blob: 2c1c2dfcc02a1f8c513e643fdfe6593fce5bb826 [file] [log] [blame]
Linus Torvalds1da177e2005-04-16 15:20:36 -07001#
Dan Williams685784a2007-07-09 11:56:42 -07002# Generic algorithms support
3#
4config XOR_BLOCKS
5 tristate
6
7#
Dan Williams9bc89cd2007-01-02 11:10:44 -07008# async_tx api: hardware offloaded memory transfer/transform support
9#
10source "crypto/async_tx/Kconfig"
11
12#
Linus Torvalds1da177e2005-04-16 15:20:36 -070013# Cryptographic API Configuration
14#
Jan Engelhardt2e290f42007-05-18 15:11:01 +100015menuconfig CRYPTO
Sebastian Siewiorc3715cb92008-03-30 16:36:09 +080016 tristate "Cryptographic API"
Linus Torvalds1da177e2005-04-16 15:20:36 -070017 help
18 This option provides the core Cryptographic API.
19
Herbert Xucce9e062006-08-21 21:08:13 +100020if CRYPTO
21
Sebastian Siewior584fffc2008-04-05 21:04:48 +080022comment "Crypto core or helper"
23
Neil Hormanccb778e2008-08-05 14:13:08 +080024config CRYPTO_FIPS
25 bool "FIPS 200 compliance"
Chuck Ebberte84c5482010-09-03 19:17:49 +080026 depends on CRYPTO_ANSI_CPRNG && !CRYPTO_MANAGER_DISABLE_TESTS
Neil Hormanccb778e2008-08-05 14:13:08 +080027 help
28 This options enables the fips boot option which is
29 required if you want to system to operate in a FIPS 200
30 certification. You should say no unless you know what
Chuck Ebberte84c5482010-09-03 19:17:49 +080031 this is.
Neil Hormanccb778e2008-08-05 14:13:08 +080032
Herbert Xucce9e062006-08-21 21:08:13 +100033config CRYPTO_ALGAPI
34 tristate
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110035 select CRYPTO_ALGAPI2
Herbert Xucce9e062006-08-21 21:08:13 +100036 help
37 This option provides the API for cryptographic algorithms.
38
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110039config CRYPTO_ALGAPI2
40 tristate
41
Herbert Xu1ae97822007-08-30 15:36:14 +080042config CRYPTO_AEAD
43 tristate
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110044 select CRYPTO_AEAD2
Herbert Xu1ae97822007-08-30 15:36:14 +080045 select CRYPTO_ALGAPI
46
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110047config CRYPTO_AEAD2
48 tristate
49 select CRYPTO_ALGAPI2
50
Herbert Xu5cde0af2006-08-22 00:07:53 +100051config CRYPTO_BLKCIPHER
52 tristate
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110053 select CRYPTO_BLKCIPHER2
Herbert Xu5cde0af2006-08-22 00:07:53 +100054 select CRYPTO_ALGAPI
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110055
56config CRYPTO_BLKCIPHER2
57 tristate
58 select CRYPTO_ALGAPI2
59 select CRYPTO_RNG2
Huang Ying0a2e8212009-02-19 14:44:02 +080060 select CRYPTO_WORKQUEUE
Herbert Xu5cde0af2006-08-22 00:07:53 +100061
Herbert Xu055bcee2006-08-19 22:24:23 +100062config CRYPTO_HASH
63 tristate
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110064 select CRYPTO_HASH2
Herbert Xu055bcee2006-08-19 22:24:23 +100065 select CRYPTO_ALGAPI
66
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110067config CRYPTO_HASH2
68 tristate
69 select CRYPTO_ALGAPI2
70
Neil Horman17f0f4a2008-08-14 22:15:52 +100071config CRYPTO_RNG
72 tristate
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110073 select CRYPTO_RNG2
Neil Horman17f0f4a2008-08-14 22:15:52 +100074 select CRYPTO_ALGAPI
75
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110076config CRYPTO_RNG2
77 tristate
78 select CRYPTO_ALGAPI2
79
Geert Uytterhoevena1d2f092009-03-04 15:05:33 +080080config CRYPTO_PCOMP
81 tristate
Herbert Xubc94e592010-06-03 20:33:06 +100082 select CRYPTO_PCOMP2
83 select CRYPTO_ALGAPI
84
85config CRYPTO_PCOMP2
86 tristate
Geert Uytterhoevena1d2f092009-03-04 15:05:33 +080087 select CRYPTO_ALGAPI2
88
Herbert Xu2b8c19d2006-09-21 11:31:44 +100089config CRYPTO_MANAGER
90 tristate "Cryptographic algorithm manager"
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110091 select CRYPTO_MANAGER2
Herbert Xu2b8c19d2006-09-21 11:31:44 +100092 help
93 Create default cryptographic template instantiations such as
94 cbc(aes).
95
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110096config CRYPTO_MANAGER2
97 def_tristate CRYPTO_MANAGER || (CRYPTO_MANAGER!=n && CRYPTO_ALGAPI=y)
98 select CRYPTO_AEAD2
99 select CRYPTO_HASH2
100 select CRYPTO_BLKCIPHER2
Herbert Xubc94e592010-06-03 20:33:06 +1000101 select CRYPTO_PCOMP2
Herbert Xu6a0fcbb2008-12-10 23:29:44 +1100102
Steffen Klasserta38f7902011-09-27 07:23:50 +0200103config CRYPTO_USER
104 tristate "Userspace cryptographic algorithm configuration"
Herbert Xu5db017a2011-11-01 12:12:43 +1100105 depends on NET
Steffen Klasserta38f7902011-09-27 07:23:50 +0200106 select CRYPTO_MANAGER
107 help
Valdis.Kletnieks@vt.edud19978f2011-11-09 01:29:20 -0500108 Userspace configuration for cryptographic instantiations such as
Steffen Klasserta38f7902011-09-27 07:23:50 +0200109 cbc(aes).
110
Herbert Xu326a6342010-08-06 09:40:28 +0800111config CRYPTO_MANAGER_DISABLE_TESTS
112 bool "Disable run-time self tests"
Herbert Xu00ca28a2010-08-06 10:34:00 +0800113 default y
114 depends on CRYPTO_MANAGER2
Alexander Shishkin0b767f92010-06-03 20:53:43 +1000115 help
Herbert Xu326a6342010-08-06 09:40:28 +0800116 Disable run-time self tests that normally take place at
117 algorithm registration.
