blob: 749b1e05c490ce4adeda0ac8f8971bd955e1a2f8 [file] [log] [blame]
Linus Torvalds1da177e2005-04-16 15:20:36 -07001#
Dan Williams685784a2007-07-09 11:56:42 -07002# Generic algorithms support
3#
4config XOR_BLOCKS
5 tristate
6
7#
Dan Williams9bc89cd2007-01-02 11:10:44 -07008# async_tx api: hardware offloaded memory transfer/transform support
9#
10source "crypto/async_tx/Kconfig"
11
12#
Linus Torvalds1da177e2005-04-16 15:20:36 -070013# Cryptographic API Configuration
14#
Jan Engelhardt2e290f42007-05-18 15:11:01 +100015menuconfig CRYPTO
Sebastian Siewiorc3715cb92008-03-30 16:36:09 +080016 tristate "Cryptographic API"
Linus Torvalds1da177e2005-04-16 15:20:36 -070017 help
18 This option provides the core Cryptographic API.
19
Herbert Xucce9e062006-08-21 21:08:13 +100020if CRYPTO
21
Sebastian Siewior584fffc2008-04-05 21:04:48 +080022comment "Crypto core or helper"
23
Neil Hormanccb778e2008-08-05 14:13:08 +080024config CRYPTO_FIPS
25 bool "FIPS 200 compliance"
Chuck Ebberte84c5482010-09-03 19:17:49 +080026 depends on CRYPTO_ANSI_CPRNG && !CRYPTO_MANAGER_DISABLE_TESTS
Neil Hormanccb778e2008-08-05 14:13:08 +080027 help
28 This options enables the fips boot option which is
29 required if you want to system to operate in a FIPS 200
30 certification. You should say no unless you know what
Chuck Ebberte84c5482010-09-03 19:17:49 +080031 this is.
Neil Hormanccb778e2008-08-05 14:13:08 +080032
Herbert Xucce9e062006-08-21 21:08:13 +100033config CRYPTO_ALGAPI
34 tristate
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110035 select CRYPTO_ALGAPI2
Herbert Xucce9e062006-08-21 21:08:13 +100036 help
37 This option provides the API for cryptographic algorithms.
38
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110039config CRYPTO_ALGAPI2
40 tristate
41
Herbert Xu1ae97822007-08-30 15:36:14 +080042config CRYPTO_AEAD
43 tristate
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110044 select CRYPTO_AEAD2
Herbert Xu1ae97822007-08-30 15:36:14 +080045 select CRYPTO_ALGAPI
46
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110047config CRYPTO_AEAD2
48 tristate
49 select CRYPTO_ALGAPI2
50
Herbert Xu5cde0af2006-08-22 00:07:53 +100051config CRYPTO_BLKCIPHER
52 tristate
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110053 select CRYPTO_BLKCIPHER2
Herbert Xu5cde0af2006-08-22 00:07:53 +100054 select CRYPTO_ALGAPI
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110055
56config CRYPTO_BLKCIPHER2
57 tristate
58 select CRYPTO_ALGAPI2
59 select CRYPTO_RNG2
Huang Ying0a2e8212009-02-19 14:44:02 +080060 select CRYPTO_WORKQUEUE
Herbert Xu5cde0af2006-08-22 00:07:53 +100061
Herbert Xu055bcee2006-08-19 22:24:23 +100062config CRYPTO_HASH
63 tristate
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110064 select CRYPTO_HASH2
Herbert Xu055bcee2006-08-19 22:24:23 +100065 select CRYPTO_ALGAPI
66
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110067config CRYPTO_HASH2
68 tristate
69 select CRYPTO_ALGAPI2
70
Neil Horman17f0f4a2008-08-14 22:15:52 +100071config CRYPTO_RNG
72 tristate
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110073 select CRYPTO_RNG2
Neil Horman17f0f4a2008-08-14 22:15:52 +100074 select CRYPTO_ALGAPI
75
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110076config CRYPTO_RNG2
77 tristate
78 select CRYPTO_ALGAPI2
79
Geert Uytterhoevena1d2f092009-03-04 15:05:33 +080080config CRYPTO_PCOMP
81 tristate
Herbert Xubc94e592010-06-03 20:33:06 +100082 select CRYPTO_PCOMP2
83 select CRYPTO_ALGAPI
84
85config CRYPTO_PCOMP2
86 tristate
Geert Uytterhoevena1d2f092009-03-04 15:05:33 +080087 select CRYPTO_ALGAPI2
88
Herbert Xu2b8c19d2006-09-21 11:31:44 +100089config CRYPTO_MANAGER
90 tristate "Cryptographic algorithm manager"
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110091 select CRYPTO_MANAGER2
Herbert Xu2b8c19d2006-09-21 11:31:44 +100092 help
93 Create default cryptographic template instantiations such as
94 cbc(aes).
95
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110096config CRYPTO_MANAGER2
97 def_tristate CRYPTO_MANAGER || (CRYPTO_MANAGER!=n && CRYPTO_ALGAPI=y)
98 select CRYPTO_AEAD2
99 select CRYPTO_HASH2
100 select CRYPTO_BLKCIPHER2
Herbert Xubc94e592010-06-03 20:33:06 +1000101 select CRYPTO_PCOMP2
Herbert Xu6a0fcbb2008-12-10 23:29:44 +1100102
Steffen Klasserta38f7902011-09-27 07:23:50 +0200103config CRYPTO_USER
104 tristate "Userspace cryptographic algorithm configuration"
Herbert Xu5db017a2011-11-01 12:12:43 +1100105 depends on NET
Steffen Klasserta38f7902011-09-27 07:23:50 +0200106 select CRYPTO_MANAGER
107 help
Valdis.Kletnieks@vt.edud19978f2011-11-09 01:29:20 -0500108 Userspace configuration for cryptographic instantiations such as
Steffen Klasserta38f7902011-09-27 07:23:50 +0200109 cbc(aes).
110
Herbert Xu326a6342010-08-06 09:40:28 +0800111config CRYPTO_MANAGER_DISABLE_TESTS
112 bool "Disable run-time self tests"
Herbert Xu00ca28a2010-08-06 10:34:00 +0800113 default y
114 depends on CRYPTO_MANAGER2
Alexander Shishkin0b767f92010-06-03 20:53:43 +1000115 help
Herbert Xu326a6342010-08-06 09:40:28 +0800116 Disable run-time self tests that normally take place at
117 algorithm registration.
Alexander Shishkin0b767f92010-06-03 20:53:43 +1000118
Rik Snelc494e072006-11-29 18:59:44 +1100119config CRYPTO_GF128MUL
Jussi Kivilinna08c70fc2011-12-13 12:53:22 +0200120 tristate "GF(2^128) multiplication functions"
Rik Snelc494e072006-11-29 18:59:44 +1100121 help
122 Efficient table driven implementation of multiplications in the
123 field GF(2^128). This is needed by some cypher modes. This
124 option will be selected automatically if you select such a
125 cipher mode. Only select this option by hand if you expect to load
126 an external module that requires these functions.
127
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800128config CRYPTO_NULL
129 tristate "Null algorithms"
130 select CRYPTO_ALGAPI
131 select CRYPTO_BLKCIPHER
Herbert Xud35d2452008-11-08 08:09:56 +0800132 select CRYPTO_HASH
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800133 help
134 These are 'Null' algorithms, used by IPsec, which do nothing.
135
Steffen Klassert5068c7a2010-01-07 15:57:19 +1100136config CRYPTO_PCRYPT
Kees Cook3b4afaf2012-10-02 11:16:49 -0700137 tristate "Parallel crypto engine"
138 depends on SMP
Steffen Klassert5068c7a2010-01-07 15:57:19 +1100139 select PADATA
140 select CRYPTO_MANAGER
141 select CRYPTO_AEAD
142 help
143 This converts an arbitrary crypto algorithm into a parallel
144 algorithm that executes in kernel threads.
145
Huang Ying25c38d32009-02-19 14:33:40 +0800146config CRYPTO_WORKQUEUE
147 tristate
148
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800149config CRYPTO_CRYPTD
150 tristate "Software async crypto daemon"
Herbert Xudb131ef2006-09-21 11:44:08 +1000151 select CRYPTO_BLKCIPHER
Loc Hob8a28252008-05-14 21:23:00 +0800152 select CRYPTO_HASH
Herbert Xu43518402006-10-16 21:28:58 +1000153 select CRYPTO_MANAGER
Huang Ying254eff72009-02-19 14:42:19 +0800154 select CRYPTO_WORKQUEUE
Herbert Xudb131ef2006-09-21 11:44:08 +1000155 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800156 This is a generic software asynchronous crypto daemon that
157 converts an arbitrary synchronous software crypto algorithm
158 into an asynchronous algorithm that executes in a kernel thread.
