 bits in the key are used for AES and the
263 rest is used to tie each cipher block to its logical position.
David Howells90831632006-12-16 12:13:14 +1100264
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800265config CRYPTO_PCBC
266 tristate "PCBC support"
267 select CRYPTO_BLKCIPHER
268 select CRYPTO_MANAGER
269 help
270 PCBC: Propagating Cipher Block Chaining mode
271 This block cipher algorithm is required for RxRPC.
272
273config CRYPTO_XTS
Jussi Kivilinna5bcf8e62011-12-13 12:52:56 +0200274 tristate "XTS support"
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800275 select CRYPTO_BLKCIPHER
276 select CRYPTO_MANAGER
277 select CRYPTO_GF128MUL
278 help
279 XTS: IEEE1619/D16 narrow block cipher use with aes-xts-plain,
280 key size 256, 384 or 512 bits. This implementation currently
281 can't handle a sectorsize which is not a multiple of 16 bytes.
282
283comment "Hash modes"
284
Jussi Kivilinna93b5e862013-04-08 10:48:44 +0300285config CRYPTO_CMAC
286 tristate "CMAC support"
287 select CRYPTO_HASH
288 select CRYPTO_MANAGER
289 help
290 Cipher-based Message Authentication Code (CMAC) specified by
291 The National Institute of Standards and Technology (NIST).
292
293 https://tools.ietf.org/html/rfc4493
294 http://csrc.nist.gov/publications/nistpubs/800-38B/SP_800-38B.pdf
295
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800296config CRYPTO_HMAC
297 tristate "HMAC support"
298 select CRYPTO_HASH
299 select CRYPTO_MANAGER
300 help
301 HMAC: Keyed-Hashing for Message Authentication (RFC2104).
302 This is required for IPSec.
303
304config CRYPTO_XCBC
305 tristate "XCBC support"
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800306 select CRYPTO_HASH
307 select CRYPTO_MANAGER
308 help
309 XCBC: Keyed-Hashing with encryption algorithm
310 http://www.ietf.org/rfc/rfc3566.txt
311 http://csrc.nist.gov/encryption/modes/proposedmodes/
312 xcbc-mac/xcbc-mac-spec.pdf
313
Shane Wangf1939f72009-09-02 20:05:22 +1000314config CRYPTO_VMAC
315 tristate "VMAC support"
Shane Wangf1939f72009-09-02 20:05:22 +1000316 select CRYPTO_HASH
317 select CRYPTO_MANAGER
318 help
319 VMAC is a message authentication algorithm designed for
320 very high speed on 64-bit architectures.
321
322 See also:
323 <http://fastcrypto.org/vmac>
324
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800325comment "Digest"
326
327config CRYPTO_CRC32C
328 tristate "CRC32c CRC algorithm"
Herbert Xu5773a3e2008-07-08 20:54:28 +0800329 select CRYPTO_HASH
Darrick J. Wong6a0962b2012-03-23 15:02:25 -0700330 select CRC32
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800331 help
332 Castagnoli, et al Cyclic Redundancy-Check Algorithm. Used
333 by iSCSI for header and data digests and by others.
Herbert Xu69c35ef2008-11-07 15:11:47 +0800334 See Castagnoli93. Module will be crc32c.
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800335
Austin Zhang8cb51ba2008-08-07 09:57:03 +0800336config CRYPTO_CRC32C_INTEL
337 tristate "CRC32c INTEL hardware acceleration"
338 depends on X86
339 select CRYPTO_HASH
340 help
341 In Intel processor with SSE4.2 supported, the processor will
342 support CRC32C implementation using hardware accelerated CRC32
343 instruction. This option will create 'crc32c-intel' module,
344 which will enable any routine to use the CRC32 instruction to
345 gain performance compared with software implementation.
346 Module will be crc32c-intel.
347
David S. Miller442a7c42012-08-22 20:47:36 -0700348config CRYPTO_CRC32C_SPARC64
349 tristate "CRC32c CRC algorithm (SPARC64)"
350 depends on SPARC64
351 select CRYPTO_HASH
352 select CRC32
353 help
354 CRC32c CRC algorithm implemented using sparc64 crypto instructions,
355 when available.
356
Alexander Boyko78c37d12013-01-10 18:54:59 +0400357config CRYPTO_CRC32
358 tristate "CRC32 CRC algorithm"
359 select CRYPTO_HASH
360 select CRC32
361 help
362 CRC-32-IEEE 802.3 cyclic redundancy-check algorithm.
363 Shash crypto api wrappers to crc32_le function.
364
365config CRYPTO_CRC32_PCLMUL
366 tristate "CRC32 PCLMULQDQ hardware acceleration"
367 depends on X86
368 select CRYPTO_HASH
369 select CRC32
370 help
371 From Intel Westmere and AMD Bulldozer processor with SSE4.2
372 and PCLMULQDQ supported, the processor will support
373 CRC32 PCLMULQDQ implementation using hardware accelerated PCLMULQDQ
374 instruction. This option will create 'crc32-plcmul' module,
375 which will enable any routine to use the CRC-32-IEEE 802.3 checksum
376 and gain better performance as compared with the table implementation.
377
Herbert Xu684115212013-09-07 12:56:26 +1000378config CRYPTO_CRCT10DIF
379 tristate "CRCT10DIF algorithm"
380 select CRYPTO_HASH
381 help
382 CRC T10 Data Integrity Field computation is being cast as
383 a crypto transform. This allows for faster crc t10 diff
384 transforms to be used if they are available.
385
386config CRYPTO_CRCT10DIF_PCLMUL
387 tristate "CRCT10DIF PCLMULQDQ hardware acceleration"
388 depends on X86 && 64BIT && CRC_T10DIF
389 select CRYPTO_HASH
390 help
391 For x86_64 processors with SSE4.2 and PCLMULQDQ supported,
392 CRC T10 DIF PCLMULQDQ computation can be hardware
393 accelerated PCLMULQDQ instruction. This option will create
394 'crct10dif-plcmul' module, which is faster when computing the
395 crct10dif checksum as compared with the generic table implementation.
396
Huang Ying2cdc6892009-08-06 15:32:38 +1000397config CRYPTO_GHASH
398 tristate "GHASH digest algorithm"
Huang Ying2cdc6892009-08-06 15:32:38 +1000399 select CRYPTO_GF128MUL
400 help
401 GHASH is message digest algorithm for GCM (Galois/Counter Mode).
402
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800403config CRYPTO_MD4
404 tristate "MD4 digest algorithm"
Adrian-Ken Rueegsegger808a1762008-12-03 19:55:27 +0800405 select CRYPTO_HASH
Linus Torvalds1da177e2005-04-16 15:20:36 -0700406 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800407 MD4 message digest algorithm (RFC1320).
Linus Torvalds1da177e2005-04-16 15:20:36 -0700408
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800409config CRYPTO_MD5
410 tristate "MD5 digest algorithm"
Adrian-Ken Rueegsegger14b75ba2008-12-03 19:57:12 +0800411 select CRYPTO_HASH
Linus Torvalds1da177e2005-04-16 15:20:36 -0700412 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800413 MD5 message digest algorithm (RFC1321).
Linus Torvalds1da177e2005-04-16 15:20:36 -0700414
David S. Millerfa4dfed2012-08-19 21:51:26 -0700415config CRYPTO_MD5_SPARC64
416 tristate "MD5 digest algorithm (SPARC64)"
417 depends on SPARC64
418 select CRYPTO_MD5
419 select CRYPTO_HASH
420 help
421 MD5 message digest algorithm (RFC1321) implemented
422 using sparc64 crypto instructions, when available.
