blob: 403857ad06d4f6c229a63c4b703b391b2417a788 [file] [log] [blame]
Linus Torvalds1da177e2005-04-16 15:20:36 -07001#
Dan Williams685784a2007-07-09 11:56:42 -07002# Generic algorithms support
3#
4config XOR_BLOCKS
5 tristate
6
7#
Dan Williams9bc89cd2007-01-02 11:10:44 -07008# async_tx api: hardware offloaded memory transfer/transform support
9#
10source "crypto/async_tx/Kconfig"
11
12#
Linus Torvalds1da177e2005-04-16 15:20:36 -070013# Cryptographic API Configuration
14#
Jan Engelhardt2e290f42007-05-18 15:11:01 +100015menuconfig CRYPTO
Sebastian Siewiorc3715cb92008-03-30 16:36:09 +080016 tristate "Cryptographic API"
Linus Torvalds1da177e2005-04-16 15:20:36 -070017 help
18 This option provides the core Cryptographic API.
19
Herbert Xucce9e062006-08-21 21:08:13 +100020if CRYPTO
21
Sebastian Siewior584fffc2008-04-05 21:04:48 +080022comment "Crypto core or helper"
23
Neil Hormanccb778e2008-08-05 14:13:08 +080024config CRYPTO_FIPS
25 bool "FIPS 200 compliance"
Neil Horman4e4ed832009-08-20 17:54:16 +100026 depends on CRYPTO_ANSI_CPRNG
Neil Hormanccb778e2008-08-05 14:13:08 +080027 help
28 This options enables the fips boot option which is
29 required if you want to system to operate in a FIPS 200
30 certification. You should say no unless you know what
Neil Horman4e4ed832009-08-20 17:54:16 +100031 this is. Note that CRYPTO_ANSI_CPRNG is requred if this
32 option is selected
Neil Hormanccb778e2008-08-05 14:13:08 +080033
Herbert Xucce9e062006-08-21 21:08:13 +100034config CRYPTO_ALGAPI
35 tristate
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110036 select CRYPTO_ALGAPI2
Herbert Xucce9e062006-08-21 21:08:13 +100037 help
38 This option provides the API for cryptographic algorithms.
39
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110040config CRYPTO_ALGAPI2
41 tristate
42
Herbert Xu1ae97822007-08-30 15:36:14 +080043config CRYPTO_AEAD
44 tristate
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110045 select CRYPTO_AEAD2
Herbert Xu1ae97822007-08-30 15:36:14 +080046 select CRYPTO_ALGAPI
47
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110048config CRYPTO_AEAD2
49 tristate
50 select CRYPTO_ALGAPI2
51
Herbert Xu5cde0af2006-08-22 00:07:53 +100052config CRYPTO_BLKCIPHER
53 tristate
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110054 select CRYPTO_BLKCIPHER2
Herbert Xu5cde0af2006-08-22 00:07:53 +100055 select CRYPTO_ALGAPI
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110056
57config CRYPTO_BLKCIPHER2
58 tristate
59 select CRYPTO_ALGAPI2
60 select CRYPTO_RNG2
Huang Ying0a2e8212009-02-19 14:44:02 +080061 select CRYPTO_WORKQUEUE
Herbert Xu5cde0af2006-08-22 00:07:53 +100062
Herbert Xu055bcee2006-08-19 22:24:23 +100063config CRYPTO_HASH
64 tristate
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110065 select CRYPTO_HASH2
Herbert Xu055bcee2006-08-19 22:24:23 +100066 select CRYPTO_ALGAPI
67
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110068config CRYPTO_HASH2
69 tristate
70 select CRYPTO_ALGAPI2
71
Neil Horman17f0f4a2008-08-14 22:15:52 +100072config CRYPTO_RNG
73 tristate
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110074 select CRYPTO_RNG2
Neil Horman17f0f4a2008-08-14 22:15:52 +100075 select CRYPTO_ALGAPI
76
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110077config CRYPTO_RNG2
78 tristate
79 select CRYPTO_ALGAPI2
80
Geert Uytterhoevena1d2f092009-03-04 15:05:33 +080081config CRYPTO_PCOMP
82 tristate
83 select CRYPTO_ALGAPI2
84
Herbert Xu2b8c19d2006-09-21 11:31:44 +100085config CRYPTO_MANAGER
86 tristate "Cryptographic algorithm manager"
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110087 select CRYPTO_MANAGER2
Herbert Xu2b8c19d2006-09-21 11:31:44 +100088 help
89 Create default cryptographic template instantiations such as
90 cbc(aes).
91
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110092config CRYPTO_MANAGER2
93 def_tristate CRYPTO_MANAGER || (CRYPTO_MANAGER!=n && CRYPTO_ALGAPI=y)
94 select CRYPTO_AEAD2
95 select CRYPTO_HASH2
96 select CRYPTO_BLKCIPHER2
Geert Uytterhoeven0c01aed2009-03-04 15:42:15 +080097 select CRYPTO_PCOMP
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110098
Rik Snelc494e072006-11-29 18:59:44 +110099config CRYPTO_GF128MUL
100 tristate "GF(2^128) multiplication functions (EXPERIMENTAL)"
101 depends on EXPERIMENTAL
102 help
103 Efficient table driven implementation of multiplications in the
104 field GF(2^128). This is needed by some cypher modes. This
105 option will be selected automatically if you select such a
106 cipher mode. Only select this option by hand if you expect to load
107 an external module that requires these functions.