Alexander Shishkin0b767f92010-06-03 20:53:43 +1000118
Rik Snelc494e072006-11-29 18:59:44 +1100119config CRYPTO_GF128MUL
Jussi Kivilinna08c70fc2011-12-13 12:53:22 +0200120 tristate "GF(2^128) multiplication functions"
Rik Snelc494e072006-11-29 18:59:44 +1100121 help
122 Efficient table driven implementation of multiplications in the
123 field GF(2^128). This is needed by some cypher modes. This
124 option will be selected automatically if you select such a
125 cipher mode. Only select this option by hand if you expect to load
126 an external module that requires these functions.
127
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800128config CRYPTO_NULL
129 tristate "Null algorithms"
130 select CRYPTO_ALGAPI
131 select CRYPTO_BLKCIPHER
Herbert Xud35d2452008-11-08 08:09:56 +0800132 select CRYPTO_HASH
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800133 help
134 These are 'Null' algorithms, used by IPsec, which do nothing.
135
Steffen Klassert5068c7a2010-01-07 15:57:19 +1100136config CRYPTO_PCRYPT
137 tristate "Parallel crypto engine (EXPERIMENTAL)"
138 depends on SMP && EXPERIMENTAL
139 select PADATA
140 select CRYPTO_MANAGER
141 select CRYPTO_AEAD
142 help
143 This converts an arbitrary crypto algorithm into a parallel
144 algorithm that executes in kernel threads.
145
Huang Ying25c38d32009-02-19 14:33:40 +0800146config CRYPTO_WORKQUEUE
147 tristate
148
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800149config CRYPTO_CRYPTD
150 tristate "Software async crypto daemon"
Herbert Xudb131ef2006-09-21 11:44:08 +1000151 select CRYPTO_BLKCIPHER
Loc Hob8a28252008-05-14 21:23:00 +0800152 select CRYPTO_HASH
Herbert Xu43518402006-10-16 21:28:58 +1000153 select CRYPTO_MANAGER
Huang Ying254eff72009-02-19 14:42:19 +0800154 select CRYPTO_WORKQUEUE
Herbert Xudb131ef2006-09-21 11:44:08 +1000155 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800156 This is a generic software asynchronous crypto daemon that
157 converts an arbitrary synchronous software crypto algorithm
158 into an asynchronous algorithm that executes in a kernel thread.
159
160config CRYPTO_AUTHENC
161 tristate "Authenc support"
162 select CRYPTO_AEAD
163 select CRYPTO_BLKCIPHER
164 select CRYPTO_MANAGER
165 select CRYPTO_HASH
166 help
167 Authenc: Combined mode wrapper for IPsec.
168 This is required for IPSec.
169
170config CRYPTO_TEST
171 tristate "Testing module"
172 depends on m
Herbert Xuda7f0332008-07-31 17:08:25 +0800173 select CRYPTO_MANAGER
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800174 help
175 Quick & dirty crypto test module.
176
177comment "Authenticated Encryption with Associated Data"
178
179config CRYPTO_CCM
180 tristate "CCM support"
181 select CRYPTO_CTR
182 select CRYPTO_AEAD
183 help
184 Support for Counter with CBC MAC. Required for IPsec.
185
186config CRYPTO_GCM
187 tristate "GCM/GMAC support"
188 select CRYPTO_CTR
189 select CRYPTO_AEAD
Huang Ying9382d972009-08-06 15:34:26 +1000190 select CRYPTO_GHASH
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800191 help
192 Support for Galois/Counter Mode (GCM) and Galois Message
193 Authentication Code (GMAC). Required for IPSec.
194
195config CRYPTO_SEQIV
196 tristate "Sequence Number IV Generator"
197 select CRYPTO_AEAD
198 select CRYPTO_BLKCIPHER
Herbert Xua0f000e2008-08-14 22:21:31 +1000199 select CRYPTO_RNG
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800200 help
201 This IV generator generates an IV based on a sequence number by
202 xoring it with a salt. This algorithm is mainly useful for CTR
203
204comment "Block modes"
Herbert Xudb131ef2006-09-21 11:44:08 +1000205
206config CRYPTO_CBC
207 tristate "CBC support"
208 select CRYPTO_BLKCIPHER
Herbert Xu43518402006-10-16 21:28:58 +1000209 select CRYPTO_MANAGER
Herbert Xudb131ef2006-09-21 11:44:08 +1000210 help
211 CBC: Cipher Block Chaining mode
212 This block cipher algorithm is required for IPSec.
213
Joy Latten23e353c2007-10-23 08:50:32 +0800214config CRYPTO_CTR
215 tristate "CTR support"
216 select CRYPTO_BLKCIPHER
Herbert Xu0a270322007-11-30 21:38:37 +1100217 select CRYPTO_SEQIV
Joy Latten23e353c2007-10-23 08:50:32 +0800218 select CRYPTO_MANAGER
Joy Latten23e353c2007-10-23 08:50:32 +0800219 help
220 CTR: Counter mode
221 This block cipher algorithm is required for IPSec.
222
Kevin Coffman76cb9522008-03-24 21:26:16 +0800223config CRYPTO_CTS
224 tristate "CTS support"
225 select CRYPTO_BLKCIPHER
226 help
227 CTS: Cipher Text Stealing
228 This is the Cipher Text Stealing mode as described by
229 Section 8 of rfc2040 and referenced by rfc3962.
230 (rfc3962 includes errata information in its Appendix A)
231 This mode is required for Kerberos gss mechanism support
232 for AES encryption.
233
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800234config CRYPTO_ECB
235 tristate "ECB support"
Herbert Xu653ebd92007-11-27 19:48:27 +0800236 select CRYPTO_BLKCIPHER
Herbert Xu124b53d2007-04-16 20:49:20 +1000237 select CRYPTO_MANAGER
238 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800239 ECB: Electronic CodeBook mode
240 This is the simplest block cipher algorithm. It simply encrypts
241 the input block by block.
Herbert Xu124b53d2007-04-16 20:49:20 +1000242
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800243config CRYPTO_LRW
Jussi Kivilinna2470a2b2011-12-13 12:52:51 +0200244 tristate "LRW support"
David Howells90831632006-12-16 12:13:14 +1100245 select CRYPTO_BLKCIPHER
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800246 select CRYPTO_MANAGER
247 select CRYPTO_GF128MUL
David Howells90831632006-12-16 12:13:14 +1100248 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800249 LRW: Liskov Rivest Wagner, a tweakable, non malleable, non movable
250 narrow block cipher mode for dm-crypt. Use it with cipher
251 specification string aes-lrw-benbi, the key must be 256, 320 or 384.
