blob: 1d33beb6a1ae5a9378905cca7b9fa7323a96ff2b [file] [log] [blame]
Linus Torvalds1da177e2005-04-16 15:20:36 -07001#
Dan Williams685784a2007-07-09 11:56:42 -07002# Generic algorithms support
3#
4config XOR_BLOCKS
5 tristate
6
7#
Dan Williams9bc89cd2007-01-02 11:10:44 -07008# async_tx api: hardware offloaded memory transfer/transform support
9#
10source "crypto/async_tx/Kconfig"
11
12#
Linus Torvalds1da177e2005-04-16 15:20:36 -070013# Cryptographic API Configuration
14#
Jan Engelhardt2e290f42007-05-18 15:11:01 +100015menuconfig CRYPTO
Sebastian Siewiorc3715cb92008-03-30 16:36:09 +080016 tristate "Cryptographic API"
Linus Torvalds1da177e2005-04-16 15:20:36 -070017 help
18 This option provides the core Cryptographic API.
19
Herbert Xucce9e062006-08-21 21:08:13 +100020if CRYPTO
21
Sebastian Siewior584fffc2008-04-05 21:04:48 +080022comment "Crypto core or helper"
23
Neil Hormanccb778e2008-08-05 14:13:08 +080024config CRYPTO_FIPS
25 bool "FIPS 200 compliance"
Herbert Xuf2c89a12014-07-04 22:15:08 +080026 depends on (CRYPTO_ANSI_CPRNG || CRYPTO_DRBG) && !CRYPTO_MANAGER_DISABLE_TESTS
Jarod Wilson002c77a2014-07-02 15:37:30 -040027 depends on MODULE_SIG
Neil Hormanccb778e2008-08-05 14:13:08 +080028 help
29 This options enables the fips boot option which is
30 required if you want to system to operate in a FIPS 200
31 certification. You should say no unless you know what
Chuck Ebberte84c5482010-09-03 19:17:49 +080032 this is.
Neil Hormanccb778e2008-08-05 14:13:08 +080033
Herbert Xucce9e062006-08-21 21:08:13 +100034config CRYPTO_ALGAPI
35 tristate
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110036 select CRYPTO_ALGAPI2
Herbert Xucce9e062006-08-21 21:08:13 +100037 help
38 This option provides the API for cryptographic algorithms.
39
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110040config CRYPTO_ALGAPI2
41 tristate
42
Herbert Xu1ae97822007-08-30 15:36:14 +080043config CRYPTO_AEAD
44 tristate
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110045 select CRYPTO_AEAD2
Herbert Xu1ae97822007-08-30 15:36:14 +080046 select CRYPTO_ALGAPI
47
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110048config CRYPTO_AEAD2
49 tristate
50 select CRYPTO_ALGAPI2
Herbert Xu149a3972015-08-13 17:28:58 +080051 select CRYPTO_NULL2
52 select CRYPTO_RNG2
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110053
Herbert Xu5cde0af2006-08-22 00:07:53 +100054config CRYPTO_BLKCIPHER
55 tristate
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110056 select CRYPTO_BLKCIPHER2
Herbert Xu5cde0af2006-08-22 00:07:53 +100057 select CRYPTO_ALGAPI
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110058
59config CRYPTO_BLKCIPHER2
60 tristate
61 select CRYPTO_ALGAPI2
62 select CRYPTO_RNG2
Huang Ying0a2e8212009-02-19 14:44:02 +080063 select CRYPTO_WORKQUEUE
Herbert Xu5cde0af2006-08-22 00:07:53 +100064
Herbert Xu055bcee2006-08-19 22:24:23 +100065config CRYPTO_HASH
66 tristate
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110067 select CRYPTO_HASH2
Herbert Xu055bcee2006-08-19 22:24:23 +100068 select CRYPTO_ALGAPI
69
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110070config CRYPTO_HASH2
71 tristate
72 select CRYPTO_ALGAPI2
73
Neil Horman17f0f4a2008-08-14 22:15:52 +100074config CRYPTO_RNG
75 tristate
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110076 select CRYPTO_RNG2
Neil Horman17f0f4a2008-08-14 22:15:52 +100077 select CRYPTO_ALGAPI
78
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110079config CRYPTO_RNG2
80 tristate
81 select CRYPTO_ALGAPI2
82
Herbert Xu401e4232015-06-03 14:49:31 +080083config CRYPTO_RNG_DEFAULT
84 tristate
85 select CRYPTO_DRBG_MENU
86
Tadeusz Struk3c339ab2015-06-16 10:30:55 -070087config CRYPTO_AKCIPHER2
88 tristate
89 select CRYPTO_ALGAPI2
90
91config CRYPTO_AKCIPHER
92 tristate
93 select CRYPTO_AKCIPHER2
94 select CRYPTO_ALGAPI
95
Tadeusz Strukcfc2bb32015-06-16 10:31:01 -070096config CRYPTO_RSA
97 tristate "RSA algorithm"
Tadeusz Struk425e0172015-06-19 10:27:39 -070098 select CRYPTO_AKCIPHER
Tadeusz Struk58446fe2016-05-04 06:38:46 -070099 select CRYPTO_MANAGER
Tadeusz Strukcfc2bb32015-06-16 10:31:01 -0700100 select MPILIB
101 select ASN1
102 help
103 Generic implementation of the RSA public key algorithm.
104
Herbert Xu2b8c19d2006-09-21 11:31:44 +1000105config CRYPTO_MANAGER
106 tristate "Cryptographic algorithm manager"
Herbert Xu6a0fcbb2008-12-10 23:29:44 +1100107 select CRYPTO_MANAGER2
Herbert Xu2b8c19d2006-09-21 11:31:44 +1000108 help
109 Create default cryptographic template instantiations such as
110 cbc(aes).
111
Herbert Xu6a0fcbb2008-12-10 23:29:44 +1100112config CRYPTO_MANAGER2
113 def_tristate CRYPTO_MANAGER || (CRYPTO_MANAGER!=n && CRYPTO_ALGAPI=y)
114 select CRYPTO_AEAD2
115 select CRYPTO_HASH2
116 select CRYPTO_BLKCIPHER2
Tadeusz Struk946cc462015-06-16 10:31:06 -0700117 select CRYPTO_AKCIPHER2
Herbert Xu6a0fcbb2008-12-10 23:29:44 +1100118
Steffen Klasserta38f7902011-09-27 07:23:50 +0200119config CRYPTO_USER
120 tristate "Userspace cryptographic algorithm configuration"
Herbert Xu5db017a2011-11-01 12:12:43 +1100121 depends on NET
Steffen Klasserta38f7902011-09-27 07:23:50 +0200122 select CRYPTO_MANAGER
123 help
Valdis.Kletnieks@vt.edud19978f2011-11-09 01:29:20 -0500124 Userspace configuration for cryptographic instantiations such as
Steffen Klasserta38f7902011-09-27 07:23:50 +0200125 cbc(aes).
126
Herbert Xu326a6342010-08-06 09:40:28 +0800127config CRYPTO_MANAGER_DISABLE_TESTS
128 bool "Disable run-time self tests"
Herbert Xu00ca28a2010-08-06 10:34:00 +0800129 default y
130 depends on CRYPTO_MANAGER2
Alexander Shishkin0b767f92010-06-03 20:53:43 +1000131 help
Herbert Xu326a6342010-08-06 09:40:28 +0800132 Disable run-time self tests that normally take place at
133 algorithm registration.
Alexander Shishkin0b767f92010-06-03 20:53:43 +1000134
Rik Snelc494e072006-11-29 18:59:44 +1100135config CRYPTO_GF128MUL
Jussi Kivilinna08c70fc2011-12-13 12:53:22 +0200136 tristate "GF(2^128) multiplication functions"
Rik Snelc494e072006-11-29 18:59:44 +1100137 help
138 Efficient table driven implementation of multiplications in the
139 field GF(2^128). This is needed by some cypher modes. This
140 option will be selected automatically if you select such a
141 cipher mode. Only select this option by hand if you expect to load
142 an external module that requires these functions.
143
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800144config CRYPTO_NULL
145 tristate "Null algorithms"
Herbert Xu149a3972015-08-13 17:28:58 +0800146 select CRYPTO_NULL2
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800147 help
148 These are 'Null' algorithms, used by IPsec, which do nothing.
149
Herbert Xu149a3972015-08-13 17:28:58 +0800150config CRYPTO_NULL2
Herbert Xudd43c4e2015-08-17 20:39:40 +0800151 tristate
Herbert Xu149a3972015-08-13 17:28:58 +0800152 select CRYPTO_ALGAPI2
153 select CRYPTO_BLKCIPHER2
154 select CRYPTO_HASH2
155
Steffen Klassert5068c7a2010-01-07 15:57:19 +1100156config CRYPTO_PCRYPT
Kees Cook3b4afaf2012-10-02 11:16:49 -0700157 tristate "Parallel crypto engine"
158 depends on SMP
Steffen Klassert5068c7a2010-01-07 15:57:19 +1100159 select PADATA
160 select CRYPTO_MANAGER
161 select CRYPTO_AEAD
162 help
163 This converts an arbitrary crypto algorithm into a parallel
164 algorithm that executes in kernel threads.
165
Huang Ying25c38d32009-02-19 14:33:40 +0800166config CRYPTO_WORKQUEUE
167 tristate
168
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800169config CRYPTO_CRYPTD
170 tristate "Software async crypto daemon"
Herbert Xudb131ef2006-09-21 11:44:08 +1000171 select CRYPTO_BLKCIPHER
Loc Hob8a28252008-05-14 21:23:00 +0800172 select CRYPTO_HASH
Herbert Xu43518402006-10-16 21:28:58 +1000173 select CRYPTO_MANAGER
Huang Ying254eff72009-02-19 14:42:19 +0800174 select CRYPTO_WORKQUEUE
Herbert Xudb131ef2006-09-21 11:44:08 +1000175 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800176 This is a generic software asynchronous crypto daemon that
177 converts an arbitrary synchronous software crypto algorithm
178 into an asynchronous algorithm that executes in a kernel thread.
179
Tim Chen1e65b812014-07-31 10:29:51 -0700180config CRYPTO_MCRYPTD
181 tristate "Software async multi-buffer crypto daemon"
182 select CRYPTO_BLKCIPHER
183 select CRYPTO_HASH
184 select CRYPTO_MANAGER
185 select CRYPTO_WORKQUEUE
186 help
187 This is a generic software asynchronous crypto daemon that
188 provides the kernel thread to assist multi-buffer crypto
189 algorithms for submitting jobs and flushing jobs in multi-buffer
190 crypto algorithms. Multi-buffer crypto algorithms are executed
191 in the context of this kernel thread and drivers can post
Ted Percival0e566732014-09-04 15:18:21 +0800192 their crypto request asynchronously to be processed by this daemon.