108
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800109config CRYPTO_NULL
110 tristate "Null algorithms"
111 select CRYPTO_ALGAPI
112 select CRYPTO_BLKCIPHER
Herbert Xud35d2452008-11-08 08:09:56 +0800113 select CRYPTO_HASH
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800114 help
115 These are 'Null' algorithms, used by IPsec, which do nothing.
116
Steffen Klassert5068c7a2010-01-07 15:57:19 +1100117config CRYPTO_PCRYPT
118 tristate "Parallel crypto engine (EXPERIMENTAL)"
119 depends on SMP && EXPERIMENTAL
120 select PADATA
121 select CRYPTO_MANAGER
122 select CRYPTO_AEAD
123 help
124 This converts an arbitrary crypto algorithm into a parallel
125 algorithm that executes in kernel threads.
126
Huang Ying25c38d32009-02-19 14:33:40 +0800127config CRYPTO_WORKQUEUE
128 tristate
129
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800130config CRYPTO_CRYPTD
131 tristate "Software async crypto daemon"
Herbert Xudb131ef2006-09-21 11:44:08 +1000132 select CRYPTO_BLKCIPHER
Loc Hob8a28252008-05-14 21:23:00 +0800133 select CRYPTO_HASH
Herbert Xu43518402006-10-16 21:28:58 +1000134 select CRYPTO_MANAGER
Huang Ying254eff72009-02-19 14:42:19 +0800135 select CRYPTO_WORKQUEUE
Herbert Xudb131ef2006-09-21 11:44:08 +1000136 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800137 This is a generic software asynchronous crypto daemon that
138 converts an arbitrary synchronous software crypto algorithm
139 into an asynchronous algorithm that executes in a kernel thread.
140
141config CRYPTO_AUTHENC
142 tristate "Authenc support"
143 select CRYPTO_AEAD
144 select CRYPTO_BLKCIPHER
145 select CRYPTO_MANAGER
146 select CRYPTO_HASH
147 help
148 Authenc: Combined mode wrapper for IPsec.
149 This is required for IPSec.
150
151config CRYPTO_TEST
152 tristate "Testing module"
153 depends on m
Herbert Xuda7f0332008-07-31 17:08:25 +0800154 select CRYPTO_MANAGER
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800155 help
156 Quick & dirty crypto test module.
157
158comment "Authenticated Encryption with Associated Data"
159
160config CRYPTO_CCM
161 tristate "CCM support"
162 select CRYPTO_CTR
163 select CRYPTO_AEAD
164 help
165 Support for Counter with CBC MAC. Required for IPsec.
166
167config CRYPTO_GCM
168 tristate "GCM/GMAC support"
169 select CRYPTO_CTR
170 select CRYPTO_AEAD
Huang Ying9382d972009-08-06 15:34:26 +1000171 select CRYPTO_GHASH
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800172 help
173 Support for Galois/Counter Mode (GCM) and Galois Message
174 Authentication Code (GMAC). Required for IPSec.
175
176config CRYPTO_SEQIV
177 tristate "Sequence Number IV Generator"
178 select CRYPTO_AEAD
179 select CRYPTO_BLKCIPHER
Herbert Xua0f000e2008-08-14 22:21:31 +1000180 select CRYPTO_RNG
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800181 help
182 This IV generator generates an IV based on a sequence number by
183 xoring it with a salt. This algorithm is mainly useful for CTR
184
185comment "Block modes"
Herbert Xudb131ef2006-09-21 11:44:08 +1000186
187config CRYPTO_CBC
188 tristate "CBC support"
189 select CRYPTO_BLKCIPHER
Herbert Xu43518402006-10-16 21:28:58 +1000190 select CRYPTO_MANAGER
Herbert Xudb131ef2006-09-21 11:44:08 +1000191 help
192 CBC: Cipher Block Chaining mode
193 This block cipher algorithm is required for IPSec.
194
Joy Latten23e353c2007-10-23 08:50:32 +0800195config CRYPTO_CTR
196 tristate "CTR support"
197 select CRYPTO_BLKCIPHER
Herbert Xu0a270322007-11-30 21:38:37 +1100198 select CRYPTO_SEQIV
Joy Latten23e353c2007-10-23 08:50:32 +0800199 select CRYPTO_MANAGER
Joy Latten23e353c2007-10-23 08:50:32 +0800200 help
201 CTR: Counter mode
202 This block cipher algorithm is required for IPSec.
203
Kevin Coffman76cb9522008-03-24 21:26:16 +0800204config CRYPTO_CTS
205 tristate "CTS support"
206 select CRYPTO_BLKCIPHER
207 help
208 CTS: Cipher Text Stealing
209 This is the Cipher Text Stealing mode as described by
210 Section 8 of rfc2040 and referenced by rfc3962.
211 (rfc3962 includes errata information in its Appendix A)
212 This mode is required for Kerberos gss mechanism support
213 for AES encryption.