159
160config CRYPTO_AUTHENC
161 tristate "Authenc support"
162 select CRYPTO_AEAD
163 select CRYPTO_BLKCIPHER
164 select CRYPTO_MANAGER
165 select CRYPTO_HASH
166 help
167 Authenc: Combined mode wrapper for IPsec.
168 This is required for IPSec.
169
170config CRYPTO_TEST
171 tristate "Testing module"
172 depends on m
Herbert Xuda7f0332008-07-31 17:08:25 +0800173 select CRYPTO_MANAGER
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800174 help
175 Quick & dirty crypto test module.
176
Ard Biesheuvela62b01c2013-09-20 09:55:40 +0200177config CRYPTO_ABLK_HELPER
Jussi Kivilinnaffaf9152012-06-18 14:06:58 +0300178 tristate
Jussi Kivilinnaffaf9152012-06-18 14:06:58 +0300179 select CRYPTO_CRYPTD
180
Jussi Kivilinna596d8752012-06-18 14:07:19 +0300181config CRYPTO_GLUE_HELPER_X86
182 tristate
183 depends on X86
184 select CRYPTO_ALGAPI
185
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800186comment "Authenticated Encryption with Associated Data"
187
188config CRYPTO_CCM
189 tristate "CCM support"
190 select CRYPTO_CTR
191 select CRYPTO_AEAD
192 help
193 Support for Counter with CBC MAC. Required for IPsec.
194
195config CRYPTO_GCM
196 tristate "GCM/GMAC support"
197 select CRYPTO_CTR
198 select CRYPTO_AEAD
Huang Ying9382d972009-08-06 15:34:26 +1000199 select CRYPTO_GHASH
Jussi Kivilinna9489667d2013-04-07 16:43:41 +0300200 select CRYPTO_NULL
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800201 help
202 Support for Galois/Counter Mode (GCM) and Galois Message
203 Authentication Code (GMAC). Required for IPSec.
204
205config CRYPTO_SEQIV
206 tristate "Sequence Number IV Generator"
207 select CRYPTO_AEAD
208 select CRYPTO_BLKCIPHER
Herbert Xua0f000e2008-08-14 22:21:31 +1000209 select CRYPTO_RNG
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800210 help
211 This IV generator generates an IV based on a sequence number by
212 xoring it with a salt. This algorithm is mainly useful for CTR
213
214comment "Block modes"
Herbert Xudb131ef2006-09-21 11:44:08 +1000215
216config CRYPTO_CBC
217 tristate "CBC support"
218 select CRYPTO_BLKCIPHER
Herbert Xu43518402006-10-16 21:28:58 +1000219 select CRYPTO_MANAGER
Herbert Xudb131ef2006-09-21 11:44:08 +1000220 help
221 CBC: Cipher Block Chaining mode
222 This block cipher algorithm is required for IPSec.
223
Joy Latten23e353c2007-10-23 08:50:32 +0800224config CRYPTO_CTR
225 tristate "CTR support"
226 select CRYPTO_BLKCIPHER
Herbert Xu0a270322007-11-30 21:38:37 +1100227 select CRYPTO_SEQIV
Joy Latten23e353c2007-10-23 08:50:32 +0800228 select CRYPTO_MANAGER
Joy Latten23e353c2007-10-23 08:50:32 +0800229 help
230 CTR: Counter mode
231 This block cipher algorithm is required for IPSec.
232
Kevin Coffman76cb9522008-03-24 21:26:16 +0800233config CRYPTO_CTS
234 tristate "CTS support"
235 select CRYPTO_BLKCIPHER
236 help
237 CTS: Cipher Text Stealing
238 This is the Cipher Text Stealing mode as described by
239 Section 8 of rfc2040 and referenced by rfc3962.
240 (rfc3962 includes errata information in its Appendix A)
241 This mode is required for Kerberos gss mechanism support
242 for AES encryption.
243
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800244config CRYPTO_ECB
245 tristate "ECB support"
Herbert Xu653ebd92007-11-27 19:48:27 +0800246 select CRYPTO_BLKCIPHER
Herbert Xu124b53d2007-04-16 20:49:20 +1000247 select CRYPTO_MANAGER
248 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800249 ECB: Electronic CodeBook mode
250 This is the simplest block cipher algorithm. It simply encrypts
251 the input block by block.
Herbert Xu124b53d2007-04-16 20:49:20 +1000252
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800253config CRYPTO_LRW
Jussi Kivilinna2470a2b2011-12-13 12:52:51 +0200254 tristate "LRW support"
David Howells90831632006-12-16 12:13:14 +1100255 select CRYPTO_BLKCIPHER
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800256 select CRYPTO_MANAGER
257 select CRYPTO_GF128MUL
David Howells90831632006-12-16 12:13:14 +1100258 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800259 LRW: Liskov Rivest Wagner, a tweakable, non malleable, non movable
260 narrow block cipher mode for dm-crypt. Use it with cipher
261 specification string aes-lrw-benbi, the key must be 256, 320 or 384.
262 The first 128, 192 or 256 bits in the key are used for AES and the
263 rest is used to tie each cipher block to its logical position.
David Howells90831632006-12-16 12:13:14 +1100264
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800265config CRYPTO_PCBC
266 tristate "PCBC support"
267 select CRYPTO_BLKCIPHER
268 select CRYPTO_MANAGER
269 help
270 PCBC: Propagating Cipher Block Chaining mode
271 This block cipher algorithm is required for RxRPC.
272
273config CRYPTO_XTS
Jussi Kivilinna5bcf8e62011-12-13 12:52:56 +0200274 tristate "XTS support"
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800275 select CRYPTO_BLKCIPHER
276 select CRYPTO_MANAGER
277 select CRYPTO_GF128MUL
278 help
279 XTS: IEEE1619/D16 narrow block cipher use with aes-xts-plain,
280 key size 256, 384 or 512 bits. This implementation currently
281 can't handle a sectorsize which is not a multiple of 16 bytes.
282
283comment "Hash modes"
284
Jussi Kivilinna93b5e862013-04-08 10:48:44 +0300285config CRYPTO_CMAC
286 tristate "CMAC support"
287 select CRYPTO_HASH
288 select CRYPTO_MANAGER
289 help
290 Cipher-based Message Authentication Code (CMAC) specified by
291 The National Institute of Standards and Technology (NIST).
292
293 https://tools.ietf.org/html/rfc4493
294 http://csrc.nist.gov/publications/nistpubs/800-38B/SP_800-38B.pdf
295
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800296config CRYPTO_HMAC
297 tristate "HMAC support"
298 select CRYPTO_HASH
299 select CRYPTO_MANAGER
300 help
301 HMAC: Keyed-Hashing for Message Authentication (RFC2104).
302 This is required for IPSec.
303
304config CRYPTO_XCBC
305 tristate "XCBC support"
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800306 select CRYPTO_HASH
307 select CRYPTO_MANAGER
308 help
309 XCBC: Keyed-Hashing with encryption algorithm
310 http://www.ietf.org/rfc/rfc3566.txt
311 http://csrc.nist.gov/encryption/modes/proposedmodes/
312 xcbc-mac/xcbc-mac-spec.pdf
313
Shane Wangf1939f72009-09-02 20:05:22 +1000314config CRYPTO_VMAC
315 tristate "VMAC support"
Shane Wangf1939f72009-09-02 20:05:22 +1000316 select CRYPTO_HASH
317 select CRYPTO_MANAGER
318 help
319 VMAC is a message authentication algorithm designed for
320 very high speed on 64-bit architectures.
321
322 See also:
323 <http://fastcrypto.org/vmac>
324
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800325comment "Digest"
326
327config CRYPTO_CRC32C
328 tristate "CRC32c CRC algorithm"
Herbert Xu5773a3e2008-07-08 20:54:28 +0800329 select CRYPTO_HASH
Darrick J. Wong6a0962b2012-03-23 15:02:25 -0700330 select CRC32
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800331 help
332 Castagnoli, et al Cyclic Redundancy-Check Algorithm. Used
333 by iSCSI for header and data digests and by others.
Herbert Xu69c35ef2008-11-07 15:11:47 +0800334 See Castagnoli93. Module will be crc32c.
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800335
Austin Zhang8cb51ba2008-08-07 09:57:03 +0800336config CRYPTO_CRC32C_INTEL
337 tristate "CRC32c INTEL hardware acceleration"
338 depends on X86
339 select CRYPTO_HASH
340 help
341 In Intel processor with SSE4.2 supported, the processor will
342 support CRC32C implementation using hardware accelerated CRC32
343 instruction. This option will create 'crc32c-intel' module,
344 which will enable any routine to use the CRC32 instruction to
345 gain performance compared with software implementation.
346 Module will be crc32c-intel.
347
David S. Miller442a7c42012-08-22 20:47:36 -0700348config CRYPTO_CRC32C_SPARC64
349 tristate "CRC32c CRC algorithm (SPARC64)"
350 depends on SPARC64
351 select CRYPTO_HASH
352 select CRC32
353 help
354 CRC32c CRC algorithm implemented using sparc64 crypto instructions,
355 when available.
356
Alexander Boyko78c37d12013-01-10 18:54:59 +0400357config CRYPTO_CRC32
358 tristate "CRC32 CRC algorithm"
359 select CRYPTO_HASH
360 select CRC32
361 help
362 CRC-32-IEEE 802.3 cyclic redundancy-check algorithm.
363 Shash crypto api wrappers to crc32_le function.
364
365config CRYPTO_CRC32_PCLMUL
366 tristate "CRC32 PCLMULQDQ hardware acceleration"
367 depends on X86
368 select CRYPTO_HASH
369 select CRC32
370 help
371 From Intel Westmere and AMD Bulldozer processor with SSE4.2
372 and PCLMULQDQ supported, the processor will support
373 CRC32 PCLMULQDQ implementation using hardware accelerated PCLMULQDQ
374 instruction. This option will create 'crc32-plcmul' module,
375 which will enable any routine to use the CRC-32-IEEE 802.3 checksum
376 and gain better performance as compared with the table implementation.
