blob: aed52b2e4a55bb8a801f87303a09b1f0f3b5e397 [file] [log] [blame]
Linus Torvalds1da177e2005-04-16 15:20:36 -07001#
Dan Williams685784a2007-07-09 11:56:42 -07002# Generic algorithms support
3#
4config XOR_BLOCKS
5 tristate
6
7#
Dan Williams9bc89cd2007-01-02 11:10:44 -07008# async_tx api: hardware offloaded memory transfer/transform support
9#
10source "crypto/async_tx/Kconfig"
11
12#
Linus Torvalds1da177e2005-04-16 15:20:36 -070013# Cryptographic API Configuration
14#
Jan Engelhardt2e290f42007-05-18 15:11:01 +100015menuconfig CRYPTO
Sebastian Siewiorc3715cb92008-03-30 16:36:09 +080016 tristate "Cryptographic API"
Linus Torvalds1da177e2005-04-16 15:20:36 -070017 help
18 This option provides the core Cryptographic API.
19
Herbert Xucce9e062006-08-21 21:08:13 +100020if CRYPTO
21
Sebastian Siewior584fffc2008-04-05 21:04:48 +080022comment "Crypto core or helper"
23
Neil Hormanccb778e2008-08-05 14:13:08 +080024config CRYPTO_FIPS
25 bool "FIPS 200 compliance"
Chuck Ebberte84c5482010-09-03 19:17:49 +080026 depends on CRYPTO_ANSI_CPRNG && !CRYPTO_MANAGER_DISABLE_TESTS
Neil Hormanccb778e2008-08-05 14:13:08 +080027 help
28 This options enables the fips boot option which is
29 required if you want to system to operate in a FIPS 200
30 certification. You should say no unless you know what
Chuck Ebberte84c5482010-09-03 19:17:49 +080031 this is.
Neil Hormanccb778e2008-08-05 14:13:08 +080032
Herbert Xucce9e062006-08-21 21:08:13 +100033config CRYPTO_ALGAPI
34 tristate
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110035 select CRYPTO_ALGAPI2
Herbert Xucce9e062006-08-21 21:08:13 +100036 help
37 This option provides the API for cryptographic algorithms.
38
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110039config CRYPTO_ALGAPI2
40 tristate
41
Herbert Xu1ae97822007-08-30 15:36:14 +080042config CRYPTO_AEAD
43 tristate
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110044 select CRYPTO_AEAD2
Herbert Xu1ae97822007-08-30 15:36:14 +080045 select CRYPTO_ALGAPI
46
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110047config CRYPTO_AEAD2
48 tristate
49 select CRYPTO_ALGAPI2
50
Herbert Xu5cde0af2006-08-22 00:07:53 +100051config CRYPTO_BLKCIPHER
52 tristate
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110053 select CRYPTO_BLKCIPHER2
Herbert Xu5cde0af2006-08-22 00:07:53 +100054 select CRYPTO_ALGAPI
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110055
56config CRYPTO_BLKCIPHER2
57 tristate
58 select CRYPTO_ALGAPI2
59 select CRYPTO_RNG2
Huang Ying0a2e8212009-02-19 14:44:02 +080060 select CRYPTO_WORKQUEUE
Herbert Xu5cde0af2006-08-22 00:07:53 +100061
Herbert Xu055bcee2006-08-19 22:24:23 +100062config CRYPTO_HASH
63 tristate
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110064 select CRYPTO_HASH2
Herbert Xu055bcee2006-08-19 22:24:23 +100065 select CRYPTO_ALGAPI
66
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110067config CRYPTO_HASH2
68 tristate
69 select CRYPTO_ALGAPI2
70
Neil Horman17f0f4a2008-08-14 22:15:52 +100071config CRYPTO_RNG
72 tristate
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110073 select CRYPTO_RNG2
Neil Horman17f0f4a2008-08-14 22:15:52 +100074 select CRYPTO_ALGAPI
75
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110076config CRYPTO_RNG2
77 tristate
78 select CRYPTO_ALGAPI2
79
Geert Uytterhoevena1d2f092009-03-04 15:05:33 +080080config CRYPTO_PCOMP
81 tristate
Herbert Xubc94e592010-06-03 20:33:06 +100082 select CRYPTO_PCOMP2
83 select CRYPTO_ALGAPI
84
85config CRYPTO_PCOMP2
86 tristate
Geert Uytterhoevena1d2f092009-03-04 15:05:33 +080087 select CRYPTO_ALGAPI2
88
Herbert Xu2b8c19d2006-09-21 11:31:44 +100089config CRYPTO_MANAGER
90 tristate "Cryptographic algorithm manager"
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110091 select CRYPTO_MANAGER2
Herbert Xu2b8c19d2006-09-21 11:31:44 +100092 help
93 Create default cryptographic template instantiations such as
94 cbc(aes).