Tim Chen1e65b812014-07-31 10:29:51 -0700193
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800194config CRYPTO_AUTHENC
195 tristate "Authenc support"
196 select CRYPTO_AEAD
197 select CRYPTO_BLKCIPHER
198 select CRYPTO_MANAGER
199 select CRYPTO_HASH
Herbert Xue94c6a72015-08-04 21:23:14 +0800200 select CRYPTO_NULL
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800201 help
202 Authenc: Combined mode wrapper for IPsec.
203 This is required for IPSec.
204
205config CRYPTO_TEST
206 tristate "Testing module"
207 depends on m
Herbert Xuda7f0332008-07-31 17:08:25 +0800208 select CRYPTO_MANAGER
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800209 help
210 Quick & dirty crypto test module.
211
Ard Biesheuvela62b01c2013-09-20 09:55:40 +0200212config CRYPTO_ABLK_HELPER
Jussi Kivilinnaffaf9152012-06-18 14:06:58 +0300213 tristate
Jussi Kivilinnaffaf9152012-06-18 14:06:58 +0300214 select CRYPTO_CRYPTD
215
Jussi Kivilinna596d8752012-06-18 14:07:19 +0300216config CRYPTO_GLUE_HELPER_X86
217 tristate
218 depends on X86
219 select CRYPTO_ALGAPI
220
Baolin Wang735d37b2016-01-26 20:25:39 +0800221config CRYPTO_ENGINE
222 tristate
223
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800224comment "Authenticated Encryption with Associated Data"
225
226config CRYPTO_CCM
227 tristate "CCM support"
228 select CRYPTO_CTR
229 select CRYPTO_AEAD
230 help
231 Support for Counter with CBC MAC. Required for IPsec.
232
233config CRYPTO_GCM
234 tristate "GCM/GMAC support"
235 select CRYPTO_CTR
236 select CRYPTO_AEAD
Huang Ying9382d972009-08-06 15:34:26 +1000237 select CRYPTO_GHASH
Jussi Kivilinna9489667d2013-04-07 16:43:41 +0300238 select CRYPTO_NULL
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800239 help
240 Support for Galois/Counter Mode (GCM) and Galois Message
241 Authentication Code (GMAC). Required for IPSec.
242
Martin Willi71ebc4d2015-06-01 13:44:00 +0200243config CRYPTO_CHACHA20POLY1305
244 tristate "ChaCha20-Poly1305 AEAD support"
245 select CRYPTO_CHACHA20
246 select CRYPTO_POLY1305
247 select CRYPTO_AEAD
248 help
249 ChaCha20-Poly1305 AEAD support, RFC7539.
250
251 Support for the AEAD wrapper using the ChaCha20 stream cipher combined
252 with the Poly1305 authenticator. It is defined in RFC7539 for use in
253 IETF protocols.
254
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800255config CRYPTO_SEQIV
256 tristate "Sequence Number IV Generator"
257 select CRYPTO_AEAD
258 select CRYPTO_BLKCIPHER
Herbert Xu856e3f402015-05-21 15:11:13 +0800259 select CRYPTO_NULL
Herbert Xu401e4232015-06-03 14:49:31 +0800260 select CRYPTO_RNG_DEFAULT
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800261 help
262 This IV generator generates an IV based on a sequence number by
263 xoring it with a salt. This algorithm is mainly useful for CTR
264
Herbert Xua10f5542015-05-21 15:11:15 +0800265config CRYPTO_ECHAINIV
266 tristate "Encrypted Chain IV Generator"
267 select CRYPTO_AEAD
268 select CRYPTO_NULL
Herbert Xu401e4232015-06-03 14:49:31 +0800269 select CRYPTO_RNG_DEFAULT
Herbert Xu34912442015-06-03 14:49:29 +0800270 default m
Herbert Xua10f5542015-05-21 15:11:15 +0800271 help
272 This IV generator generates an IV based on the encryption of
273 a sequence number xored with a salt. This is the default
274 algorithm for CBC.
275
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800276comment "Block modes"
Herbert Xudb131ef2006-09-21 11:44:08 +1000277
278config CRYPTO_CBC
279 tristate "CBC support"
280 select CRYPTO_BLKCIPHER
Herbert Xu43518402006-10-16 21:28:58 +1000281 select CRYPTO_MANAGER
Herbert Xudb131ef2006-09-21 11:44:08 +1000282 help
283 CBC: Cipher Block Chaining mode
284 This block cipher algorithm is required for IPSec.
285
Joy Latten23e353c2007-10-23 08:50:32 +0800286config CRYPTO_CTR
287 tristate "CTR support"
288 select CRYPTO_BLKCIPHER
Herbert Xu0a270322007-11-30 21:38:37 +1100289 select CRYPTO_SEQIV
Joy Latten23e353c2007-10-23 08:50:32 +0800290 select CRYPTO_MANAGER
Joy Latten23e353c2007-10-23 08:50:32 +0800291 help
292 CTR: Counter mode
293 This block cipher algorithm is required for IPSec.
294
Kevin Coffman76cb9522008-03-24 21:26:16 +0800295config CRYPTO_CTS
296 tristate "CTS support"
297 select CRYPTO_BLKCIPHER
298 help
299 CTS: Cipher Text Stealing
300 This is the Cipher Text Stealing mode as described by
301 Section 8 of rfc2040 and referenced by rfc3962.
302 (rfc3962 includes errata information in its Appendix A)
303 This mode is required for Kerberos gss mechanism support
304 for AES encryption.
305
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800306config CRYPTO_ECB
307 tristate "ECB support"
Herbert Xu653ebd92007-11-27 19:48:27 +0800308 select CRYPTO_BLKCIPHER
Herbert Xu124b53d2007-04-16 20:49:20 +1000309 select CRYPTO_MANAGER
310 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800311 ECB: Electronic CodeBook mode
312 This is the simplest block cipher algorithm. It simply encrypts
313 the input block by block.
Herbert Xu124b53d2007-04-16 20:49:20 +1000314
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800315config CRYPTO_LRW
Jussi Kivilinna2470a2b2011-12-13 12:52:51 +0200316 tristate "LRW support"
David Howells90831632006-12-16 12:13:14 +1100317 select CRYPTO_BLKCIPHER
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800318 select CRYPTO_MANAGER
319 select CRYPTO_GF128MUL
David Howells90831632006-12-16 12:13:14 +1100320 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800321 LRW: Liskov Rivest Wagner, a tweakable, non malleable, non movable
322 narrow block cipher mode for dm-crypt. Use it with cipher
323 specification string aes-lrw-benbi, the key must be 256, 320 or 384.
324 The first 128, 192 or 256 bits in the key are used for AES and the
325 rest is used to tie each cipher block to its logical position.
David Howells90831632006-12-16 12:13:14 +1100326
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800327config CRYPTO_PCBC
328 tristate "PCBC support"
329 select CRYPTO_BLKCIPHER
330 select CRYPTO_MANAGER
331 help
332 PCBC: Propagating Cipher Block Chaining mode
333 This block cipher algorithm is required for RxRPC.
334
335config CRYPTO_XTS
Jussi Kivilinna5bcf8e62011-12-13 12:52:56 +0200336 tristate "XTS support"
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800337 select CRYPTO_BLKCIPHER
338 select CRYPTO_MANAGER
339 select CRYPTO_GF128MUL
340 help
341 XTS: IEEE1619/D16 narrow block cipher use with aes-xts-plain,
342 key size 256, 384 or 512 bits. This implementation currently
343 can't handle a sectorsize which is not a multiple of 16 bytes.
344
Stephan Mueller1c49678e2015-09-21 20:58:56 +0200345config CRYPTO_KEYWRAP
346 tristate "Key wrapping support"
347 select CRYPTO_BLKCIPHER
348 help
349 Support for key wrapping (NIST SP800-38F / RFC3394) without
350 padding.
351
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800352comment "Hash modes"
353
Jussi Kivilinna93b5e862013-04-08 10:48:44 +0300354config CRYPTO_CMAC
355 tristate "CMAC support"
356 select CRYPTO_HASH
357 select CRYPTO_MANAGER
358 help
359 Cipher-based Message Authentication Code (CMAC) specified by
360 The National Institute of Standards and Technology (NIST).
361
362 https://tools.ietf.org/html/rfc4493
363 http://csrc.nist.gov/publications/nistpubs/800-38B/SP_800-38B.pdf
364
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800365config CRYPTO_HMAC
366 tristate "HMAC support"
367 select CRYPTO_HASH
368 select CRYPTO_MANAGER
369 help
370 HMAC: Keyed-Hashing for Message Authentication (RFC2104).
371 This is required for IPSec.
372
373config CRYPTO_XCBC
374 tristate "XCBC support"
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800375 select CRYPTO_HASH
376 select CRYPTO_MANAGER
377 help
378 XCBC: Keyed-Hashing with encryption algorithm
379 http://www.ietf.org/rfc/rfc3566.txt
380 http://csrc.nist.gov/encryption/modes/proposedmodes/
381 xcbc-mac/xcbc-mac-spec.pdf
382
Shane Wangf1939f72009-09-02 20:05:22 +1000383config CRYPTO_VMAC
384 tristate "VMAC support"
Shane Wangf1939f72009-09-02 20:05:22 +1000385 select CRYPTO_HASH
386 select CRYPTO_MANAGER
387 help
388 VMAC is a message authentication algorithm designed for
389 very high speed on 64-bit architectures.
390
391 See also:
392 <http://fastcrypto.org/vmac>
393
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800394comment "Digest"
395
396config CRYPTO_CRC32C
397 tristate "CRC32c CRC algorithm"
Herbert Xu5773a3e2008-07-08 20:54:28 +0800398 select CRYPTO_HASH
Darrick J. Wong6a0962b2012-03-23 15:02:25 -0700399 select CRC32
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800400 help
401 Castagnoli, et al Cyclic Redundancy-Check Algorithm. Used
402 by iSCSI for header and data digests and by others.
Herbert Xu69c35ef2008-11-07 15:11:47 +0800403 See Castagnoli93. Module will be crc32c.
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800404
Austin Zhang8cb51ba2008-08-07 09:57:03 +0800405config CRYPTO_CRC32C_INTEL
406 tristate "CRC32c INTEL hardware acceleration"
407 depends on X86
408 select CRYPTO_HASH
409 help
410 In Intel processor with SSE4.2 supported, the processor will
411 support CRC32C implementation using hardware accelerated CRC32
412 instruction. This option will create 'crc32c-intel' module,
413 which will enable any routine to use the CRC32 instruction to
414 gain performance compared with software implementation.
415 Module will be crc32c-intel.
416
David S. Miller442a7c42012-08-22 20:47:36 -0700417config CRYPTO_CRC32C_SPARC64
418 tristate "CRC32c CRC algorithm (SPARC64)"
419 depends on SPARC64
420 select CRYPTO_HASH
421 select CRC32
422 help
423 CRC32c CRC algorithm implemented using sparc64 crypto instructions,
424 when available.