377
Herbert Xu684115212013-09-07 12:56:26 +1000378config CRYPTO_CRCT10DIF
379 tristate "CRCT10DIF algorithm"
380 select CRYPTO_HASH
381 help
382 CRC T10 Data Integrity Field computation is being cast as
383 a crypto transform. This allows for faster crc t10 diff
384 transforms to be used if they are available.
385
386config CRYPTO_CRCT10DIF_PCLMUL
387 tristate "CRCT10DIF PCLMULQDQ hardware acceleration"
388 depends on X86 && 64BIT && CRC_T10DIF
389 select CRYPTO_HASH
390 help
391 For x86_64 processors with SSE4.2 and PCLMULQDQ supported,
392 CRC T10 DIF PCLMULQDQ computation can be hardware
393 accelerated PCLMULQDQ instruction. This option will create
394 'crct10dif-plcmul' module, which is faster when computing the
395 crct10dif checksum as compared with the generic table implementation.
396
Huang Ying2cdc6892009-08-06 15:32:38 +1000397config CRYPTO_GHASH
398 tristate "GHASH digest algorithm"
Huang Ying2cdc6892009-08-06 15:32:38 +1000399 select CRYPTO_GF128MUL
400 help
401 GHASH is message digest algorithm for GCM (Galois/Counter Mode).
402
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800403config CRYPTO_MD4
404 tristate "MD4 digest algorithm"
Adrian-Ken Rueegsegger808a1762008-12-03 19:55:27 +0800405 select CRYPTO_HASH
Linus Torvalds1da177e2005-04-16 15:20:36 -0700406 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800407 MD4 message digest algorithm (RFC1320).
Linus Torvalds1da177e2005-04-16 15:20:36 -0700408
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800409config CRYPTO_MD5
410 tristate "MD5 digest algorithm"
Adrian-Ken Rueegsegger14b75ba2008-12-03 19:57:12 +0800411 select CRYPTO_HASH
Linus Torvalds1da177e2005-04-16 15:20:36 -0700412 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800413 MD5 message digest algorithm (RFC1321).
Linus Torvalds1da177e2005-04-16 15:20:36 -0700414
David S. Millerfa4dfed2012-08-19 21:51:26 -0700415config CRYPTO_MD5_SPARC64
416 tristate "MD5 digest algorithm (SPARC64)"
417 depends on SPARC64
418 select CRYPTO_MD5
419 select CRYPTO_HASH
420 help
421 MD5 message digest algorithm (RFC1321) implemented
422 using sparc64 crypto instructions, when available.
423
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800424config CRYPTO_MICHAEL_MIC
425 tristate "Michael MIC keyed digest algorithm"
Adrian-Ken Rueegsegger19e2bf12008-12-07 19:35:38 +0800426 select CRYPTO_HASH
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800427 help
428 Michael MIC is used for message integrity protection in TKIP
429 (IEEE 802.11i). This algorithm is required for TKIP, but it
430 should not be used for other purposes because of the weakness
431 of the algorithm.
432
Adrian-Ken Rueegsegger82798f92008-05-07 22:17:37 +0800433config CRYPTO_RMD128
Adrian Bunkb6d44342008-07-16 19:28:00 +0800434 tristate "RIPEMD-128 digest algorithm"
Herbert Xu7c4468b2008-11-08 09:10:40 +0800435 select CRYPTO_HASH
Adrian Bunkb6d44342008-07-16 19:28:00 +0800436 help
437 RIPEMD-128 (ISO/IEC 10118-3:2004).
Adrian-Ken Rueegsegger82798f92008-05-07 22:17:37 +0800438
Adrian Bunkb6d44342008-07-16 19:28:00 +0800439 RIPEMD-128 is a 128-bit cryptographic hash function. It should only
Michael Witten35ed4b32011-07-09 04:02:31 +0000440 be used as a secure replacement for RIPEMD. For other use cases,
Adrian Bunkb6d44342008-07-16 19:28:00 +0800441 RIPEMD-160 should be used.
Adrian-Ken Rueegsegger82798f92008-05-07 22:17:37 +0800442
Adrian Bunkb6d44342008-07-16 19:28:00 +0800443 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
Justin P. Mattock6d8de742010-09-12 10:42:47 +0800444 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
Adrian-Ken Rueegsegger82798f92008-05-07 22:17:37 +0800445
446config CRYPTO_RMD160
Adrian Bunkb6d44342008-07-16 19:28:00 +0800447 tristate "RIPEMD-160 digest algorithm"
Herbert Xue5835fb2008-11-08 09:18:51 +0800448 select CRYPTO_HASH
Adrian Bunkb6d44342008-07-16 19:28:00 +0800449 help
450 RIPEMD-160 (ISO/IEC 10118-3:2004).
Adrian-Ken Rueegsegger82798f92008-05-07 22:17:37 +0800451
Adrian Bunkb6d44342008-07-16 19:28:00 +0800452 RIPEMD-160 is a 160-bit cryptographic hash function. It is intended
453 to be used as a secure replacement for the 128-bit hash functions
454 MD4, MD5 and it's predecessor RIPEMD
455 (not to be confused with RIPEMD-128).
Adrian-Ken Rueegsegger82798f92008-05-07 22:17:37 +0800456
Adrian Bunkb6d44342008-07-16 19:28:00 +0800457 It's speed is comparable to SHA1 and there are no known attacks
458 against RIPEMD-160.
Adrian-Ken Rueegsegger534fe2c2008-05-09 21:30:27 +0800459
Adrian Bunkb6d44342008-07-16 19:28:00 +0800460 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
Justin P. Mattock6d8de742010-09-12 10:42:47 +0800461 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
Adrian-Ken Rueegsegger534fe2c2008-05-09 21:30:27 +0800462
463config CRYPTO_RMD256
Adrian Bunkb6d44342008-07-16 19:28:00 +0800464 tristate "RIPEMD-256 digest algorithm"
Herbert Xud8a5e2e2008-11-08 09:58:10 +0800465 select CRYPTO_HASH
Adrian Bunkb6d44342008-07-16 19:28:00 +0800466 help
467 RIPEMD-256 is an optional extension of RIPEMD-128 with a
468 256 bit hash. It is intended for applications that require
469 longer hash-results, without needing a larger security level
470 (than RIPEMD-128).
Adrian-Ken Rueegsegger534fe2c2008-05-09 21:30:27 +0800471
Adrian Bunkb6d44342008-07-16 19:28:00 +0800472 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
Justin P. Mattock6d8de742010-09-12 10:42:47 +0800473 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
Adrian-Ken Rueegsegger534fe2c2008-05-09 21:30:27 +0800474
475config CRYPTO_RMD320
Adrian Bunkb6d44342008-07-16 19:28:00 +0800476 tristate "RIPEMD-320 digest algorithm"
Herbert Xu3b8efb42008-11-08 10:11:09 +0800477 select CRYPTO_HASH
Adrian Bunkb6d44342008-07-16 19:28:00 +0800478 help
479 RIPEMD-320 is an optional extension of RIPEMD-160 with a
480 320 bit hash. It is intended for applications that require
481 longer hash-results, without needing a larger security level
482 (than RIPEMD-160).
Adrian-Ken Rueegsegger534fe2c2008-05-09 21:30:27 +0800483
Adrian Bunkb6d44342008-07-16 19:28:00 +0800484 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
Justin P. Mattock6d8de742010-09-12 10:42:47 +0800485 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
Adrian-Ken Rueegsegger82798f92008-05-07 22:17:37 +0800486
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800487config CRYPTO_SHA1
488 tristate "SHA1 digest algorithm"
Adrian-Ken Rueegsegger54ccb362008-12-02 21:08:20 +0800489 select CRYPTO_HASH
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800490 help
491 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2).
492
Mathias Krause66be8952011-08-04 20:19:25 +0200493config CRYPTO_SHA1_SSSE3
chandramouli narayanan7c1da8d2014-03-20 15:14:00 -0700494 tristate "SHA1 digest algorithm (SSSE3/AVX/AVX2)"
Mathias Krause66be8952011-08-04 20:19:25 +0200495 depends on X86 && 64BIT
496 select CRYPTO_SHA1
497 select CRYPTO_HASH
498 help
499 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented
500 using Supplemental SSE3 (SSSE3) instructions or Advanced Vector
chandramouli narayanan7c1da8d2014-03-20 15:14:00 -0700501 Extensions (AVX/AVX2), when available.
Mathias Krause66be8952011-08-04 20:19:25 +0200502
Tim Chen8275d1a2013-03-26 13:59:17 -0700503config CRYPTO_SHA256_SSSE3
504 tristate "SHA256 digest algorithm (SSSE3/AVX/AVX2)"
505 depends on X86 && 64BIT
506 select CRYPTO_SHA256
507 select CRYPTO_HASH
508 help
509 SHA-256 secure hash standard (DFIPS 180-2) implemented
510 using Supplemental SSE3 (SSSE3) instructions, or Advanced Vector
511 Extensions version 1 (AVX1), or Advanced Vector Extensions
512 version 2 (AVX2) instructions, when available.
513
Tim Chen87de4572013-03-26 14:00:02 -0700514config CRYPTO_SHA512_SSSE3
515 tristate "SHA512 digest algorithm (SSSE3/AVX/AVX2)"
516 depends on X86 && 64BIT
517 select CRYPTO_SHA512
518 select CRYPTO_HASH
519 help
520 SHA-512 secure hash standard (DFIPS 180-2) implemented
521 using Supplemental SSE3 (SSSE3) instructions, or Advanced Vector
522 Extensions version 1 (AVX1), or Advanced Vector Extensions
523 version 2 (AVX2) instructions, when available.
