blob: e0b25de1e339249773287c13d8f457d1f9e94352 [file] [log] [blame]
Jan Engelhardtb5114312007-07-15 23:39:36 -07001
2menuconfig CRYPTO_HW
3 bool "Hardware crypto devices"
4 default y
Jan Engelhardt06bfb7e2007-08-18 12:56:21 +02005 ---help---
6 Say Y here to get to see options for hardware crypto devices and
7 processors. This option alone does not add any kernel code.
8
9 If you say N, all options in this submenu will be skipped and disabled.
Jan Engelhardtb5114312007-07-15 23:39:36 -070010
11if CRYPTO_HW
Linus Torvalds1da177e2005-04-16 15:20:36 -070012
13config CRYPTO_DEV_PADLOCK
Herbert Xud1583252007-05-18 13:17:22 +100014 tristate "Support for VIA PadLock ACE"
Herbert Xu2f817412009-04-22 13:00:15 +080015 depends on X86 && !UML
Linus Torvalds1da177e2005-04-16 15:20:36 -070016 help
17 Some VIA processors come with an integrated crypto engine
18 (so called VIA PadLock ACE, Advanced Cryptography Engine)
Michal Ludvig1191f0a2006-08-06 22:46:20 +100019 that provides instructions for very fast cryptographic
20 operations with supported algorithms.
Linus Torvalds1da177e2005-04-16 15:20:36 -070021
22 The instructions are used only when the CPU supports them.
Michal Ludvig5644bda2006-08-06 22:50:30 +100023 Otherwise software encryption is used.
24
Linus Torvalds1da177e2005-04-16 15:20:36 -070025config CRYPTO_DEV_PADLOCK_AES
Michal Ludvig1191f0a2006-08-06 22:46:20 +100026 tristate "PadLock driver for AES algorithm"
Linus Torvalds1da177e2005-04-16 15:20:36 -070027 depends on CRYPTO_DEV_PADLOCK
Herbert Xu28ce7282006-08-21 21:38:42 +100028 select CRYPTO_BLKCIPHER
Sebastian Siewior7dc748e2008-04-01 21:24:50 +080029 select CRYPTO_AES
Linus Torvalds1da177e2005-04-16 15:20:36 -070030 help
31 Use VIA PadLock for AES algorithm.
32
Michal Ludvig1191f0a2006-08-06 22:46:20 +100033 Available in VIA C3 and newer CPUs.
34
35 If unsure say M. The compiled module will be
Pavel Machek4737f092009-06-05 00:44:53 +020036 called padlock-aes.
Michal Ludvig1191f0a2006-08-06 22:46:20 +100037
Michal Ludvig6c833272006-07-12 12:29:38 +100038config CRYPTO_DEV_PADLOCK_SHA
39 tristate "PadLock driver for SHA1 and SHA256 algorithms"
40 depends on CRYPTO_DEV_PADLOCK
Herbert Xubbbee462009-07-11 18:16:16 +080041 select CRYPTO_HASH
Michal Ludvig6c833272006-07-12 12:29:38 +100042 select CRYPTO_SHA1
43 select CRYPTO_SHA256
Michal Ludvig6c833272006-07-12 12:29:38 +100044 help
45 Use VIA PadLock for SHA1/SHA256 algorithms.
46
47 Available in VIA C7 and newer processors.
48
49 If unsure say M. The compiled module will be
Pavel Machek4737f092009-06-05 00:44:53 +020050 called padlock-sha.
Michal Ludvig6c833272006-07-12 12:29:38 +100051
Jordan Crouse9fe757b2006-10-04 18:48:57 +100052config CRYPTO_DEV_GEODE
53 tristate "Support for the Geode LX AES engine"
Simon Arlottf6259de2007-05-02 22:08:26 +100054 depends on X86_32 && PCI
Jordan Crouse9fe757b2006-10-04 18:48:57 +100055 select CRYPTO_ALGAPI
56 select CRYPTO_BLKCIPHER
Jordan Crouse9fe757b2006-10-04 18:48:57 +100057 help
58 Say 'Y' here to use the AMD Geode LX processor on-board AES
David Sterba3dde6ad2007-05-09 07:12:20 +020059 engine for the CryptoAPI AES algorithm.
Jordan Crouse9fe757b2006-10-04 18:48:57 +100060
61 To compile this driver as a module, choose M here: the module
62 will be called geode-aes.