252 The first 128, 192 or 256 bits in the key are used for AES and the
253 rest is used to tie each cipher block to its logical position.
David Howells90831632006-12-16 12:13:14 +1100254
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800255config CRYPTO_PCBC
256 tristate "PCBC support"
257 select CRYPTO_BLKCIPHER
258 select CRYPTO_MANAGER
259 help
260 PCBC: Propagating Cipher Block Chaining mode
261 This block cipher algorithm is required for RxRPC.
262
263config CRYPTO_XTS
Jussi Kivilinna5bcf8e62011-12-13 12:52:56 +0200264 tristate "XTS support"
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800265 select CRYPTO_BLKCIPHER
266 select CRYPTO_MANAGER
267 select CRYPTO_GF128MUL
268 help
269 XTS: IEEE1619/D16 narrow block cipher use with aes-xts-plain,
270 key size 256, 384 or 512 bits. This implementation currently
271 can't handle a sectorsize which is not a multiple of 16 bytes.
272
273comment "Hash modes"
274
275config CRYPTO_HMAC
276 tristate "HMAC support"
277 select CRYPTO_HASH
278 select CRYPTO_MANAGER
279 help
280 HMAC: Keyed-Hashing for Message Authentication (RFC2104).
281 This is required for IPSec.
282
283config CRYPTO_XCBC
284 tristate "XCBC support"
285 depends on EXPERIMENTAL
286 select CRYPTO_HASH
287 select CRYPTO_MANAGER
288 help
289 XCBC: Keyed-Hashing with encryption algorithm
290 http://www.ietf.org/rfc/rfc3566.txt
291 http://csrc.nist.gov/encryption/modes/proposedmodes/
292 xcbc-mac/xcbc-mac-spec.pdf
293
Shane Wangf1939f72009-09-02 20:05:22 +1000294config CRYPTO_VMAC
295 tristate "VMAC support"
296 depends on EXPERIMENTAL
297 select CRYPTO_HASH
298 select CRYPTO_MANAGER
299 help
300 VMAC is a message authentication algorithm designed for
301 very high speed on 64-bit architectures.
302
303 See also:
304 <http://fastcrypto.org/vmac>
305
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800306comment "Digest"
307
308config CRYPTO_CRC32C
309 tristate "CRC32c CRC algorithm"
Herbert Xu5773a3e2008-07-08 20:54:28 +0800310 select CRYPTO_HASH
Darrick J. Wong6a0962b2012-03-23 15:02:25 -0700311 select CRC32
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800312 help
313 Castagnoli, et al Cyclic Redundancy-Check Algorithm. Used
314 by iSCSI for header and data digests and by others.
Herbert Xu69c35ef2008-11-07 15:11:47 +0800315 See Castagnoli93. Module will be crc32c.
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800316
Austin Zhang8cb51ba2008-08-07 09:57:03 +0800317config CRYPTO_CRC32C_INTEL
318 tristate "CRC32c INTEL hardware acceleration"
319 depends on X86
320 select CRYPTO_HASH
321 help
322 In Intel processor with SSE4.2 supported, the processor will
323 support CRC32C implementation using hardware accelerated CRC32
324 instruction. This option will create 'crc32c-intel' module,
325 which will enable any routine to use the CRC32 instruction to
326 gain performance compared with software implementation.
327 Module will be crc32c-intel.
328
Huang Ying2cdc6892009-08-06 15:32:38 +1000329config CRYPTO_GHASH
330 tristate "GHASH digest algorithm"
Huang Ying2cdc6892009-08-06 15:32:38 +1000331 select CRYPTO_GF128MUL
332 help
333 GHASH is message digest algorithm for GCM (Galois/Counter Mode).
334
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800335config CRYPTO_MD4
336 tristate "MD4 digest algorithm"
Adrian-Ken Rueegsegger808a1762008-12-03 19:55:27 +0800337 select CRYPTO_HASH
Linus Torvalds1da177e2005-04-16 15:20:36 -0700338 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800339 MD4 message digest algorithm (RFC1320).
Linus Torvalds1da177e2005-04-16 15:20:36 -0700340
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800341config CRYPTO_MD5
342 tristate "MD5 digest algorithm"
Adrian-Ken Rueegsegger14b75ba2008-12-03 19:57:12 +0800343 select CRYPTO_HASH
Linus Torvalds1da177e2005-04-16 15:20:36 -0700344 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800345 MD5 message digest algorithm (RFC1321).
Linus Torvalds1da177e2005-04-16 15:20:36 -0700346
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800347config CRYPTO_MICHAEL_MIC
348 tristate "Michael MIC keyed digest algorithm"
Adrian-Ken Rueegsegger19e2bf12008-12-07 19:35:38 +0800349 select CRYPTO_HASH
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800350 help
351 Michael MIC is used for message integrity protection in TKIP
352 (IEEE 802.11i). This algorithm is required for TKIP, but it
353 should not be used for other purposes because of the weakness
354 of the algorithm.
355
Adrian-Ken Rueegsegger82798f92008-05-07 22:17:37 +0800356config CRYPTO_RMD128
Adrian Bunkb6d44342008-07-16 19:28:00 +0800357 tristate "RIPEMD-128 digest algorithm"
Herbert Xu7c4468b2008-11-08 09:10:40 +0800358 select CRYPTO_HASH
Adrian Bunkb6d44342008-07-16 19:28:00 +0800359 help
360 RIPEMD-128 (ISO/IEC 10118-3:2004).
Adrian-Ken Rueegsegger82798f92008-05-07 22:17:37 +0800361
Adrian Bunkb6d44342008-07-16 19:28:00 +0800362 RIPEMD-128 is a 128-bit cryptographic hash function. It should only
Michael Witten35ed4b32011-07-09 04:02:31 +0000363 be used as a secure replacement for RIPEMD. For other use cases,
Adrian Bunkb6d44342008-07-16 19:28:00 +0800364 RIPEMD-160 should be used.
Adrian-Ken Rueegsegger82798f92008-05-07 22:17:37 +0800365
Adrian Bunkb6d44342008-07-16 19:28:00 +0800366 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
Justin P. Mattock6d8de742010-09-12 10:42:47 +0800367 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
Adrian-Ken Rueegsegger82798f92008-05-07 22:17:37 +0800368
369config CRYPTO_RMD160
Adrian Bunkb6d44342008-07-16 19:28:00 +0800370 tristate "RIPEMD-160 digest algorithm"
Herbert Xue5835fb2008-11-08 09:18:51 +0800371 select CRYPTO_HASH
Adrian Bunkb6d44342008-07-16 19:28:00 +0800372 help
373 RIPEMD-160 (ISO/IEC 10118-3:2004).
Adrian-Ken Rueegsegger82798f92008-05-07 22:17:37 +0800374
Adrian Bunkb6d44342008-07-16 19:28:00 +0800375 RIPEMD-160 is a 160-bit cryptographic hash function. It is intended
376 to be used as a secure replacement for the 128-bit hash functions
377 MD4, MD5 and it's predecessor RIPEMD
378 (not to be confused with RIPEMD-128).