95
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110096config CRYPTO_MANAGER2
97 def_tristate CRYPTO_MANAGER || (CRYPTO_MANAGER!=n && CRYPTO_ALGAPI=y)
98 select CRYPTO_AEAD2
99 select CRYPTO_HASH2
100 select CRYPTO_BLKCIPHER2
Herbert Xubc94e592010-06-03 20:33:06 +1000101 select CRYPTO_PCOMP2
Herbert Xu6a0fcbb2008-12-10 23:29:44 +1100102
Steffen Klasserta38f7902011-09-27 07:23:50 +0200103config CRYPTO_USER
104 tristate "Userspace cryptographic algorithm configuration"
Herbert Xu5db017a2011-11-01 12:12:43 +1100105 depends on NET
Steffen Klasserta38f7902011-09-27 07:23:50 +0200106 select CRYPTO_MANAGER
107 help
Valdis.Kletnieks@vt.edud19978f2011-11-09 01:29:20 -0500108 Userspace configuration for cryptographic instantiations such as
Steffen Klasserta38f7902011-09-27 07:23:50 +0200109 cbc(aes).
110
Herbert Xu326a6342010-08-06 09:40:28 +0800111config CRYPTO_MANAGER_DISABLE_TESTS
112 bool "Disable run-time self tests"
Herbert Xu00ca28a2010-08-06 10:34:00 +0800113 default y
114 depends on CRYPTO_MANAGER2
Alexander Shishkin0b767f92010-06-03 20:53:43 +1000115 help
Herbert Xu326a6342010-08-06 09:40:28 +0800116 Disable run-time self tests that normally take place at
117 algorithm registration.
Alexander Shishkin0b767f92010-06-03 20:53:43 +1000118
Rik Snelc494e072006-11-29 18:59:44 +1100119config CRYPTO_GF128MUL
Jussi Kivilinna08c70fc2011-12-13 12:53:22 +0200120 tristate "GF(2^128) multiplication functions"
Rik Snelc494e072006-11-29 18:59:44 +1100121 help
122 Efficient table driven implementation of multiplications in the
123 field GF(2^128). This is needed by some cypher modes. This
124 option will be selected automatically if you select such a
125 cipher mode. Only select this option by hand if you expect to load
126 an external module that requires these functions.
127
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800128config CRYPTO_NULL
129 tristate "Null algorithms"
130 select CRYPTO_ALGAPI
131 select CRYPTO_BLKCIPHER
Herbert Xud35d2452008-11-08 08:09:56 +0800132 select CRYPTO_HASH
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800133 help
134 These are 'Null' algorithms, used by IPsec, which do nothing.
135
Steffen Klassert5068c7a2010-01-07 15:57:19 +1100136config CRYPTO_PCRYPT
Kees Cook3b4afaf2012-10-02 11:16:49 -0700137 tristate "Parallel crypto engine"
138 depends on SMP
Steffen Klassert5068c7a2010-01-07 15:57:19 +1100139 select PADATA
140 select CRYPTO_MANAGER
141 select CRYPTO_AEAD
142 help
143 This converts an arbitrary crypto algorithm into a parallel
144 algorithm that executes in kernel threads.
145
Huang Ying25c38d32009-02-19 14:33:40 +0800146config CRYPTO_WORKQUEUE
147 tristate
148
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800149config CRYPTO_CRYPTD
150 tristate "Software async crypto daemon"
Herbert Xudb131ef2006-09-21 11:44:08 +1000151 select CRYPTO_BLKCIPHER
Loc Hob8a28252008-05-14 21:23:00 +0800152 select CRYPTO_HASH
Herbert Xu43518402006-10-16 21:28:58 +1000153 select CRYPTO_MANAGER
Huang Ying254eff72009-02-19 14:42:19 +0800154 select CRYPTO_WORKQUEUE
Herbert Xudb131ef2006-09-21 11:44:08 +1000155 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800156 This is a generic software asynchronous crypto daemon that
157 converts an arbitrary synchronous software crypto algorithm
158 into an asynchronous algorithm that executes in a kernel thread.
159
160config CRYPTO_AUTHENC
161 tristate "Authenc support"
162 select CRYPTO_AEAD
163 select CRYPTO_BLKCIPHER
164 select CRYPTO_MANAGER
165 select CRYPTO_HASH
166 help
167 Authenc: Combined mode wrapper for IPsec.
168 This is required for IPSec.
169
170config CRYPTO_TEST
171 tristate "Testing module"
172 depends on m
Herbert Xuda7f0332008-07-31 17:08:25 +0800173 select CRYPTO_MANAGER
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800174 help
175 Quick & dirty crypto test module.
176
Jussi Kivilinnaffaf9152012-06-18 14:06:58 +0300177config CRYPTO_ABLK_HELPER_X86
178 tristate
179 depends on X86
180 select CRYPTO_CRYPTD
181
Jussi Kivilinna596d8752012-06-18 14:07:19 +0300182config CRYPTO_GLUE_HELPER_X86
183 tristate
184 depends on X86
185 select CRYPTO_ALGAPI
186
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800187comment "Authenticated Encryption with Associated Data"
188
189config CRYPTO_CCM
190 tristate "CCM support"