423
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800424config CRYPTO_MICHAEL_MIC
425 tristate "Michael MIC keyed digest algorithm"
Adrian-Ken Rueegsegger19e2bf12008-12-07 19:35:38 +0800426 select CRYPTO_HASH
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800427 help
428 Michael MIC is used for message integrity protection in TKIP
429 (IEEE 802.11i). This algorithm is required for TKIP, but it
430 should not be used for other purposes because of the weakness
431 of the algorithm.
432
Adrian-Ken Rueegsegger82798f92008-05-07 22:17:37 +0800433config CRYPTO_RMD128
Adrian Bunkb6d44342008-07-16 19:28:00 +0800434 tristate "RIPEMD-128 digest algorithm"
Herbert Xu7c4468b2008-11-08 09:10:40 +0800435 select CRYPTO_HASH
Adrian Bunkb6d44342008-07-16 19:28:00 +0800436 help
437 RIPEMD-128 (ISO/IEC 10118-3:2004).
Adrian-Ken Rueegsegger82798f92008-05-07 22:17:37 +0800438
Adrian Bunkb6d44342008-07-16 19:28:00 +0800439 RIPEMD-128 is a 128-bit cryptographic hash function. It should only
Michael Witten35ed4b32011-07-09 04:02:31 +0000440 be used as a secure replacement for RIPEMD. For other use cases,
Adrian Bunkb6d44342008-07-16 19:28:00 +0800441 RIPEMD-160 should be used.
Adrian-Ken Rueegsegger82798f92008-05-07 22:17:37 +0800442
Adrian Bunkb6d44342008-07-16 19:28:00 +0800443 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
Justin P. Mattock6d8de742010-09-12 10:42:47 +0800444 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
Adrian-Ken Rueegsegger82798f92008-05-07 22:17:37 +0800445
446config CRYPTO_RMD160
Adrian Bunkb6d44342008-07-16 19:28:00 +0800447 tristate "RIPEMD-160 digest algorithm"
Herbert Xue5835fb2008-11-08 09:18:51 +0800448 select CRYPTO_HASH
Adrian Bunkb6d44342008-07-16 19:28:00 +0800449 help
450 RIPEMD-160 (ISO/IEC 10118-3:2004).
Adrian-Ken Rueegsegger82798f92008-05-07 22:17:37 +0800451
Adrian Bunkb6d44342008-07-16 19:28:00 +0800452 RIPEMD-160 is a 160-bit cryptographic hash function. It is intended
453 to be used as a secure replacement for the 128-bit hash functions
454 MD4, MD5 and it's predecessor RIPEMD
455 (not to be confused with RIPEMD-128).
Adrian-Ken Rueegsegger82798f92008-05-07 22:17:37 +0800456
Adrian Bunkb6d44342008-07-16 19:28:00 +0800457 It's speed is comparable to SHA1 and there are no known attacks
458 against RIPEMD-160.
Adrian-Ken Rueegsegger534fe2c2008-05-09 21:30:27 +0800459
Adrian Bunkb6d44342008-07-16 19:28:00 +0800460 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
Justin P. Mattock6d8de742010-09-12 10:42:47 +0800461 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
Adrian-Ken Rueegsegger534fe2c2008-05-09 21:30:27 +0800462
463config CRYPTO_RMD256
Adrian Bunkb6d44342008-07-16 19:28:00 +0800464 tristate "RIPEMD-256 digest algorithm"
Herbert Xud8a5e2e2008-11-08 09:58:10 +0800465 select CRYPTO_HASH
Adrian Bunkb6d44342008-07-16 19:28:00 +0800466 help
467 RIPEMD-256 is an optional extension of RIPEMD-128 with a
468 256 bit hash. It is intended for applications that require
469 longer hash-results, without needing a larger security level
470 (than RIPEMD-128).
Adrian-Ken Rueegsegger534fe2c2008-05-09 21:30:27 +0800471
Adrian Bunkb6d44342008-07-16 19:28:00 +0800472 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
Justin P. Mattock6d8de742010-09-12 10:42:47 +0800473 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
Adrian-Ken Rueegsegger534fe2c2008-05-09 21:30:27 +0800474
475config CRYPTO_RMD320
Adrian Bunkb6d44342008-07-16 19:28:00 +0800476 tristate "RIPEMD-320 digest algorithm"
Herbert Xu3b8efb42008-11-08 10:11:09 +0800477 select CRYPTO_HASH
Adrian Bunkb6d44342008-07-16 19:28:00 +0800478 help
479 RIPEMD-320 is an optional extension of RIPEMD-160 with a
480 320 bit hash. It is intended for applications that require
481 longer hash-results, without needing a larger security level
482 (than RIPEMD-160).
Adrian-Ken Rueegsegger534fe2c2008-05-09 21:30:27 +0800483
Adrian Bunkb6d44342008-07-16 19:28:00 +0800484 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
Justin P. Mattock6d8de742010-09-12 10:42:47 +0800485 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
Adrian-Ken Rueegsegger82798f92008-05-07 22:17:37 +0800486
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800487config CRYPTO_SHA1
488 tristate "SHA1 digest algorithm"
Adrian-Ken Rueegsegger54ccb362008-12-02 21:08:20 +0800489 select CRYPTO_HASH
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800490 help
491 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2).
492
Mathias Krause66be8952011-08-04 20:19:25 +0200493config CRYPTO_SHA1_SSSE3
chandramouli narayanan7c1da8d2014-03-20 15:14:00 -0700494 tristate "SHA1 digest algorithm (SSSE3/AVX/AVX2)"
Mathias Krause66be8952011-08-04 20:19:25 +0200495 depends on X86 && 64BIT
496 select CRYPTO_SHA1
497 select CRYPTO_HASH
498 help
499 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented
500 using Supplemental SSE3 (SSSE3) instructions or Advanced Vector
chandramouli narayanan7c1da8d2014-03-20 15:14:00 -0700501 Extensions (AVX/AVX2), when available.
Mathias Krause66be8952011-08-04 20:19:25 +0200502
Tim Chen8275d1a2013-03-26 13:59:17 -0700503config CRYPTO_SHA256_SSSE3
504 tristate "SHA256 digest algorithm (SSSE3/AVX/AVX2)"
505 depends on X86 && 64BIT
506 select CRYPTO_SHA256
507 select CRYPTO_HASH
508 help
509 SHA-256 secure hash standard (DFIPS 180-2) implemented
510 using Supplemental SSE3 (SSSE3) instructions, or Advanced Vector
511 Extensions version 1 (AVX1), or Advanced Vector Extensions
512 version 2 (AVX2) instructions, when available.
513
Tim Chen87de4572013-03-26 14:00:02 -0700514config CRYPTO_SHA512_SSSE3
515 tristate "SHA512 digest algorithm (SSSE3/AVX/AVX2)"
516 depends on X86 && 64BIT
517 select CRYPTO_SHA512
518 select CRYPTO_HASH
519 help
520 SHA-512 secure hash standard (DFIPS 180-2) implemented
521 using Supplemental SSE3 (SSSE3) instructions, or Advanced Vector
522 Extensions version 1 (AVX1), or Advanced Vector Extensions
523 version 2 (AVX2) instructions, when available.
524
David S. Miller4ff28d42012-08-19 15:41:53 -0700525config CRYPTO_SHA1_SPARC64
526 tristate "SHA1 digest algorithm (SPARC64)"
527 depends on SPARC64
528 select CRYPTO_SHA1
529 select CRYPTO_HASH
530 help
531 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented
532 using sparc64 crypto instructions, when available.
533
David McCulloughf0be44f2012-09-07 04:17:02 +0800534config CRYPTO_SHA1_ARM
535 tristate "SHA1 digest algorithm (ARM-asm)"
536 depends on ARM
537 select CRYPTO_SHA1
538 select CRYPTO_HASH
539 help
540 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented
541 using optimized ARM assembler.