Adrian-Ken Rueegsegger82798f92008-05-07 22:17:37 +0800379
Adrian Bunkb6d44342008-07-16 19:28:00 +0800380 It's speed is comparable to SHA1 and there are no known attacks
381 against RIPEMD-160.
Adrian-Ken Rueegsegger534fe2c2008-05-09 21:30:27 +0800382
Adrian Bunkb6d44342008-07-16 19:28:00 +0800383 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
Justin P. Mattock6d8de742010-09-12 10:42:47 +0800384 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
Adrian-Ken Rueegsegger534fe2c2008-05-09 21:30:27 +0800385
386config CRYPTO_RMD256
Adrian Bunkb6d44342008-07-16 19:28:00 +0800387 tristate "RIPEMD-256 digest algorithm"
Herbert Xud8a5e2e2008-11-08 09:58:10 +0800388 select CRYPTO_HASH
Adrian Bunkb6d44342008-07-16 19:28:00 +0800389 help
390 RIPEMD-256 is an optional extension of RIPEMD-128 with a
391 256 bit hash. It is intended for applications that require
392 longer hash-results, without needing a larger security level
393 (than RIPEMD-128).
Adrian-Ken Rueegsegger534fe2c2008-05-09 21:30:27 +0800394
Adrian Bunkb6d44342008-07-16 19:28:00 +0800395 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
Justin P. Mattock6d8de742010-09-12 10:42:47 +0800396 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
Adrian-Ken Rueegsegger534fe2c2008-05-09 21:30:27 +0800397
398config CRYPTO_RMD320
Adrian Bunkb6d44342008-07-16 19:28:00 +0800399 tristate "RIPEMD-320 digest algorithm"
Herbert Xu3b8efb42008-11-08 10:11:09 +0800400 select CRYPTO_HASH
Adrian Bunkb6d44342008-07-16 19:28:00 +0800401 help
402 RIPEMD-320 is an optional extension of RIPEMD-160 with a
403 320 bit hash. It is intended for applications that require
404 longer hash-results, without needing a larger security level
405 (than RIPEMD-160).
Adrian-Ken Rueegsegger534fe2c2008-05-09 21:30:27 +0800406
Adrian Bunkb6d44342008-07-16 19:28:00 +0800407 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
Justin P. Mattock6d8de742010-09-12 10:42:47 +0800408 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
Adrian-Ken Rueegsegger82798f92008-05-07 22:17:37 +0800409
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800410config CRYPTO_SHA1
411 tristate "SHA1 digest algorithm"
Adrian-Ken Rueegsegger54ccb362008-12-02 21:08:20 +0800412 select CRYPTO_HASH
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800413 help
414 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2).
415
Mathias Krause66be8952011-08-04 20:19:25 +0200416config CRYPTO_SHA1_SSSE3
417 tristate "SHA1 digest algorithm (SSSE3/AVX)"
418 depends on X86 && 64BIT
419 select CRYPTO_SHA1
420 select CRYPTO_HASH
421 help
422 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented
423 using Supplemental SSE3 (SSSE3) instructions or Advanced Vector
424 Extensions (AVX), when available.
425
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800426config CRYPTO_SHA256
427 tristate "SHA224 and SHA256 digest algorithm"
Adrian-Ken Rueegsegger50e109b52008-12-03 19:57:49 +0800428 select CRYPTO_HASH
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800429 help
430 SHA256 secure hash standard (DFIPS 180-2).
431
432 This version of SHA implements a 256 bit hash with 128 bits of
433 security against collision attacks.
434
Adrian Bunkb6d44342008-07-16 19:28:00 +0800435 This code also includes SHA-224, a 224 bit hash with 112 bits
436 of security against collision attacks.
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800437
438config CRYPTO_SHA512
439 tristate "SHA384 and SHA512 digest algorithms"
Adrian-Ken Rueegseggerbd9d20d2008-12-17 16:49:02 +1100440 select CRYPTO_HASH
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800441 help
442 SHA512 secure hash standard (DFIPS 180-2).
443
444 This version of SHA implements a 512 bit hash with 256 bits of
445 security against collision attacks.
446
447 This code also includes SHA-384, a 384 bit hash with 192 bits
448 of security against collision attacks.
449
450config CRYPTO_TGR192
451 tristate "Tiger digest algorithms"
Adrian-Ken Rueegseggerf63fbd32008-12-03 19:58:32 +0800452 select CRYPTO_HASH
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800453 help
454 Tiger hash algorithm 192, 160 and 128-bit hashes
455
456 Tiger is a hash function optimized for 64-bit processors while
457 still having decent performance on 32-bit processors.
458 Tiger was developed by Ross Anderson and Eli Biham.
Linus Torvalds1da177e2005-04-16 15:20:36 -0700459
460 See also:
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800461 <http://www.cs.technion.ac.il/~biham/Reports/Tiger/>.
462
463config CRYPTO_WP512
464 tristate "Whirlpool digest algorithms"
Adrian-Ken Rueegsegger49465102008-12-07 19:34:37 +0800465 select CRYPTO_HASH
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800466 help
467 Whirlpool hash algorithm 512, 384 and 256-bit hashes
468
469 Whirlpool-512 is part of the NESSIE cryptographic primitives.
470 Whirlpool will be part of the ISO/IEC 10118-3:2003(E) standard
471
472 See also:
Justin P. Mattock6d8de742010-09-12 10:42:47 +0800473 <http://www.larc.usp.br/~pbarreto/WhirlpoolPage.html>
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800474
Huang Ying0e1227d2009-10-19 11:53:06 +0900475config CRYPTO_GHASH_CLMUL_NI_INTEL
476 tristate "GHASH digest algorithm (CLMUL-NI accelerated)"
Richard Weinberger8af00862011-06-08 20:56:29 +0800477 depends on X86 && 64BIT
Huang Ying0e1227d2009-10-19 11:53:06 +0900478 select CRYPTO_CRYPTD
479 help
480 GHASH is message digest algorithm for GCM (Galois/Counter Mode).
481 The implementation is accelerated by CLMUL-NI of Intel.
482
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800483comment "Ciphers"
Linus Torvalds1da177e2005-04-16 15:20:36 -0700484
485config CRYPTO_AES
486 tristate "AES cipher algorithms"
Herbert Xucce9e062006-08-21 21:08:13 +1000487 select CRYPTO_ALGAPI
Linus Torvalds1da177e2005-04-16 15:20:36 -0700488 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800489 AES cipher algorithms (FIPS-197). AES uses the Rijndael
Linus Torvalds1da177e2005-04-16 15:20:36 -0700490 algorithm.