191 select CRYPTO_CTR
192 select CRYPTO_AEAD
193 help
194 Support for Counter with CBC MAC. Required for IPsec.
195
196config CRYPTO_GCM
197 tristate "GCM/GMAC support"
198 select CRYPTO_CTR
199 select CRYPTO_AEAD
Huang Ying9382d972009-08-06 15:34:26 +1000200 select CRYPTO_GHASH
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800201 help
202 Support for Galois/Counter Mode (GCM) and Galois Message
203 Authentication Code (GMAC). Required for IPSec.
204
205config CRYPTO_SEQIV
206 tristate "Sequence Number IV Generator"
207 select CRYPTO_AEAD
208 select CRYPTO_BLKCIPHER
Herbert Xua0f000e2008-08-14 22:21:31 +1000209 select CRYPTO_RNG
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800210 help
211 This IV generator generates an IV based on a sequence number by
212 xoring it with a salt. This algorithm is mainly useful for CTR
213
214comment "Block modes"
Herbert Xudb131ef2006-09-21 11:44:08 +1000215
216config CRYPTO_CBC
217 tristate "CBC support"
218 select CRYPTO_BLKCIPHER
Herbert Xu43518402006-10-16 21:28:58 +1000219 select CRYPTO_MANAGER
Herbert Xudb131ef2006-09-21 11:44:08 +1000220 help
221 CBC: Cipher Block Chaining mode
222 This block cipher algorithm is required for IPSec.
223
Joy Latten23e353c2007-10-23 08:50:32 +0800224config CRYPTO_CTR
225 tristate "CTR support"
226 select CRYPTO_BLKCIPHER
Herbert Xu0a270322007-11-30 21:38:37 +1100227 select CRYPTO_SEQIV
Joy Latten23e353c2007-10-23 08:50:32 +0800228 select CRYPTO_MANAGER
Joy Latten23e353c2007-10-23 08:50:32 +0800229 help
230 CTR: Counter mode
231 This block cipher algorithm is required for IPSec.
232
Kevin Coffman76cb9522008-03-24 21:26:16 +0800233config CRYPTO_CTS
234 tristate "CTS support"
235 select CRYPTO_BLKCIPHER
236 help
237 CTS: Cipher Text Stealing
238 This is the Cipher Text Stealing mode as described by
239 Section 8 of rfc2040 and referenced by rfc3962.
240 (rfc3962 includes errata information in its Appendix A)
241 This mode is required for Kerberos gss mechanism support
242 for AES encryption.
243
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800244config CRYPTO_ECB
245 tristate "ECB support"
Herbert Xu653ebd9c2007-11-27 19:48:27 +0800246 select CRYPTO_BLKCIPHER
Herbert Xu124b53d2007-04-16 20:49:20 +1000247 select CRYPTO_MANAGER
248 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800249 ECB: Electronic CodeBook mode
250 This is the simplest block cipher algorithm. It simply encrypts
251 the input block by block.
Herbert Xu124b53d2007-04-16 20:49:20 +1000252
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800253config CRYPTO_LRW
Jussi Kivilinna2470a2b2011-12-13 12:52:51 +0200254 tristate "LRW support"
David Howells90831632006-12-16 12:13:14 +1100255 select CRYPTO_BLKCIPHER
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800256 select CRYPTO_MANAGER
257 select CRYPTO_GF128MUL
David Howells90831632006-12-16 12:13:14 +1100258 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800259 LRW: Liskov Rivest Wagner, a tweakable, non malleable, non movable
260 narrow block cipher mode for dm-crypt. Use it with cipher
261 specification string aes-lrw-benbi, the key must be 256, 320 or 384.
262 The first 128, 192 or 256 bits in the key are used for AES and the
263 rest is used to tie each cipher block to its logical position.
David Howells90831632006-12-16 12:13:14 +1100264
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800265config CRYPTO_PCBC
266 tristate "PCBC support"
267 select CRYPTO_BLKCIPHER
268 select CRYPTO_MANAGER
269 help
270 PCBC: Propagating Cipher Block Chaining mode
271 This block cipher algorithm is required for RxRPC.
272
273config CRYPTO_XTS
Jussi Kivilinna5bcf8e62011-12-13 12:52:56 +0200274 tristate "XTS support"
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800275 select CRYPTO_BLKCIPHER
276 select CRYPTO_MANAGER
277 select CRYPTO_GF128MUL
278 help
279 XTS: IEEE1619/D16 narrow block cipher use with aes-xts-plain,
280 key size 256, 384 or 512 bits. This implementation currently
281 can't handle a sectorsize which is not a multiple of 16 bytes.