214
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800215config CRYPTO_ECB
216 tristate "ECB support"
Herbert Xu653ebd92007-11-27 19:48:27 +0800217 select CRYPTO_BLKCIPHER
Herbert Xu124b53d2007-04-16 20:49:20 +1000218 select CRYPTO_MANAGER
219 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800220 ECB: Electronic CodeBook mode
221 This is the simplest block cipher algorithm. It simply encrypts
222 the input block by block.
Herbert Xu124b53d2007-04-16 20:49:20 +1000223
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800224config CRYPTO_LRW
225 tristate "LRW support (EXPERIMENTAL)"
226 depends on EXPERIMENTAL
David Howells90831632006-12-16 12:13:14 +1100227 select CRYPTO_BLKCIPHER
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800228 select CRYPTO_MANAGER
229 select CRYPTO_GF128MUL
David Howells90831632006-12-16 12:13:14 +1100230 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800231 LRW: Liskov Rivest Wagner, a tweakable, non malleable, non movable
232 narrow block cipher mode for dm-crypt. Use it with cipher
233 specification string aes-lrw-benbi, the key must be 256, 320 or 384.
234 The first 128, 192 or 256 bits in the key are used for AES and the
235 rest is used to tie each cipher block to its logical position.
David Howells90831632006-12-16 12:13:14 +1100236
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800237config CRYPTO_PCBC
238 tristate "PCBC support"
239 select CRYPTO_BLKCIPHER
240 select CRYPTO_MANAGER
241 help
242 PCBC: Propagating Cipher Block Chaining mode
243 This block cipher algorithm is required for RxRPC.
244
245config CRYPTO_XTS
246 tristate "XTS support (EXPERIMENTAL)"
247 depends on EXPERIMENTAL
248 select CRYPTO_BLKCIPHER
249 select CRYPTO_MANAGER
250 select CRYPTO_GF128MUL
251 help
252 XTS: IEEE1619/D16 narrow block cipher use with aes-xts-plain,
253 key size 256, 384 or 512 bits. This implementation currently
254 can't handle a sectorsize which is not a multiple of 16 bytes.
255
Huang Ying150c7e82009-03-29 15:39:02 +0800256config CRYPTO_FPU
257 tristate
258 select CRYPTO_BLKCIPHER
259 select CRYPTO_MANAGER
260
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800261comment "Hash modes"
262
263config CRYPTO_HMAC
264 tristate "HMAC support"
265 select CRYPTO_HASH
266 select CRYPTO_MANAGER
267 help
268 HMAC: Keyed-Hashing for Message Authentication (RFC2104).
269 This is required for IPSec.
270
271config CRYPTO_XCBC
272 tristate "XCBC support"
273 depends on EXPERIMENTAL
274 select CRYPTO_HASH
275 select CRYPTO_MANAGER
276 help
277 XCBC: Keyed-Hashing with encryption algorithm
278 http://www.ietf.org/rfc/rfc3566.txt
279 http://csrc.nist.gov/encryption/modes/proposedmodes/
280 xcbc-mac/xcbc-mac-spec.pdf
281
Shane Wangf1939f72009-09-02 20:05:22 +1000282config CRYPTO_VMAC
283 tristate "VMAC support"
284 depends on EXPERIMENTAL
285 select CRYPTO_HASH
286 select CRYPTO_MANAGER
287 help
288 VMAC is a message authentication algorithm designed for
289 very high speed on 64-bit architectures.
290
291 See also:
292 <http://fastcrypto.org/vmac>
293
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800294comment "Digest"
295
296config CRYPTO_CRC32C
297 tristate "CRC32c CRC algorithm"
Herbert Xu5773a3e2008-07-08 20:54:28 +0800298 select CRYPTO_HASH
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800299 help
300 Castagnoli, et al Cyclic Redundancy-Check Algorithm. Used
301 by iSCSI for header and data digests and by others.
Herbert Xu69c35ef2008-11-07 15:11:47 +0800302 See Castagnoli93. Module will be crc32c.
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800303
Austin Zhang8cb51ba2008-08-07 09:57:03 +0800304config CRYPTO_CRC32C_INTEL
305 tristate "CRC32c INTEL hardware acceleration"
306 depends on X86
307 select CRYPTO_HASH
308 help
309 In Intel processor with SSE4.2 supported, the processor will
310 support CRC32C implementation using hardware accelerated CRC32
311 instruction. This option will create 'crc32c-intel' module,
312 which will enable any routine to use the CRC32 instruction to
313 gain performance compared with software implementation.
314 Module will be crc32c-intel.
315
Huang Ying2cdc6892009-08-06 15:32:38 +1000316config CRYPTO_GHASH
317 tristate "GHASH digest algorithm"
318 select CRYPTO_SHASH
319 select CRYPTO_GF128MUL
320 help
321 GHASH is message digest algorithm for GCM (Galois/Counter Mode).
322
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800323config CRYPTO_MD4
324 tristate "MD4 digest algorithm"
Adrian-Ken Rueegsegger808a1762008-12-03 19:55:27 +0800325 select CRYPTO_HASH
Linus Torvalds1da177e2005-04-16 15:20:36 -0700326 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800327 MD4 message digest algorithm (RFC1320).