491
492 Rijndael appears to be consistently a very good performer in
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800493 both hardware and software across a wide range of computing
494 environments regardless of its use in feedback or non-feedback
495 modes. Its key setup time is excellent, and its key agility is
496 good. Rijndael's very low memory requirements make it very well
497 suited for restricted-space environments, in which it also
498 demonstrates excellent performance. Rijndael's operations are
499 among the easiest to defend against power and timing attacks.
Linus Torvalds1da177e2005-04-16 15:20:36 -0700500
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800501 The AES specifies three key sizes: 128, 192 and 256 bits
Linus Torvalds1da177e2005-04-16 15:20:36 -0700502
503 See <http://csrc.nist.gov/CryptoToolkit/aes/> for more information.
504
505config CRYPTO_AES_586
506 tristate "AES cipher algorithms (i586)"
Herbert Xucce9e062006-08-21 21:08:13 +1000507 depends on (X86 || UML_X86) && !64BIT
508 select CRYPTO_ALGAPI
Sebastian Siewior5157dea2007-11-10 19:07:16 +0800509 select CRYPTO_AES
Linus Torvalds1da177e2005-04-16 15:20:36 -0700510 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800511 AES cipher algorithms (FIPS-197). AES uses the Rijndael
Linus Torvalds1da177e2005-04-16 15:20:36 -0700512 algorithm.
513
514 Rijndael appears to be consistently a very good performer in
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800515 both hardware and software across a wide range of computing
516 environments regardless of its use in feedback or non-feedback
517 modes. Its key setup time is excellent, and its key agility is
518 good. Rijndael's very low memory requirements make it very well
519 suited for restricted-space environments, in which it also
520 demonstrates excellent performance. Rijndael's operations are
521 among the easiest to defend against power and timing attacks.
Linus Torvalds1da177e2005-04-16 15:20:36 -0700522
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800523 The AES specifies three key sizes: 128, 192 and 256 bits
Linus Torvalds1da177e2005-04-16 15:20:36 -0700524
525 See <http://csrc.nist.gov/encryption/aes/> for more information.
526
Andreas Steinmetza2a892a2005-07-06 13:55:00 -0700527config CRYPTO_AES_X86_64
528 tristate "AES cipher algorithms (x86_64)"
Herbert Xucce9e062006-08-21 21:08:13 +1000529 depends on (X86 || UML_X86) && 64BIT
530 select CRYPTO_ALGAPI
Sebastian Siewior81190b32007-11-08 21:25:04 +0800531 select CRYPTO_AES
Andreas Steinmetza2a892a2005-07-06 13:55:00 -0700532 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800533 AES cipher algorithms (FIPS-197). AES uses the Rijndael
Andreas Steinmetza2a892a2005-07-06 13:55:00 -0700534 algorithm.
535
536 Rijndael appears to be consistently a very good performer in
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800537 both hardware and software across a wide range of computing
538 environments regardless of its use in feedback or non-feedback
539 modes. Its key setup time is excellent, and its key agility is
540 good. Rijndael's very low memory requirements make it very well
541 suited for restricted-space environments, in which it also
542 demonstrates excellent performance. Rijndael's operations are
543 among the easiest to defend against power and timing attacks.
Andreas Steinmetza2a892a2005-07-06 13:55:00 -0700544
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800545 The AES specifies three key sizes: 128, 192 and 256 bits
Andreas Steinmetza2a892a2005-07-06 13:55:00 -0700546
547 See <http://csrc.nist.gov/encryption/aes/> for more information.
548
Huang Ying54b6a1b2009-01-18 16:28:34 +1100549config CRYPTO_AES_NI_INTEL
550 tristate "AES cipher algorithms (AES-NI)"
Richard Weinberger8af00862011-06-08 20:56:29 +0800551 depends on X86
Mathias Krause0d258ef2010-11-27 16:34:46 +0800552 select CRYPTO_AES_X86_64 if 64BIT
553 select CRYPTO_AES_586 if !64BIT
Huang Ying54b6a1b2009-01-18 16:28:34 +1100554 select CRYPTO_CRYPTD
555 select CRYPTO_ALGAPI
556 help
557 Use Intel AES-NI instructions for AES algorithm.
558
559 AES cipher algorithms (FIPS-197). AES uses the Rijndael
560 algorithm.
561
562 Rijndael appears to be consistently a very good performer in
563 both hardware and software across a wide range of computing
564 environments regardless of its use in feedback or non-feedback
565 modes. Its key setup time is excellent, and its key agility is
566 good. Rijndael's very low memory requirements make it very well
567 suited for restricted-space environments, in which it also
568 demonstrates excellent performance. Rijndael's operations are
569 among the easiest to defend against power and timing attacks.
570
571 The AES specifies three key sizes: 128, 192 and 256 bits
572
573 See <http://csrc.nist.gov/encryption/aes/> for more information.
574
Mathias Krause0d258ef2010-11-27 16:34:46 +0800575 In addition to AES cipher algorithm support, the acceleration
576 for some popular block cipher mode is supported too, including
577 ECB, CBC, LRW, PCBC, XTS. The 64 bit version has additional
578 acceleration for CTR.
Huang Ying2cf4ac82009-03-29 15:41:20 +0800579
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800580config CRYPTO_ANUBIS
581 tristate "Anubis cipher algorithm"
582 select CRYPTO_ALGAPI
583 help
584 Anubis cipher algorithm.
585
586 Anubis is a variable key length cipher which can use keys from
587 128 bits to 320 bits in length. It was evaluated as a entrant
588 in the NESSIE competition.
589
590 See also:
Justin P. Mattock6d8de742010-09-12 10:42:47 +0800591 <https://www.cosic.esat.kuleuven.be/nessie/reports/>
592 <http://www.larc.usp.br/~pbarreto/AnubisPage.html>
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800593
594config CRYPTO_ARC4
595 tristate "ARC4 cipher algorithm"
596 select CRYPTO_ALGAPI
597 help
598 ARC4 cipher algorithm.
599
600 ARC4 is a stream cipher using keys ranging from 8 bits to 2048
601 bits in length. This algorithm is required for driver-based
602 WEP, but it should not be for other purposes because of the
603 weakness of the algorithm.