542
Jussi Kivilinna60468252014-07-29 17:14:14 +0100543config CRYPTO_SHA1_ARM_NEON
544 tristate "SHA1 digest algorithm (ARM NEON)"
545 depends on ARM && KERNEL_MODE_NEON && !CPU_BIG_ENDIAN
546 select CRYPTO_SHA1_ARM
547 select CRYPTO_SHA1
548 select CRYPTO_HASH
549 help
550 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented
551 using optimized ARM NEON assembly, when NEON instructions are
552 available.
553
Michael Ellerman323a6bf2012-09-13 23:00:49 +0000554config CRYPTO_SHA1_PPC
555 tristate "SHA1 digest algorithm (powerpc)"
556 depends on PPC
557 help
558 This is the powerpc hardware accelerated implementation of the
559 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2).
560
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800561config CRYPTO_SHA256
562 tristate "SHA224 and SHA256 digest algorithm"
Adrian-Ken Rueegsegger50e109b52008-12-03 19:57:49 +0800563 select CRYPTO_HASH
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800564 help
565 SHA256 secure hash standard (DFIPS 180-2).
566
567 This version of SHA implements a 256 bit hash with 128 bits of
568 security against collision attacks.
569
Adrian Bunkb6d44342008-07-16 19:28:00 +0800570 This code also includes SHA-224, a 224 bit hash with 112 bits
571 of security against collision attacks.
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800572
David S. Miller86c93b22012-08-19 17:11:37 -0700573config CRYPTO_SHA256_SPARC64
574 tristate "SHA224 and SHA256 digest algorithm (SPARC64)"
575 depends on SPARC64
576 select CRYPTO_SHA256
577 select CRYPTO_HASH
578 help
579 SHA-256 secure hash standard (DFIPS 180-2) implemented
580 using sparc64 crypto instructions, when available.
581
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800582config CRYPTO_SHA512
583 tristate "SHA384 and SHA512 digest algorithms"
Adrian-Ken Rueegseggerbd9d20d2008-12-17 16:49:02 +1100584 select CRYPTO_HASH
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800585 help
586 SHA512 secure hash standard (DFIPS 180-2).
587
588 This version of SHA implements a 512 bit hash with 256 bits of
589 security against collision attacks.
590
591 This code also includes SHA-384, a 384 bit hash with 192 bits
592 of security against collision attacks.
593
David S. Miller775e0c62012-08-19 17:37:56 -0700594config CRYPTO_SHA512_SPARC64
595 tristate "SHA384 and SHA512 digest algorithm (SPARC64)"
596 depends on SPARC64
597 select CRYPTO_SHA512
598 select CRYPTO_HASH
599 help
600 SHA-512 secure hash standard (DFIPS 180-2) implemented
601 using sparc64 crypto instructions, when available.
602
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800603config CRYPTO_TGR192
604 tristate "Tiger digest algorithms"
Adrian-Ken Rueegseggerf63fbd32008-12-03 19:58:32 +0800605 select CRYPTO_HASH
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800606 help
607 Tiger hash algorithm 192, 160 and 128-bit hashes
608
609 Tiger is a hash function optimized for 64-bit processors while
610 still having decent performance on 32-bit processors.
611 Tiger was developed by Ross Anderson and Eli Biham.
Linus Torvalds1da177e2005-04-16 15:20:36 -0700612
613 See also:
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800614 <http://www.cs.technion.ac.il/~biham/Reports/Tiger/>.
615
616config CRYPTO_WP512
617 tristate "Whirlpool digest algorithms"
Adrian-Ken Rueegsegger49465102008-12-07 19:34:37 +0800618 select CRYPTO_HASH
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800619 help
620 Whirlpool hash algorithm 512, 384 and 256-bit hashes
621
622 Whirlpool-512 is part of the NESSIE cryptographic primitives.
623 Whirlpool will be part of the ISO/IEC 10118-3:2003(E) standard
624
625 See also:
Justin P. Mattock6d8de742010-09-12 10:42:47 +0800626 <http://www.larc.usp.br/~pbarreto/WhirlpoolPage.html>
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800627
Huang Ying0e1227d2009-10-19 11:53:06 +0900628config CRYPTO_GHASH_CLMUL_NI_INTEL
629 tristate "GHASH digest algorithm (CLMUL-NI accelerated)"
Richard Weinberger8af00862011-06-08 20:56:29 +0800630 depends on X86 && 64BIT
Huang Ying0e1227d2009-10-19 11:53:06 +0900631 select CRYPTO_CRYPTD
632 help
633 GHASH is message digest algorithm for GCM (Galois/Counter Mode).
634 The implementation is accelerated by CLMUL-NI of Intel.
635
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800636comment "Ciphers"
Linus Torvalds1da177e2005-04-16 15:20:36 -0700637
638config CRYPTO_AES
639 tristate "AES cipher algorithms"
Herbert Xucce9e062006-08-21 21:08:13 +1000640 select CRYPTO_ALGAPI
Linus Torvalds1da177e2005-04-16 15:20:36 -0700641 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800642 AES cipher algorithms (FIPS-197). AES uses the Rijndael
Linus Torvalds1da177e2005-04-16 15:20:36 -0700643 algorithm.
644
645 Rijndael appears to be consistently a very good performer in
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800646 both hardware and software across a wide range of computing
647 environments regardless of its use in feedback or non-feedback
648 modes. Its key setup time is excellent, and its key agility is
649 good. Rijndael's very low memory requirements make it very well
650 suited for restricted-space environments, in which it also
651 demonstrates excellent performance. Rijndael's operations are
652 among the easiest to defend against power and timing attacks.
Linus Torvalds1da177e2005-04-16 15:20:36 -0700653
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800654 The AES specifies three key sizes: 128, 192 and 256 bits
Linus Torvalds1da177e2005-04-16 15:20:36 -0700655
656 See <http://csrc.nist.gov/CryptoToolkit/aes/> for more information.
657
658config CRYPTO_AES_586
659 tristate "AES cipher algorithms (i586)"
Herbert Xucce9e062006-08-21 21:08:13 +1000660 depends on (X86 || UML_X86) && !64BIT
661 select CRYPTO_ALGAPI
Sebastian Siewior5157dea2007-11-10 19:07:16 +0800662 select CRYPTO_AES
Linus Torvalds1da177e2005-04-16 15:20:36 -0700663 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800664 AES cipher algorithms (FIPS-197). AES uses the Rijndael
Linus Torvalds1da177e2005-04-16 15:20:36 -0700665 algorithm.
666
667 Rijndael appears to be consistently a very good performer in
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800668 both hardware and software across a wide range of computing
669 environments regardless of its use in feedback or non-feedback
670 modes. Its key setup time is excellent, and its key agility is
671 good. Rijndael's very low memory requirements make it very well
672 suited for restricted-space environments, in which it also
673 demonstrates excellent performance. Rijndael's operations are
674 among the easiest to defend against power and timing attacks.
Linus Torvalds1da177e2005-04-16 15:20:36 -0700675
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800676 The AES specifies three key sizes: 128, 192 and 256 bits
Linus Torvalds1da177e2005-04-16 15:20:36 -0700677
678 See <http://csrc.nist.gov/encryption/aes/> for more information.
679
Andreas Steinmetza2a892a2005-07-06 13:55:00 -0700680config CRYPTO_AES_X86_64
681 tristate "AES cipher algorithms (x86_64)"
Herbert Xucce9e062006-08-21 21:08:13 +1000682 depends on (X86 || UML_X86) && 64BIT
683 select CRYPTO_ALGAPI
Sebastian Siewior81190b32007-11-08 21:25:04 +0800684 select CRYPTO_AES
Andreas Steinmetza2a892a2005-07-06 13:55:00 -0700685 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800686 AES cipher algorithms (FIPS-197). AES uses the Rijndael
Andreas Steinmetza2a892a2005-07-06 13:55:00 -0700687 algorithm.