63
Martin Schwidefsky61d48c22007-05-10 15:46:00 +020064config ZCRYPT
65 tristate "Support for PCI-attached cryptographic adapters"
66 depends on S390
67 select ZCRYPT_MONOLITHIC if ZCRYPT="y"
Ralph Wuerthner2f7c8bd2008-04-17 07:46:15 +020068 select HW_RANDOM
Martin Schwidefsky61d48c22007-05-10 15:46:00 +020069 help
70 Select this option if you want to use a PCI-attached cryptographic
71 adapter like:
72 + PCI Cryptographic Accelerator (PCICA)
73 + PCI Cryptographic Coprocessor (PCICC)
74 + PCI-X Cryptographic Coprocessor (PCIXCC)
75 + Crypto Express2 Coprocessor (CEX2C)
76 + Crypto Express2 Accelerator (CEX2A)
Holger Denglercf2d0072011-05-23 10:24:30 +020077 + Crypto Express3 Coprocessor (CEX3C)
78 + Crypto Express3 Accelerator (CEX3A)
Martin Schwidefsky61d48c22007-05-10 15:46:00 +020079
80config ZCRYPT_MONOLITHIC
81 bool "Monolithic zcrypt module"
Heiko Carstens57a49552010-08-13 10:06:40 +020082 depends on ZCRYPT
Martin Schwidefsky61d48c22007-05-10 15:46:00 +020083 help
Pavel Machek4737f092009-06-05 00:44:53 +020084 Select this option if you want to have a single module z90crypt,
Martin Schwidefsky61d48c22007-05-10 15:46:00 +020085 that contains all parts of the crypto device driver (ap bus,
86 request router and all the card drivers).
87
Jan Glauber3f5615e2008-01-26 14:11:07 +010088config CRYPTO_SHA1_S390
89 tristate "SHA1 digest algorithm"
90 depends on S390
Herbert Xu563f3462009-01-18 20:33:33 +110091 select CRYPTO_HASH
Jan Glauber3f5615e2008-01-26 14:11:07 +010092 help
93 This is the s390 hardware accelerated implementation of the
94 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2).
95
Jan Glauberd393d9b2011-04-19 21:29:19 +020096 It is available as of z990.
97
Jan Glauber3f5615e2008-01-26 14:11:07 +010098config CRYPTO_SHA256_S390
99 tristate "SHA256 digest algorithm"
100 depends on S390
Herbert Xu563f3462009-01-18 20:33:33 +1100101 select CRYPTO_HASH
Jan Glauber3f5615e2008-01-26 14:11:07 +0100102 help
103 This is the s390 hardware accelerated implementation of the
104 SHA256 secure hash standard (DFIPS 180-2).
105
Jan Glauberd393d9b2011-04-19 21:29:19 +0200106 It is available as of z9.
Jan Glauber3f5615e2008-01-26 14:11:07 +0100107
Jan Glauber291dc7c2008-03-06 19:52:00 +0800108config CRYPTO_SHA512_S390
Jan Glauber4e2c6d72008-03-06 19:53:50 +0800109 tristate "SHA384 and SHA512 digest algorithm"
Jan Glauber291dc7c2008-03-06 19:52:00 +0800110 depends on S390
Herbert Xu563f3462009-01-18 20:33:33 +1100111 select CRYPTO_HASH
Jan Glauber291dc7c2008-03-06 19:52:00 +0800112 help
113 This is the s390 hardware accelerated implementation of the
114 SHA512 secure hash standard.
115
Jan Glauberd393d9b2011-04-19 21:29:19 +0200116 It is available as of z10.
Jan Glauber291dc7c2008-03-06 19:52:00 +0800117
Jan Glauber3f5615e2008-01-26 14:11:07 +0100118config CRYPTO_DES_S390
119 tristate "DES and Triple DES cipher algorithms"
120 depends on S390
121 select CRYPTO_ALGAPI
122 select CRYPTO_BLKCIPHER
123 help
Gerald Schaefer0200f3e2011-05-04 15:09:44 +1000124 This is the s390 hardware accelerated implementation of the
Jan Glauber3f5615e2008-01-26 14:11:07 +0100125 DES cipher algorithm (FIPS 46-2), and Triple DES EDE (FIPS 46-3).
126
Gerald Schaefer0200f3e2011-05-04 15:09:44 +1000127 As of z990 the ECB and CBC mode are hardware accelerated.