604
605config CRYPTO_BLOWFISH
606 tristate "Blowfish cipher algorithm"
607 select CRYPTO_ALGAPI
Jussi Kivilinna52ba8672011-09-02 01:45:07 +0300608 select CRYPTO_BLOWFISH_COMMON
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800609 help
610 Blowfish cipher algorithm, by Bruce Schneier.
611
612 This is a variable key length cipher which can use keys from 32
613 bits to 448 bits in length. It's fast, simple and specifically
614 designed for use on "large microprocessors".
615
616 See also:
617 <http://www.schneier.com/blowfish.html>
618
Jussi Kivilinna52ba8672011-09-02 01:45:07 +0300619config CRYPTO_BLOWFISH_COMMON
620 tristate
621 help
622 Common parts of the Blowfish cipher algorithm shared by the
623 generic c and the assembler implementations.
624
625 See also:
626 <http://www.schneier.com/blowfish.html>
627
Jussi Kivilinna64b94ce2011-09-02 01:45:22 +0300628config CRYPTO_BLOWFISH_X86_64
629 tristate "Blowfish cipher algorithm (x86_64)"
Al Virof21a7c12012-04-08 20:31:22 -0400630 depends on X86 && 64BIT
Jussi Kivilinna64b94ce2011-09-02 01:45:22 +0300631 select CRYPTO_ALGAPI
632 select CRYPTO_BLOWFISH_COMMON
633 help
634 Blowfish cipher algorithm (x86_64), by Bruce Schneier.
635
636 This is a variable key length cipher which can use keys from 32
637 bits to 448 bits in length. It's fast, simple and specifically
638 designed for use on "large microprocessors".
639
640 See also:
641 <http://www.schneier.com/blowfish.html>
642
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800643config CRYPTO_CAMELLIA
644 tristate "Camellia cipher algorithms"
645 depends on CRYPTO
646 select CRYPTO_ALGAPI
647 help
648 Camellia cipher algorithms module.
649
650 Camellia is a symmetric key block cipher developed jointly
651 at NTT and Mitsubishi Electric Corporation.
652
653 The Camellia specifies three key sizes: 128, 192 and 256 bits.
654
655 See also:
656 <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
657
Jussi Kivilinna0b95ec52012-03-05 20:26:47 +0200658config CRYPTO_CAMELLIA_X86_64
659 tristate "Camellia cipher algorithm (x86_64)"
Al Virof21a7c12012-04-08 20:31:22 -0400660 depends on X86 && 64BIT
Jussi Kivilinna0b95ec52012-03-05 20:26:47 +0200661 depends on CRYPTO
662 select CRYPTO_ALGAPI
663 select CRYPTO_LRW
664 select CRYPTO_XTS
665 help
666 Camellia cipher algorithm module (x86_64).
667
668 Camellia is a symmetric key block cipher developed jointly
669 at NTT and Mitsubishi Electric Corporation.
670
671 The Camellia specifies three key sizes: 128, 192 and 256 bits.
672
673 See also:
674 <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
675
Linus Torvalds1da177e2005-04-16 15:20:36 -0700676config CRYPTO_CAST5
677 tristate "CAST5 (CAST-128) cipher algorithm"
Herbert Xucce9e062006-08-21 21:08:13 +1000678 select CRYPTO_ALGAPI
Linus Torvalds1da177e2005-04-16 15:20:36 -0700679 help
680 The CAST5 encryption algorithm (synonymous with CAST-128) is
681 described in RFC2144.
682
683config CRYPTO_CAST6
684 tristate "CAST6 (CAST-256) cipher algorithm"
Herbert Xucce9e062006-08-21 21:08:13 +1000685 select CRYPTO_ALGAPI
Linus Torvalds1da177e2005-04-16 15:20:36 -0700686 help
687 The CAST6 encryption algorithm (synonymous with CAST-256) is
688 described in RFC2612.
689
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800690config CRYPTO_DES
691 tristate "DES and Triple DES EDE cipher algorithms"
Herbert Xucce9e062006-08-21 21:08:13 +1000692 select CRYPTO_ALGAPI
Linus Torvalds1da177e2005-04-16 15:20:36 -0700693 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800694 DES cipher algorithm (FIPS 46-2), and Triple DES EDE (FIPS 46-3).
Linus Torvalds1da177e2005-04-16 15:20:36 -0700695
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800696config CRYPTO_FCRYPT
697 tristate "FCrypt cipher algorithm"
Herbert Xucce9e062006-08-21 21:08:13 +1000698 select CRYPTO_ALGAPI
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800699 select CRYPTO_BLKCIPHER
Linus Torvalds1da177e2005-04-16 15:20:36 -0700700 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800701 FCrypt algorithm used by RxRPC.
Linus Torvalds1da177e2005-04-16 15:20:36 -0700702
703config CRYPTO_KHAZAD
704 tristate "Khazad cipher algorithm"
Herbert Xucce9e062006-08-21 21:08:13 +1000705 select CRYPTO_ALGAPI
Linus Torvalds1da177e2005-04-16 15:20:36 -0700706 help
707 Khazad cipher algorithm.
708
709 Khazad was a finalist in the initial NESSIE competition. It is
710 an algorithm optimized for 64-bit processors with good performance
711 on 32-bit processors. Khazad uses an 128 bit key size.
712
713 See also:
Justin P. Mattock6d8de742010-09-12 10:42:47 +0800714 <http://www.larc.usp.br/~pbarreto/KhazadPage.html>
Linus Torvalds1da177e2005-04-16 15:20:36 -0700715
Tan Swee Heng2407d602007-11-23 19:45:00 +0800716config CRYPTO_SALSA20
717 tristate "Salsa20 stream cipher algorithm (EXPERIMENTAL)"
718 depends on EXPERIMENTAL
719 select CRYPTO_BLKCIPHER
720 help
721 Salsa20 stream cipher algorithm.
722
723 Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
724 Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
725
726 The Salsa20 stream cipher algorithm is designed by Daniel J.
727 Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
Linus Torvalds1da177e2005-04-16 15:20:36 -0700728
Tan Swee Heng974e4b72007-12-10 15:52:56 +0800729config CRYPTO_SALSA20_586
730 tristate "Salsa20 stream cipher algorithm (i586) (EXPERIMENTAL)"