Linus Torvalds1da177e2005-04-16 15:20:36 -0700328
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800329config CRYPTO_MD5
330 tristate "MD5 digest algorithm"
Adrian-Ken Rueegsegger14b75ba2008-12-03 19:57:12 +0800331 select CRYPTO_HASH
Linus Torvalds1da177e2005-04-16 15:20:36 -0700332 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800333 MD5 message digest algorithm (RFC1321).
Linus Torvalds1da177e2005-04-16 15:20:36 -0700334
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800335config CRYPTO_MICHAEL_MIC
336 tristate "Michael MIC keyed digest algorithm"
Adrian-Ken Rueegsegger19e2bf12008-12-07 19:35:38 +0800337 select CRYPTO_HASH
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800338 help
339 Michael MIC is used for message integrity protection in TKIP
340 (IEEE 802.11i). This algorithm is required for TKIP, but it
341 should not be used for other purposes because of the weakness
342 of the algorithm.
343
Adrian-Ken Rueegsegger82798f92008-05-07 22:17:37 +0800344config CRYPTO_RMD128
Adrian Bunkb6d44342008-07-16 19:28:00 +0800345 tristate "RIPEMD-128 digest algorithm"
Herbert Xu7c4468b2008-11-08 09:10:40 +0800346 select CRYPTO_HASH
Adrian Bunkb6d44342008-07-16 19:28:00 +0800347 help
348 RIPEMD-128 (ISO/IEC 10118-3:2004).
Adrian-Ken Rueegsegger82798f92008-05-07 22:17:37 +0800349
Adrian Bunkb6d44342008-07-16 19:28:00 +0800350 RIPEMD-128 is a 128-bit cryptographic hash function. It should only
351 to be used as a secure replacement for RIPEMD. For other use cases
352 RIPEMD-160 should be used.
Adrian-Ken Rueegsegger82798f92008-05-07 22:17:37 +0800353
Adrian Bunkb6d44342008-07-16 19:28:00 +0800354 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
355 See <http://home.esat.kuleuven.be/~bosselae/ripemd160.html>
Adrian-Ken Rueegsegger82798f92008-05-07 22:17:37 +0800356
357config CRYPTO_RMD160
Adrian Bunkb6d44342008-07-16 19:28:00 +0800358 tristate "RIPEMD-160 digest algorithm"
Herbert Xue5835fb2008-11-08 09:18:51 +0800359 select CRYPTO_HASH
Adrian Bunkb6d44342008-07-16 19:28:00 +0800360 help
361 RIPEMD-160 (ISO/IEC 10118-3:2004).
Adrian-Ken Rueegsegger82798f92008-05-07 22:17:37 +0800362
Adrian Bunkb6d44342008-07-16 19:28:00 +0800363 RIPEMD-160 is a 160-bit cryptographic hash function. It is intended
364 to be used as a secure replacement for the 128-bit hash functions
365 MD4, MD5 and it's predecessor RIPEMD
366 (not to be confused with RIPEMD-128).
Adrian-Ken Rueegsegger82798f92008-05-07 22:17:37 +0800367
Adrian Bunkb6d44342008-07-16 19:28:00 +0800368 It's speed is comparable to SHA1 and there are no known attacks
369 against RIPEMD-160.
Adrian-Ken Rueegsegger534fe2c2008-05-09 21:30:27 +0800370
Adrian Bunkb6d44342008-07-16 19:28:00 +0800371 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
372 See <http://home.esat.kuleuven.be/~bosselae/ripemd160.html>
Adrian-Ken Rueegsegger534fe2c2008-05-09 21:30:27 +0800373
374config CRYPTO_RMD256
Adrian Bunkb6d44342008-07-16 19:28:00 +0800375 tristate "RIPEMD-256 digest algorithm"
Herbert Xud8a5e2e2008-11-08 09:58:10 +0800376 select CRYPTO_HASH
Adrian Bunkb6d44342008-07-16 19:28:00 +0800377 help
378 RIPEMD-256 is an optional extension of RIPEMD-128 with a
379 256 bit hash. It is intended for applications that require
380 longer hash-results, without needing a larger security level
381 (than RIPEMD-128).
Adrian-Ken Rueegsegger534fe2c2008-05-09 21:30:27 +0800382
Adrian Bunkb6d44342008-07-16 19:28:00 +0800383 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
384 See <http://home.esat.kuleuven.be/~bosselae/ripemd160.html>
Adrian-Ken Rueegsegger534fe2c2008-05-09 21:30:27 +0800385
386config CRYPTO_RMD320
Adrian Bunkb6d44342008-07-16 19:28:00 +0800387 tristate "RIPEMD-320 digest algorithm"
Herbert Xu3b8efb42008-11-08 10:11:09 +0800388 select CRYPTO_HASH
Adrian Bunkb6d44342008-07-16 19:28:00 +0800389 help
390 RIPEMD-320 is an optional extension of RIPEMD-160 with a
391 320 bit hash. It is intended for applications that require
392 longer hash-results, without needing a larger security level
393 (than RIPEMD-160).
Adrian-Ken Rueegsegger534fe2c2008-05-09 21:30:27 +0800394
Adrian Bunkb6d44342008-07-16 19:28:00 +0800395 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
396 See <http://home.esat.kuleuven.be/~bosselae/ripemd160.html>
Adrian-Ken Rueegsegger82798f92008-05-07 22:17:37 +0800397
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800398config CRYPTO_SHA1
399 tristate "SHA1 digest algorithm"
Adrian-Ken Rueegsegger54ccb362008-12-02 21:08:20 +0800400 select CRYPTO_HASH
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800401 help
402 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2).