524
David S. Miller4ff28d42012-08-19 15:41:53 -0700525config CRYPTO_SHA1_SPARC64
526 tristate "SHA1 digest algorithm (SPARC64)"
527 depends on SPARC64
528 select CRYPTO_SHA1
529 select CRYPTO_HASH
530 help
531 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented
532 using sparc64 crypto instructions, when available.
533
David McCulloughf0be44f2012-09-07 04:17:02 +0800534config CRYPTO_SHA1_ARM
535 tristate "SHA1 digest algorithm (ARM-asm)"
536 depends on ARM
537 select CRYPTO_SHA1
538 select CRYPTO_HASH
539 help
540 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented
541 using optimized ARM assembler.
542
Jussi Kivilinna60468252014-07-29 17:14:14 +0100543config CRYPTO_SHA1_ARM_NEON
544 tristate "SHA1 digest algorithm (ARM NEON)"
545 depends on ARM && KERNEL_MODE_NEON && !CPU_BIG_ENDIAN
546 select CRYPTO_SHA1_ARM
547 select CRYPTO_SHA1
548 select CRYPTO_HASH
549 help
550 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented
551 using optimized ARM NEON assembly, when NEON instructions are
552 available.
553
Michael Ellerman323a6bf2012-09-13 23:00:49 +0000554config CRYPTO_SHA1_PPC
555 tristate "SHA1 digest algorithm (powerpc)"
556 depends on PPC
557 help
558 This is the powerpc hardware accelerated implementation of the
559 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2).
560
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800561config CRYPTO_SHA256
562 tristate "SHA224 and SHA256 digest algorithm"
Adrian-Ken Rueegsegger50e109b52008-12-03 19:57:49 +0800563 select CRYPTO_HASH
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800564 help
565 SHA256 secure hash standard (DFIPS 180-2).
566
567 This version of SHA implements a 256 bit hash with 128 bits of
568 security against collision attacks.
569
Adrian Bunkb6d44342008-07-16 19:28:00 +0800570 This code also includes SHA-224, a 224 bit hash with 112 bits
571 of security against collision attacks.
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800572
David S. Miller86c93b22012-08-19 17:11:37 -0700573config CRYPTO_SHA256_SPARC64
574 tristate "SHA224 and SHA256 digest algorithm (SPARC64)"
575 depends on SPARC64
576 select CRYPTO_SHA256
577 select CRYPTO_HASH
578 help
579 SHA-256 secure hash standard (DFIPS 180-2) implemented
580 using sparc64 crypto instructions, when available.
581
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800582config CRYPTO_SHA512
583 tristate "SHA384 and SHA512 digest algorithms"
Adrian-Ken Rueegseggerbd9d20d2008-12-17 16:49:02 +1100584 select CRYPTO_HASH
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800585 help
586 SHA512 secure hash standard (DFIPS 180-2).
587
588 This version of SHA implements a 512 bit hash with 256 bits of
589 security against collision attacks.
590
591 This code also includes SHA-384, a 384 bit hash with 192 bits
592 of security against collision attacks.
593
David S. Miller775e0c62012-08-19 17:37:56 -0700594config CRYPTO_SHA512_SPARC64
595 tristate "SHA384 and SHA512 digest algorithm (SPARC64)"
596 depends on SPARC64
597 select CRYPTO_SHA512
598 select CRYPTO_HASH
599 help
600 SHA-512 secure hash standard (DFIPS 180-2) implemented
601 using sparc64 crypto instructions, when available.
602
Jussi Kivilinnac8611d72014-07-29 17:15:24 +0100603config CRYPTO_SHA512_ARM_NEON
604 tristate "SHA384 and SHA512 digest algorithm (ARM NEON)"
605 depends on ARM && KERNEL_MODE_NEON && !CPU_BIG_ENDIAN
606 select CRYPTO_SHA512
607 select CRYPTO_HASH
608 help
609 SHA-512 secure hash standard (DFIPS 180-2) implemented
610 using ARM NEON instructions, when available.
611
612 This version of SHA implements a 512 bit hash with 256 bits of
613 security against collision attacks.
614
615 This code also includes SHA-384, a 384 bit hash with 192 bits
616 of security against collision attacks.
617
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800618config CRYPTO_TGR192
619 tristate "Tiger digest algorithms"
Adrian-Ken Rueegseggerf63fbd32008-12-03 19:58:32 +0800620 select CRYPTO_HASH
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800621 help
622 Tiger hash algorithm 192, 160 and 128-bit hashes
623
624 Tiger is a hash function optimized for 64-bit processors while
625 still having decent performance on 32-bit processors.
626 Tiger was developed by Ross Anderson and Eli Biham.
Linus Torvalds1da177e2005-04-16 15:20:36 -0700627
628 See also:
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800629 <http://www.cs.technion.ac.il/~biham/Reports/Tiger/>.
630
631config CRYPTO_WP512
632 tristate "Whirlpool digest algorithms"
Adrian-Ken Rueegsegger49465102008-12-07 19:34:37 +0800633 select CRYPTO_HASH
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800634 help
635 Whirlpool hash algorithm 512, 384 and 256-bit hashes
636
637 Whirlpool-512 is part of the NESSIE cryptographic primitives.
638 Whirlpool will be part of the ISO/IEC 10118-3:2003(E) standard
639
640 See also:
Justin P. Mattock6d8de742010-09-12 10:42:47 +0800641 <http://www.larc.usp.br/~pbarreto/WhirlpoolPage.html>
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800642
Huang Ying0e1227d2009-10-19 11:53:06 +0900643config CRYPTO_GHASH_CLMUL_NI_INTEL
644 tristate "GHASH digest algorithm (CLMUL-NI accelerated)"
Richard Weinberger8af00862011-06-08 20:56:29 +0800645 depends on X86 && 64BIT
Huang Ying0e1227d2009-10-19 11:53:06 +0900646 select CRYPTO_CRYPTD
647 help
648 GHASH is message digest algorithm for GCM (Galois/Counter Mode).
649 The implementation is accelerated by CLMUL-NI of Intel.
650
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800651comment "Ciphers"
Linus Torvalds1da177e2005-04-16 15:20:36 -0700652
653config CRYPTO_AES
654 tristate "AES cipher algorithms"
Herbert Xucce9e062006-08-21 21:08:13 +1000655 select CRYPTO_ALGAPI
Linus Torvalds1da177e2005-04-16 15:20:36 -0700656 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800657 AES cipher algorithms (FIPS-197). AES uses the Rijndael
Linus Torvalds1da177e2005-04-16 15:20:36 -0700658 algorithm.
659
660 Rijndael appears to be consistently a very good performer in
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800661 both hardware and software across a wide range of computing
662 environments regardless of its use in feedback or non-feedback
663 modes. Its key setup time is excellent, and its key agility is
664 good. Rijndael's very low memory requirements make it very well
665 suited for restricted-space environments, in which it also
666 demonstrates excellent performance. Rijndael's operations are
667 among the easiest to defend against power and timing attacks.
Linus Torvalds1da177e2005-04-16 15:20:36 -0700668
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800669 The AES specifies three key sizes: 128, 192 and 256 bits
Linus Torvalds1da177e2005-04-16 15:20:36 -0700670
671 See <http://csrc.nist.gov/CryptoToolkit/aes/> for more information.
672
673config CRYPTO_AES_586
674 tristate "AES cipher algorithms (i586)"
Herbert Xucce9e062006-08-21 21:08:13 +1000675 depends on (X86 || UML_X86) && !64BIT
676 select CRYPTO_ALGAPI
Sebastian Siewior5157dea2007-11-10 19:07:16 +0800677 select CRYPTO_AES
Linus Torvalds1da177e2005-04-16 15:20:36 -0700678 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800679 AES cipher algorithms (FIPS-197). AES uses the Rijndael
Linus Torvalds1da177e2005-04-16 15:20:36 -0700680 algorithm.
681
682 Rijndael appears to be consistently a very good performer in
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800683 both hardware and software across a wide range of computing
684 environments regardless of its use in feedback or non-feedback
685 modes. Its key setup time is excellent, and its key agility is
686 good. Rijndael's very low memory requirements make it very well
687 suited for restricted-space environments, in which it also
688 demonstrates excellent performance. Rijndael's operations are
689 among the easiest to defend against power and timing attacks.
Linus Torvalds1da177e2005-04-16 15:20:36 -0700690
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800691 The AES specifies three key sizes: 128, 192 and 256 bits
Linus Torvalds1da177e2005-04-16 15:20:36 -0700692
693 See <http://csrc.nist.gov/encryption/aes/> for more information.
694
Andreas Steinmetza2a892a2005-07-06 13:55:00 -0700695config CRYPTO_AES_X86_64
696 tristate "AES cipher algorithms (x86_64)"
Herbert Xucce9e062006-08-21 21:08:13 +1000697 depends on (X86 || UML_X86) && 64BIT
698 select CRYPTO_ALGAPI
Sebastian Siewior81190b32007-11-08 21:25:04 +0800699 select CRYPTO_AES
Andreas Steinmetza2a892a2005-07-06 13:55:00 -0700700 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800701 AES cipher algorithms (FIPS-197). AES uses the Rijndael
Andreas Steinmetza2a892a2005-07-06 13:55:00 -0700702 algorithm.