731 depends on (X86 || UML_X86) && !64BIT
732 depends on EXPERIMENTAL
733 select CRYPTO_BLKCIPHER
Tan Swee Heng974e4b72007-12-10 15:52:56 +0800734 help
735 Salsa20 stream cipher algorithm.
736
737 Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
738 Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
739
740 The Salsa20 stream cipher algorithm is designed by Daniel J.
741 Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
742
Tan Swee Heng9a7dafb2007-12-18 00:04:40 +0800743config CRYPTO_SALSA20_X86_64
744 tristate "Salsa20 stream cipher algorithm (x86_64) (EXPERIMENTAL)"
745 depends on (X86 || UML_X86) && 64BIT
746 depends on EXPERIMENTAL
747 select CRYPTO_BLKCIPHER
Tan Swee Heng9a7dafb2007-12-18 00:04:40 +0800748 help
749 Salsa20 stream cipher algorithm.
750
751 Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
752 Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
753
754 The Salsa20 stream cipher algorithm is designed by Daniel J.
755 Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
756
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800757config CRYPTO_SEED
758 tristate "SEED cipher algorithm"
759 select CRYPTO_ALGAPI
760 help
761 SEED cipher algorithm (RFC4269).
762
763 SEED is a 128-bit symmetric key block cipher that has been
764 developed by KISA (Korea Information Security Agency) as a
765 national standard encryption algorithm of the Republic of Korea.
766 It is a 16 round block cipher with the key size of 128 bit.
767
768 See also:
769 <http://www.kisa.or.kr/kisa/seed/jsp/seed_eng.jsp>
770
771config CRYPTO_SERPENT
772 tristate "Serpent cipher algorithm"
773 select CRYPTO_ALGAPI
774 help
775 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
776
777 Keys are allowed to be from 0 to 256 bits in length, in steps
778 of 8 bits. Also includes the 'Tnepres' algorithm, a reversed
779 variant of Serpent for compatibility with old kerneli.org code.
780
781 See also:
782 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
783
Jussi Kivilinna937c30d2011-11-09 16:26:25 +0200784config CRYPTO_SERPENT_SSE2_X86_64
785 tristate "Serpent cipher algorithm (x86_64/SSE2)"
786 depends on X86 && 64BIT
787 select CRYPTO_ALGAPI
Jussi Kivilinna341975b2011-11-24 08:37:41 +0200788 select CRYPTO_CRYPTD
Jussi Kivilinna937c30d2011-11-09 16:26:25 +0200789 select CRYPTO_SERPENT
Jussi Kivilinnafeaf0cf2011-12-13 12:53:12 +0200790 select CRYPTO_LRW
791 select CRYPTO_XTS
Jussi Kivilinna937c30d2011-11-09 16:26:25 +0200792 help
793 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
794
795 Keys are allowed to be from 0 to 256 bits in length, in steps
796 of 8 bits.
797
798 This module provides Serpent cipher algorithm that processes eigth
799 blocks parallel using SSE2 instruction set.
800
801 See also:
802 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
803
Jussi Kivilinna251496d2011-11-09 16:26:31 +0200804config CRYPTO_SERPENT_SSE2_586
805 tristate "Serpent cipher algorithm (i586/SSE2)"
806 depends on X86 && !64BIT
807 select CRYPTO_ALGAPI
Jussi Kivilinna341975b2011-11-24 08:37:41 +0200808 select CRYPTO_CRYPTD
Jussi Kivilinna251496d2011-11-09 16:26:31 +0200809 select CRYPTO_SERPENT
Jussi Kivilinnafeaf0cf2011-12-13 12:53:12 +0200810 select CRYPTO_LRW
811 select CRYPTO_XTS
Jussi Kivilinna251496d2011-11-09 16:26:31 +0200812 help
813 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
814
815 Keys are allowed to be from 0 to 256 bits in length, in steps
816 of 8 bits.
817
818 This module provides Serpent cipher algorithm that processes four
819 blocks parallel using SSE2 instruction set.
820
821 See also:
822 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
823
Johannes Goetzfried7efe4072012-06-12 16:47:43 +0800824config CRYPTO_SERPENT_AVX_X86_64
825 tristate "Serpent cipher algorithm (x86_64/AVX)"
826 depends on X86 && 64BIT
827 select CRYPTO_ALGAPI
828 select CRYPTO_CRYPTD
829 select CRYPTO_SERPENT
830 select CRYPTO_LRW
831 select CRYPTO_XTS
832 help
833 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
834
835 Keys are allowed to be from 0 to 256 bits in length, in steps
836 of 8 bits.
837
838 This module provides the Serpent cipher algorithm that processes
839 eight blocks parallel using the AVX instruction set.
840
841 See also:
842 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
843
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800844config CRYPTO_TEA
845 tristate "TEA, XTEA and XETA cipher algorithms"
846 select CRYPTO_ALGAPI
847 help
848 TEA cipher algorithm.
849
850 Tiny Encryption Algorithm is a simple cipher that uses
851 many rounds for security. It is very fast and uses
852 little memory.
853
854 Xtendend Tiny Encryption Algorithm is a modification to
855 the TEA algorithm to address a potential key weakness
856 in the TEA algorithm.
857
858 Xtendend Encryption Tiny Algorithm is a mis-implementation
859 of the XTEA algorithm for compatibility purposes.
860
861config CRYPTO_TWOFISH
862 tristate "Twofish cipher algorithm"
863 select CRYPTO_ALGAPI
864 select CRYPTO_TWOFISH_COMMON
865 help
866 Twofish cipher algorithm.
867
868 Twofish was submitted as an AES (Advanced Encryption Standard)
869 candidate cipher by researchers at CounterPane Systems. It is a
870 16 round block cipher supporting key sizes of 128, 192, and 256
871 bits.
872
873 See also:
874 <http://www.schneier.com/twofish.html>
875
876config CRYPTO_TWOFISH_COMMON
877 tristate
878 help
879 Common parts of the Twofish cipher algorithm shared by the
880 generic c and the assembler implementations.
881
882config CRYPTO_TWOFISH_586
883 tristate "Twofish cipher algorithms (i586)"
884 depends on (X86 || UML_X86) && !64BIT
885 select CRYPTO_ALGAPI
886 select CRYPTO_TWOFISH_COMMON
887 help
888 Twofish cipher algorithm.
889
890 Twofish was submitted as an AES (Advanced Encryption Standard)
891 candidate cipher by researchers at CounterPane Systems. It is a
892 16 round block cipher supporting key sizes of 128, 192, and 256
893 bits.