128 As of z196 the CTR mode is hardware accelerated.
129
Jan Glauber3f5615e2008-01-26 14:11:07 +0100130config CRYPTO_AES_S390
131 tristate "AES cipher algorithms"
132 depends on S390
133 select CRYPTO_ALGAPI
134 select CRYPTO_BLKCIPHER
135 help
136 This is the s390 hardware accelerated implementation of the
Gerald Schaefer99d97222011-04-26 16:12:42 +1000137 AES cipher algorithms (FIPS-197).
Jan Glauber3f5615e2008-01-26 14:11:07 +0100138
Gerald Schaefer99d97222011-04-26 16:12:42 +1000139 As of z9 the ECB and CBC modes are hardware accelerated
140 for 128 bit keys.
141 As of z10 the ECB and CBC modes are hardware accelerated
142 for all AES key sizes.
Gerald Schaefer0200f3e2011-05-04 15:09:44 +1000143 As of z196 the CTR mode is hardware accelerated for all AES
144 key sizes and XTS mode is hardware accelerated for 256 and
Gerald Schaefer99d97222011-04-26 16:12:42 +1000145 512 bit keys.
Jan Glauber3f5615e2008-01-26 14:11:07 +0100146
147config S390_PRNG
148 tristate "Pseudo random number generator device driver"
149 depends on S390
150 default "m"
151 help
152 Select this option if you want to use the s390 pseudo random number
153 generator. The PRNG is part of the cryptographic processor functions
154 and uses triple-DES to generate secure random numbers like the
Jan Glauberd393d9b2011-04-19 21:29:19 +0200155 ANSI X9.17 standard. User-space programs access the
156 pseudo-random-number device through the char device /dev/prandom.
157
158 It is available as of z9.
Jan Glauber3f5615e2008-01-26 14:11:07 +0100159
Gerald Schaeferdf1309c2011-04-19 21:29:18 +0200160config CRYPTO_GHASH_S390
161 tristate "GHASH digest algorithm"
162 depends on S390
163 select CRYPTO_HASH
164 help
165 This is the s390 hardware accelerated implementation of the
166 GHASH message digest algorithm for GCM (Galois/Counter Mode).
167
168 It is available as of z196.
169
Sebastian Andrzej Siewior85a7f0a2009-08-10 12:50:03 +1000170config CRYPTO_DEV_MV_CESA
171 tristate "Marvell's Cryptographic Engine"
172 depends on PLAT_ORION
173 select CRYPTO_ALGAPI
174 select CRYPTO_AES
175 select CRYPTO_BLKCIPHER2
176 help
177 This driver allows you to utilize the Cryptographic Engines and
178 Security Accelerator (CESA) which can be found on the Marvell Orion
179 and Kirkwood SoCs, such as QNAP's TS-209.
180
181 Currently the driver supports AES in ECB and CBC mode without DMA.
182
David S. Miller0a625fd2010-05-19 14:14:04 +1000183config CRYPTO_DEV_NIAGARA2
184 tristate "Niagara2 Stream Processing Unit driver"
David S. Miller50e78162010-09-12 10:44:21 +0800185 select CRYPTO_DES
David S. Miller0a625fd2010-05-19 14:14:04 +1000186 select CRYPTO_ALGAPI
187 depends on SPARC64
188 help
189 Each core of a Niagara2 processor contains a Stream
190 Processing Unit, which itself contains several cryptographic
191 sub-units. One set provides the Modular Arithmetic Unit,
192 used for SSL offload. The other set provides the Cipher
193 Group, which can perform encryption, decryption, hashing,
194 checksumming, and raw copies.
195
Evgeniy Polyakovf7d05612007-10-26 21:31:14 +0800196config CRYPTO_DEV_HIFN_795X
197 tristate "Driver HIFN 795x crypto accelerator chips"
Evgeniy Polyakovc3041f92007-10-11 19:58:16 +0800198 select CRYPTO_DES
Evgeniy Polyakovf7d05612007-10-26 21:31:14 +0800199 select CRYPTO_ALGAPI
Herbert Xu653ebd92007-11-27 19:48:27 +0800200 select CRYPTO_BLKCIPHER
Herbert Xu946fef42008-01-26 09:48:44 +1100201 select HW_RANDOM if CRYPTO_DEV_HIFN_795X_RNG
Jan Glauber2707b932007-11-12 21:56:38 +0800202 depends on PCI
Evgeniy Polyakovf7d05612007-10-26 21:31:14 +0800203 help
204 This option allows you to have support for HIFN 795x crypto adapters.
205
Herbert Xu946fef42008-01-26 09:48:44 +1100206config CRYPTO_DEV_HIFN_795X_RNG
207 bool "HIFN 795x random number generator"
208 depends on CRYPTO_DEV_HIFN_795X
209 help
210 Select this option if you want to enable the random number generator
211 on the HIFN 795x crypto adapters.