688
689 Rijndael appears to be consistently a very good performer in
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800690 both hardware and software across a wide range of computing
691 environments regardless of its use in feedback or non-feedback
692 modes. Its key setup time is excellent, and its key agility is
693 good. Rijndael's very low memory requirements make it very well
694 suited for restricted-space environments, in which it also
695 demonstrates excellent performance. Rijndael's operations are
696 among the easiest to defend against power and timing attacks.
Andreas Steinmetza2a892a2005-07-06 13:55:00 -0700697
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800698 The AES specifies three key sizes: 128, 192 and 256 bits
Andreas Steinmetza2a892a2005-07-06 13:55:00 -0700699
700 See <http://csrc.nist.gov/encryption/aes/> for more information.
701
Huang Ying54b6a1b2009-01-18 16:28:34 +1100702config CRYPTO_AES_NI_INTEL
703 tristate "AES cipher algorithms (AES-NI)"
Richard Weinberger8af00862011-06-08 20:56:29 +0800704 depends on X86
Mathias Krause0d258ef2010-11-27 16:34:46 +0800705 select CRYPTO_AES_X86_64 if 64BIT
706 select CRYPTO_AES_586 if !64BIT
Huang Ying54b6a1b2009-01-18 16:28:34 +1100707 select CRYPTO_CRYPTD
Ard Biesheuvel801201a2013-09-20 09:55:41 +0200708 select CRYPTO_ABLK_HELPER
Huang Ying54b6a1b2009-01-18 16:28:34 +1100709 select CRYPTO_ALGAPI
Jussi Kivilinna7643a112013-04-10 18:39:20 +0300710 select CRYPTO_GLUE_HELPER_X86 if 64BIT
Jussi Kivilinna023af602012-07-22 18:18:37 +0300711 select CRYPTO_LRW
712 select CRYPTO_XTS
Huang Ying54b6a1b2009-01-18 16:28:34 +1100713 help
714 Use Intel AES-NI instructions for AES algorithm.
715
716 AES cipher algorithms (FIPS-197). AES uses the Rijndael
717 algorithm.
718
719 Rijndael appears to be consistently a very good performer in
720 both hardware and software across a wide range of computing
721 environments regardless of its use in feedback or non-feedback
722 modes. Its key setup time is excellent, and its key agility is
723 good. Rijndael's very low memory requirements make it very well
724 suited for restricted-space environments, in which it also
725 demonstrates excellent performance. Rijndael's operations are
726 among the easiest to defend against power and timing attacks.
727
728 The AES specifies three key sizes: 128, 192 and 256 bits
729
730 See <http://csrc.nist.gov/encryption/aes/> for more information.
731
Mathias Krause0d258ef2010-11-27 16:34:46 +0800732 In addition to AES cipher algorithm support, the acceleration
733 for some popular block cipher mode is supported too, including
734 ECB, CBC, LRW, PCBC, XTS. The 64 bit version has additional
735 acceleration for CTR.
Huang Ying2cf4ac82009-03-29 15:41:20 +0800736
David S. Miller9bf48522012-08-21 03:58:13 -0700737config CRYPTO_AES_SPARC64
738 tristate "AES cipher algorithms (SPARC64)"
739 depends on SPARC64
740 select CRYPTO_CRYPTD
741 select CRYPTO_ALGAPI
742 help
743 Use SPARC64 crypto opcodes for AES algorithm.
744
745 AES cipher algorithms (FIPS-197). AES uses the Rijndael
746 algorithm.
747
748 Rijndael appears to be consistently a very good performer in
749 both hardware and software across a wide range of computing
750 environments regardless of its use in feedback or non-feedback
751 modes. Its key setup time is excellent, and its key agility is
752 good. Rijndael's very low memory requirements make it very well
753 suited for restricted-space environments, in which it also
754 demonstrates excellent performance. Rijndael's operations are
755 among the easiest to defend against power and timing attacks.
756
757 The AES specifies three key sizes: 128, 192 and 256 bits
758
759 See <http://csrc.nist.gov/encryption/aes/> for more information.
760
761 In addition to AES cipher algorithm support, the acceleration
762 for some popular block cipher mode is supported too, including
763 ECB and CBC.
764
David McCulloughf0be44f2012-09-07 04:17:02 +0800765config CRYPTO_AES_ARM
766 tristate "AES cipher algorithms (ARM-asm)"
767 depends on ARM
768 select CRYPTO_ALGAPI
769 select CRYPTO_AES
770 help
771 Use optimized AES assembler routines for ARM platforms.
772
773 AES cipher algorithms (FIPS-197). AES uses the Rijndael
774 algorithm.
775
776 Rijndael appears to be consistently a very good performer in
777 both hardware and software across a wide range of computing
778 environments regardless of its use in feedback or non-feedback
779 modes. Its key setup time is excellent, and its key agility is
780 good. Rijndael's very low memory requirements make it very well
781 suited for restricted-space environments, in which it also
782 demonstrates excellent performance. Rijndael's operations are
783 among the easiest to defend against power and timing attacks.
784
785 The AES specifies three key sizes: 128, 192 and 256 bits
786
787 See <http://csrc.nist.gov/encryption/aes/> for more information.
788
Ard Biesheuvele4e7f102013-09-16 18:31:38 +0200789config CRYPTO_AES_ARM_BS
790 tristate "Bit sliced AES using NEON instructions"
791 depends on ARM && KERNEL_MODE_NEON
792 select CRYPTO_ALGAPI
793 select CRYPTO_AES_ARM
794 select CRYPTO_ABLK_HELPER
795 help
796 Use a faster and more secure NEON based implementation of AES in CBC,
797 CTR and XTS modes
798
799 Bit sliced AES gives around 45% speedup on Cortex-A15 for CTR mode
800 and for XTS mode encryption, CBC and XTS mode decryption speedup is
801 around 25%. (CBC encryption speed is not affected by this driver.)
802 This implementation does not rely on any lookup tables so it is
803 believed to be invulnerable to cache timing attacks.
804
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800805config CRYPTO_ANUBIS
806 tristate "Anubis cipher algorithm"
807 select CRYPTO_ALGAPI
808 help
809 Anubis cipher algorithm.
810
811 Anubis is a variable key length cipher which can use keys from
812 128 bits to 320 bits in length. It was evaluated as a entrant
813 in the NESSIE competition.
814
815 See also:
Justin P. Mattock6d8de742010-09-12 10:42:47 +0800816 <https://www.cosic.esat.kuleuven.be/nessie/reports/>
817 <http://www.larc.usp.br/~pbarreto/AnubisPage.html>
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800818
819config CRYPTO_ARC4
820 tristate "ARC4 cipher algorithm"
Sebastian Andrzej Siewiorb9b0f082012-06-26 18:13:46 +0200821 select CRYPTO_BLKCIPHER
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800822 help
823 ARC4 cipher algorithm.
824
825 ARC4 is a stream cipher using keys ranging from 8 bits to 2048
826 bits in length. This algorithm is required for driver-based
827 WEP, but it should not be for other purposes because of the
828 weakness of the algorithm.