403
404config CRYPTO_SHA256
405 tristate "SHA224 and SHA256 digest algorithm"
Adrian-Ken Rueegsegger50e109b52008-12-03 19:57:49 +0800406 select CRYPTO_HASH
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800407 help
408 SHA256 secure hash standard (DFIPS 180-2).
409
410 This version of SHA implements a 256 bit hash with 128 bits of
411 security against collision attacks.
412
Adrian Bunkb6d44342008-07-16 19:28:00 +0800413 This code also includes SHA-224, a 224 bit hash with 112 bits
414 of security against collision attacks.
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800415
416config CRYPTO_SHA512
417 tristate "SHA384 and SHA512 digest algorithms"
Adrian-Ken Rueegseggerbd9d20d2008-12-17 16:49:02 +1100418 select CRYPTO_HASH
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800419 help
420 SHA512 secure hash standard (DFIPS 180-2).
421
422 This version of SHA implements a 512 bit hash with 256 bits of
423 security against collision attacks.
424
425 This code also includes SHA-384, a 384 bit hash with 192 bits
426 of security against collision attacks.
427
428config CRYPTO_TGR192
429 tristate "Tiger digest algorithms"
Adrian-Ken Rueegseggerf63fbd32008-12-03 19:58:32 +0800430 select CRYPTO_HASH
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800431 help
432 Tiger hash algorithm 192, 160 and 128-bit hashes
433
434 Tiger is a hash function optimized for 64-bit processors while
435 still having decent performance on 32-bit processors.
436 Tiger was developed by Ross Anderson and Eli Biham.
Linus Torvalds1da177e2005-04-16 15:20:36 -0700437
438 See also:
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800439 <http://www.cs.technion.ac.il/~biham/Reports/Tiger/>.
440
441config CRYPTO_WP512
442 tristate "Whirlpool digest algorithms"
Adrian-Ken Rueegsegger49465102008-12-07 19:34:37 +0800443 select CRYPTO_HASH
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800444 help
445 Whirlpool hash algorithm 512, 384 and 256-bit hashes
446
447 Whirlpool-512 is part of the NESSIE cryptographic primitives.
448 Whirlpool will be part of the ISO/IEC 10118-3:2003(E) standard
449
450 See also:
451 <http://planeta.terra.com.br/informatica/paulobarreto/WhirlpoolPage.html>
452
Huang Ying0e1227d2009-10-19 11:53:06 +0900453config CRYPTO_GHASH_CLMUL_NI_INTEL
454 tristate "GHASH digest algorithm (CLMUL-NI accelerated)"
Huang Ying3e02e5c2009-10-27 19:07:24 +0800455 depends on (X86 || UML_X86) && 64BIT
Huang Ying0e1227d2009-10-19 11:53:06 +0900456 select CRYPTO_SHASH
457 select CRYPTO_CRYPTD
458 help
459 GHASH is message digest algorithm for GCM (Galois/Counter Mode).
460 The implementation is accelerated by CLMUL-NI of Intel.
461
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800462comment "Ciphers"
Linus Torvalds1da177e2005-04-16 15:20:36 -0700463
464config CRYPTO_AES
465 tristate "AES cipher algorithms"
Herbert Xucce9e062006-08-21 21:08:13 +1000466 select CRYPTO_ALGAPI
Linus Torvalds1da177e2005-04-16 15:20:36 -0700467 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800468 AES cipher algorithms (FIPS-197). AES uses the Rijndael
Linus Torvalds1da177e2005-04-16 15:20:36 -0700469 algorithm.
470
471 Rijndael appears to be consistently a very good performer in
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800472 both hardware and software across a wide range of computing
473 environments regardless of its use in feedback or non-feedback
474 modes. Its key setup time is excellent, and its key agility is
475 good. Rijndael's very low memory requirements make it very well
476 suited for restricted-space environments, in which it also
477 demonstrates excellent performance. Rijndael's operations are
478 among the easiest to defend against power and timing attacks.
Linus Torvalds1da177e2005-04-16 15:20:36 -0700479
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800480 The AES specifies three key sizes: 128, 192 and 256 bits
Linus Torvalds1da177e2005-04-16 15:20:36 -0700481
482 See <http://csrc.nist.gov/CryptoToolkit/aes/> for more information.
483
484config CRYPTO_AES_586
485 tristate "AES cipher algorithms (i586)"
Herbert Xucce9e062006-08-21 21:08:13 +1000486 depends on (X86 || UML_X86) && !64BIT
487 select CRYPTO_ALGAPI
Sebastian Siewior5157dea2007-11-10 19:07:16 +0800488 select CRYPTO_AES
Linus Torvalds1da177e2005-04-16 15:20:36 -0700489 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800490 AES cipher algorithms (FIPS-197). AES uses the Rijndael
Linus Torvalds1da177e2005-04-16 15:20:36 -0700491 algorithm.