703
704 Rijndael appears to be consistently a very good performer in
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800705 both hardware and software across a wide range of computing
706 environments regardless of its use in feedback or non-feedback
707 modes. Its key setup time is excellent, and its key agility is
708 good. Rijndael's very low memory requirements make it very well
709 suited for restricted-space environments, in which it also
710 demonstrates excellent performance. Rijndael's operations are
711 among the easiest to defend against power and timing attacks.
Andreas Steinmetza2a892a2005-07-06 13:55:00 -0700712
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800713 The AES specifies three key sizes: 128, 192 and 256 bits
Andreas Steinmetza2a892a2005-07-06 13:55:00 -0700714
715 See <http://csrc.nist.gov/encryption/aes/> for more information.
716
Huang Ying54b6a1b2009-01-18 16:28:34 +1100717config CRYPTO_AES_NI_INTEL
718 tristate "AES cipher algorithms (AES-NI)"
Richard Weinberger8af00862011-06-08 20:56:29 +0800719 depends on X86
Mathias Krause0d258ef2010-11-27 16:34:46 +0800720 select CRYPTO_AES_X86_64 if 64BIT
721 select CRYPTO_AES_586 if !64BIT
Huang Ying54b6a1b2009-01-18 16:28:34 +1100722 select CRYPTO_CRYPTD
Ard Biesheuvel801201a2013-09-20 09:55:41 +0200723 select CRYPTO_ABLK_HELPER
Huang Ying54b6a1b2009-01-18 16:28:34 +1100724 select CRYPTO_ALGAPI
Jussi Kivilinna7643a112013-04-10 18:39:20 +0300725 select CRYPTO_GLUE_HELPER_X86 if 64BIT
Jussi Kivilinna023af602012-07-22 18:18:37 +0300726 select CRYPTO_LRW
727 select CRYPTO_XTS
Huang Ying54b6a1b2009-01-18 16:28:34 +1100728 help
729 Use Intel AES-NI instructions for AES algorithm.
730
731 AES cipher algorithms (FIPS-197). AES uses the Rijndael
732 algorithm.
733
734 Rijndael appears to be consistently a very good performer in
735 both hardware and software across a wide range of computing
736 environments regardless of its use in feedback or non-feedback
737 modes. Its key setup time is excellent, and its key agility is
738 good. Rijndael's very low memory requirements make it very well
739 suited for restricted-space environments, in which it also
740 demonstrates excellent performance. Rijndael's operations are
741 among the easiest to defend against power and timing attacks.
742
743 The AES specifies three key sizes: 128, 192 and 256 bits
744
745 See <http://csrc.nist.gov/encryption/aes/> for more information.
746
Mathias Krause0d258ef2010-11-27 16:34:46 +0800747 In addition to AES cipher algorithm support, the acceleration
748 for some popular block cipher mode is supported too, including
749 ECB, CBC, LRW, PCBC, XTS. The 64 bit version has additional
750 acceleration for CTR.
Huang Ying2cf4ac82009-03-29 15:41:20 +0800751
David S. Miller9bf48522012-08-21 03:58:13 -0700752config CRYPTO_AES_SPARC64
753 tristate "AES cipher algorithms (SPARC64)"
754 depends on SPARC64
755 select CRYPTO_CRYPTD
756 select CRYPTO_ALGAPI
757 help
758 Use SPARC64 crypto opcodes for AES algorithm.
759
760 AES cipher algorithms (FIPS-197). AES uses the Rijndael
761 algorithm.
762
763 Rijndael appears to be consistently a very good performer in
764 both hardware and software across a wide range of computing
765 environments regardless of its use in feedback or non-feedback
766 modes. Its key setup time is excellent, and its key agility is
767 good. Rijndael's very low memory requirements make it very well
768 suited for restricted-space environments, in which it also
769 demonstrates excellent performance. Rijndael's operations are
770 among the easiest to defend against power and timing attacks.
771
772 The AES specifies three key sizes: 128, 192 and 256 bits
773
774 See <http://csrc.nist.gov/encryption/aes/> for more information.
775
776 In addition to AES cipher algorithm support, the acceleration
777 for some popular block cipher mode is supported too, including
778 ECB and CBC.
779
David McCulloughf0be44f2012-09-07 04:17:02 +0800780config CRYPTO_AES_ARM
781 tristate "AES cipher algorithms (ARM-asm)"
782 depends on ARM
783 select CRYPTO_ALGAPI
784 select CRYPTO_AES
785 help
786 Use optimized AES assembler routines for ARM platforms.
787
788 AES cipher algorithms (FIPS-197). AES uses the Rijndael
789 algorithm.
790
791 Rijndael appears to be consistently a very good performer in
792 both hardware and software across a wide range of computing
793 environments regardless of its use in feedback or non-feedback
794 modes. Its key setup time is excellent, and its key agility is
795 good. Rijndael's very low memory requirements make it very well
796 suited for restricted-space environments, in which it also
797 demonstrates excellent performance. Rijndael's operations are
798 among the easiest to defend against power and timing attacks.
799
800 The AES specifies three key sizes: 128, 192 and 256 bits
801
802 See <http://csrc.nist.gov/encryption/aes/> for more information.
803
Ard Biesheuvele4e7f102013-09-16 18:31:38 +0200804config CRYPTO_AES_ARM_BS
805 tristate "Bit sliced AES using NEON instructions"
806 depends on ARM && KERNEL_MODE_NEON
807 select CRYPTO_ALGAPI
808 select CRYPTO_AES_ARM
809 select CRYPTO_ABLK_HELPER
810 help
811 Use a faster and more secure NEON based implementation of AES in CBC,
812 CTR and XTS modes
813
814 Bit sliced AES gives around 45% speedup on Cortex-A15 for CTR mode
815 and for XTS mode encryption, CBC and XTS mode decryption speedup is
816 around 25%. (CBC encryption speed is not affected by this driver.)
817 This implementation does not rely on any lookup tables so it is
818 believed to be invulnerable to cache timing attacks.
819
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800820config CRYPTO_ANUBIS
821 tristate "Anubis cipher algorithm"
822 select CRYPTO_ALGAPI
823 help
824 Anubis cipher algorithm.
825
826 Anubis is a variable key length cipher which can use keys from
827 128 bits to 320 bits in length. It was evaluated as a entrant
828 in the NESSIE competition.
829
830 See also:
Justin P. Mattock6d8de742010-09-12 10:42:47 +0800831 <https://www.cosic.esat.kuleuven.be/nessie/reports/>
832 <http://www.larc.usp.br/~pbarreto/AnubisPage.html>
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800833
834config CRYPTO_ARC4
835 tristate "ARC4 cipher algorithm"
Sebastian Andrzej Siewiorb9b0f082012-06-26 18:13:46 +0200836 select CRYPTO_BLKCIPHER
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800837 help
838 ARC4 cipher algorithm.
839
840 ARC4 is a stream cipher using keys ranging from 8 bits to 2048
841 bits in length. This algorithm is required for driver-based
842 WEP, but it should not be for other purposes because of the
843 weakness of the algorithm.
844
845config CRYPTO_BLOWFISH
846 tristate "Blowfish cipher algorithm"
847 select CRYPTO_ALGAPI
Jussi Kivilinna52ba8672011-09-02 01:45:07 +0300848 select CRYPTO_BLOWFISH_COMMON
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800849 help
850 Blowfish cipher algorithm, by Bruce Schneier.
851
852 This is a variable key length cipher which can use keys from 32
853 bits to 448 bits in length. It's fast, simple and specifically
854 designed for use on "large microprocessors".
855
856 See also:
857 <http://www.schneier.com/blowfish.html>
858
Jussi Kivilinna52ba8672011-09-02 01:45:07 +0300859config CRYPTO_BLOWFISH_COMMON
860 tristate
861 help
862 Common parts of the Blowfish cipher algorithm shared by the
863 generic c and the assembler implementations.
864
865 See also:
866 <http://www.schneier.com/blowfish.html>
867
Jussi Kivilinna64b94ce2011-09-02 01:45:22 +0300868config CRYPTO_BLOWFISH_X86_64
869 tristate "Blowfish cipher algorithm (x86_64)"
Al Virof21a7c12012-04-08 20:31:22 -0400870 depends on X86 && 64BIT
Jussi Kivilinna64b94ce2011-09-02 01:45:22 +0300871 select CRYPTO_ALGAPI
872 select CRYPTO_BLOWFISH_COMMON
873 help
874 Blowfish cipher algorithm (x86_64), by Bruce Schneier.
875
876 This is a variable key length cipher which can use keys from 32
877 bits to 448 bits in length. It's fast, simple and specifically
878 designed for use on "large microprocessors".
879
880 See also:
881 <http://www.schneier.com/blowfish.html>
882
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800883config CRYPTO_CAMELLIA
884 tristate "Camellia cipher algorithms"
885 depends on CRYPTO
886 select CRYPTO_ALGAPI
887 help
888 Camellia cipher algorithms module.
889
890 Camellia is a symmetric key block cipher developed jointly
891 at NTT and Mitsubishi Electric Corporation.