282
283comment "Hash modes"
284
285config CRYPTO_HMAC
286 tristate "HMAC support"
287 select CRYPTO_HASH
288 select CRYPTO_MANAGER
289 help
290 HMAC: Keyed-Hashing for Message Authentication (RFC2104).
291 This is required for IPSec.
292
293config CRYPTO_XCBC
294 tristate "XCBC support"
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800295 select CRYPTO_HASH
296 select CRYPTO_MANAGER
297 help
298 XCBC: Keyed-Hashing with encryption algorithm
299 http://www.ietf.org/rfc/rfc3566.txt
300 http://csrc.nist.gov/encryption/modes/proposedmodes/
301 xcbc-mac/xcbc-mac-spec.pdf
302
Shane Wangf1939f72009-09-02 20:05:22 +1000303config CRYPTO_VMAC
304 tristate "VMAC support"
Shane Wangf1939f72009-09-02 20:05:22 +1000305 select CRYPTO_HASH
306 select CRYPTO_MANAGER
307 help
308 VMAC is a message authentication algorithm designed for
309 very high speed on 64-bit architectures.
310
311 See also:
312 <http://fastcrypto.org/vmac>
313
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800314comment "Digest"
315
316config CRYPTO_CRC32C
317 tristate "CRC32c CRC algorithm"
Herbert Xu5773a3e2008-07-08 20:54:28 +0800318 select CRYPTO_HASH
Darrick J. Wong6a0962b2012-03-23 15:02:25 -0700319 select CRC32
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800320 help
321 Castagnoli, et al Cyclic Redundancy-Check Algorithm. Used
322 by iSCSI for header and data digests and by others.
Herbert Xu69c35ef2008-11-07 15:11:47 +0800323 See Castagnoli93. Module will be crc32c.
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800324
Austin Zhang8cb51ba2008-08-07 09:57:03 +0800325config CRYPTO_CRC32C_INTEL
326 tristate "CRC32c INTEL hardware acceleration"
327 depends on X86
328 select CRYPTO_HASH
329 help
330 In Intel processor with SSE4.2 supported, the processor will
331 support CRC32C implementation using hardware accelerated CRC32
332 instruction. This option will create 'crc32c-intel' module,
333 which will enable any routine to use the CRC32 instruction to
334 gain performance compared with software implementation.
335 Module will be crc32c-intel.
336
David S. Miller442a7c42012-08-22 20:47:36 -0700337config CRYPTO_CRC32C_SPARC64
338 tristate "CRC32c CRC algorithm (SPARC64)"
339 depends on SPARC64
340 select CRYPTO_HASH
341 select CRC32
342 help
343 CRC32c CRC algorithm implemented using sparc64 crypto instructions,
344 when available.
345
Alexander Boyko78c37d12013-01-10 18:54:59 +0400346config CRYPTO_CRC32
347 tristate "CRC32 CRC algorithm"
348 select CRYPTO_HASH
349 select CRC32
350 help
351 CRC-32-IEEE 802.3 cyclic redundancy-check algorithm.
352 Shash crypto api wrappers to crc32_le function.
353
354config CRYPTO_CRC32_PCLMUL
355 tristate "CRC32 PCLMULQDQ hardware acceleration"
356 depends on X86
357 select CRYPTO_HASH
358 select CRC32
359 help
360 From Intel Westmere and AMD Bulldozer processor with SSE4.2
361 and PCLMULQDQ supported, the processor will support
362 CRC32 PCLMULQDQ implementation using hardware accelerated PCLMULQDQ
363 instruction. This option will create 'crc32-plcmul' module,
364 which will enable any routine to use the CRC-32-IEEE 802.3 checksum
365 and gain better performance as compared with the table implementation.
366
Huang Ying2cdc6892009-08-06 15:32:38 +1000367config CRYPTO_GHASH
368 tristate "GHASH digest algorithm"
Huang Ying2cdc6892009-08-06 15:32:38 +1000369 select CRYPTO_GF128MUL
370 help
371 GHASH is message digest algorithm for GCM (Galois/Counter Mode).
372
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800373config CRYPTO_MD4
374 tristate "MD4 digest algorithm"
Adrian-Ken Rueegsegger808a1762008-12-03 19:55:27 +0800375 select CRYPTO_HASH
Linus Torvalds1da177e2005-04-16 15:20:36 -0700376 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800377 MD4 message digest algorithm (RFC1320).
Linus Torvalds1da177e2005-04-16 15:20:36 -0700378
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800379config CRYPTO_MD5
380 tristate "MD5 digest algorithm"
Adrian-Ken Rueegsegger14b75ba2008-12-03 19:57:12 +0800381 select CRYPTO_HASH
Linus Torvalds1da177e2005-04-16 15:20:36 -0700382 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800383 MD5 message digest algorithm (RFC1321).
Linus Torvalds1da177e2005-04-16 15:20:36 -0700384
David S. Millerfa4dfed2012-08-19 21:51:26 -0700385config CRYPTO_MD5_SPARC64
386 tristate "MD5 digest algorithm (SPARC64)"
387 depends on SPARC64
388 select CRYPTO_MD5
389 select CRYPTO_HASH
390 help
391 MD5 message digest algorithm (RFC1321) implemented
392 using sparc64 crypto instructions, when available.
393
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800394config CRYPTO_MICHAEL_MIC
395 tristate "Michael MIC keyed digest algorithm"
Adrian-Ken Rueegsegger19e2bf12008-12-07 19:35:38 +0800396 select CRYPTO_HASH
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800397 help
398 Michael MIC is used for message integrity protection in TKIP
399 (IEEE 802.11i). This algorithm is required for TKIP, but it
400 should not be used for other purposes because of the weakness
401 of the algorithm.