492
493 Rijndael appears to be consistently a very good performer in
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800494 both hardware and software across a wide range of computing
495 environments regardless of its use in feedback or non-feedback
496 modes. Its key setup time is excellent, and its key agility is
497 good. Rijndael's very low memory requirements make it very well
498 suited for restricted-space environments, in which it also
499 demonstrates excellent performance. Rijndael's operations are
500 among the easiest to defend against power and timing attacks.
Linus Torvalds1da177e2005-04-16 15:20:36 -0700501
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800502 The AES specifies three key sizes: 128, 192 and 256 bits
Linus Torvalds1da177e2005-04-16 15:20:36 -0700503
504 See <http://csrc.nist.gov/encryption/aes/> for more information.
505
Andreas Steinmetza2a892a2005-07-06 13:55:00 -0700506config CRYPTO_AES_X86_64
507 tristate "AES cipher algorithms (x86_64)"
Herbert Xucce9e062006-08-21 21:08:13 +1000508 depends on (X86 || UML_X86) && 64BIT
509 select CRYPTO_ALGAPI
Sebastian Siewior81190b32007-11-08 21:25:04 +0800510 select CRYPTO_AES
Andreas Steinmetza2a892a2005-07-06 13:55:00 -0700511 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800512 AES cipher algorithms (FIPS-197). AES uses the Rijndael
Andreas Steinmetza2a892a2005-07-06 13:55:00 -0700513 algorithm.
514
515 Rijndael appears to be consistently a very good performer in
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800516 both hardware and software across a wide range of computing
517 environments regardless of its use in feedback or non-feedback
518 modes. Its key setup time is excellent, and its key agility is
519 good. Rijndael's very low memory requirements make it very well
520 suited for restricted-space environments, in which it also
521 demonstrates excellent performance. Rijndael's operations are
522 among the easiest to defend against power and timing attacks.
Andreas Steinmetza2a892a2005-07-06 13:55:00 -0700523
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800524 The AES specifies three key sizes: 128, 192 and 256 bits
Andreas Steinmetza2a892a2005-07-06 13:55:00 -0700525
526 See <http://csrc.nist.gov/encryption/aes/> for more information.
527
Huang Ying54b6a1b2009-01-18 16:28:34 +1100528config CRYPTO_AES_NI_INTEL
529 tristate "AES cipher algorithms (AES-NI)"
530 depends on (X86 || UML_X86) && 64BIT
531 select CRYPTO_AES_X86_64
532 select CRYPTO_CRYPTD
533 select CRYPTO_ALGAPI
Huang Ying2cf4ac82009-03-29 15:41:20 +0800534 select CRYPTO_FPU
Huang Ying54b6a1b2009-01-18 16:28:34 +1100535 help
536 Use Intel AES-NI instructions for AES algorithm.
537
538 AES cipher algorithms (FIPS-197). AES uses the Rijndael
539 algorithm.
540
541 Rijndael appears to be consistently a very good performer in
542 both hardware and software across a wide range of computing
543 environments regardless of its use in feedback or non-feedback
544 modes. Its key setup time is excellent, and its key agility is
545 good. Rijndael's very low memory requirements make it very well
546 suited for restricted-space environments, in which it also
547 demonstrates excellent performance. Rijndael's operations are
548 among the easiest to defend against power and timing attacks.
549
550 The AES specifies three key sizes: 128, 192 and 256 bits
551
552 See <http://csrc.nist.gov/encryption/aes/> for more information.
553
Huang Ying2cf4ac82009-03-29 15:41:20 +0800554 In addition to AES cipher algorithm support, the
555 acceleration for some popular block cipher mode is supported
556 too, including ECB, CBC, CTR, LRW, PCBC, XTS.
557
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800558config CRYPTO_ANUBIS
559 tristate "Anubis cipher algorithm"
560 select CRYPTO_ALGAPI
561 help
562 Anubis cipher algorithm.
563
564 Anubis is a variable key length cipher which can use keys from
565 128 bits to 320 bits in length. It was evaluated as a entrant
566 in the NESSIE competition.
567
568 See also:
569 <https://www.cosic.esat.kuleuven.ac.be/nessie/reports/>
570 <http://planeta.terra.com.br/informatica/paulobarreto/AnubisPage.html>
571
572config CRYPTO_ARC4
573 tristate "ARC4 cipher algorithm"
574 select CRYPTO_ALGAPI
575 help
576 ARC4 cipher algorithm.
577
578 ARC4 is a stream cipher using keys ranging from 8 bits to 2048
579 bits in length. This algorithm is required for driver-based
580 WEP, but it should not be for other purposes because of the
581 weakness of the algorithm.
582
583config CRYPTO_BLOWFISH
584 tristate "Blowfish cipher algorithm"
585 select CRYPTO_ALGAPI
586 help
587 Blowfish cipher algorithm, by Bruce Schneier.
588
589 This is a variable key length cipher which can use keys from 32
590 bits to 448 bits in length. It's fast, simple and specifically
591 designed for use on "large microprocessors".
592
593 See also:
594 <http://www.schneier.com/blowfish.html>
595
596config CRYPTO_CAMELLIA
597 tristate "Camellia cipher algorithms"
598 depends on CRYPTO
599 select CRYPTO_ALGAPI
600 help
601 Camellia cipher algorithms module.
602
603 Camellia is a symmetric key block cipher developed jointly
604 at NTT and Mitsubishi Electric Corporation.