829
830config CRYPTO_BLOWFISH
831 tristate "Blowfish cipher algorithm"
832 select CRYPTO_ALGAPI
Jussi Kivilinna52ba8672011-09-02 01:45:07 +0300833 select CRYPTO_BLOWFISH_COMMON
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800834 help
835 Blowfish cipher algorithm, by Bruce Schneier.
836
837 This is a variable key length cipher which can use keys from 32
838 bits to 448 bits in length. It's fast, simple and specifically
839 designed for use on "large microprocessors".
840
841 See also:
842 <http://www.schneier.com/blowfish.html>
843
Jussi Kivilinna52ba8672011-09-02 01:45:07 +0300844config CRYPTO_BLOWFISH_COMMON
845 tristate
846 help
847 Common parts of the Blowfish cipher algorithm shared by the
848 generic c and the assembler implementations.
849
850 See also:
851 <http://www.schneier.com/blowfish.html>
852
Jussi Kivilinna64b94ce2011-09-02 01:45:22 +0300853config CRYPTO_BLOWFISH_X86_64
854 tristate "Blowfish cipher algorithm (x86_64)"
Al Virof21a7c12012-04-08 20:31:22 -0400855 depends on X86 && 64BIT
Jussi Kivilinna64b94ce2011-09-02 01:45:22 +0300856 select CRYPTO_ALGAPI
857 select CRYPTO_BLOWFISH_COMMON
858 help
859 Blowfish cipher algorithm (x86_64), by Bruce Schneier.
860
861 This is a variable key length cipher which can use keys from 32
862 bits to 448 bits in length. It's fast, simple and specifically
863 designed for use on "large microprocessors".
864
865 See also:
866 <http://www.schneier.com/blowfish.html>
867
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800868config CRYPTO_CAMELLIA
869 tristate "Camellia cipher algorithms"
870 depends on CRYPTO
871 select CRYPTO_ALGAPI
872 help
873 Camellia cipher algorithms module.
874
875 Camellia is a symmetric key block cipher developed jointly
876 at NTT and Mitsubishi Electric Corporation.
877
878 The Camellia specifies three key sizes: 128, 192 and 256 bits.
879
880 See also:
881 <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
882
Jussi Kivilinna0b95ec52012-03-05 20:26:47 +0200883config CRYPTO_CAMELLIA_X86_64
884 tristate "Camellia cipher algorithm (x86_64)"
Al Virof21a7c12012-04-08 20:31:22 -0400885 depends on X86 && 64BIT
Jussi Kivilinna0b95ec52012-03-05 20:26:47 +0200886 depends on CRYPTO
887 select CRYPTO_ALGAPI
Jussi Kivilinna964263a2012-06-18 14:07:29 +0300888 select CRYPTO_GLUE_HELPER_X86
Jussi Kivilinna0b95ec52012-03-05 20:26:47 +0200889 select CRYPTO_LRW
890 select CRYPTO_XTS
891 help
892 Camellia cipher algorithm module (x86_64).
893
894 Camellia is a symmetric key block cipher developed jointly
895 at NTT and Mitsubishi Electric Corporation.
896
897 The Camellia specifies three key sizes: 128, 192 and 256 bits.
898
899 See also:
900 <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
901
Jussi Kivilinnad9b1d2e2012-10-26 14:49:01 +0300902config CRYPTO_CAMELLIA_AESNI_AVX_X86_64
903 tristate "Camellia cipher algorithm (x86_64/AES-NI/AVX)"
904 depends on X86 && 64BIT
905 depends on CRYPTO
906 select CRYPTO_ALGAPI
907 select CRYPTO_CRYPTD
Ard Biesheuvel801201a2013-09-20 09:55:41 +0200908 select CRYPTO_ABLK_HELPER
Jussi Kivilinnad9b1d2e2012-10-26 14:49:01 +0300909 select CRYPTO_GLUE_HELPER_X86
910 select CRYPTO_CAMELLIA_X86_64
911 select CRYPTO_LRW
912 select CRYPTO_XTS
913 help
914 Camellia cipher algorithm module (x86_64/AES-NI/AVX).
915
916 Camellia is a symmetric key block cipher developed jointly
917 at NTT and Mitsubishi Electric Corporation.
918
919 The Camellia specifies three key sizes: 128, 192 and 256 bits.
920
921 See also:
922 <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
923
Jussi Kivilinnaf3f935a2013-04-13 13:47:00 +0300924config CRYPTO_CAMELLIA_AESNI_AVX2_X86_64
925 tristate "Camellia cipher algorithm (x86_64/AES-NI/AVX2)"
926 depends on X86 && 64BIT
927 depends on CRYPTO
928 select CRYPTO_ALGAPI
929 select CRYPTO_CRYPTD
Ard Biesheuvel801201a2013-09-20 09:55:41 +0200930 select CRYPTO_ABLK_HELPER
Jussi Kivilinnaf3f935a2013-04-13 13:47:00 +0300931 select CRYPTO_GLUE_HELPER_X86
932 select CRYPTO_CAMELLIA_X86_64
933 select CRYPTO_CAMELLIA_AESNI_AVX_X86_64
934 select CRYPTO_LRW
935 select CRYPTO_XTS
936 help
937 Camellia cipher algorithm module (x86_64/AES-NI/AVX2).
938
939 Camellia is a symmetric key block cipher developed jointly
940 at NTT and Mitsubishi Electric Corporation.
941
942 The Camellia specifies three key sizes: 128, 192 and 256 bits.
943
944 See also:
945 <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
946
David S. Miller81658ad2012-08-28 12:05:54 -0700947config CRYPTO_CAMELLIA_SPARC64
948 tristate "Camellia cipher algorithm (SPARC64)"
949 depends on SPARC64
950 depends on CRYPTO
951 select CRYPTO_ALGAPI
952 help
953 Camellia cipher algorithm module (SPARC64).
954
955 Camellia is a symmetric key block cipher developed jointly
956 at NTT and Mitsubishi Electric Corporation.
957
958 The Camellia specifies three key sizes: 128, 192 and 256 bits.
959
960 See also:
961 <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
962
Jussi Kivilinna044ab522012-11-13 11:43:14 +0200963config CRYPTO_CAST_COMMON
964 tristate
965 help
966 Common parts of the CAST cipher algorithms shared by the
967 generic c and the assembler implementations.
968
Linus Torvalds1da177e2005-04-16 15:20:36 -0700969config CRYPTO_CAST5
970 tristate "CAST5 (CAST-128) cipher algorithm"
Herbert Xucce9e062006-08-21 21:08:13 +1000971 select CRYPTO_ALGAPI
Jussi Kivilinna044ab522012-11-13 11:43:14 +0200972 select CRYPTO_CAST_COMMON
Linus Torvalds1da177e2005-04-16 15:20:36 -0700973 help
974 The CAST5 encryption algorithm (synonymous with CAST-128) is
975 described in RFC2144.
976
Johannes Goetzfried4d6d6a22012-07-11 19:37:37 +0200977config CRYPTO_CAST5_AVX_X86_64
978 tristate "CAST5 (CAST-128) cipher algorithm (x86_64/AVX)"
979 depends on X86 && 64BIT
980 select CRYPTO_ALGAPI
981 select CRYPTO_CRYPTD
Ard Biesheuvel801201a2013-09-20 09:55:41 +0200982 select CRYPTO_ABLK_HELPER
Jussi Kivilinna044ab522012-11-13 11:43:14 +0200983 select CRYPTO_CAST_COMMON
Johannes Goetzfried4d6d6a22012-07-11 19:37:37 +0200984 select CRYPTO_CAST5
985 help
986 The CAST5 encryption algorithm (synonymous with CAST-128) is
987 described in RFC2144.
988
989 This module provides the Cast5 cipher algorithm that processes
990 sixteen blocks parallel using the AVX instruction set.