402
Adrian-Ken Rueegsegger82798f92008-05-07 22:17:37 +0800403config CRYPTO_RMD128
Adrian Bunkb6d44342008-07-16 19:28:00 +0800404 tristate "RIPEMD-128 digest algorithm"
Herbert Xu7c4468b2008-11-08 09:10:40 +0800405 select CRYPTO_HASH
Adrian Bunkb6d44342008-07-16 19:28:00 +0800406 help
407 RIPEMD-128 (ISO/IEC 10118-3:2004).
Adrian-Ken Rueegsegger82798f92008-05-07 22:17:37 +0800408
Adrian Bunkb6d44342008-07-16 19:28:00 +0800409 RIPEMD-128 is a 128-bit cryptographic hash function. It should only
Michael Witten35ed4b32011-07-09 04:02:31 +0000410 be used as a secure replacement for RIPEMD. For other use cases,
Adrian Bunkb6d44342008-07-16 19:28:00 +0800411 RIPEMD-160 should be used.
Adrian-Ken Rueegsegger82798f92008-05-07 22:17:37 +0800412
Adrian Bunkb6d44342008-07-16 19:28:00 +0800413 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
Justin P. Mattock6d8de742010-09-12 10:42:47 +0800414 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
Adrian-Ken Rueegsegger82798f92008-05-07 22:17:37 +0800415
416config CRYPTO_RMD160
Adrian Bunkb6d44342008-07-16 19:28:00 +0800417 tristate "RIPEMD-160 digest algorithm"
Herbert Xue5835fb2008-11-08 09:18:51 +0800418 select CRYPTO_HASH
Adrian Bunkb6d44342008-07-16 19:28:00 +0800419 help
420 RIPEMD-160 (ISO/IEC 10118-3:2004).
Adrian-Ken Rueegsegger82798f92008-05-07 22:17:37 +0800421
Adrian Bunkb6d44342008-07-16 19:28:00 +0800422 RIPEMD-160 is a 160-bit cryptographic hash function. It is intended
423 to be used as a secure replacement for the 128-bit hash functions
424 MD4, MD5 and it's predecessor RIPEMD
425 (not to be confused with RIPEMD-128).
Adrian-Ken Rueegsegger82798f92008-05-07 22:17:37 +0800426
Adrian Bunkb6d44342008-07-16 19:28:00 +0800427 It's speed is comparable to SHA1 and there are no known attacks
428 against RIPEMD-160.
Adrian-Ken Rueegsegger534fe2c2008-05-09 21:30:27 +0800429
Adrian Bunkb6d44342008-07-16 19:28:00 +0800430 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
Justin P. Mattock6d8de742010-09-12 10:42:47 +0800431 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
Adrian-Ken Rueegsegger534fe2c2008-05-09 21:30:27 +0800432
433config CRYPTO_RMD256
Adrian Bunkb6d44342008-07-16 19:28:00 +0800434 tristate "RIPEMD-256 digest algorithm"
Herbert Xud8a5e2e2008-11-08 09:58:10 +0800435 select CRYPTO_HASH
Adrian Bunkb6d44342008-07-16 19:28:00 +0800436 help
437 RIPEMD-256 is an optional extension of RIPEMD-128 with a
438 256 bit hash. It is intended for applications that require
439 longer hash-results, without needing a larger security level
440 (than RIPEMD-128).
Adrian-Ken Rueegsegger534fe2c2008-05-09 21:30:27 +0800441
Adrian Bunkb6d44342008-07-16 19:28:00 +0800442 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
Justin P. Mattock6d8de742010-09-12 10:42:47 +0800443 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
Adrian-Ken Rueegsegger534fe2c2008-05-09 21:30:27 +0800444
445config CRYPTO_RMD320
Adrian Bunkb6d44342008-07-16 19:28:00 +0800446 tristate "RIPEMD-320 digest algorithm"
Herbert Xu3b8efb42008-11-08 10:11:09 +0800447 select CRYPTO_HASH
Adrian Bunkb6d44342008-07-16 19:28:00 +0800448 help
449 RIPEMD-320 is an optional extension of RIPEMD-160 with a
450 320 bit hash. It is intended for applications that require
451 longer hash-results, without needing a larger security level
452 (than RIPEMD-160).
Adrian-Ken Rueegsegger534fe2c2008-05-09 21:30:27 +0800453
Adrian Bunkb6d44342008-07-16 19:28:00 +0800454 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
Justin P. Mattock6d8de742010-09-12 10:42:47 +0800455 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
Adrian-Ken Rueegsegger82798f92008-05-07 22:17:37 +0800456
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800457config CRYPTO_SHA1
458 tristate "SHA1 digest algorithm"
Adrian-Ken Rueegsegger54ccb362008-12-02 21:08:20 +0800459 select CRYPTO_HASH
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800460 help
461 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2).