894
895 See also:
896 <http://www.schneier.com/twofish.html>
897
898config CRYPTO_TWOFISH_X86_64
899 tristate "Twofish cipher algorithm (x86_64)"
900 depends on (X86 || UML_X86) && 64BIT
901 select CRYPTO_ALGAPI
902 select CRYPTO_TWOFISH_COMMON
903 help
904 Twofish cipher algorithm (x86_64).
905
906 Twofish was submitted as an AES (Advanced Encryption Standard)
907 candidate cipher by researchers at CounterPane Systems. It is a
908 16 round block cipher supporting key sizes of 128, 192, and 256
909 bits.
910
911 See also:
912 <http://www.schneier.com/twofish.html>
913
Jussi Kivilinna8280daa2011-09-26 16:47:25 +0300914config CRYPTO_TWOFISH_X86_64_3WAY
915 tristate "Twofish cipher algorithm (x86_64, 3-way parallel)"
Al Virof21a7c12012-04-08 20:31:22 -0400916 depends on X86 && 64BIT
Jussi Kivilinna8280daa2011-09-26 16:47:25 +0300917 select CRYPTO_ALGAPI
918 select CRYPTO_TWOFISH_COMMON
919 select CRYPTO_TWOFISH_X86_64
Jussi Kivilinnae7cda5d2011-12-13 12:53:01 +0200920 select CRYPTO_LRW
921 select CRYPTO_XTS
Jussi Kivilinna8280daa2011-09-26 16:47:25 +0300922 help
923 Twofish cipher algorithm (x86_64, 3-way parallel).
924
925 Twofish was submitted as an AES (Advanced Encryption Standard)
926 candidate cipher by researchers at CounterPane Systems. It is a
927 16 round block cipher supporting key sizes of 128, 192, and 256
928 bits.
929
930 This module provides Twofish cipher algorithm that processes three
931 blocks parallel, utilizing resources of out-of-order CPUs better.
932
933 See also:
934 <http://www.schneier.com/twofish.html>
935
Johannes Goetzfried107778b2012-05-28 15:54:24 +0200936config CRYPTO_TWOFISH_AVX_X86_64
937 tristate "Twofish cipher algorithm (x86_64/AVX)"
938 depends on X86 && 64BIT
939 select CRYPTO_ALGAPI
940 select CRYPTO_CRYPTD
941 select CRYPTO_TWOFISH_COMMON
942 select CRYPTO_TWOFISH_X86_64
943 select CRYPTO_TWOFISH_X86_64_3WAY
944 select CRYPTO_LRW
945 select CRYPTO_XTS
946 help
947 Twofish cipher algorithm (x86_64/AVX).
948
949 Twofish was submitted as an AES (Advanced Encryption Standard)
950 candidate cipher by researchers at CounterPane Systems. It is a
951 16 round block cipher supporting key sizes of 128, 192, and 256
952 bits.
953
954 This module provides the Twofish cipher algorithm that processes
955 eight blocks parallel using the AVX Instruction Set.
956
957 See also:
958 <http://www.schneier.com/twofish.html>
959
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800960comment "Compression"
961
Linus Torvalds1da177e2005-04-16 15:20:36 -0700962config CRYPTO_DEFLATE
963 tristate "Deflate compression algorithm"
Herbert Xucce9e062006-08-21 21:08:13 +1000964 select CRYPTO_ALGAPI
Linus Torvalds1da177e2005-04-16 15:20:36 -0700965 select ZLIB_INFLATE
966 select ZLIB_DEFLATE
967 help
968 This is the Deflate algorithm (RFC1951), specified for use in
969 IPSec with the IPCOMP protocol (RFC3173, RFC2394).
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800970
Linus Torvalds1da177e2005-04-16 15:20:36 -0700971 You will most probably want this if using IPSec.
972
Geert Uytterhoevenbf68e652009-03-04 15:15:49 +0800973config CRYPTO_ZLIB
974 tristate "Zlib compression algorithm"
975 select CRYPTO_PCOMP
976 select ZLIB_INFLATE
977 select ZLIB_DEFLATE
978 select NLATTR
979 help
980 This is the zlib algorithm.
981
Zoltan Sogor0b77abb2007-12-07 16:53:23 +0800982config CRYPTO_LZO
983 tristate "LZO compression algorithm"
984 select CRYPTO_ALGAPI
985 select LZO_COMPRESS
986 select LZO_DECOMPRESS
987 help
988 This is the LZO algorithm.
989
Neil Horman17f0f4a2008-08-14 22:15:52 +1000990comment "Random Number Generation"
991
992config CRYPTO_ANSI_CPRNG
993 tristate "Pseudo Random Number Generation for Cryptographic modules"
Neil Horman4e4ed832009-08-20 17:54:16 +1000994 default m
Neil Horman17f0f4a2008-08-14 22:15:52 +1000995 select CRYPTO_AES
996 select CRYPTO_RNG
Neil Horman17f0f4a2008-08-14 22:15:52 +1000997 help
998 This option enables the generic pseudo random number generator
999 for cryptographic modules. Uses the Algorithm specified in
Jiri Kosina7dd607e2010-01-27 01:00:10 +01001000 ANSI X9.31 A.2.4. Note that this option must be enabled if
1001 CRYPTO_FIPS is selected
Neil Horman17f0f4a2008-08-14 22:15:52 +10001002
Herbert Xu03c8efc2010-10-19 21:12:39 +08001003config CRYPTO_USER_API
1004 tristate
1005
Herbert Xufe869cd2010-10-19 21:23:00 +08001006config CRYPTO_USER_API_HASH
1007 tristate "User-space interface for hash algorithms"
Herbert Xu74517082010-11-29 22:56:03 +08001008 depends on NET
Herbert Xufe869cd2010-10-19 21:23:00 +08001009 select CRYPTO_HASH
1010 select CRYPTO_USER_API
1011 help
1012 This option enables the user-spaces interface for hash
1013 algorithms.
1014
Herbert Xu8ff59092010-10-19 21:31:55 +08001015config CRYPTO_USER_API_SKCIPHER
1016 tristate "User-space interface for symmetric key cipher algorithms"
Herbert Xu74517082010-11-29 22:56:03 +08001017 depends on NET
Herbert Xu8ff59092010-10-19 21:31:55 +08001018 select CRYPTO_BLKCIPHER
1019 select CRYPTO_USER_API
1020 help
1021 This option enables the user-spaces interface for symmetric
1022 key cipher algorithms.
1023
Linus Torvalds1da177e2005-04-16 15:20:36 -07001024source "drivers/crypto/Kconfig"
Linus Torvalds1da177e2005-04-16 15:20:36 -07001025
Herbert Xucce9e062006-08-21 21:08:13 +10001026endif # if CRYPTO