892
893 The Camellia specifies three key sizes: 128, 192 and 256 bits.
894
895 See also:
896 <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
897
Jussi Kivilinna0b95ec52012-03-05 20:26:47 +0200898config CRYPTO_CAMELLIA_X86_64
899 tristate "Camellia cipher algorithm (x86_64)"
Al Virof21a7c12012-04-08 20:31:22 -0400900 depends on X86 && 64BIT
Jussi Kivilinna0b95ec52012-03-05 20:26:47 +0200901 depends on CRYPTO
902 select CRYPTO_ALGAPI
Jussi Kivilinna964263a2012-06-18 14:07:29 +0300903 select CRYPTO_GLUE_HELPER_X86
Jussi Kivilinna0b95ec52012-03-05 20:26:47 +0200904 select CRYPTO_LRW
905 select CRYPTO_XTS
906 help
907 Camellia cipher algorithm module (x86_64).
908
909 Camellia is a symmetric key block cipher developed jointly
910 at NTT and Mitsubishi Electric Corporation.
911
912 The Camellia specifies three key sizes: 128, 192 and 256 bits.
913
914 See also:
915 <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
916
Jussi Kivilinnad9b1d2e2012-10-26 14:49:01 +0300917config CRYPTO_CAMELLIA_AESNI_AVX_X86_64
918 tristate "Camellia cipher algorithm (x86_64/AES-NI/AVX)"
919 depends on X86 && 64BIT
920 depends on CRYPTO
921 select CRYPTO_ALGAPI
922 select CRYPTO_CRYPTD
Ard Biesheuvel801201a2013-09-20 09:55:41 +0200923 select CRYPTO_ABLK_HELPER
Jussi Kivilinnad9b1d2e2012-10-26 14:49:01 +0300924 select CRYPTO_GLUE_HELPER_X86
925 select CRYPTO_CAMELLIA_X86_64
926 select CRYPTO_LRW
927 select CRYPTO_XTS
928 help
929 Camellia cipher algorithm module (x86_64/AES-NI/AVX).
930
931 Camellia is a symmetric key block cipher developed jointly
932 at NTT and Mitsubishi Electric Corporation.
933
934 The Camellia specifies three key sizes: 128, 192 and 256 bits.
935
936 See also:
937 <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
938
Jussi Kivilinnaf3f935a2013-04-13 13:47:00 +0300939config CRYPTO_CAMELLIA_AESNI_AVX2_X86_64
940 tristate "Camellia cipher algorithm (x86_64/AES-NI/AVX2)"
941 depends on X86 && 64BIT
942 depends on CRYPTO
943 select CRYPTO_ALGAPI
944 select CRYPTO_CRYPTD
Ard Biesheuvel801201a2013-09-20 09:55:41 +0200945 select CRYPTO_ABLK_HELPER
Jussi Kivilinnaf3f935a2013-04-13 13:47:00 +0300946 select CRYPTO_GLUE_HELPER_X86
947 select CRYPTO_CAMELLIA_X86_64
948 select CRYPTO_CAMELLIA_AESNI_AVX_X86_64
949 select CRYPTO_LRW
950 select CRYPTO_XTS
951 help
952 Camellia cipher algorithm module (x86_64/AES-NI/AVX2).
953
954 Camellia is a symmetric key block cipher developed jointly
955 at NTT and Mitsubishi Electric Corporation.
956
957 The Camellia specifies three key sizes: 128, 192 and 256 bits.
958
959 See also:
960 <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
961
David S. Miller81658ad2012-08-28 12:05:54 -0700962config CRYPTO_CAMELLIA_SPARC64
963 tristate "Camellia cipher algorithm (SPARC64)"
964 depends on SPARC64
965 depends on CRYPTO
966 select CRYPTO_ALGAPI
967 help
968 Camellia cipher algorithm module (SPARC64).
969
970 Camellia is a symmetric key block cipher developed jointly
971 at NTT and Mitsubishi Electric Corporation.
972
973 The Camellia specifies three key sizes: 128, 192 and 256 bits.
974
975 See also:
976 <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
977
Jussi Kivilinna044ab522012-11-13 11:43:14 +0200978config CRYPTO_CAST_COMMON
979 tristate
980 help
981 Common parts of the CAST cipher algorithms shared by the
982 generic c and the assembler implementations.
983
Linus Torvalds1da177e2005-04-16 15:20:36 -0700984config CRYPTO_CAST5
985 tristate "CAST5 (CAST-128) cipher algorithm"
Herbert Xucce9e062006-08-21 21:08:13 +1000986 select CRYPTO_ALGAPI
Jussi Kivilinna044ab522012-11-13 11:43:14 +0200987 select CRYPTO_CAST_COMMON
Linus Torvalds1da177e2005-04-16 15:20:36 -0700988 help
989 The CAST5 encryption algorithm (synonymous with CAST-128) is
990 described in RFC2144.
991
Johannes Goetzfried4d6d6a22012-07-11 19:37:37 +0200992config CRYPTO_CAST5_AVX_X86_64
993 tristate "CAST5 (CAST-128) cipher algorithm (x86_64/AVX)"
994 depends on X86 && 64BIT
995 select CRYPTO_ALGAPI
996 select CRYPTO_CRYPTD
Ard Biesheuvel801201a2013-09-20 09:55:41 +0200997 select CRYPTO_ABLK_HELPER
Jussi Kivilinna044ab522012-11-13 11:43:14 +0200998 select CRYPTO_CAST_COMMON
Johannes Goetzfried4d6d6a22012-07-11 19:37:37 +0200999 select CRYPTO_CAST5
1000 help
1001 The CAST5 encryption algorithm (synonymous with CAST-128) is
1002 described in RFC2144.
1003
1004 This module provides the Cast5 cipher algorithm that processes
1005 sixteen blocks parallel using the AVX instruction set.
1006
Linus Torvalds1da177e2005-04-16 15:20:36 -07001007config CRYPTO_CAST6
1008 tristate "CAST6 (CAST-256) cipher algorithm"
Herbert Xucce9e062006-08-21 21:08:13 +10001009 select CRYPTO_ALGAPI
Jussi Kivilinna044ab522012-11-13 11:43:14 +02001010 select CRYPTO_CAST_COMMON
Linus Torvalds1da177e2005-04-16 15:20:36 -07001011 help
1012 The CAST6 encryption algorithm (synonymous with CAST-256) is
1013 described in RFC2612.
1014
Johannes Goetzfried4ea12772012-07-11 19:38:57 +02001015config CRYPTO_CAST6_AVX_X86_64
1016 tristate "CAST6 (CAST-256) cipher algorithm (x86_64/AVX)"
1017 depends on X86 && 64BIT
1018 select CRYPTO_ALGAPI
1019 select CRYPTO_CRYPTD
Ard Biesheuvel801201a2013-09-20 09:55:41 +02001020 select CRYPTO_ABLK_HELPER
Johannes Goetzfried4ea12772012-07-11 19:38:57 +02001021 select CRYPTO_GLUE_HELPER_X86
Jussi Kivilinna044ab522012-11-13 11:43:14 +02001022 select CRYPTO_CAST_COMMON
Johannes Goetzfried4ea12772012-07-11 19:38:57 +02001023 select CRYPTO_CAST6
1024 select CRYPTO_LRW
1025 select CRYPTO_XTS
1026 help
1027 The CAST6 encryption algorithm (synonymous with CAST-256) is
1028 described in RFC2612.
1029
1030 This module provides the Cast6 cipher algorithm that processes
1031 eight blocks parallel using the AVX instruction set.
1032
Sebastian Siewior584fffc2008-04-05 21:04:48 +08001033config CRYPTO_DES
1034 tristate "DES and Triple DES EDE cipher algorithms"
Herbert Xucce9e062006-08-21 21:08:13 +10001035 select CRYPTO_ALGAPI
Linus Torvalds1da177e2005-04-16 15:20:36 -07001036 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +08001037 DES cipher algorithm (FIPS 46-2), and Triple DES EDE (FIPS 46-3).
Linus Torvalds1da177e2005-04-16 15:20:36 -07001038
David S. Millerc5aac2d2012-08-25 22:37:23 -07001039config CRYPTO_DES_SPARC64
1040 tristate "DES and Triple DES EDE cipher algorithms (SPARC64)"
Dave Jones97da37b2012-10-02 17:13:20 -04001041 depends on SPARC64
David S. Millerc5aac2d2012-08-25 22:37:23 -07001042 select CRYPTO_ALGAPI
1043 select CRYPTO_DES
1044 help
1045 DES cipher algorithm (FIPS 46-2), and Triple DES EDE (FIPS 46-3),
1046 optimized using SPARC64 crypto opcodes.
1047
Sebastian Siewior584fffc2008-04-05 21:04:48 +08001048config CRYPTO_FCRYPT
1049 tristate "FCrypt cipher algorithm"
Herbert Xucce9e062006-08-21 21:08:13 +10001050 select CRYPTO_ALGAPI
Sebastian Siewior584fffc2008-04-05 21:04:48 +08001051 select CRYPTO_BLKCIPHER
Linus Torvalds1da177e2005-04-16 15:20:36 -07001052 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +08001053 FCrypt algorithm used by RxRPC.
Linus Torvalds1da177e2005-04-16 15:20:36 -07001054
1055config CRYPTO_KHAZAD
1056 tristate "Khazad cipher algorithm"
Herbert Xucce9e062006-08-21 21:08:13 +10001057 select CRYPTO_ALGAPI
Linus Torvalds1da177e2005-04-16 15:20:36 -07001058 help
1059 Khazad cipher algorithm.
1060
1061 Khazad was a finalist in the initial NESSIE competition. It is
1062 an algorithm optimized for 64-bit processors with good performance
1063 on 32-bit processors. Khazad uses an 128 bit key size.