462
Mathias Krause66be8952011-08-04 20:19:25 +0200463config CRYPTO_SHA1_SSSE3
464 tristate "SHA1 digest algorithm (SSSE3/AVX)"
465 depends on X86 && 64BIT
466 select CRYPTO_SHA1
467 select CRYPTO_HASH
468 help
469 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented
470 using Supplemental SSE3 (SSSE3) instructions or Advanced Vector
471 Extensions (AVX), when available.
472
David S. Miller4ff28d42012-08-19 15:41:53 -0700473config CRYPTO_SHA1_SPARC64
474 tristate "SHA1 digest algorithm (SPARC64)"
475 depends on SPARC64
476 select CRYPTO_SHA1
477 select CRYPTO_HASH
478 help
479 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented
480 using sparc64 crypto instructions, when available.
481
David McCulloughf0be44f2012-09-07 04:17:02 +0800482config CRYPTO_SHA1_ARM
483 tristate "SHA1 digest algorithm (ARM-asm)"
484 depends on ARM
485 select CRYPTO_SHA1
486 select CRYPTO_HASH
487 help
488 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented
489 using optimized ARM assembler.
490
Michael Ellerman323a6bf2012-09-13 23:00:49 +0000491config CRYPTO_SHA1_PPC
492 tristate "SHA1 digest algorithm (powerpc)"
493 depends on PPC
494 help
495 This is the powerpc hardware accelerated implementation of the
496 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2).
497
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800498config CRYPTO_SHA256
499 tristate "SHA224 and SHA256 digest algorithm"
Adrian-Ken Rueegsegger50e109b52008-12-03 19:57:49 +0800500 select CRYPTO_HASH
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800501 help
502 SHA256 secure hash standard (DFIPS 180-2).
503
504 This version of SHA implements a 256 bit hash with 128 bits of
505 security against collision attacks.
506
Adrian Bunkb6d44342008-07-16 19:28:00 +0800507 This code also includes SHA-224, a 224 bit hash with 112 bits
508 of security against collision attacks.
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800509
David S. Miller86c93b22012-08-19 17:11:37 -0700510config CRYPTO_SHA256_SPARC64
511 tristate "SHA224 and SHA256 digest algorithm (SPARC64)"
512 depends on SPARC64
513 select CRYPTO_SHA256
514 select CRYPTO_HASH
515 help
516 SHA-256 secure hash standard (DFIPS 180-2) implemented
517 using sparc64 crypto instructions, when available.
518
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800519config CRYPTO_SHA512
520 tristate "SHA384 and SHA512 digest algorithms"
Adrian-Ken Rueegseggerbd9d20d2008-12-17 16:49:02 +1100521 select CRYPTO_HASH
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800522 help
523 SHA512 secure hash standard (DFIPS 180-2).
524
525 This version of SHA implements a 512 bit hash with 256 bits of
526 security against collision attacks.
527
528 This code also includes SHA-384, a 384 bit hash with 192 bits
529 of security against collision attacks.
530
David S. Miller775e0c62012-08-19 17:37:56 -0700531config CRYPTO_SHA512_SPARC64
532 tristate "SHA384 and SHA512 digest algorithm (SPARC64)"
533 depends on SPARC64
534 select CRYPTO_SHA512
535 select CRYPTO_HASH
536 help
537 SHA-512 secure hash standard (DFIPS 180-2) implemented
538 using sparc64 crypto instructions, when available.
539
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800540config CRYPTO_TGR192
541 tristate "Tiger digest algorithms"
Adrian-Ken Rueegseggerf63fbd32008-12-03 19:58:32 +0800542 select CRYPTO_HASH
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800543 help
544 Tiger hash algorithm 192, 160 and 128-bit hashes
545
546 Tiger is a hash function optimized for 64-bit processors while
547 still having decent performance on 32-bit processors.
548 Tiger was developed by Ross Anderson and Eli Biham.
Linus Torvalds1da177e2005-04-16 15:20:36 -0700549
550 See also:
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800551 <http://www.cs.technion.ac.il/~biham/Reports/Tiger/>.
552
553config CRYPTO_WP512
554 tristate "Whirlpool digest algorithms"
Adrian-Ken Rueegsegger49465102008-12-07 19:34:37 +0800555 select CRYPTO_HASH
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800556 help
557 Whirlpool hash algorithm 512, 384 and 256-bit hashes
558
559 Whirlpool-512 is part of the NESSIE cryptographic primitives.
560 Whirlpool will be part of the ISO/IEC 10118-3:2003(E) standard
561
562 See also:
Justin P. Mattock6d8de742010-09-12 10:42:47 +0800563 <http://www.larc.usp.br/~pbarreto/WhirlpoolPage.html>
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800564
Huang Ying0e1227d2009-10-19 11:53:06 +0900565config CRYPTO_GHASH_CLMUL_NI_INTEL
566 tristate "GHASH digest algorithm (CLMUL-NI accelerated)"
Richard Weinberger8af00862011-06-08 20:56:29 +0800567 depends on X86 && 64BIT
Huang Ying0e1227d2009-10-19 11:53:06 +0900568 select CRYPTO_CRYPTD
569 help
570 GHASH is message digest algorithm for GCM (Galois/Counter Mode).
571 The implementation is accelerated by CLMUL-NI of Intel.
572
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800573comment "Ciphers"
Linus Torvalds1da177e2005-04-16 15:20:36 -0700574
575config CRYPTO_AES
576 tristate "AES cipher algorithms"
Herbert Xucce9e062006-08-21 21:08:13 +1000577 select CRYPTO_ALGAPI
Linus Torvalds1da177e2005-04-16 15:20:36 -0700578 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800579 AES cipher algorithms (FIPS-197). AES uses the Rijndael
Linus Torvalds1da177e2005-04-16 15:20:36 -0700580 algorithm.