605
606 The Camellia specifies three key sizes: 128, 192 and 256 bits.
607
608 See also:
609 <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
610
Linus Torvalds1da177e2005-04-16 15:20:36 -0700611config CRYPTO_CAST5
612 tristate "CAST5 (CAST-128) cipher algorithm"
Herbert Xucce9e062006-08-21 21:08:13 +1000613 select CRYPTO_ALGAPI
Linus Torvalds1da177e2005-04-16 15:20:36 -0700614 help
615 The CAST5 encryption algorithm (synonymous with CAST-128) is
616 described in RFC2144.
617
618config CRYPTO_CAST6
619 tristate "CAST6 (CAST-256) cipher algorithm"
Herbert Xucce9e062006-08-21 21:08:13 +1000620 select CRYPTO_ALGAPI
Linus Torvalds1da177e2005-04-16 15:20:36 -0700621 help
622 The CAST6 encryption algorithm (synonymous with CAST-256) is
623 described in RFC2612.
624
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800625config CRYPTO_DES
626 tristate "DES and Triple DES EDE cipher algorithms"
Herbert Xucce9e062006-08-21 21:08:13 +1000627 select CRYPTO_ALGAPI
Linus Torvalds1da177e2005-04-16 15:20:36 -0700628 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800629 DES cipher algorithm (FIPS 46-2), and Triple DES EDE (FIPS 46-3).
Linus Torvalds1da177e2005-04-16 15:20:36 -0700630
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800631config CRYPTO_FCRYPT
632 tristate "FCrypt cipher algorithm"
Herbert Xucce9e062006-08-21 21:08:13 +1000633 select CRYPTO_ALGAPI
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800634 select CRYPTO_BLKCIPHER
Linus Torvalds1da177e2005-04-16 15:20:36 -0700635 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800636 FCrypt algorithm used by RxRPC.
Linus Torvalds1da177e2005-04-16 15:20:36 -0700637
638config CRYPTO_KHAZAD
639 tristate "Khazad cipher algorithm"
Herbert Xucce9e062006-08-21 21:08:13 +1000640 select CRYPTO_ALGAPI
Linus Torvalds1da177e2005-04-16 15:20:36 -0700641 help
642 Khazad cipher algorithm.
643
644 Khazad was a finalist in the initial NESSIE competition. It is
645 an algorithm optimized for 64-bit processors with good performance
646 on 32-bit processors. Khazad uses an 128 bit key size.
647
648 See also:
649 <http://planeta.terra.com.br/informatica/paulobarreto/KhazadPage.html>
650
Tan Swee Heng2407d602007-11-23 19:45:00 +0800651config CRYPTO_SALSA20
652 tristate "Salsa20 stream cipher algorithm (EXPERIMENTAL)"
653 depends on EXPERIMENTAL
654 select CRYPTO_BLKCIPHER
655 help
656 Salsa20 stream cipher algorithm.
657
658 Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
659 Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
660
661 The Salsa20 stream cipher algorithm is designed by Daniel J.
662 Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
Linus Torvalds1da177e2005-04-16 15:20:36 -0700663
Tan Swee Heng974e4b72007-12-10 15:52:56 +0800664config CRYPTO_SALSA20_586
665 tristate "Salsa20 stream cipher algorithm (i586) (EXPERIMENTAL)"
666 depends on (X86 || UML_X86) && !64BIT
667 depends on EXPERIMENTAL
668 select CRYPTO_BLKCIPHER
Tan Swee Heng974e4b72007-12-10 15:52:56 +0800669 help
670 Salsa20 stream cipher algorithm.
671
672 Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
673 Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
674
675 The Salsa20 stream cipher algorithm is designed by Daniel J.
676 Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
677
Tan Swee Heng9a7dafb2007-12-18 00:04:40 +0800678config CRYPTO_SALSA20_X86_64
679 tristate "Salsa20 stream cipher algorithm (x86_64) (EXPERIMENTAL)"
680 depends on (X86 || UML_X86) && 64BIT
681 depends on EXPERIMENTAL
682 select CRYPTO_BLKCIPHER
Tan Swee Heng9a7dafb2007-12-18 00:04:40 +0800683 help
684 Salsa20 stream cipher algorithm.
685
686 Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
687 Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
688
689 The Salsa20 stream cipher algorithm is designed by Daniel J.
690 Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
691
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800692config CRYPTO_SEED
693 tristate "SEED cipher algorithm"
694 select CRYPTO_ALGAPI
695 help
696 SEED cipher algorithm (RFC4269).
697
698 SEED is a 128-bit symmetric key block cipher that has been
699 developed by KISA (Korea Information Security Agency) as a
700 national standard encryption algorithm of the Republic of Korea.
701 It is a 16 round block cipher with the key size of 128 bit.
702
703 See also:
704 <http://www.kisa.or.kr/kisa/seed/jsp/seed_eng.jsp>
705
706config CRYPTO_SERPENT
707 tristate "Serpent cipher algorithm"
708 select CRYPTO_ALGAPI
709 help
710 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
711
712 Keys are allowed to be from 0 to 256 bits in length, in steps
713 of 8 bits. Also includes the 'Tnepres' algorithm, a reversed
714 variant of Serpent for compatibility with old kerneli.org code.