425
Alexander Boyko78c37d12013-01-10 18:54:59 +0400426config CRYPTO_CRC32
427 tristate "CRC32 CRC algorithm"
428 select CRYPTO_HASH
429 select CRC32
430 help
431 CRC-32-IEEE 802.3 cyclic redundancy-check algorithm.
432 Shash crypto api wrappers to crc32_le function.
433
434config CRYPTO_CRC32_PCLMUL
435 tristate "CRC32 PCLMULQDQ hardware acceleration"
436 depends on X86
437 select CRYPTO_HASH
438 select CRC32
439 help
440 From Intel Westmere and AMD Bulldozer processor with SSE4.2
441 and PCLMULQDQ supported, the processor will support
442 CRC32 PCLMULQDQ implementation using hardware accelerated PCLMULQDQ
443 instruction. This option will create 'crc32-plcmul' module,
444 which will enable any routine to use the CRC-32-IEEE 802.3 checksum
445 and gain better performance as compared with the table implementation.
446
Herbert Xu684115212013-09-07 12:56:26 +1000447config CRYPTO_CRCT10DIF
448 tristate "CRCT10DIF algorithm"
449 select CRYPTO_HASH
450 help
451 CRC T10 Data Integrity Field computation is being cast as
452 a crypto transform. This allows for faster crc t10 diff
453 transforms to be used if they are available.
454
455config CRYPTO_CRCT10DIF_PCLMUL
456 tristate "CRCT10DIF PCLMULQDQ hardware acceleration"
457 depends on X86 && 64BIT && CRC_T10DIF
458 select CRYPTO_HASH
459 help
460 For x86_64 processors with SSE4.2 and PCLMULQDQ supported,
461 CRC T10 DIF PCLMULQDQ computation can be hardware
462 accelerated PCLMULQDQ instruction. This option will create
463 'crct10dif-plcmul' module, which is faster when computing the
464 crct10dif checksum as compared with the generic table implementation.
465
Huang Ying2cdc6892009-08-06 15:32:38 +1000466config CRYPTO_GHASH
467 tristate "GHASH digest algorithm"
Huang Ying2cdc6892009-08-06 15:32:38 +1000468 select CRYPTO_GF128MUL
Arnd Bergmann578c60fbe2016-01-25 17:51:21 +0100469 select CRYPTO_HASH
Huang Ying2cdc6892009-08-06 15:32:38 +1000470 help
471 GHASH is message digest algorithm for GCM (Galois/Counter Mode).
472
Martin Willif979e012015-06-01 13:43:58 +0200473config CRYPTO_POLY1305
474 tristate "Poly1305 authenticator algorithm"
Arnd Bergmann578c60fbe2016-01-25 17:51:21 +0100475 select CRYPTO_HASH
Martin Willif979e012015-06-01 13:43:58 +0200476 help
477 Poly1305 authenticator algorithm, RFC7539.
478
479 Poly1305 is an authenticator algorithm designed by Daniel J. Bernstein.
480 It is used for the ChaCha20-Poly1305 AEAD, specified in RFC7539 for use
481 in IETF protocols. This is the portable C implementation of Poly1305.
482
Martin Willic70f4ab2015-07-16 19:14:06 +0200483config CRYPTO_POLY1305_X86_64
Martin Willib1ccc8f2015-07-16 19:14:08 +0200484 tristate "Poly1305 authenticator algorithm (x86_64/SSE2/AVX2)"
Martin Willic70f4ab2015-07-16 19:14:06 +0200485 depends on X86 && 64BIT
486 select CRYPTO_POLY1305
487 help
488 Poly1305 authenticator algorithm, RFC7539.
489
490 Poly1305 is an authenticator algorithm designed by Daniel J. Bernstein.
491 It is used for the ChaCha20-Poly1305 AEAD, specified in RFC7539 for use
492 in IETF protocols. This is the x86_64 assembler implementation using SIMD
493 instructions.
494
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800495config CRYPTO_MD4
496 tristate "MD4 digest algorithm"
Adrian-Ken Rueegsegger808a1762008-12-03 19:55:27 +0800497 select CRYPTO_HASH
Linus Torvalds1da177e2005-04-16 15:20:36 -0700498 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800499 MD4 message digest algorithm (RFC1320).
Linus Torvalds1da177e2005-04-16 15:20:36 -0700500
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800501config CRYPTO_MD5
502 tristate "MD5 digest algorithm"
Adrian-Ken Rueegsegger14b75ba2008-12-03 19:57:12 +0800503 select CRYPTO_HASH
Linus Torvalds1da177e2005-04-16 15:20:36 -0700504 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800505 MD5 message digest algorithm (RFC1321).
Linus Torvalds1da177e2005-04-16 15:20:36 -0700506
Aaro Koskinend69e75d2014-12-21 22:54:02 +0200507config CRYPTO_MD5_OCTEON
508 tristate "MD5 digest algorithm (OCTEON)"
509 depends on CPU_CAVIUM_OCTEON
510 select CRYPTO_MD5
511 select CRYPTO_HASH
512 help
513 MD5 message digest algorithm (RFC1321) implemented
514 using OCTEON crypto instructions, when available.
515
Markus Stockhausene8e59952015-03-01 19:30:46 +0100516config CRYPTO_MD5_PPC
517 tristate "MD5 digest algorithm (PPC)"
518 depends on PPC
519 select CRYPTO_HASH
520 help
521 MD5 message digest algorithm (RFC1321) implemented
522 in PPC assembler.
523
David S. Millerfa4dfed2012-08-19 21:51:26 -0700524config CRYPTO_MD5_SPARC64
525 tristate "MD5 digest algorithm (SPARC64)"
526 depends on SPARC64
527 select CRYPTO_MD5
528 select CRYPTO_HASH
529 help
530 MD5 message digest algorithm (RFC1321) implemented
531 using sparc64 crypto instructions, when available.
532
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800533config CRYPTO_MICHAEL_MIC
534 tristate "Michael MIC keyed digest algorithm"
Adrian-Ken Rueegsegger19e2bf12008-12-07 19:35:38 +0800535 select CRYPTO_HASH
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800536 help
537 Michael MIC is used for message integrity protection in TKIP
538 (IEEE 802.11i). This algorithm is required for TKIP, but it
539 should not be used for other purposes because of the weakness
540 of the algorithm.
541
Adrian-Ken Rueegsegger82798f92008-05-07 22:17:37 +0800542config CRYPTO_RMD128
Adrian Bunkb6d44342008-07-16 19:28:00 +0800543 tristate "RIPEMD-128 digest algorithm"
Herbert Xu7c4468b2008-11-08 09:10:40 +0800544 select CRYPTO_HASH
Adrian Bunkb6d44342008-07-16 19:28:00 +0800545 help
546 RIPEMD-128 (ISO/IEC 10118-3:2004).
Adrian-Ken Rueegsegger82798f92008-05-07 22:17:37 +0800547
Adrian Bunkb6d44342008-07-16 19:28:00 +0800548 RIPEMD-128 is a 128-bit cryptographic hash function. It should only
Michael Witten35ed4b32011-07-09 04:02:31 +0000549 be used as a secure replacement for RIPEMD. For other use cases,
Adrian Bunkb6d44342008-07-16 19:28:00 +0800550 RIPEMD-160 should be used.
Adrian-Ken Rueegsegger82798f92008-05-07 22:17:37 +0800551
Adrian Bunkb6d44342008-07-16 19:28:00 +0800552 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
Justin P. Mattock6d8de742010-09-12 10:42:47 +0800553 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
Adrian-Ken Rueegsegger82798f92008-05-07 22:17:37 +0800554
555config CRYPTO_RMD160
Adrian Bunkb6d44342008-07-16 19:28:00 +0800556 tristate "RIPEMD-160 digest algorithm"
Herbert Xue5835fb2008-11-08 09:18:51 +0800557 select CRYPTO_HASH
Adrian Bunkb6d44342008-07-16 19:28:00 +0800558 help
559 RIPEMD-160 (ISO/IEC 10118-3:2004).
Adrian-Ken Rueegsegger82798f92008-05-07 22:17:37 +0800560
Adrian Bunkb6d44342008-07-16 19:28:00 +0800561 RIPEMD-160 is a 160-bit cryptographic hash function. It is intended
562 to be used as a secure replacement for the 128-bit hash functions
563 MD4, MD5 and it's predecessor RIPEMD
564 (not to be confused with RIPEMD-128).
Adrian-Ken Rueegsegger82798f92008-05-07 22:17:37 +0800565
Adrian Bunkb6d44342008-07-16 19:28:00 +0800566 It's speed is comparable to SHA1 and there are no known attacks
567 against RIPEMD-160.
Adrian-Ken Rueegsegger534fe2c2008-05-09 21:30:27 +0800568
Adrian Bunkb6d44342008-07-16 19:28:00 +0800569 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
Justin P. Mattock6d8de742010-09-12 10:42:47 +0800570 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
Adrian-Ken Rueegsegger534fe2c2008-05-09 21:30:27 +0800571
572config CRYPTO_RMD256
Adrian Bunkb6d44342008-07-16 19:28:00 +0800573 tristate "RIPEMD-256 digest algorithm"
Herbert Xud8a5e2e2008-11-08 09:58:10 +0800574 select CRYPTO_HASH
Adrian Bunkb6d44342008-07-16 19:28:00 +0800575 help
576 RIPEMD-256 is an optional extension of RIPEMD-128 with a
577 256 bit hash. It is intended for applications that require
578 longer hash-results, without needing a larger security level
579 (than RIPEMD-128).
Adrian-Ken Rueegsegger534fe2c2008-05-09 21:30:27 +0800580
Adrian Bunkb6d44342008-07-16 19:28:00 +0800581 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
Justin P. Mattock6d8de742010-09-12 10:42:47 +0800582 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
Adrian-Ken Rueegsegger534fe2c2008-05-09 21:30:27 +0800583
584config CRYPTO_RMD320
Adrian Bunkb6d44342008-07-16 19:28:00 +0800585 tristate "RIPEMD-320 digest algorithm"
Herbert Xu3b8efb42008-11-08 10:11:09 +0800586 select CRYPTO_HASH
Adrian Bunkb6d44342008-07-16 19:28:00 +0800587 help
588 RIPEMD-320 is an optional extension of RIPEMD-160 with a
589 320 bit hash. It is intended for applications that require
590 longer hash-results, without needing a larger security level
591 (than RIPEMD-160).
Adrian-Ken Rueegsegger534fe2c2008-05-09 21:30:27 +0800592
Adrian Bunkb6d44342008-07-16 19:28:00 +0800593 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
Justin P. Mattock6d8de742010-09-12 10:42:47 +0800594 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
Adrian-Ken Rueegsegger82798f92008-05-07 22:17:37 +0800595
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800596config CRYPTO_SHA1
597 tristate "SHA1 digest algorithm"
Adrian-Ken Rueegsegger54ccb362008-12-02 21:08:20 +0800598 select CRYPTO_HASH
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800599 help
600 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2).