1064
1065 See also:
Justin P. Mattock6d8de742010-09-12 10:42:47 +08001066 <http://www.larc.usp.br/~pbarreto/KhazadPage.html>
Linus Torvalds1da177e2005-04-16 15:20:36 -07001067
Tan Swee Heng2407d602007-11-23 19:45:00 +08001068config CRYPTO_SALSA20
Kees Cook3b4afaf2012-10-02 11:16:49 -07001069 tristate "Salsa20 stream cipher algorithm"
Tan Swee Heng2407d602007-11-23 19:45:00 +08001070 select CRYPTO_BLKCIPHER
1071 help
1072 Salsa20 stream cipher algorithm.
1073
1074 Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
1075 Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
1076
1077 The Salsa20 stream cipher algorithm is designed by Daniel J.
1078 Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
Linus Torvalds1da177e2005-04-16 15:20:36 -07001079
Tan Swee Heng974e4b72007-12-10 15:52:56 +08001080config CRYPTO_SALSA20_586
Kees Cook3b4afaf2012-10-02 11:16:49 -07001081 tristate "Salsa20 stream cipher algorithm (i586)"
Tan Swee Heng974e4b72007-12-10 15:52:56 +08001082 depends on (X86 || UML_X86) && !64BIT
Tan Swee Heng974e4b72007-12-10 15:52:56 +08001083 select CRYPTO_BLKCIPHER
Tan Swee Heng974e4b72007-12-10 15:52:56 +08001084 help
1085 Salsa20 stream cipher algorithm.
1086
1087 Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
1088 Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
1089
1090 The Salsa20 stream cipher algorithm is designed by Daniel J.
1091 Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
1092
Tan Swee Heng9a7dafb2007-12-18 00:04:40 +08001093config CRYPTO_SALSA20_X86_64
Kees Cook3b4afaf2012-10-02 11:16:49 -07001094 tristate "Salsa20 stream cipher algorithm (x86_64)"
Tan Swee Heng9a7dafb2007-12-18 00:04:40 +08001095 depends on (X86 || UML_X86) && 64BIT
Tan Swee Heng9a7dafb2007-12-18 00:04:40 +08001096 select CRYPTO_BLKCIPHER
Tan Swee Heng9a7dafb2007-12-18 00:04:40 +08001097 help
1098 Salsa20 stream cipher algorithm.
1099
1100 Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
1101 Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
1102
1103 The Salsa20 stream cipher algorithm is designed by Daniel J.
1104 Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
1105
Sebastian Siewior584fffc2008-04-05 21:04:48 +08001106config CRYPTO_SEED
1107 tristate "SEED cipher algorithm"
1108 select CRYPTO_ALGAPI
1109 help
1110 SEED cipher algorithm (RFC4269).
1111
1112 SEED is a 128-bit symmetric key block cipher that has been
1113 developed by KISA (Korea Information Security Agency) as a
1114 national standard encryption algorithm of the Republic of Korea.
1115 It is a 16 round block cipher with the key size of 128 bit.
1116
1117 See also:
1118 <http://www.kisa.or.kr/kisa/seed/jsp/seed_eng.jsp>
1119
1120config CRYPTO_SERPENT
1121 tristate "Serpent cipher algorithm"
1122 select CRYPTO_ALGAPI
1123 help
1124 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
1125
1126 Keys are allowed to be from 0 to 256 bits in length, in steps
1127 of 8 bits. Also includes the 'Tnepres' algorithm, a reversed
1128 variant of Serpent for compatibility with old kerneli.org code.
1129
1130 See also:
1131 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
1132
Jussi Kivilinna937c30d2011-11-09 16:26:25 +02001133config CRYPTO_SERPENT_SSE2_X86_64
1134 tristate "Serpent cipher algorithm (x86_64/SSE2)"
1135 depends on X86 && 64BIT
1136 select CRYPTO_ALGAPI
Jussi Kivilinna341975b2011-11-24 08:37:41 +02001137 select CRYPTO_CRYPTD
Ard Biesheuvel801201a2013-09-20 09:55:41 +02001138 select CRYPTO_ABLK_HELPER
Jussi Kivilinna596d8752012-06-18 14:07:19 +03001139 select CRYPTO_GLUE_HELPER_X86
Jussi Kivilinna937c30d2011-11-09 16:26:25 +02001140 select CRYPTO_SERPENT
Jussi Kivilinnafeaf0cf2011-12-13 12:53:12 +02001141 select CRYPTO_LRW
1142 select CRYPTO_XTS
Jussi Kivilinna937c30d2011-11-09 16:26:25 +02001143 help
1144 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
1145
1146 Keys are allowed to be from 0 to 256 bits in length, in steps
1147 of 8 bits.
1148
1149 This module provides Serpent cipher algorithm that processes eigth
1150 blocks parallel using SSE2 instruction set.
1151
1152 See also:
1153 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
1154
Jussi Kivilinna251496d2011-11-09 16:26:31 +02001155config CRYPTO_SERPENT_SSE2_586
1156 tristate "Serpent cipher algorithm (i586/SSE2)"
1157 depends on X86 && !64BIT
1158 select CRYPTO_ALGAPI
Jussi Kivilinna341975b2011-11-24 08:37:41 +02001159 select CRYPTO_CRYPTD
Ard Biesheuvel801201a2013-09-20 09:55:41 +02001160 select CRYPTO_ABLK_HELPER
Jussi Kivilinna596d8752012-06-18 14:07:19 +03001161 select CRYPTO_GLUE_HELPER_X86
Jussi Kivilinna251496d2011-11-09 16:26:31 +02001162 select CRYPTO_SERPENT
Jussi Kivilinnafeaf0cf2011-12-13 12:53:12 +02001163 select CRYPTO_LRW
1164 select CRYPTO_XTS
Jussi Kivilinna251496d2011-11-09 16:26:31 +02001165 help
1166 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
1167
1168 Keys are allowed to be from 0 to 256 bits in length, in steps
1169 of 8 bits.
1170
1171 This module provides Serpent cipher algorithm that processes four
1172 blocks parallel using SSE2 instruction set.
1173
1174 See also:
1175 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
1176
Johannes Goetzfried7efe4072012-06-12 16:47:43 +08001177config CRYPTO_SERPENT_AVX_X86_64
1178 tristate "Serpent cipher algorithm (x86_64/AVX)"
1179 depends on X86 && 64BIT
1180 select CRYPTO_ALGAPI
1181 select CRYPTO_CRYPTD
Ard Biesheuvel801201a2013-09-20 09:55:41 +02001182 select CRYPTO_ABLK_HELPER
Jussi Kivilinna1d0debb2012-06-18 14:07:24 +03001183 select CRYPTO_GLUE_HELPER_X86
Johannes Goetzfried7efe4072012-06-12 16:47:43 +08001184 select CRYPTO_SERPENT
1185 select CRYPTO_LRW
1186 select CRYPTO_XTS
1187 help
1188 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
1189
1190 Keys are allowed to be from 0 to 256 bits in length, in steps
1191 of 8 bits.
1192
1193 This module provides the Serpent cipher algorithm that processes
1194 eight blocks parallel using the AVX instruction set.
1195
1196 See also:
1197 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
1198
Jussi Kivilinna56d76c92013-04-13 13:46:55 +03001199config CRYPTO_SERPENT_AVX2_X86_64
1200 tristate "Serpent cipher algorithm (x86_64/AVX2)"
1201 depends on X86 && 64BIT
1202 select CRYPTO_ALGAPI
1203 select CRYPTO_CRYPTD
Ard Biesheuvel801201a2013-09-20 09:55:41 +02001204 select CRYPTO_ABLK_HELPER
Jussi Kivilinna56d76c92013-04-13 13:46:55 +03001205 select CRYPTO_GLUE_HELPER_X86
1206 select CRYPTO_SERPENT
1207 select CRYPTO_SERPENT_AVX_X86_64
1208 select CRYPTO_LRW
1209 select CRYPTO_XTS
1210 help
1211 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
1212
1213 Keys are allowed to be from 0 to 256 bits in length, in steps
1214 of 8 bits.
1215
1216 This module provides Serpent cipher algorithm that processes 16
1217 blocks parallel using AVX2 instruction set.
1218
1219 See also:
1220 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
1221
Sebastian Siewior584fffc2008-04-05 21:04:48 +08001222config CRYPTO_TEA
1223 tristate "TEA, XTEA and XETA cipher algorithms"
1224 select CRYPTO_ALGAPI
1225 help
1226 TEA cipher algorithm.
1227
1228 Tiny Encryption Algorithm is a simple cipher that uses
1229 many rounds for security. It is very fast and uses
1230 little memory.
1231
1232 Xtendend Tiny Encryption Algorithm is a modification to
1233 the TEA algorithm to address a potential key weakness
1234 in the TEA algorithm.
1235
1236 Xtendend Encryption Tiny Algorithm is a mis-implementation
1237 of the XTEA algorithm for compatibility purposes.
1238
1239config CRYPTO_TWOFISH
1240 tristate "Twofish cipher algorithm"
1241 select CRYPTO_ALGAPI
1242 select CRYPTO_TWOFISH_COMMON
1243 help
1244 Twofish cipher algorithm.
1245
1246 Twofish was submitted as an AES (Advanced Encryption Standard)
1247 candidate cipher by researchers at CounterPane Systems. It is a
1248 16 round block cipher supporting key sizes of 128, 192, and 256
1249 bits.
1250
1251 See also:
1252 <http://www.schneier.com/twofish.html>
1253
1254config CRYPTO_TWOFISH_COMMON
1255 tristate
1256 help
1257 Common parts of the Twofish cipher algorithm shared by the
1258 generic c and the assembler implementations.