715
716 See also:
717 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
718
719config CRYPTO_TEA
720 tristate "TEA, XTEA and XETA cipher algorithms"
721 select CRYPTO_ALGAPI
722 help
723 TEA cipher algorithm.
724
725 Tiny Encryption Algorithm is a simple cipher that uses
726 many rounds for security. It is very fast and uses
727 little memory.
728
729 Xtendend Tiny Encryption Algorithm is a modification to
730 the TEA algorithm to address a potential key weakness
731 in the TEA algorithm.
732
733 Xtendend Encryption Tiny Algorithm is a mis-implementation
734 of the XTEA algorithm for compatibility purposes.
735
736config CRYPTO_TWOFISH
737 tristate "Twofish cipher algorithm"
738 select CRYPTO_ALGAPI
739 select CRYPTO_TWOFISH_COMMON
740 help
741 Twofish cipher algorithm.
742
743 Twofish was submitted as an AES (Advanced Encryption Standard)
744 candidate cipher by researchers at CounterPane Systems. It is a
745 16 round block cipher supporting key sizes of 128, 192, and 256
746 bits.
747
748 See also:
749 <http://www.schneier.com/twofish.html>
750
751config CRYPTO_TWOFISH_COMMON
752 tristate
753 help
754 Common parts of the Twofish cipher algorithm shared by the
755 generic c and the assembler implementations.
756
757config CRYPTO_TWOFISH_586
758 tristate "Twofish cipher algorithms (i586)"
759 depends on (X86 || UML_X86) && !64BIT
760 select CRYPTO_ALGAPI
761 select CRYPTO_TWOFISH_COMMON
762 help
763 Twofish cipher algorithm.
764
765 Twofish was submitted as an AES (Advanced Encryption Standard)
766 candidate cipher by researchers at CounterPane Systems. It is a
767 16 round block cipher supporting key sizes of 128, 192, and 256
768 bits.
769
770 See also:
771 <http://www.schneier.com/twofish.html>
772
773config CRYPTO_TWOFISH_X86_64
774 tristate "Twofish cipher algorithm (x86_64)"
775 depends on (X86 || UML_X86) && 64BIT
776 select CRYPTO_ALGAPI
777 select CRYPTO_TWOFISH_COMMON
778 help
779 Twofish cipher algorithm (x86_64).
780
781 Twofish was submitted as an AES (Advanced Encryption Standard)
782 candidate cipher by researchers at CounterPane Systems. It is a
783 16 round block cipher supporting key sizes of 128, 192, and 256
784 bits.
785
786 See also:
787 <http://www.schneier.com/twofish.html>
788
789comment "Compression"
790
Linus Torvalds1da177e2005-04-16 15:20:36 -0700791config CRYPTO_DEFLATE
792 tristate "Deflate compression algorithm"
Herbert Xucce9e062006-08-21 21:08:13 +1000793 select CRYPTO_ALGAPI
Linus Torvalds1da177e2005-04-16 15:20:36 -0700794 select ZLIB_INFLATE
795 select ZLIB_DEFLATE
796 help
797 This is the Deflate algorithm (RFC1951), specified for use in
798 IPSec with the IPCOMP protocol (RFC3173, RFC2394).
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800799
Linus Torvalds1da177e2005-04-16 15:20:36 -0700800 You will most probably want this if using IPSec.
801
Geert Uytterhoevenbf68e652009-03-04 15:15:49 +0800802config CRYPTO_ZLIB
803 tristate "Zlib compression algorithm"
804 select CRYPTO_PCOMP
805 select ZLIB_INFLATE
806 select ZLIB_DEFLATE
807 select NLATTR
808 help
809 This is the zlib algorithm.
810
Zoltan Sogor0b77abb2007-12-07 16:53:23 +0800811config CRYPTO_LZO
812 tristate "LZO compression algorithm"
813 select CRYPTO_ALGAPI
814 select LZO_COMPRESS
815 select LZO_DECOMPRESS
816 help
817 This is the LZO algorithm.
818
Neil Horman17f0f4a2008-08-14 22:15:52 +1000819comment "Random Number Generation"
820
821config CRYPTO_ANSI_CPRNG
822 tristate "Pseudo Random Number Generation for Cryptographic modules"
Neil Horman4e4ed832009-08-20 17:54:16 +1000823 default m
Neil Horman17f0f4a2008-08-14 22:15:52 +1000824 select CRYPTO_AES
825 select CRYPTO_RNG
Neil Horman17f0f4a2008-08-14 22:15:52 +1000826 help
827 This option enables the generic pseudo random number generator
828 for cryptographic modules. Uses the Algorithm specified in
Jiri Kosina7dd607e2010-01-27 01:00:10 +0100829 ANSI X9.31 A.2.4. Note that this option must be enabled if
830 CRYPTO_FIPS is selected
Neil Horman17f0f4a2008-08-14 22:15:52 +1000831
Linus Torvalds1da177e2005-04-16 15:20:36 -0700832source "drivers/crypto/Kconfig"
Linus Torvalds1da177e2005-04-16 15:20:36 -0700833
Herbert Xucce9e062006-08-21 21:08:13 +1000834endif # if CRYPTO