601
Mathias Krause66be8952011-08-04 20:19:25 +0200602config CRYPTO_SHA1_SSSE3
time38b6b72015-09-10 15:27:26 -0700603 tristate "SHA1 digest algorithm (SSSE3/AVX/AVX2/SHA-NI)"
Mathias Krause66be8952011-08-04 20:19:25 +0200604 depends on X86 && 64BIT
605 select CRYPTO_SHA1
606 select CRYPTO_HASH
607 help
608 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented
609 using Supplemental SSE3 (SSSE3) instructions or Advanced Vector
time38b6b72015-09-10 15:27:26 -0700610 Extensions (AVX/AVX2) or SHA-NI(SHA Extensions New Instructions),
611 when available.
Mathias Krause66be8952011-08-04 20:19:25 +0200612
Tim Chen8275d1a2013-03-26 13:59:17 -0700613config CRYPTO_SHA256_SSSE3
time38b6b72015-09-10 15:27:26 -0700614 tristate "SHA256 digest algorithm (SSSE3/AVX/AVX2/SHA-NI)"
Tim Chen8275d1a2013-03-26 13:59:17 -0700615 depends on X86 && 64BIT
616 select CRYPTO_SHA256
617 select CRYPTO_HASH
618 help
619 SHA-256 secure hash standard (DFIPS 180-2) implemented
620 using Supplemental SSE3 (SSSE3) instructions, or Advanced Vector
621 Extensions version 1 (AVX1), or Advanced Vector Extensions
time38b6b72015-09-10 15:27:26 -0700622 version 2 (AVX2) instructions, or SHA-NI (SHA Extensions New
623 Instructions) when available.
Tim Chen8275d1a2013-03-26 13:59:17 -0700624
Tim Chen87de4572013-03-26 14:00:02 -0700625config CRYPTO_SHA512_SSSE3
626 tristate "SHA512 digest algorithm (SSSE3/AVX/AVX2)"
627 depends on X86 && 64BIT
628 select CRYPTO_SHA512
629 select CRYPTO_HASH
630 help
631 SHA-512 secure hash standard (DFIPS 180-2) implemented
632 using Supplemental SSE3 (SSSE3) instructions, or Advanced Vector
633 Extensions version 1 (AVX1), or Advanced Vector Extensions
634 version 2 (AVX2) instructions, when available.
635
Aaro Koskinenefdb6f62015-03-08 22:07:47 +0200636config CRYPTO_SHA1_OCTEON
637 tristate "SHA1 digest algorithm (OCTEON)"
638 depends on CPU_CAVIUM_OCTEON
639 select CRYPTO_SHA1
640 select CRYPTO_HASH
641 help
642 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented
643 using OCTEON crypto instructions, when available.
644
David S. Miller4ff28d42012-08-19 15:41:53 -0700645config CRYPTO_SHA1_SPARC64
646 tristate "SHA1 digest algorithm (SPARC64)"
647 depends on SPARC64
648 select CRYPTO_SHA1
649 select CRYPTO_HASH
650 help
651 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented
652 using sparc64 crypto instructions, when available.
653
Michael Ellerman323a6bf2012-09-13 23:00:49 +0000654config CRYPTO_SHA1_PPC
655 tristate "SHA1 digest algorithm (powerpc)"
656 depends on PPC
657 help
658 This is the powerpc hardware accelerated implementation of the
659 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2).
660
Markus Stockhausend9850fc2015-02-24 20:36:50 +0100661config CRYPTO_SHA1_PPC_SPE
662 tristate "SHA1 digest algorithm (PPC SPE)"
663 depends on PPC && SPE
664 help
665 SHA-1 secure hash standard (DFIPS 180-4) implemented
666 using powerpc SPE SIMD instruction set.
667
Tim Chen1e65b812014-07-31 10:29:51 -0700668config CRYPTO_SHA1_MB
669 tristate "SHA1 digest algorithm (x86_64 Multi-Buffer, Experimental)"
670 depends on X86 && 64BIT
671 select CRYPTO_SHA1
672 select CRYPTO_HASH
673 select CRYPTO_MCRYPTD
674 help
675 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented
676 using multi-buffer technique. This algorithm computes on
677 multiple data lanes concurrently with SIMD instructions for
678 better throughput. It should not be enabled by default but
679 used when there is significant amount of work to keep the keep
680 the data lanes filled to get performance benefit. If the data
681 lanes remain unfilled, a flush operation will be initiated to
682 process the crypto jobs, adding a slight latency.
683
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800684config CRYPTO_SHA256
685 tristate "SHA224 and SHA256 digest algorithm"
Adrian-Ken Rueegsegger50e109b52008-12-03 19:57:49 +0800686 select CRYPTO_HASH
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800687 help
688 SHA256 secure hash standard (DFIPS 180-2).
689
690 This version of SHA implements a 256 bit hash with 128 bits of
691 security against collision attacks.
692
Adrian Bunkb6d44342008-07-16 19:28:00 +0800693 This code also includes SHA-224, a 224 bit hash with 112 bits
694 of security against collision attacks.
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800695
Markus Stockhausen2ecc1e92015-01-30 15:39:34 +0100696config CRYPTO_SHA256_PPC_SPE
697 tristate "SHA224 and SHA256 digest algorithm (PPC SPE)"
698 depends on PPC && SPE
699 select CRYPTO_SHA256
700 select CRYPTO_HASH
701 help
702 SHA224 and SHA256 secure hash standard (DFIPS 180-2)
703 implemented using powerpc SPE SIMD instruction set.
704
Aaro Koskinenefdb6f62015-03-08 22:07:47 +0200705config CRYPTO_SHA256_OCTEON
706 tristate "SHA224 and SHA256 digest algorithm (OCTEON)"
707 depends on CPU_CAVIUM_OCTEON
708 select CRYPTO_SHA256
709 select CRYPTO_HASH
710 help
711 SHA-256 secure hash standard (DFIPS 180-2) implemented
712 using OCTEON crypto instructions, when available.
713
David S. Miller86c93b22012-08-19 17:11:37 -0700714config CRYPTO_SHA256_SPARC64
715 tristate "SHA224 and SHA256 digest algorithm (SPARC64)"
716 depends on SPARC64
717 select CRYPTO_SHA256
718 select CRYPTO_HASH
719 help
720 SHA-256 secure hash standard (DFIPS 180-2) implemented
721 using sparc64 crypto instructions, when available.
722
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800723config CRYPTO_SHA512
724 tristate "SHA384 and SHA512 digest algorithms"
Adrian-Ken Rueegseggerbd9d20d2008-12-17 16:49:02 +1100725 select CRYPTO_HASH
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800726 help
727 SHA512 secure hash standard (DFIPS 180-2).
728
729 This version of SHA implements a 512 bit hash with 256 bits of
730 security against collision attacks.
731
732 This code also includes SHA-384, a 384 bit hash with 192 bits
733 of security against collision attacks.
734
Aaro Koskinenefdb6f62015-03-08 22:07:47 +0200735config CRYPTO_SHA512_OCTEON
736 tristate "SHA384 and SHA512 digest algorithms (OCTEON)"
737 depends on CPU_CAVIUM_OCTEON
738 select CRYPTO_SHA512
739 select CRYPTO_HASH
740 help
741 SHA-512 secure hash standard (DFIPS 180-2) implemented
742 using OCTEON crypto instructions, when available.
743
David S. Miller775e0c62012-08-19 17:37:56 -0700744config CRYPTO_SHA512_SPARC64
745 tristate "SHA384 and SHA512 digest algorithm (SPARC64)"
746 depends on SPARC64
747 select CRYPTO_SHA512
748 select CRYPTO_HASH
749 help
750 SHA-512 secure hash standard (DFIPS 180-2) implemented
751 using sparc64 crypto instructions, when available.
752
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800753config CRYPTO_TGR192
754 tristate "Tiger digest algorithms"
Adrian-Ken Rueegseggerf63fbd32008-12-03 19:58:32 +0800755 select CRYPTO_HASH
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800756 help
757 Tiger hash algorithm 192, 160 and 128-bit hashes
758
759 Tiger is a hash function optimized for 64-bit processors while
760 still having decent performance on 32-bit processors.
761 Tiger was developed by Ross Anderson and Eli Biham.
Linus Torvalds1da177e2005-04-16 15:20:36 -0700762
763 See also:
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800764 <http://www.cs.technion.ac.il/~biham/Reports/Tiger/>.
765
766config CRYPTO_WP512
767 tristate "Whirlpool digest algorithms"
Adrian-Ken Rueegsegger49465102008-12-07 19:34:37 +0800768 select CRYPTO_HASH
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800769 help
770 Whirlpool hash algorithm 512, 384 and 256-bit hashes
771
772 Whirlpool-512 is part of the NESSIE cryptographic primitives.
773 Whirlpool will be part of the ISO/IEC 10118-3:2003(E) standard
774
775 See also:
Justin P. Mattock6d8de742010-09-12 10:42:47 +0800776 <http://www.larc.usp.br/~pbarreto/WhirlpoolPage.html>
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800777
Huang Ying0e1227d2009-10-19 11:53:06 +0900778config CRYPTO_GHASH_CLMUL_NI_INTEL
779 tristate "GHASH digest algorithm (CLMUL-NI accelerated)"
Richard Weinberger8af00862011-06-08 20:56:29 +0800780 depends on X86 && 64BIT
Huang Ying0e1227d2009-10-19 11:53:06 +0900781 select CRYPTO_CRYPTD
782 help
783 GHASH is message digest algorithm for GCM (Galois/Counter Mode).
784 The implementation is accelerated by CLMUL-NI of Intel.
785
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800786comment "Ciphers"
Linus Torvalds1da177e2005-04-16 15:20:36 -0700787
788config CRYPTO_AES
789 tristate "AES cipher algorithms"
Herbert Xucce9e062006-08-21 21:08:13 +1000790 select CRYPTO_ALGAPI
Linus Torvalds1da177e2005-04-16 15:20:36 -0700791 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800792 AES cipher algorithms (FIPS-197). AES uses the Rijndael
Linus Torvalds1da177e2005-04-16 15:20:36 -0700793 algorithm.
794
795 Rijndael appears to be consistently a very good performer in
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800796 both hardware and software across a wide range of computing
797 environments regardless of its use in feedback or non-feedback
798 modes. Its key setup time is excellent, and its key agility is
799 good. Rijndael's very low memory requirements make it very well
800 suited for restricted-space environments, in which it also
801 demonstrates excellent performance. Rijndael's operations are
802 among the easiest to defend against power and timing attacks.
Linus Torvalds1da177e2005-04-16 15:20:36 -0700803
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800804 The AES specifies three key sizes: 128, 192 and 256 bits
Linus Torvalds1da177e2005-04-16 15:20:36 -0700805
806 See <http://csrc.nist.gov/CryptoToolkit/aes/> for more information.
807
808config CRYPTO_AES_586
809 tristate "AES cipher algorithms (i586)"
Herbert Xucce9e062006-08-21 21:08:13 +1000810 depends on (X86 || UML_X86) && !64BIT
811 select CRYPTO_ALGAPI
Sebastian Siewior5157dea2007-11-10 19:07:16 +0800812 select CRYPTO_AES
Linus Torvalds1da177e2005-04-16 15:20:36 -0700813 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800814 AES cipher algorithms (FIPS-197). AES uses the Rijndael
Linus Torvalds1da177e2005-04-16 15:20:36 -0700815 algorithm.