991
Linus Torvalds1da177e2005-04-16 15:20:36 -0700992config CRYPTO_CAST6
993 tristate "CAST6 (CAST-256) cipher algorithm"
Herbert Xucce9e062006-08-21 21:08:13 +1000994 select CRYPTO_ALGAPI
Jussi Kivilinna044ab522012-11-13 11:43:14 +0200995 select CRYPTO_CAST_COMMON
Linus Torvalds1da177e2005-04-16 15:20:36 -0700996 help
997 The CAST6 encryption algorithm (synonymous with CAST-256) is
998 described in RFC2612.
999
Johannes Goetzfried4ea12772012-07-11 19:38:57 +02001000config CRYPTO_CAST6_AVX_X86_64
1001 tristate "CAST6 (CAST-256) cipher algorithm (x86_64/AVX)"
1002 depends on X86 && 64BIT
1003 select CRYPTO_ALGAPI
1004 select CRYPTO_CRYPTD
Ard Biesheuvel801201a2013-09-20 09:55:41 +02001005 select CRYPTO_ABLK_HELPER
Johannes Goetzfried4ea12772012-07-11 19:38:57 +02001006 select CRYPTO_GLUE_HELPER_X86
Jussi Kivilinna044ab522012-11-13 11:43:14 +02001007 select CRYPTO_CAST_COMMON
Johannes Goetzfried4ea12772012-07-11 19:38:57 +02001008 select CRYPTO_CAST6
1009 select CRYPTO_LRW
1010 select CRYPTO_XTS
1011 help
1012 The CAST6 encryption algorithm (synonymous with CAST-256) is
1013 described in RFC2612.
1014
1015 This module provides the Cast6 cipher algorithm that processes
1016 eight blocks parallel using the AVX instruction set.
1017
Sebastian Siewior584fffc2008-04-05 21:04:48 +08001018config CRYPTO_DES
1019 tristate "DES and Triple DES EDE cipher algorithms"
Herbert Xucce9e062006-08-21 21:08:13 +10001020 select CRYPTO_ALGAPI
Linus Torvalds1da177e2005-04-16 15:20:36 -07001021 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +08001022 DES cipher algorithm (FIPS 46-2), and Triple DES EDE (FIPS 46-3).
Linus Torvalds1da177e2005-04-16 15:20:36 -07001023
David S. Millerc5aac2d2012-08-25 22:37:23 -07001024config CRYPTO_DES_SPARC64
1025 tristate "DES and Triple DES EDE cipher algorithms (SPARC64)"
Dave Jones97da37b2012-10-02 17:13:20 -04001026 depends on SPARC64
David S. Millerc5aac2d2012-08-25 22:37:23 -07001027 select CRYPTO_ALGAPI
1028 select CRYPTO_DES
1029 help
1030 DES cipher algorithm (FIPS 46-2), and Triple DES EDE (FIPS 46-3),
1031 optimized using SPARC64 crypto opcodes.
1032
Sebastian Siewior584fffc2008-04-05 21:04:48 +08001033config CRYPTO_FCRYPT
1034 tristate "FCrypt cipher algorithm"
Herbert Xucce9e062006-08-21 21:08:13 +10001035 select CRYPTO_ALGAPI
Sebastian Siewior584fffc2008-04-05 21:04:48 +08001036 select CRYPTO_BLKCIPHER
Linus Torvalds1da177e2005-04-16 15:20:36 -07001037 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +08001038 FCrypt algorithm used by RxRPC.
Linus Torvalds1da177e2005-04-16 15:20:36 -07001039
1040config CRYPTO_KHAZAD
1041 tristate "Khazad cipher algorithm"
Herbert Xucce9e062006-08-21 21:08:13 +10001042 select CRYPTO_ALGAPI
Linus Torvalds1da177e2005-04-16 15:20:36 -07001043 help
1044 Khazad cipher algorithm.
1045
1046 Khazad was a finalist in the initial NESSIE competition. It is
1047 an algorithm optimized for 64-bit processors with good performance
1048 on 32-bit processors. Khazad uses an 128 bit key size.
1049
1050 See also:
Justin P. Mattock6d8de742010-09-12 10:42:47 +08001051 <http://www.larc.usp.br/~pbarreto/KhazadPage.html>
Linus Torvalds1da177e2005-04-16 15:20:36 -07001052
Tan Swee Heng2407d602007-11-23 19:45:00 +08001053config CRYPTO_SALSA20
Kees Cook3b4afaf2012-10-02 11:16:49 -07001054 tristate "Salsa20 stream cipher algorithm"
Tan Swee Heng2407d602007-11-23 19:45:00 +08001055 select CRYPTO_BLKCIPHER
1056 help
1057 Salsa20 stream cipher algorithm.
1058
1059 Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
1060 Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
1061
1062 The Salsa20 stream cipher algorithm is designed by Daniel J.
1063 Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
Linus Torvalds1da177e2005-04-16 15:20:36 -07001064
Tan Swee Heng974e4b72007-12-10 15:52:56 +08001065config CRYPTO_SALSA20_586
Kees Cook3b4afaf2012-10-02 11:16:49 -07001066 tristate "Salsa20 stream cipher algorithm (i586)"
Tan Swee Heng974e4b72007-12-10 15:52:56 +08001067 depends on (X86 || UML_X86) && !64BIT
Tan Swee Heng974e4b72007-12-10 15:52:56 +08001068 select CRYPTO_BLKCIPHER
Tan Swee Heng974e4b72007-12-10 15:52:56 +08001069 help
1070 Salsa20 stream cipher algorithm.
1071
1072 Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
1073 Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
1074
1075 The Salsa20 stream cipher algorithm is designed by Daniel J.
1076 Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
1077
Tan Swee Heng9a7dafb2007-12-18 00:04:40 +08001078config CRYPTO_SALSA20_X86_64
Kees Cook3b4afaf2012-10-02 11:16:49 -07001079 tristate "Salsa20 stream cipher algorithm (x86_64)"
Tan Swee Heng9a7dafb2007-12-18 00:04:40 +08001080 depends on (X86 || UML_X86) && 64BIT
Tan Swee Heng9a7dafb2007-12-18 00:04:40 +08001081 select CRYPTO_BLKCIPHER
Tan Swee Heng9a7dafb2007-12-18 00:04:40 +08001082 help
1083 Salsa20 stream cipher algorithm.
1084
1085 Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
1086 Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
1087
1088 The Salsa20 stream cipher algorithm is designed by Daniel J.
1089 Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
1090
Sebastian Siewior584fffc2008-04-05 21:04:48 +08001091config CRYPTO_SEED
1092 tristate "SEED cipher algorithm"
1093 select CRYPTO_ALGAPI
1094 help
1095 SEED cipher algorithm (RFC4269).
1096
1097 SEED is a 128-bit symmetric key block cipher that has been
1098 developed by KISA (Korea Information Security Agency) as a
1099 national standard encryption algorithm of the Republic of Korea.
1100 It is a 16 round block cipher with the key size of 128 bit.
1101
1102 See also:
1103 <http://www.kisa.or.kr/kisa/seed/jsp/seed_eng.jsp>
1104
1105config CRYPTO_SERPENT
1106 tristate "Serpent cipher algorithm"
1107 select CRYPTO_ALGAPI
1108 help
1109 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
1110
1111 Keys are allowed to be from 0 to 256 bits in length, in steps
1112 of 8 bits. Also includes the 'Tnepres' algorithm, a reversed
1113 variant of Serpent for compatibility with old kerneli.org code.