Evgeniy Polyakovf7d05612007-10-26 21:31:14 +0800212
Kim Phillips8e8ec592011-03-13 16:54:26 +0800213source drivers/crypto/caam/Kconfig
214
Kim Phillips9c4a7962008-06-23 19:50:15 +0800215config CRYPTO_DEV_TALITOS
216 tristate "Talitos Freescale Security Engine (SEC)"
217 select CRYPTO_ALGAPI
218 select CRYPTO_AUTHENC
219 select HW_RANDOM
220 depends on FSL_SOC
221 help
222 Say 'Y' here to use the Freescale Security Engine (SEC)
223 to offload cryptographic algorithm computation.
224
225 The Freescale SEC is present on PowerQUICC 'E' processors, such
226 as the MPC8349E and MPC8548E.
227
228 To compile this driver as a module, choose M here: the module
229 will be called talitos.
230
Christian Hohnstaedt81bef012008-06-25 14:38:47 +0800231config CRYPTO_DEV_IXP4XX
232 tristate "Driver for IXP4xx crypto hardware acceleration"
233 depends on ARCH_IXP4XX
234 select CRYPTO_DES
235 select CRYPTO_ALGAPI
Imre Kaloz090657e2008-07-13 20:12:11 +0800236 select CRYPTO_AUTHENC
Christian Hohnstaedt81bef012008-06-25 14:38:47 +0800237 select CRYPTO_BLKCIPHER
238 help
239 Driver for the IXP4xx NPE crypto engine.
240
James Hsiao049359d2009-02-05 16:18:13 +1100241config CRYPTO_DEV_PPC4XX
242 tristate "Driver AMCC PPC4xx crypto accelerator"
243 depends on PPC && 4xx
244 select CRYPTO_HASH
245 select CRYPTO_ALGAPI
246 select CRYPTO_BLKCIPHER
247 help
248 This option allows you to have support for AMCC crypto acceleration.
249
Dmitry Kasatkin8628e7c2010-05-03 11:10:59 +0800250config CRYPTO_DEV_OMAP_SHAM
251 tristate "Support for OMAP SHA1/MD5 hw accelerator"
252 depends on ARCH_OMAP2 || ARCH_OMAP3
253 select CRYPTO_SHA1
254 select CRYPTO_MD5
255 help
256 OMAP processors have SHA1/MD5 hw accelerator. Select this if you
257 want to use the OMAP module for SHA1/MD5 algorithms.
258
Dmitry Kasatkin537559a2010-09-03 19:16:02 +0800259config CRYPTO_DEV_OMAP_AES
260 tristate "Support for OMAP AES hw engine"
261 depends on ARCH_OMAP2 || ARCH_OMAP3
262 select CRYPTO_AES
263 help
264 OMAP processors have AES module accelerator. Select this if you
265 want to use the OMAP module for AES algorithms.
266
Jamie Ilesce921362011-02-21 16:43:21 +1100267config CRYPTO_DEV_PICOXCELL
268 tristate "Support for picoXcell IPSEC and Layer2 crypto engines"
269 depends on ARCH_PICOXCELL
270 select CRYPTO_AES
271 select CRYPTO_AUTHENC
272 select CRYPTO_ALGAPI
273 select CRYPTO_DES
274 select CRYPTO_CBC
275 select CRYPTO_ECB
276 select CRYPTO_SEQIV
277 help
278 This option enables support for the hardware offload engines in the
279 Picochip picoXcell SoC devices. Select this for IPSEC ESP offload
280 and for 3gpp Layer 2 ciphering support.
281
282 Saying m here will build a module named pipcoxcell_crypto.
283
Vladimir Zapolskiya49e4902011-04-08 20:40:51 +0800284config CRYPTO_DEV_S5P
285 tristate "Support for Samsung S5PV210 crypto accelerator"
286 depends on ARCH_S5PV210
287 select CRYPTO_AES
288 select CRYPTO_ALGAPI
289 select CRYPTO_BLKCIPHER
290 help
291 This option allows you to have support for S5P crypto acceleration.
292 Select this to offload Samsung S5PV210 or S5PC110 from AES
293 algorithms execution.
294
Jan Engelhardtb5114312007-07-15 23:39:36 -0700295endif # CRYPTO_HW