816
817 Rijndael appears to be consistently a very good performer in
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800818 both hardware and software across a wide range of computing
819 environments regardless of its use in feedback or non-feedback
820 modes. Its key setup time is excellent, and its key agility is
821 good. Rijndael's very low memory requirements make it very well
822 suited for restricted-space environments, in which it also
823 demonstrates excellent performance. Rijndael's operations are
824 among the easiest to defend against power and timing attacks.
Linus Torvalds1da177e2005-04-16 15:20:36 -0700825
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800826 The AES specifies three key sizes: 128, 192 and 256 bits
Linus Torvalds1da177e2005-04-16 15:20:36 -0700827
828 See <http://csrc.nist.gov/encryption/aes/> for more information.
829
Andreas Steinmetza2a892a2005-07-06 13:55:00 -0700830config CRYPTO_AES_X86_64
831 tristate "AES cipher algorithms (x86_64)"
Herbert Xucce9e062006-08-21 21:08:13 +1000832 depends on (X86 || UML_X86) && 64BIT
833 select CRYPTO_ALGAPI
Sebastian Siewior81190b32007-11-08 21:25:04 +0800834 select CRYPTO_AES
Andreas Steinmetza2a892a2005-07-06 13:55:00 -0700835 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800836 AES cipher algorithms (FIPS-197). AES uses the Rijndael
Andreas Steinmetza2a892a2005-07-06 13:55:00 -0700837 algorithm.
838
839 Rijndael appears to be consistently a very good performer in
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800840 both hardware and software across a wide range of computing
841 environments regardless of its use in feedback or non-feedback
842 modes. Its key setup time is excellent, and its key agility is
843 good. Rijndael's very low memory requirements make it very well
844 suited for restricted-space environments, in which it also
845 demonstrates excellent performance. Rijndael's operations are
846 among the easiest to defend against power and timing attacks.
Andreas Steinmetza2a892a2005-07-06 13:55:00 -0700847
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800848 The AES specifies three key sizes: 128, 192 and 256 bits
Andreas Steinmetza2a892a2005-07-06 13:55:00 -0700849
850 See <http://csrc.nist.gov/encryption/aes/> for more information.
851
Huang Ying54b6a1b2009-01-18 16:28:34 +1100852config CRYPTO_AES_NI_INTEL
853 tristate "AES cipher algorithms (AES-NI)"
Richard Weinberger8af00862011-06-08 20:56:29 +0800854 depends on X86
Mathias Krause0d258ef2010-11-27 16:34:46 +0800855 select CRYPTO_AES_X86_64 if 64BIT
856 select CRYPTO_AES_586 if !64BIT
Huang Ying54b6a1b2009-01-18 16:28:34 +1100857 select CRYPTO_CRYPTD
Ard Biesheuvel801201a2013-09-20 09:55:41 +0200858 select CRYPTO_ABLK_HELPER
Huang Ying54b6a1b2009-01-18 16:28:34 +1100859 select CRYPTO_ALGAPI
Jussi Kivilinna7643a112013-04-10 18:39:20 +0300860 select CRYPTO_GLUE_HELPER_X86 if 64BIT
Jussi Kivilinna023af602012-07-22 18:18:37 +0300861 select CRYPTO_LRW
862 select CRYPTO_XTS
Huang Ying54b6a1b2009-01-18 16:28:34 +1100863 help
864 Use Intel AES-NI instructions for AES algorithm.
865
866 AES cipher algorithms (FIPS-197). AES uses the Rijndael
867 algorithm.
868
869 Rijndael appears to be consistently a very good performer in
870 both hardware and software across a wide range of computing
871 environments regardless of its use in feedback or non-feedback
872 modes. Its key setup time is excellent, and its key agility is
873 good. Rijndael's very low memory requirements make it very well
874 suited for restricted-space environments, in which it also
875 demonstrates excellent performance. Rijndael's operations are
876 among the easiest to defend against power and timing attacks.
877
878 The AES specifies three key sizes: 128, 192 and 256 bits
879
880 See <http://csrc.nist.gov/encryption/aes/> for more information.
881
Mathias Krause0d258ef2010-11-27 16:34:46 +0800882 In addition to AES cipher algorithm support, the acceleration
883 for some popular block cipher mode is supported too, including
884 ECB, CBC, LRW, PCBC, XTS. The 64 bit version has additional
885 acceleration for CTR.
Huang Ying2cf4ac82009-03-29 15:41:20 +0800886
David S. Miller9bf4852d2012-08-21 03:58:13 -0700887config CRYPTO_AES_SPARC64
888 tristate "AES cipher algorithms (SPARC64)"
889 depends on SPARC64
890 select CRYPTO_CRYPTD
891 select CRYPTO_ALGAPI
892 help
893 Use SPARC64 crypto opcodes for AES algorithm.
894
895 AES cipher algorithms (FIPS-197). AES uses the Rijndael
896 algorithm.
897
898 Rijndael appears to be consistently a very good performer in
899 both hardware and software across a wide range of computing
900 environments regardless of its use in feedback or non-feedback
901 modes. Its key setup time is excellent, and its key agility is
902 good. Rijndael's very low memory requirements make it very well
903 suited for restricted-space environments, in which it also
904 demonstrates excellent performance. Rijndael's operations are
905 among the easiest to defend against power and timing attacks.
906
907 The AES specifies three key sizes: 128, 192 and 256 bits
908
909 See <http://csrc.nist.gov/encryption/aes/> for more information.
910
911 In addition to AES cipher algorithm support, the acceleration
912 for some popular block cipher mode is supported too, including
913 ECB and CBC.
914
Markus Stockhausen504c6142015-02-22 10:00:10 +0100915config CRYPTO_AES_PPC_SPE
916 tristate "AES cipher algorithms (PPC SPE)"
917 depends on PPC && SPE
918 help
919 AES cipher algorithms (FIPS-197). Additionally the acceleration
920 for popular block cipher modes ECB, CBC, CTR and XTS is supported.
921 This module should only be used for low power (router) devices
922 without hardware AES acceleration (e.g. caam crypto). It reduces the
923 size of the AES tables from 16KB to 8KB + 256 bytes and mitigates
924 timining attacks. Nevertheless it might be not as secure as other
925 architecture specific assembler implementations that work on 1KB
926 tables or 256 bytes S-boxes.
927
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800928config CRYPTO_ANUBIS
929 tristate "Anubis cipher algorithm"
930 select CRYPTO_ALGAPI
931 help
932 Anubis cipher algorithm.
933
934 Anubis is a variable key length cipher which can use keys from
935 128 bits to 320 bits in length. It was evaluated as a entrant
936 in the NESSIE competition.
937
938 See also:
Justin P. Mattock6d8de742010-09-12 10:42:47 +0800939 <https://www.cosic.esat.kuleuven.be/nessie/reports/>
940 <http://www.larc.usp.br/~pbarreto/AnubisPage.html>
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800941
942config CRYPTO_ARC4
943 tristate "ARC4 cipher algorithm"
Sebastian Andrzej Siewiorb9b0f082012-06-26 18:13:46 +0200944 select CRYPTO_BLKCIPHER
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800945 help
946 ARC4 cipher algorithm.
947
948 ARC4 is a stream cipher using keys ranging from 8 bits to 2048
949 bits in length. This algorithm is required for driver-based
950 WEP, but it should not be for other purposes because of the
951 weakness of the algorithm.
952
953config CRYPTO_BLOWFISH
954 tristate "Blowfish cipher algorithm"
955 select CRYPTO_ALGAPI
Jussi Kivilinna52ba8672011-09-02 01:45:07 +0300956 select CRYPTO_BLOWFISH_COMMON
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800957 help
958 Blowfish cipher algorithm, by Bruce Schneier.
959
960 This is a variable key length cipher which can use keys from 32
961 bits to 448 bits in length. It's fast, simple and specifically
962 designed for use on "large microprocessors".
963
964 See also:
965 <http://www.schneier.com/blowfish.html>
966
Jussi Kivilinna52ba8672011-09-02 01:45:07 +0300967config CRYPTO_BLOWFISH_COMMON
968 tristate
969 help
970 Common parts of the Blowfish cipher algorithm shared by the
971 generic c and the assembler implementations.
972
973 See also:
974 <http://www.schneier.com/blowfish.html>
975
Jussi Kivilinna64b94ce2011-09-02 01:45:22 +0300976config CRYPTO_BLOWFISH_X86_64
977 tristate "Blowfish cipher algorithm (x86_64)"
Al Virof21a7c12012-04-08 20:31:22 -0400978 depends on X86 && 64BIT
Jussi Kivilinna64b94ce2011-09-02 01:45:22 +0300979 select CRYPTO_ALGAPI
980 select CRYPTO_BLOWFISH_COMMON
981 help
982 Blowfish cipher algorithm (x86_64), by Bruce Schneier.
983
984 This is a variable key length cipher which can use keys from 32
985 bits to 448 bits in length. It's fast, simple and specifically
986 designed for use on "large microprocessors".
987
988 See also:
989 <http://www.schneier.com/blowfish.html>
990
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800991config CRYPTO_CAMELLIA
992 tristate "Camellia cipher algorithms"
993 depends on CRYPTO
994 select CRYPTO_ALGAPI
995 help
996 Camellia cipher algorithms module.
997
998 Camellia is a symmetric key block cipher developed jointly
999 at NTT and Mitsubishi Electric Corporation.
1000
1001 The Camellia specifies three key sizes: 128, 192 and 256 bits.
1002
1003 See also:
1004 <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
1005
Jussi Kivilinna0b95ec52012-03-05 20:26:47 +02001006config CRYPTO_CAMELLIA_X86_64
1007 tristate "Camellia cipher algorithm (x86_64)"
Al Virof21a7c12012-04-08 20:31:22 -04001008 depends on X86 && 64BIT
Jussi Kivilinna0b95ec52012-03-05 20:26:47 +02001009 depends on CRYPTO
1010 select CRYPTO_ALGAPI
Jussi Kivilinna964263a2012-06-18 14:07:29 +03001011 select CRYPTO_GLUE_HELPER_X86
Jussi Kivilinna0b95ec52012-03-05 20:26:47 +02001012 select CRYPTO_LRW
1013 select CRYPTO_XTS
1014 help
1015 Camellia cipher algorithm module (x86_64).
1016
1017 Camellia is a symmetric key block cipher developed jointly
1018 at NTT and Mitsubishi Electric Corporation.