1259
1260config CRYPTO_TWOFISH_586
1261 tristate "Twofish cipher algorithms (i586)"
1262 depends on (X86 || UML_X86) && !64BIT
1263 select CRYPTO_ALGAPI
1264 select CRYPTO_TWOFISH_COMMON
1265 help
1266 Twofish cipher algorithm.
1267
1268 Twofish was submitted as an AES (Advanced Encryption Standard)
1269 candidate cipher by researchers at CounterPane Systems. It is a
1270 16 round block cipher supporting key sizes of 128, 192, and 256
1271 bits.
1272
1273 See also:
1274 <http://www.schneier.com/twofish.html>
1275
1276config CRYPTO_TWOFISH_X86_64
1277 tristate "Twofish cipher algorithm (x86_64)"
1278 depends on (X86 || UML_X86) && 64BIT
1279 select CRYPTO_ALGAPI
1280 select CRYPTO_TWOFISH_COMMON
1281 help
1282 Twofish cipher algorithm (x86_64).
1283
1284 Twofish was submitted as an AES (Advanced Encryption Standard)
1285 candidate cipher by researchers at CounterPane Systems. It is a
1286 16 round block cipher supporting key sizes of 128, 192, and 256
1287 bits.
1288
1289 See also:
1290 <http://www.schneier.com/twofish.html>
1291
Jussi Kivilinna8280daa2011-09-26 16:47:25 +03001292config CRYPTO_TWOFISH_X86_64_3WAY
1293 tristate "Twofish cipher algorithm (x86_64, 3-way parallel)"
Al Virof21a7c12012-04-08 20:31:22 -04001294 depends on X86 && 64BIT
Jussi Kivilinna8280daa2011-09-26 16:47:25 +03001295 select CRYPTO_ALGAPI
1296 select CRYPTO_TWOFISH_COMMON
1297 select CRYPTO_TWOFISH_X86_64
Jussi Kivilinna414cb5e2012-06-18 14:07:34 +03001298 select CRYPTO_GLUE_HELPER_X86
Jussi Kivilinnae7cda5d2011-12-13 12:53:01 +02001299 select CRYPTO_LRW
1300 select CRYPTO_XTS
Jussi Kivilinna8280daa2011-09-26 16:47:25 +03001301 help
1302 Twofish cipher algorithm (x86_64, 3-way parallel).
1303
1304 Twofish was submitted as an AES (Advanced Encryption Standard)
1305 candidate cipher by researchers at CounterPane Systems. It is a
1306 16 round block cipher supporting key sizes of 128, 192, and 256
1307 bits.
1308
1309 This module provides Twofish cipher algorithm that processes three
1310 blocks parallel, utilizing resources of out-of-order CPUs better.
1311
1312 See also:
1313 <http://www.schneier.com/twofish.html>
1314
Johannes Goetzfried107778b2012-05-28 15:54:24 +02001315config CRYPTO_TWOFISH_AVX_X86_64
1316 tristate "Twofish cipher algorithm (x86_64/AVX)"
1317 depends on X86 && 64BIT
1318 select CRYPTO_ALGAPI
1319 select CRYPTO_CRYPTD
Ard Biesheuvel801201a2013-09-20 09:55:41 +02001320 select CRYPTO_ABLK_HELPER
Jussi Kivilinnaa7378d42012-06-18 14:07:39 +03001321 select CRYPTO_GLUE_HELPER_X86
Johannes Goetzfried107778b2012-05-28 15:54:24 +02001322 select CRYPTO_TWOFISH_COMMON
1323 select CRYPTO_TWOFISH_X86_64
1324 select CRYPTO_TWOFISH_X86_64_3WAY
1325 select CRYPTO_LRW
1326 select CRYPTO_XTS
1327 help
1328 Twofish cipher algorithm (x86_64/AVX).
1329
1330 Twofish was submitted as an AES (Advanced Encryption Standard)
1331 candidate cipher by researchers at CounterPane Systems. It is a
1332 16 round block cipher supporting key sizes of 128, 192, and 256
1333 bits.
1334
1335 This module provides the Twofish cipher algorithm that processes
1336 eight blocks parallel using the AVX Instruction Set.
1337
1338 See also:
1339 <http://www.schneier.com/twofish.html>
1340
Sebastian Siewior584fffc2008-04-05 21:04:48 +08001341comment "Compression"
1342
Linus Torvalds1da177e2005-04-16 15:20:36 -07001343config CRYPTO_DEFLATE
1344 tristate "Deflate compression algorithm"
Herbert Xucce9e062006-08-21 21:08:13 +10001345 select CRYPTO_ALGAPI
Linus Torvalds1da177e2005-04-16 15:20:36 -07001346 select ZLIB_INFLATE
1347 select ZLIB_DEFLATE
1348 help
1349 This is the Deflate algorithm (RFC1951), specified for use in
1350 IPSec with the IPCOMP protocol (RFC3173, RFC2394).
Sebastian Siewior584fffc2008-04-05 21:04:48 +08001351
Linus Torvalds1da177e2005-04-16 15:20:36 -07001352 You will most probably want this if using IPSec.
1353
Geert Uytterhoevenbf68e652009-03-04 15:15:49 +08001354config CRYPTO_ZLIB
1355 tristate "Zlib compression algorithm"
1356 select CRYPTO_PCOMP
1357 select ZLIB_INFLATE
1358 select ZLIB_DEFLATE
1359 select NLATTR
1360 help
1361 This is the zlib algorithm.
1362
Zoltan Sogor0b77abb2007-12-07 16:53:23 +08001363config CRYPTO_LZO
1364 tristate "LZO compression algorithm"
1365 select CRYPTO_ALGAPI
1366 select LZO_COMPRESS
1367 select LZO_DECOMPRESS
1368 help
1369 This is the LZO algorithm.
1370
Seth Jennings35a1fc12012-07-19 09:42:41 -05001371config CRYPTO_842
1372 tristate "842 compression algorithm"
1373 depends on CRYPTO_DEV_NX_COMPRESS
1374 # 842 uses lzo if the hardware becomes unavailable
1375 select LZO_COMPRESS
1376 select LZO_DECOMPRESS
1377 help
1378 This is the 842 algorithm.
1379
Chanho Min0ea85302013-07-08 16:01:51 -07001380config CRYPTO_LZ4
1381 tristate "LZ4 compression algorithm"
1382 select CRYPTO_ALGAPI
1383 select LZ4_COMPRESS
1384 select LZ4_DECOMPRESS
1385 help
1386 This is the LZ4 algorithm.
1387
1388config CRYPTO_LZ4HC
1389 tristate "LZ4HC compression algorithm"
1390 select CRYPTO_ALGAPI
1391 select LZ4HC_COMPRESS
1392 select LZ4_DECOMPRESS
1393 help
1394 This is the LZ4 high compression mode algorithm.
1395
Neil Horman17f0f4a2008-08-14 22:15:52 +10001396comment "Random Number Generation"
1397
1398config CRYPTO_ANSI_CPRNG
1399 tristate "Pseudo Random Number Generation for Cryptographic modules"
Neil Horman4e4ed832009-08-20 17:54:16 +10001400 default m
Neil Horman17f0f4a2008-08-14 22:15:52 +10001401 select CRYPTO_AES
1402 select CRYPTO_RNG
Neil Horman17f0f4a2008-08-14 22:15:52 +10001403 help
1404 This option enables the generic pseudo random number generator
1405 for cryptographic modules. Uses the Algorithm specified in
Jiri Kosina7dd607e2010-01-27 01:00:10 +01001406 ANSI X9.31 A.2.4. Note that this option must be enabled if
1407 CRYPTO_FIPS is selected
Neil Horman17f0f4a2008-08-14 22:15:52 +10001408
Herbert Xu03c8efc2010-10-19 21:12:39 +08001409config CRYPTO_USER_API
1410 tristate
1411
Herbert Xufe869cd2010-10-19 21:23:00 +08001412config CRYPTO_USER_API_HASH
1413 tristate "User-space interface for hash algorithms"
Herbert Xu74517082010-11-29 22:56:03 +08001414 depends on NET
Herbert Xufe869cd2010-10-19 21:23:00 +08001415 select CRYPTO_HASH
1416 select CRYPTO_USER_API
1417 help
1418 This option enables the user-spaces interface for hash
1419 algorithms.
1420
Herbert Xu8ff59092010-10-19 21:31:55 +08001421config CRYPTO_USER_API_SKCIPHER
1422 tristate "User-space interface for symmetric key cipher algorithms"
Herbert Xu74517082010-11-29 22:56:03 +08001423 depends on NET
Herbert Xu8ff59092010-10-19 21:31:55 +08001424 select CRYPTO_BLKCIPHER
1425 select CRYPTO_USER_API
1426 help
1427 This option enables the user-spaces interface for symmetric
1428 key cipher algorithms.
1429
Dmitry Kasatkinee089972013-05-06 15:40:01 +03001430config CRYPTO_HASH_INFO
1431 bool
1432
Linus Torvalds1da177e2005-04-16 15:20:36 -07001433source "drivers/crypto/Kconfig"
David Howells964f3b32012-09-13 15:17:21 +01001434source crypto/asymmetric_keys/Kconfig
Linus Torvalds1da177e2005-04-16 15:20:36 -07001435
Herbert Xucce9e062006-08-21 21:08:13 +10001436endif # if CRYPTO