581
582 Rijndael appears to be consistently a very good performer in
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800583 both hardware and software across a wide range of computing
584 environments regardless of its use in feedback or non-feedback
585 modes. Its key setup time is excellent, and its key agility is
586 good. Rijndael's very low memory requirements make it very well
587 suited for restricted-space environments, in which it also
588 demonstrates excellent performance. Rijndael's operations are
589 among the easiest to defend against power and timing attacks.
Linus Torvalds1da177e2005-04-16 15:20:36 -0700590
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800591 The AES specifies three key sizes: 128, 192 and 256 bits
Linus Torvalds1da177e2005-04-16 15:20:36 -0700592
593 See <http://csrc.nist.gov/CryptoToolkit/aes/> for more information.
594
595config CRYPTO_AES_586
596 tristate "AES cipher algorithms (i586)"
Herbert Xucce9e062006-08-21 21:08:13 +1000597 depends on (X86 || UML_X86) && !64BIT
598 select CRYPTO_ALGAPI
Sebastian Siewior5157dea2007-11-10 19:07:16 +0800599 select CRYPTO_AES
Linus Torvalds1da177e2005-04-16 15:20:36 -0700600 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800601 AES cipher algorithms (FIPS-197). AES uses the Rijndael
Linus Torvalds1da177e2005-04-16 15:20:36 -0700602 algorithm.
603
604 Rijndael appears to be consistently a very good performer in
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800605 both hardware and software across a wide range of computing
606 environments regardless of its use in feedback or non-feedback
607 modes. Its key setup time is excellent, and its key agility is
608 good. Rijndael's very low memory requirements make it very well
609 suited for restricted-space environments, in which it also
610 demonstrates excellent performance. Rijndael's operations are
611 among the easiest to defend against power and timing attacks.
Linus Torvalds1da177e2005-04-16 15:20:36 -0700612
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800613 The AES specifies three key sizes: 128, 192 and 256 bits
Linus Torvalds1da177e2005-04-16 15:20:36 -0700614
615 See <http://csrc.nist.gov/encryption/aes/> for more information.
616
Andreas Steinmetza2a892a2005-07-06 13:55:00 -0700617config CRYPTO_AES_X86_64
618 tristate "AES cipher algorithms (x86_64)"
Herbert Xucce9e062006-08-21 21:08:13 +1000619 depends on (X86 || UML_X86) && 64BIT
620 select CRYPTO_ALGAPI
Sebastian Siewior81190b32007-11-08 21:25:04 +0800621 select CRYPTO_AES
Andreas Steinmetza2a892a2005-07-06 13:55:00 -0700622 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800623 AES cipher algorithms (FIPS-197). AES uses the Rijndael
Andreas Steinmetza2a892a2005-07-06 13:55:00 -0700624 algorithm.
625
626 Rijndael appears to be consistently a very good performer in
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800627 both hardware and software across a wide range of computing
628 environments regardless of its use in feedback or non-feedback
629 modes. Its key setup time is excellent, and its key agility is
630 good. Rijndael's very low memory requirements make it very well
631 suited for restricted-space environments, in which it also
632 demonstrates excellent performance. Rijndael's operations are
633 among the easiest to defend against power and timing attacks.
Andreas Steinmetza2a892a2005-07-06 13:55:00 -0700634
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800635 The AES specifies three key sizes: 128, 192 and 256 bits
Andreas Steinmetza2a892a2005-07-06 13:55:00 -0700636
637 See <http://csrc.nist.gov/encryption/aes/> for more information.
638
Huang Ying54b6a1b2009-01-18 16:28:34 +1100639config CRYPTO_AES_NI_INTEL
640 tristate "AES cipher algorithms (AES-NI)"
Richard Weinberger8af00862011-06-08 20:56:29 +0800641 depends on X86
Mathias Krause0d258ef2010-11-27 16:34:46 +0800642 select CRYPTO_AES_X86_64 if 64BIT
643 select CRYPTO_AES_586 if !64BIT
Huang Ying54b6a1b2009-01-18 16:28:34 +1100644 select CRYPTO_CRYPTD
Jussi Kivilinnaa9629d72012-06-18 14:07:08 +0300645 select CRYPTO_ABLK_HELPER_X86
Huang Ying54b6a1b2009-01-18 16:28:34 +1100646 select CRYPTO_ALGAPI
Jussi Kivilinna023af602012-07-22 18:18:37 +0300647 select CRYPTO_LRW
648 select CRYPTO_XTS
Huang Ying54b6a1b2009-01-18 16:28:34 +1100649 help
650 Use Intel AES-NI instructions for AES algorithm.
651
652 AES cipher algorithms (FIPS-197). AES uses the Rijndael
653 algorithm.