1019
1020 The Camellia specifies three key sizes: 128, 192 and 256 bits.
1021
1022 See also:
1023 <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
1024
Jussi Kivilinnad9b1d2e2012-10-26 14:49:01 +03001025config CRYPTO_CAMELLIA_AESNI_AVX_X86_64
1026 tristate "Camellia cipher algorithm (x86_64/AES-NI/AVX)"
1027 depends on X86 && 64BIT
1028 depends on CRYPTO
1029 select CRYPTO_ALGAPI
1030 select CRYPTO_CRYPTD
Ard Biesheuvel801201a2013-09-20 09:55:41 +02001031 select CRYPTO_ABLK_HELPER
Jussi Kivilinnad9b1d2e2012-10-26 14:49:01 +03001032 select CRYPTO_GLUE_HELPER_X86
1033 select CRYPTO_CAMELLIA_X86_64
1034 select CRYPTO_LRW
1035 select CRYPTO_XTS
1036 help
1037 Camellia cipher algorithm module (x86_64/AES-NI/AVX).
1038
1039 Camellia is a symmetric key block cipher developed jointly
1040 at NTT and Mitsubishi Electric Corporation.
1041
1042 The Camellia specifies three key sizes: 128, 192 and 256 bits.
1043
1044 See also:
1045 <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
1046
Jussi Kivilinnaf3f935a2013-04-13 13:47:00 +03001047config CRYPTO_CAMELLIA_AESNI_AVX2_X86_64
1048 tristate "Camellia cipher algorithm (x86_64/AES-NI/AVX2)"
1049 depends on X86 && 64BIT
1050 depends on CRYPTO
1051 select CRYPTO_ALGAPI
1052 select CRYPTO_CRYPTD
Ard Biesheuvel801201a2013-09-20 09:55:41 +02001053 select CRYPTO_ABLK_HELPER
Jussi Kivilinnaf3f935a2013-04-13 13:47:00 +03001054 select CRYPTO_GLUE_HELPER_X86
1055 select CRYPTO_CAMELLIA_X86_64
1056 select CRYPTO_CAMELLIA_AESNI_AVX_X86_64
1057 select CRYPTO_LRW
1058 select CRYPTO_XTS
1059 help
1060 Camellia cipher algorithm module (x86_64/AES-NI/AVX2).
1061
1062 Camellia is a symmetric key block cipher developed jointly
1063 at NTT and Mitsubishi Electric Corporation.
1064
1065 The Camellia specifies three key sizes: 128, 192 and 256 bits.
1066
1067 See also:
1068 <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
1069
David S. Miller81658ad2012-08-28 12:05:54 -07001070config CRYPTO_CAMELLIA_SPARC64
1071 tristate "Camellia cipher algorithm (SPARC64)"
1072 depends on SPARC64
1073 depends on CRYPTO
1074 select CRYPTO_ALGAPI
1075 help
1076 Camellia cipher algorithm module (SPARC64).
1077
1078 Camellia is a symmetric key block cipher developed jointly
1079 at NTT and Mitsubishi Electric Corporation.
1080
1081 The Camellia specifies three key sizes: 128, 192 and 256 bits.
1082
1083 See also:
1084 <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
1085
Jussi Kivilinna044ab522012-11-13 11:43:14 +02001086config CRYPTO_CAST_COMMON
1087 tristate
1088 help
1089 Common parts of the CAST cipher algorithms shared by the
1090 generic c and the assembler implementations.
1091
Linus Torvalds1da177e2005-04-16 15:20:36 -07001092config CRYPTO_CAST5
1093 tristate "CAST5 (CAST-128) cipher algorithm"
Herbert Xucce9e062006-08-21 21:08:13 +10001094 select CRYPTO_ALGAPI
Jussi Kivilinna044ab522012-11-13 11:43:14 +02001095 select CRYPTO_CAST_COMMON
Linus Torvalds1da177e2005-04-16 15:20:36 -07001096 help
1097 The CAST5 encryption algorithm (synonymous with CAST-128) is
1098 described in RFC2144.
1099
Johannes Goetzfried4d6d6a22012-07-11 19:37:37 +02001100config CRYPTO_CAST5_AVX_X86_64
1101 tristate "CAST5 (CAST-128) cipher algorithm (x86_64/AVX)"
1102 depends on X86 && 64BIT
1103 select CRYPTO_ALGAPI
1104 select CRYPTO_CRYPTD
Ard Biesheuvel801201a2013-09-20 09:55:41 +02001105 select CRYPTO_ABLK_HELPER
Jussi Kivilinna044ab522012-11-13 11:43:14 +02001106 select CRYPTO_CAST_COMMON
Johannes Goetzfried4d6d6a22012-07-11 19:37:37 +02001107 select CRYPTO_CAST5
1108 help
1109 The CAST5 encryption algorithm (synonymous with CAST-128) is
1110 described in RFC2144.
1111
1112 This module provides the Cast5 cipher algorithm that processes
1113 sixteen blocks parallel using the AVX instruction set.
1114
Linus Torvalds1da177e2005-04-16 15:20:36 -07001115config CRYPTO_CAST6
1116 tristate "CAST6 (CAST-256) cipher algorithm"
Herbert Xucce9e062006-08-21 21:08:13 +10001117 select CRYPTO_ALGAPI
Jussi Kivilinna044ab522012-11-13 11:43:14 +02001118 select CRYPTO_CAST_COMMON
Linus Torvalds1da177e2005-04-16 15:20:36 -07001119 help
1120 The CAST6 encryption algorithm (synonymous with CAST-256) is
1121 described in RFC2612.
1122
Johannes Goetzfried4ea12772012-07-11 19:38:57 +02001123config CRYPTO_CAST6_AVX_X86_64
1124 tristate "CAST6 (CAST-256) cipher algorithm (x86_64/AVX)"
1125 depends on X86 && 64BIT
1126 select CRYPTO_ALGAPI
1127 select CRYPTO_CRYPTD
Ard Biesheuvel801201a2013-09-20 09:55:41 +02001128 select CRYPTO_ABLK_HELPER
Johannes Goetzfried4ea12772012-07-11 19:38:57 +02001129 select CRYPTO_GLUE_HELPER_X86
Jussi Kivilinna044ab522012-11-13 11:43:14 +02001130 select CRYPTO_CAST_COMMON
Johannes Goetzfried4ea12772012-07-11 19:38:57 +02001131 select CRYPTO_CAST6
1132 select CRYPTO_LRW
1133 select CRYPTO_XTS
1134 help
1135 The CAST6 encryption algorithm (synonymous with CAST-256) is
1136 described in RFC2612.
1137
1138 This module provides the Cast6 cipher algorithm that processes
1139 eight blocks parallel using the AVX instruction set.
1140
Sebastian Siewior584fffc2008-04-05 21:04:48 +08001141config CRYPTO_DES
1142 tristate "DES and Triple DES EDE cipher algorithms"
Herbert Xucce9e062006-08-21 21:08:13 +10001143 select CRYPTO_ALGAPI
Linus Torvalds1da177e2005-04-16 15:20:36 -07001144 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +08001145 DES cipher algorithm (FIPS 46-2), and Triple DES EDE (FIPS 46-3).
Linus Torvalds1da177e2005-04-16 15:20:36 -07001146
David S. Millerc5aac2d2012-08-25 22:37:23 -07001147config CRYPTO_DES_SPARC64
1148 tristate "DES and Triple DES EDE cipher algorithms (SPARC64)"
Dave Jones97da37b2012-10-02 17:13:20 -04001149 depends on SPARC64
David S. Millerc5aac2d2012-08-25 22:37:23 -07001150 select CRYPTO_ALGAPI
1151 select CRYPTO_DES
1152 help
1153 DES cipher algorithm (FIPS 46-2), and Triple DES EDE (FIPS 46-3),
1154 optimized using SPARC64 crypto opcodes.
1155
Jussi Kivilinna6574e6c2014-06-09 20:59:54 +03001156config CRYPTO_DES3_EDE_X86_64
1157 tristate "Triple DES EDE cipher algorithm (x86-64)"
1158 depends on X86 && 64BIT
1159 select CRYPTO_ALGAPI
1160 select CRYPTO_DES
1161 help
1162 Triple DES EDE (FIPS 46-3) algorithm.
1163
1164 This module provides implementation of the Triple DES EDE cipher
1165 algorithm that is optimized for x86-64 processors. Two versions of
1166 algorithm are provided; regular processing one input block and
1167 one that processes three blocks parallel.
1168
Sebastian Siewior584fffc2008-04-05 21:04:48 +08001169config CRYPTO_FCRYPT
1170 tristate "FCrypt cipher algorithm"
Herbert Xucce9e062006-08-21 21:08:13 +10001171 select CRYPTO_ALGAPI
Sebastian Siewior584fffc2008-04-05 21:04:48 +08001172 select CRYPTO_BLKCIPHER
Linus Torvalds1da177e2005-04-16 15:20:36 -07001173 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +08001174 FCrypt algorithm used by RxRPC.
Linus Torvalds1da177e2005-04-16 15:20:36 -07001175
1176config CRYPTO_KHAZAD
1177 tristate "Khazad cipher algorithm"
Herbert Xucce9e062006-08-21 21:08:13 +10001178 select CRYPTO_ALGAPI
Linus Torvalds1da177e2005-04-16 15:20:36 -07001179 help
1180 Khazad cipher algorithm.
1181
1182 Khazad was a finalist in the initial NESSIE competition. It is
1183 an algorithm optimized for 64-bit processors with good performance
1184 on 32-bit processors. Khazad uses an 128 bit key size.
1185
1186 See also:
Justin P. Mattock6d8de742010-09-12 10:42:47 +08001187 <http://www.larc.usp.br/~pbarreto/KhazadPage.html>
Linus Torvalds1da177e2005-04-16 15:20:36 -07001188
Tan Swee Heng2407d602007-11-23 19:45:00 +08001189config CRYPTO_SALSA20
Kees Cook3b4afaf2012-10-02 11:16:49 -07001190 tristate "Salsa20 stream cipher algorithm"
Tan Swee Heng2407d602007-11-23 19:45:00 +08001191 select CRYPTO_BLKCIPHER
1192 help
1193 Salsa20 stream cipher algorithm.
1194
1195 Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
1196 Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
1197
1198 The Salsa20 stream cipher algorithm is designed by Daniel J.
1199 Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
Linus Torvalds1da177e2005-04-16 15:20:36 -07001200
Tan Swee Heng974e4b72007-12-10 15:52:56 +08001201config CRYPTO_SALSA20_586
Kees Cook3b4afaf2012-10-02 11:16:49 -07001202 tristate "Salsa20 stream cipher algorithm (i586)"
Tan Swee Heng974e4b72007-12-10 15:52:56 +08001203 depends on (X86 || UML_X86) && !64BIT
Tan Swee Heng974e4b72007-12-10 15:52:56 +08001204 select CRYPTO_BLKCIPHER
Tan Swee Heng974e4b72007-12-10 15:52:56 +08001205 help
1206 Salsa20 stream cipher algorithm.
1207
1208 Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
1209 Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
1210
1211 The Salsa20 stream cipher algorithm is designed by Daniel J.
1212 Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
1213
Tan Swee Heng9a7dafb2007-12-18 00:04:40 +08001214config CRYPTO_SALSA20_X86_64
Kees Cook3b4afaf2012-10-02 11:16:49 -07001215 tristate "Salsa20 stream cipher algorithm (x86_64)"
Tan Swee Heng9a7dafb2007-12-18 00:04:40 +08001216 depends on (X86 || UML_X86) && 64BIT