1114
1115 See also:
1116 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
1117
Jussi Kivilinna937c30d2011-11-09 16:26:25 +02001118config CRYPTO_SERPENT_SSE2_X86_64
1119 tristate "Serpent cipher algorithm (x86_64/SSE2)"
1120 depends on X86 && 64BIT
1121 select CRYPTO_ALGAPI
Jussi Kivilinna341975b2011-11-24 08:37:41 +02001122 select CRYPTO_CRYPTD
Ard Biesheuvel801201a2013-09-20 09:55:41 +02001123 select CRYPTO_ABLK_HELPER
Jussi Kivilinna596d8752012-06-18 14:07:19 +03001124 select CRYPTO_GLUE_HELPER_X86
Jussi Kivilinna937c30d2011-11-09 16:26:25 +02001125 select CRYPTO_SERPENT
Jussi Kivilinnafeaf0cf2011-12-13 12:53:12 +02001126 select CRYPTO_LRW
1127 select CRYPTO_XTS
Jussi Kivilinna937c30d2011-11-09 16:26:25 +02001128 help
1129 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
1130
1131 Keys are allowed to be from 0 to 256 bits in length, in steps
1132 of 8 bits.
1133
1134 This module provides Serpent cipher algorithm that processes eigth
1135 blocks parallel using SSE2 instruction set.
1136
1137 See also:
1138 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
1139
Jussi Kivilinna251496d2011-11-09 16:26:31 +02001140config CRYPTO_SERPENT_SSE2_586
1141 tristate "Serpent cipher algorithm (i586/SSE2)"
1142 depends on X86 && !64BIT
1143 select CRYPTO_ALGAPI
Jussi Kivilinna341975b2011-11-24 08:37:41 +02001144 select CRYPTO_CRYPTD
Ard Biesheuvel801201a2013-09-20 09:55:41 +02001145 select CRYPTO_ABLK_HELPER
Jussi Kivilinna596d8752012-06-18 14:07:19 +03001146 select CRYPTO_GLUE_HELPER_X86
Jussi Kivilinna251496d2011-11-09 16:26:31 +02001147 select CRYPTO_SERPENT
Jussi Kivilinnafeaf0cf2011-12-13 12:53:12 +02001148 select CRYPTO_LRW
1149 select CRYPTO_XTS
Jussi Kivilinna251496d2011-11-09 16:26:31 +02001150 help
1151 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
1152
1153 Keys are allowed to be from 0 to 256 bits in length, in steps
1154 of 8 bits.
1155
1156 This module provides Serpent cipher algorithm that processes four
1157 blocks parallel using SSE2 instruction set.
1158
1159 See also:
1160 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
1161
Johannes Goetzfried7efe4072012-06-12 16:47:43 +08001162config CRYPTO_SERPENT_AVX_X86_64
1163 tristate "Serpent cipher algorithm (x86_64/AVX)"
1164 depends on X86 && 64BIT
1165 select CRYPTO_ALGAPI
1166 select CRYPTO_CRYPTD
Ard Biesheuvel801201a2013-09-20 09:55:41 +02001167 select CRYPTO_ABLK_HELPER
Jussi Kivilinna1d0debb2012-06-18 14:07:24 +03001168 select CRYPTO_GLUE_HELPER_X86
Johannes Goetzfried7efe4072012-06-12 16:47:43 +08001169 select CRYPTO_SERPENT
1170 select CRYPTO_LRW
1171 select CRYPTO_XTS
1172 help
1173 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
1174
1175 Keys are allowed to be from 0 to 256 bits in length, in steps
1176 of 8 bits.
1177
1178 This module provides the Serpent cipher algorithm that processes
1179 eight blocks parallel using the AVX instruction set.
1180
1181 See also:
1182 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
1183
Jussi Kivilinna56d76c92013-04-13 13:46:55 +03001184config CRYPTO_SERPENT_AVX2_X86_64
1185 tristate "Serpent cipher algorithm (x86_64/AVX2)"
1186 depends on X86 && 64BIT
1187 select CRYPTO_ALGAPI
1188 select CRYPTO_CRYPTD
Ard Biesheuvel801201a2013-09-20 09:55:41 +02001189 select CRYPTO_ABLK_HELPER
Jussi Kivilinna56d76c92013-04-13 13:46:55 +03001190 select CRYPTO_GLUE_HELPER_X86
1191 select CRYPTO_SERPENT
1192 select CRYPTO_SERPENT_AVX_X86_64
1193 select CRYPTO_LRW
1194 select CRYPTO_XTS
1195 help
1196 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
1197
1198 Keys are allowed to be from 0 to 256 bits in length, in steps
1199 of 8 bits.
1200
1201 This module provides Serpent cipher algorithm that processes 16
1202 blocks parallel using AVX2 instruction set.
1203
1204 See also:
1205 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
1206
Sebastian Siewior584fffc2008-04-05 21:04:48 +08001207config CRYPTO_TEA
1208 tristate "TEA, XTEA and XETA cipher algorithms"
1209 select CRYPTO_ALGAPI
1210 help
1211 TEA cipher algorithm.
1212
1213 Tiny Encryption Algorithm is a simple cipher that uses
1214 many rounds for security. It is very fast and uses
1215 little memory.
1216
1217 Xtendend Tiny Encryption Algorithm is a modification to
1218 the TEA algorithm to address a potential key weakness
1219 in the TEA algorithm.
1220
1221 Xtendend Encryption Tiny Algorithm is a mis-implementation
1222 of the XTEA algorithm for compatibility purposes.
1223
1224config CRYPTO_TWOFISH
1225 tristate "Twofish cipher algorithm"
1226 select CRYPTO_ALGAPI
1227 select CRYPTO_TWOFISH_COMMON
1228 help
1229 Twofish cipher algorithm.
1230
1231 Twofish was submitted as an AES (Advanced Encryption Standard)
1232 candidate cipher by researchers at CounterPane Systems. It is a
1233 16 round block cipher supporting key sizes of 128, 192, and 256
1234 bits.
1235
1236 See also:
1237 <http://www.schneier.com/twofish.html>
1238
1239config CRYPTO_TWOFISH_COMMON
1240 tristate
1241 help
1242 Common parts of the Twofish cipher algorithm shared by the
1243 generic c and the assembler implementations.
1244
1245config CRYPTO_TWOFISH_586
1246 tristate "Twofish cipher algorithms (i586)"
1247 depends on (X86 || UML_X86) && !64BIT
1248 select CRYPTO_ALGAPI
1249 select CRYPTO_TWOFISH_COMMON
1250 help
1251 Twofish cipher algorithm.
1252
1253 Twofish was submitted as an AES (Advanced Encryption Standard)
1254 candidate cipher by researchers at CounterPane Systems. It is a
1255 16 round block cipher supporting key sizes of 128, 192, and 256
1256 bits.
1257
1258 See also:
1259 <http://www.schneier.com/twofish.html>
1260
1261config CRYPTO_TWOFISH_X86_64
1262 tristate "Twofish cipher algorithm (x86_64)"
1263 depends on (X86 || UML_X86) && 64BIT
1264 select CRYPTO_ALGAPI
1265 select CRYPTO_TWOFISH_COMMON
1266 help
1267 Twofish cipher algorithm (x86_64).
1268
1269 Twofish was submitted as an AES (Advanced Encryption Standard)
1270 candidate cipher by researchers at CounterPane Systems. It is a
1271 16 round block cipher supporting key sizes of 128, 192, and 256
1272 bits.