Tan Swee Heng9a7dafb2007-12-18 00:04:40 +08001217 select CRYPTO_BLKCIPHER
Tan Swee Heng9a7dafb2007-12-18 00:04:40 +08001218 help
1219 Salsa20 stream cipher algorithm.
1220
1221 Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
1222 Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
1223
1224 The Salsa20 stream cipher algorithm is designed by Daniel J.
1225 Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
1226
Martin Willic08d0e62015-06-01 13:43:56 +02001227config CRYPTO_CHACHA20
1228 tristate "ChaCha20 cipher algorithm"
1229 select CRYPTO_BLKCIPHER
1230 help
1231 ChaCha20 cipher algorithm, RFC7539.
1232
1233 ChaCha20 is a 256-bit high-speed stream cipher designed by Daniel J.
1234 Bernstein and further specified in RFC7539 for use in IETF protocols.
1235 This is the portable C implementation of ChaCha20.
1236
1237 See also:
1238 <http://cr.yp.to/chacha/chacha-20080128.pdf>
1239
Martin Willic9320b62015-07-16 19:14:01 +02001240config CRYPTO_CHACHA20_X86_64
Martin Willi3d1e93c2015-07-16 19:14:03 +02001241 tristate "ChaCha20 cipher algorithm (x86_64/SSSE3/AVX2)"
Martin Willic9320b62015-07-16 19:14:01 +02001242 depends on X86 && 64BIT
1243 select CRYPTO_BLKCIPHER
1244 select CRYPTO_CHACHA20
1245 help
1246 ChaCha20 cipher algorithm, RFC7539.
1247
1248 ChaCha20 is a 256-bit high-speed stream cipher designed by Daniel J.
1249 Bernstein and further specified in RFC7539 for use in IETF protocols.
1250 This is the x86_64 assembler implementation using SIMD instructions.
1251
1252 See also:
1253 <http://cr.yp.to/chacha/chacha-20080128.pdf>
1254
Sebastian Siewior584fffc2008-04-05 21:04:48 +08001255config CRYPTO_SEED
1256 tristate "SEED cipher algorithm"
1257 select CRYPTO_ALGAPI
1258 help
1259 SEED cipher algorithm (RFC4269).
1260
1261 SEED is a 128-bit symmetric key block cipher that has been
1262 developed by KISA (Korea Information Security Agency) as a
1263 national standard encryption algorithm of the Republic of Korea.
1264 It is a 16 round block cipher with the key size of 128 bit.
1265
1266 See also:
1267 <http://www.kisa.or.kr/kisa/seed/jsp/seed_eng.jsp>
1268
1269config CRYPTO_SERPENT
1270 tristate "Serpent cipher algorithm"
1271 select CRYPTO_ALGAPI
1272 help
1273 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
1274
1275 Keys are allowed to be from 0 to 256 bits in length, in steps
1276 of 8 bits. Also includes the 'Tnepres' algorithm, a reversed
1277 variant of Serpent for compatibility with old kerneli.org code.
1278
1279 See also:
1280 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
1281
Jussi Kivilinna937c30d2011-11-09 16:26:25 +02001282config CRYPTO_SERPENT_SSE2_X86_64
1283 tristate "Serpent cipher algorithm (x86_64/SSE2)"
1284 depends on X86 && 64BIT
1285 select CRYPTO_ALGAPI
Jussi Kivilinna341975b2011-11-24 08:37:41 +02001286 select CRYPTO_CRYPTD
Ard Biesheuvel801201a2013-09-20 09:55:41 +02001287 select CRYPTO_ABLK_HELPER
Jussi Kivilinna596d8752012-06-18 14:07:19 +03001288 select CRYPTO_GLUE_HELPER_X86
Jussi Kivilinna937c30d2011-11-09 16:26:25 +02001289 select CRYPTO_SERPENT
Jussi Kivilinnafeaf0cf2011-12-13 12:53:12 +02001290 select CRYPTO_LRW
1291 select CRYPTO_XTS
Jussi Kivilinna937c30d2011-11-09 16:26:25 +02001292 help
1293 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
1294
1295 Keys are allowed to be from 0 to 256 bits in length, in steps
1296 of 8 bits.
1297
Masanari Iida1e6232f2015-04-04 00:20:30 +09001298 This module provides Serpent cipher algorithm that processes eight
Jussi Kivilinna937c30d2011-11-09 16:26:25 +02001299 blocks parallel using SSE2 instruction set.
1300
1301 See also:
1302 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
1303
Jussi Kivilinna251496d2011-11-09 16:26:31 +02001304config CRYPTO_SERPENT_SSE2_586
1305 tristate "Serpent cipher algorithm (i586/SSE2)"
1306 depends on X86 && !64BIT
1307 select CRYPTO_ALGAPI
Jussi Kivilinna341975b2011-11-24 08:37:41 +02001308 select CRYPTO_CRYPTD
Ard Biesheuvel801201a2013-09-20 09:55:41 +02001309 select CRYPTO_ABLK_HELPER
Jussi Kivilinna596d8752012-06-18 14:07:19 +03001310 select CRYPTO_GLUE_HELPER_X86
Jussi Kivilinna251496d2011-11-09 16:26:31 +02001311 select CRYPTO_SERPENT
Jussi Kivilinnafeaf0cf2011-12-13 12:53:12 +02001312 select CRYPTO_LRW
1313 select CRYPTO_XTS
Jussi Kivilinna251496d2011-11-09 16:26:31 +02001314 help
1315 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
1316
1317 Keys are allowed to be from 0 to 256 bits in length, in steps
1318 of 8 bits.
1319
1320 This module provides Serpent cipher algorithm that processes four
1321 blocks parallel using SSE2 instruction set.
1322
1323 See also:
1324 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
1325
Johannes Goetzfried7efe4072012-06-12 16:47:43 +08001326config CRYPTO_SERPENT_AVX_X86_64
1327 tristate "Serpent cipher algorithm (x86_64/AVX)"
1328 depends on X86 && 64BIT
1329 select CRYPTO_ALGAPI
1330 select CRYPTO_CRYPTD
Ard Biesheuvel801201a2013-09-20 09:55:41 +02001331 select CRYPTO_ABLK_HELPER
Jussi Kivilinna1d0debb2012-06-18 14:07:24 +03001332 select CRYPTO_GLUE_HELPER_X86
Johannes Goetzfried7efe4072012-06-12 16:47:43 +08001333 select CRYPTO_SERPENT
1334 select CRYPTO_LRW
1335 select CRYPTO_XTS
1336 help
1337 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
1338
1339 Keys are allowed to be from 0 to 256 bits in length, in steps
1340 of 8 bits.
1341
1342 This module provides the Serpent cipher algorithm that processes
1343 eight blocks parallel using the AVX instruction set.
1344
1345 See also:
1346 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
1347
Jussi Kivilinna56d76c92013-04-13 13:46:55 +03001348config CRYPTO_SERPENT_AVX2_X86_64
1349 tristate "Serpent cipher algorithm (x86_64/AVX2)"
1350 depends on X86 && 64BIT
1351 select CRYPTO_ALGAPI
1352 select CRYPTO_CRYPTD
Ard Biesheuvel801201a2013-09-20 09:55:41 +02001353 select CRYPTO_ABLK_HELPER
Jussi Kivilinna56d76c92013-04-13 13:46:55 +03001354 select CRYPTO_GLUE_HELPER_X86
1355 select CRYPTO_SERPENT
1356 select CRYPTO_SERPENT_AVX_X86_64
1357 select CRYPTO_LRW
1358 select CRYPTO_XTS
1359 help
1360 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
1361
1362 Keys are allowed to be from 0 to 256 bits in length, in steps
1363 of 8 bits.
1364
1365 This module provides Serpent cipher algorithm that processes 16
1366 blocks parallel using AVX2 instruction set.
1367
1368 See also:
1369 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
1370
Sebastian Siewior584fffc2008-04-05 21:04:48 +08001371config CRYPTO_TEA
1372 tristate "TEA, XTEA and XETA cipher algorithms"
1373 select CRYPTO_ALGAPI
1374 help
1375 TEA cipher algorithm.
1376
1377 Tiny Encryption Algorithm is a simple cipher that uses
1378 many rounds for security. It is very fast and uses
1379 little memory.
1380
1381 Xtendend Tiny Encryption Algorithm is a modification to
1382 the TEA algorithm to address a potential key weakness
1383 in the TEA algorithm.
1384
1385 Xtendend Encryption Tiny Algorithm is a mis-implementation
1386 of the XTEA algorithm for compatibility purposes.
1387
1388config CRYPTO_TWOFISH
1389 tristate "Twofish cipher algorithm"
1390 select CRYPTO_ALGAPI
1391 select CRYPTO_TWOFISH_COMMON
1392 help
1393 Twofish cipher algorithm.
1394
1395 Twofish was submitted as an AES (Advanced Encryption Standard)
1396 candidate cipher by researchers at CounterPane Systems. It is a
1397 16 round block cipher supporting key sizes of 128, 192, and 256
1398 bits.
1399
1400 See also:
1401 <http://www.schneier.com/twofish.html>
1402
1403config CRYPTO_TWOFISH_COMMON
1404 tristate
1405 help
1406 Common parts of the Twofish cipher algorithm shared by the
1407 generic c and the assembler implementations.
1408
1409config CRYPTO_TWOFISH_586
1410 tristate "Twofish cipher algorithms (i586)"
1411 depends on (X86 || UML_X86) && !64BIT
1412 select CRYPTO_ALGAPI
1413 select CRYPTO_TWOFISH_COMMON
1414 help
1415 Twofish cipher algorithm.
1416
1417 Twofish was submitted as an AES (Advanced Encryption Standard)
1418 candidate cipher by researchers at CounterPane Systems. It is a
1419 16 round block cipher supporting key sizes of 128, 192, and 256
1420 bits.
1421
1422 See also:
1423 <http://www.schneier.com/twofish.html>
1424
1425config CRYPTO_TWOFISH_X86_64
1426 tristate "Twofish cipher algorithm (x86_64)"
1427 depends on (X86 || UML_X86) && 64BIT
1428 select CRYPTO_ALGAPI
1429 select CRYPTO_TWOFISH_COMMON
1430 help
1431 Twofish cipher algorithm (x86_64).
1432
1433 Twofish was submitted as an AES (Advanced Encryption Standard)
1434 candidate cipher by researchers at CounterPane Systems. It is a
1435 16 round block cipher supporting key sizes of 128, 192, and 256
1436 bits.
1437
1438 See also:
1439 <http://www.schneier.com/twofish.html>
1440
Jussi Kivilinna8280daa2011-09-26 16:47:25 +03001441config CRYPTO_TWOFISH_X86_64_3WAY
1442 tristate "Twofish cipher algorithm (x86_64, 3-way parallel)"
Al Virof21a7c12012-04-08 20:31:22 -04001443 depends on X86 && 64BIT
Jussi Kivilinna8280daa2011-09-26 16:47:25 +03001444 select CRYPTO_ALGAPI
1445 select CRYPTO_TWOFISH_COMMON
1446 select CRYPTO_TWOFISH_X86_64
Jussi Kivilinna414cb5e2012-06-18 14:07:34 +03001447 select CRYPTO_GLUE_HELPER_X86
Jussi Kivilinnae7cda5d2011-12-13 12:53:01 +02001448 select CRYPTO_LRW
1449 select CRYPTO_XTS
Jussi Kivilinna8280daa2011-09-26 16:47:25 +03001450 help
1451 Twofish cipher algorithm (x86_64, 3-way parallel).
1452
1453 Twofish was submitted as an AES (Advanced Encryption Standard)
1454 candidate cipher by researchers at CounterPane Systems. It is a
1455 16 round block cipher supporting key sizes of 128, 192, and 256
1456 bits.
1457
1458 This module provides Twofish cipher algorithm that processes three
1459 blocks parallel, utilizing resources of out-of-order CPUs better.
1460
1461 See also:
1462 <http://www.schneier.com/twofish.html>
1463
Johannes Goetzfried107778b2012-05-28 15:54:24 +02001464config CRYPTO_TWOFISH_AVX_X86_64
1465 tristate "Twofish cipher algorithm (x86_64/AVX)"
1466 depends on X86 && 64BIT
1467 select CRYPTO_ALGAPI
1468 select CRYPTO_CRYPTD
Ard Biesheuvel801201a2013-09-20 09:55:41 +02001469 select CRYPTO_ABLK_HELPER
Jussi Kivilinnaa7378d42012-06-18 14:07:39 +03001470 select CRYPTO_GLUE_HELPER_X86
Johannes Goetzfried107778b2012-05-28 15:54:24 +02001471 select CRYPTO_TWOFISH_COMMON
1472 select CRYPTO_TWOFISH_X86_64
1473 select CRYPTO_TWOFISH_X86_64_3WAY
1474 select CRYPTO_LRW
1475 select CRYPTO_XTS
1476 help
1477 Twofish cipher algorithm (x86_64/AVX).
1478
1479 Twofish was submitted as an AES (Advanced Encryption Standard)
1480 candidate cipher by researchers at CounterPane Systems. It is a
1481 16 round block cipher supporting key sizes of 128, 192, and 256
1482 bits.
1483
1484 This module provides the Twofish cipher algorithm that processes
1485 eight blocks parallel using the AVX Instruction Set.
1486
1487 See also:
1488 <http://www.schneier.com/twofish.html>
1489
Sebastian Siewior584fffc2008-04-05 21:04:48 +08001490comment "Compression"
1491
Linus Torvalds1da177e2005-04-16 15:20:36 -07001492config CRYPTO_DEFLATE
1493 tristate "Deflate compression algorithm"
Herbert Xucce9e062006-08-21 21:08:13 +10001494 select CRYPTO_ALGAPI
Linus Torvalds1da177e2005-04-16 15:20:36 -07001495 select ZLIB_INFLATE
1496 select ZLIB_DEFLATE
1497 help
1498 This is the Deflate algorithm (RFC1951), specified for use in
1499 IPSec with the IPCOMP protocol (RFC3173, RFC2394).
Sebastian Siewior584fffc2008-04-05 21:04:48 +08001500
Linus Torvalds1da177e2005-04-16 15:20:36 -07001501 You will most probably want this if using IPSec.
1502
Zoltan Sogor0b77abb2007-12-07 16:53:23 +08001503config CRYPTO_LZO
1504 tristate "LZO compression algorithm"
1505 select CRYPTO_ALGAPI
1506 select LZO_COMPRESS
1507 select LZO_DECOMPRESS
1508 help
1509 This is the LZO algorithm.
1510
Seth Jennings35a1fc12012-07-19 09:42:41 -05001511config CRYPTO_842
1512 tristate "842 compression algorithm"
Dan Streetman2062c5b2015-05-07 13:49:15 -04001513 select CRYPTO_ALGAPI
1514 select 842_COMPRESS
1515 select 842_DECOMPRESS
Seth Jennings35a1fc12012-07-19 09:42:41 -05001516 help
1517 This is the 842 algorithm.
1518
Chanho Min0ea85302013-07-08 16:01:51 -07001519config CRYPTO_LZ4
1520 tristate "LZ4 compression algorithm"
1521 select CRYPTO_ALGAPI
1522 select LZ4_COMPRESS
1523 select LZ4_DECOMPRESS
1524 help
1525 This is the LZ4 algorithm.
1526
1527config CRYPTO_LZ4HC
1528 tristate "LZ4HC compression algorithm"
1529 select CRYPTO_ALGAPI
1530 select LZ4HC_COMPRESS
1531 select LZ4_DECOMPRESS
1532 help
1533 This is the LZ4 high compression mode algorithm.
1534
Neil Horman17f0f4a2008-08-14 22:15:52 +10001535comment "Random Number Generation"
1536
1537config CRYPTO_ANSI_CPRNG
1538 tristate "Pseudo Random Number Generation for Cryptographic modules"
1539 select CRYPTO_AES
1540 select CRYPTO_RNG
Neil Horman17f0f4a2008-08-14 22:15:52 +10001541 help
1542 This option enables the generic pseudo random number generator
1543 for cryptographic modules. Uses the Algorithm specified in
Jiri Kosina7dd607e2010-01-27 01:00:10 +01001544 ANSI X9.31 A.2.4. Note that this option must be enabled if
1545 CRYPTO_FIPS is selected
Neil Horman17f0f4a2008-08-14 22:15:52 +10001546
Herbert Xuf2c89a12014-07-04 22:15:08 +08001547menuconfig CRYPTO_DRBG_MENU
Stephan Mueller419090c2014-05-31 17:22:31 +02001548 tristate "NIST SP800-90A DRBG"
Stephan Mueller419090c2014-05-31 17:22:31 +02001549 help
1550 NIST SP800-90A compliant DRBG. In the following submenu, one or
1551 more of the DRBG types must be selected.
1552
Herbert Xuf2c89a12014-07-04 22:15:08 +08001553if CRYPTO_DRBG_MENU
Stephan Mueller419090c2014-05-31 17:22:31 +02001554
1555config CRYPTO_DRBG_HMAC
Herbert Xu401e4232015-06-03 14:49:31 +08001556 bool
Stephan Mueller419090c2014-05-31 17:22:31 +02001557 default y
Stephan Mueller419090c2014-05-31 17:22:31 +02001558 select CRYPTO_HMAC
Herbert Xu826775b2015-06-11 08:55:10 +08001559 select CRYPTO_SHA256
Stephan Mueller419090c2014-05-31 17:22:31 +02001560
1561config CRYPTO_DRBG_HASH
1562 bool "Enable Hash DRBG"
Herbert Xu826775b2015-06-11 08:55:10 +08001563 select CRYPTO_SHA256
Stephan Mueller419090c2014-05-31 17:22:31 +02001564 help
1565 Enable the Hash DRBG variant as defined in NIST SP800-90A.
1566
1567config CRYPTO_DRBG_CTR
1568 bool "Enable CTR DRBG"
Stephan Mueller419090c2014-05-31 17:22:31 +02001569 select CRYPTO_AES
1570 help
1571 Enable the CTR DRBG variant as defined in NIST SP800-90A.
1572
Herbert Xuf2c89a12014-07-04 22:15:08 +08001573config CRYPTO_DRBG
1574 tristate
Herbert Xu401e4232015-06-03 14:49:31 +08001575 default CRYPTO_DRBG_MENU
Herbert Xuf2c89a12014-07-04 22:15:08 +08001576 select CRYPTO_RNG
Stephan Muellerbb5530e2015-05-25 15:10:20 +02001577 select CRYPTO_JITTERENTROPY
Herbert Xuf2c89a12014-07-04 22:15:08 +08001578
1579endif # if CRYPTO_DRBG_MENU
Stephan Mueller419090c2014-05-31 17:22:31 +02001580
Stephan Muellerbb5530e2015-05-25 15:10:20 +02001581config CRYPTO_JITTERENTROPY
1582 tristate "Jitterentropy Non-Deterministic Random Number Generator"
Arnd Bergmann2f313e02016-01-26 14:47:10 +01001583 select CRYPTO_RNG
Stephan Muellerbb5530e2015-05-25 15:10:20 +02001584 help
1585 The Jitterentropy RNG is a noise that is intended
1586 to provide seed to another RNG. The RNG does not
1587 perform any cryptographic whitening of the generated
1588 random numbers. This Jitterentropy RNG registers with
1589 the kernel crypto API and can be used by any caller.
1590
Herbert Xu03c8efc2010-10-19 21:12:39 +08001591config CRYPTO_USER_API
1592 tristate
1593
Herbert Xufe869cd2010-10-19 21:23:00 +08001594config CRYPTO_USER_API_HASH
1595 tristate "User-space interface for hash algorithms"
Herbert Xu74517082010-11-29 22:56:03 +08001596 depends on NET
Herbert Xufe869cd2010-10-19 21:23:00 +08001597 select CRYPTO_HASH
1598 select CRYPTO_USER_API
1599 help
1600 This option enables the user-spaces interface for hash
1601 algorithms.
1602
Herbert Xu8ff59092010-10-19 21:31:55 +08001603config CRYPTO_USER_API_SKCIPHER
1604 tristate "User-space interface for symmetric key cipher algorithms"
Herbert Xu74517082010-11-29 22:56:03 +08001605 depends on NET
Herbert Xu8ff59092010-10-19 21:31:55 +08001606 select CRYPTO_BLKCIPHER
1607 select CRYPTO_USER_API
1608 help
1609 This option enables the user-spaces interface for symmetric
1610 key cipher algorithms.
1611
Stephan Mueller2f3755382014-12-25 23:00:39 +01001612config CRYPTO_USER_API_RNG
1613 tristate "User-space interface for random number generator algorithms"
1614 depends on NET
1615 select CRYPTO_RNG
1616 select CRYPTO_USER_API
1617 help
1618 This option enables the user-spaces interface for random
1619 number generator algorithms.
1620
Herbert Xub64a2d92015-05-28 11:30:35 +08001621config CRYPTO_USER_API_AEAD
1622 tristate "User-space interface for AEAD cipher algorithms"
1623 depends on NET
1624 select CRYPTO_AEAD
1625 select CRYPTO_USER_API
1626 help
1627 This option enables the user-spaces interface for AEAD
1628 cipher algorithms.
1629
Dmitry Kasatkinee089972013-05-06 15:40:01 +03001630config CRYPTO_HASH_INFO
1631 bool
1632
Linus Torvalds1da177e2005-04-16 15:20:36 -07001633source "drivers/crypto/Kconfig"
David Howells964f3b32012-09-13 15:17:21 +01001634source crypto/asymmetric_keys/Kconfig
David Howellscfc411e2015-08-14 15:20:41 +01001635source certs/Kconfig
Linus Torvalds1da177e2005-04-16 15:20:36 -07001636
Herbert Xucce9e062006-08-21 21:08:13 +10001637endif # if CRYPTO