1273
1274 See also:
1275 <http://www.schneier.com/twofish.html>
1276
Jussi Kivilinna8280daa2011-09-26 16:47:25 +03001277config CRYPTO_TWOFISH_X86_64_3WAY
1278 tristate "Twofish cipher algorithm (x86_64, 3-way parallel)"
Al Virof21a7c12012-04-08 20:31:22 -04001279 depends on X86 && 64BIT
Jussi Kivilinna8280daa2011-09-26 16:47:25 +03001280 select CRYPTO_ALGAPI
1281 select CRYPTO_TWOFISH_COMMON
1282 select CRYPTO_TWOFISH_X86_64
Jussi Kivilinna414cb5e2012-06-18 14:07:34 +03001283 select CRYPTO_GLUE_HELPER_X86
Jussi Kivilinnae7cda5d2011-12-13 12:53:01 +02001284 select CRYPTO_LRW
1285 select CRYPTO_XTS
Jussi Kivilinna8280daa2011-09-26 16:47:25 +03001286 help
1287 Twofish cipher algorithm (x86_64, 3-way parallel).
1288
1289 Twofish was submitted as an AES (Advanced Encryption Standard)
1290 candidate cipher by researchers at CounterPane Systems. It is a
1291 16 round block cipher supporting key sizes of 128, 192, and 256
1292 bits.
1293
1294 This module provides Twofish cipher algorithm that processes three
1295 blocks parallel, utilizing resources of out-of-order CPUs better.
1296
1297 See also:
1298 <http://www.schneier.com/twofish.html>
1299
Johannes Goetzfried107778b2012-05-28 15:54:24 +02001300config CRYPTO_TWOFISH_AVX_X86_64
1301 tristate "Twofish cipher algorithm (x86_64/AVX)"
1302 depends on X86 && 64BIT
1303 select CRYPTO_ALGAPI
1304 select CRYPTO_CRYPTD
Ard Biesheuvel801201a2013-09-20 09:55:41 +02001305 select CRYPTO_ABLK_HELPER
Jussi Kivilinnaa7378d42012-06-18 14:07:39 +03001306 select CRYPTO_GLUE_HELPER_X86
Johannes Goetzfried107778b2012-05-28 15:54:24 +02001307 select CRYPTO_TWOFISH_COMMON
1308 select CRYPTO_TWOFISH_X86_64
1309 select CRYPTO_TWOFISH_X86_64_3WAY
1310 select CRYPTO_LRW
1311 select CRYPTO_XTS
1312 help
1313 Twofish cipher algorithm (x86_64/AVX).
1314
1315 Twofish was submitted as an AES (Advanced Encryption Standard)
1316 candidate cipher by researchers at CounterPane Systems. It is a
1317 16 round block cipher supporting key sizes of 128, 192, and 256
1318 bits.
1319
1320 This module provides the Twofish cipher algorithm that processes
1321 eight blocks parallel using the AVX Instruction Set.
1322
1323 See also:
1324 <http://www.schneier.com/twofish.html>
1325
Sebastian Siewior584fffc2008-04-05 21:04:48 +08001326comment "Compression"
1327
Linus Torvalds1da177e2005-04-16 15:20:36 -07001328config CRYPTO_DEFLATE
1329 tristate "Deflate compression algorithm"
Herbert Xucce9e062006-08-21 21:08:13 +10001330 select CRYPTO_ALGAPI
Linus Torvalds1da177e2005-04-16 15:20:36 -07001331 select ZLIB_INFLATE
1332 select ZLIB_DEFLATE
1333 help
1334 This is the Deflate algorithm (RFC1951), specified for use in
1335 IPSec with the IPCOMP protocol (RFC3173, RFC2394).
Sebastian Siewior584fffc2008-04-05 21:04:48 +08001336
Linus Torvalds1da177e2005-04-16 15:20:36 -07001337 You will most probably want this if using IPSec.
1338
Geert Uytterhoevenbf68e652009-03-04 15:15:49 +08001339config CRYPTO_ZLIB
1340 tristate "Zlib compression algorithm"
1341 select CRYPTO_PCOMP
1342 select ZLIB_INFLATE
1343 select ZLIB_DEFLATE
1344 select NLATTR
1345 help
1346 This is the zlib algorithm.
1347
Zoltan Sogor0b77abb2007-12-07 16:53:23 +08001348config CRYPTO_LZO
1349 tristate "LZO compression algorithm"
1350 select CRYPTO_ALGAPI
1351 select LZO_COMPRESS
1352 select LZO_DECOMPRESS
1353 help
1354 This is the LZO algorithm.
1355
Seth Jennings35a1fc12012-07-19 09:42:41 -05001356config CRYPTO_842
1357 tristate "842 compression algorithm"
1358 depends on CRYPTO_DEV_NX_COMPRESS
1359 # 842 uses lzo if the hardware becomes unavailable
1360 select LZO_COMPRESS
1361 select LZO_DECOMPRESS
1362 help
1363 This is the 842 algorithm.
1364
Chanho Min0ea85302013-07-08 16:01:51 -07001365config CRYPTO_LZ4
1366 tristate "LZ4 compression algorithm"
1367 select CRYPTO_ALGAPI
1368 select LZ4_COMPRESS
1369 select LZ4_DECOMPRESS
1370 help
1371 This is the LZ4 algorithm.
1372
1373config CRYPTO_LZ4HC
1374 tristate "LZ4HC compression algorithm"
1375 select CRYPTO_ALGAPI
1376 select LZ4HC_COMPRESS
1377 select LZ4_DECOMPRESS
1378 help
1379 This is the LZ4 high compression mode algorithm.
1380
Neil Horman17f0f4a2008-08-14 22:15:52 +10001381comment "Random Number Generation"
1382
1383config CRYPTO_ANSI_CPRNG
1384 tristate "Pseudo Random Number Generation for Cryptographic modules"
Neil Horman4e4ed832009-08-20 17:54:16 +10001385 default m
Neil Horman17f0f4a2008-08-14 22:15:52 +10001386 select CRYPTO_AES
1387 select CRYPTO_RNG
Neil Horman17f0f4a2008-08-14 22:15:52 +10001388 help
1389 This option enables the generic pseudo random number generator
1390 for cryptographic modules. Uses the Algorithm specified in
Jiri Kosina7dd607e2010-01-27 01:00:10 +01001391 ANSI X9.31 A.2.4. Note that this option must be enabled if
1392 CRYPTO_FIPS is selected
Neil Horman17f0f4a2008-08-14 22:15:52 +10001393
Herbert Xu03c8efc2010-10-19 21:12:39 +08001394config CRYPTO_USER_API
1395 tristate
1396
Herbert Xufe869cd2010-10-19 21:23:00 +08001397config CRYPTO_USER_API_HASH
1398 tristate "User-space interface for hash algorithms"
Herbert Xu74517082010-11-29 22:56:03 +08001399 depends on NET
Herbert Xufe869cd2010-10-19 21:23:00 +08001400 select CRYPTO_HASH
1401 select CRYPTO_USER_API
1402 help
1403 This option enables the user-spaces interface for hash
1404 algorithms.
1405
Herbert Xu8ff59092010-10-19 21:31:55 +08001406config CRYPTO_USER_API_SKCIPHER
1407 tristate "User-space interface for symmetric key cipher algorithms"
Herbert Xu74517082010-11-29 22:56:03 +08001408 depends on NET
Herbert Xu8ff59092010-10-19 21:31:55 +08001409 select CRYPTO_BLKCIPHER
1410 select CRYPTO_USER_API
1411 help
1412 This option enables the user-spaces interface for symmetric
1413 key cipher algorithms.
1414
Dmitry Kasatkinee089972013-05-06 15:40:01 +03001415config CRYPTO_HASH_INFO
1416 bool
1417
Linus Torvalds1da177e2005-04-16 15:20:36 -07001418source "drivers/crypto/Kconfig"
David Howells964f3b32012-09-13 15:17:21 +01001419source crypto/asymmetric_keys/Kconfig
Linus Torvalds1da177e2005-04-16 15:20:36 -07001420
Herbert Xucce9e062006-08-21 21:08:13 +10001421endif # if CRYPTO