654
655 Rijndael appears to be consistently a very good performer in
656 both hardware and software across a wide range of computing
657 environments regardless of its use in feedback or non-feedback
658 modes. Its key setup time is excellent, and its key agility is
659 good. Rijndael's very low memory requirements make it very well
660 suited for restricted-space environments, in which it also
661 demonstrates excellent performance. Rijndael's operations are
662 among the easiest to defend against power and timing attacks.
663
664 The AES specifies three key sizes: 128, 192 and 256 bits
665
666 See <http://csrc.nist.gov/encryption/aes/> for more information.
667
Mathias Krause0d258ef2010-11-27 16:34:46 +0800668 In addition to AES cipher algorithm support, the acceleration
669 for some popular block cipher mode is supported too, including
670 ECB, CBC, LRW, PCBC, XTS. The 64 bit version has additional
671 acceleration for CTR.
Huang Ying2cf4ac82009-03-29 15:41:20 +0800672
David S. Miller9bf48522012-08-21 03:58:13 -0700673config CRYPTO_AES_SPARC64
674 tristate "AES cipher algorithms (SPARC64)"
675 depends on SPARC64
676 select CRYPTO_CRYPTD
677 select CRYPTO_ALGAPI
678 help
679 Use SPARC64 crypto opcodes for AES algorithm.
680
681 AES cipher algorithms (FIPS-197). AES uses the Rijndael
682 algorithm.
683
684 Rijndael appears to be consistently a very good performer in
685 both hardware and software across a wide range of computing
686 environments regardless of its use in feedback or non-feedback
687 modes. Its key setup time is excellent, and its key agility is
688 good. Rijndael's very low memory requirements make it very well
689 suited for restricted-space environments, in which it also
690 demonstrates excellent performance. Rijndael's operations are
691 among the easiest to defend against power and timing attacks.
692
693 The AES specifies three key sizes: 128, 192 and 256 bits
694
695 See <http://csrc.nist.gov/encryption/aes/> for more information.
696
697 In addition to AES cipher algorithm support, the acceleration
698 for some popular block cipher mode is supported too, including
699 ECB and CBC.
700
David McCulloughf0be44f2012-09-07 04:17:02 +0800701config CRYPTO_AES_ARM
702 tristate "AES cipher algorithms (ARM-asm)"
703 depends on ARM
704 select CRYPTO_ALGAPI
705 select CRYPTO_AES
706 help
707 Use optimized AES assembler routines for ARM platforms.
708
709 AES cipher algorithms (FIPS-197). AES uses the Rijndael
710 algorithm.
711
712 Rijndael appears to be consistently a very good performer in
713 both hardware and software across a wide range of computing
714 environments regardless of its use in feedback or non-feedback
715 modes. Its key setup time is excellent, and its key agility is
716 good. Rijndael's very low memory requirements make it very well
717 suited for restricted-space environments, in which it also
718 demonstrates excellent performance. Rijndael's operations are
719 among the easiest to defend against power and timing attacks.
720
721 The AES specifies three key sizes: 128, 192 and 256 bits
722
723 See <http://csrc.nist.gov/encryption/aes/> for more information.
724
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800725config CRYPTO_ANUBIS
726 tristate "Anubis cipher algorithm"
727 select CRYPTO_ALGAPI
728 help
729 Anubis cipher algorithm.
730
731 Anubis is a variable key length cipher which can use keys from
732 128 bits to 320 bits in length. It was evaluated as a entrant
733 in the NESSIE competition.
734
735 See also:
Justin P. Mattock6d8de742010-09-12 10:42:47 +0800736 <https://www.cosic.esat.kuleuven.be/nessie/reports/>
737 <http://www.larc.usp.br/~pbarreto/AnubisPage.html>
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800738
739config CRYPTO_ARC4
740 tristate "ARC4 cipher algorithm"
Sebastian Andrzej Siewiorb9b0f082012-06-26 18:13:46 +0200741 select CRYPTO_BLKCIPHER
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800742 help
743 ARC4 cipher algorithm.
744
745 ARC4 is a stream cipher using keys ranging from 8 bits to 2048
746 bits in length. This algorithm is required for driver-based
747 WEP, but it should not be for other purposes because of the
748 weakness of the algorithm.
749
750config CRYPTO_BLOWFISH
751 tristate "Blowfish cipher algorithm"
752 select CRYPTO_ALGAPI
Jussi Kivilinna52ba8672011-09-02 01:45:07 +0300753 select CRYPTO_BLOWFISH_COMMON
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800754 help
755 Blowfish cipher algorithm, by Bruce Schneier.
756
757 This is a variable key length cipher which can use keys from 32
758 bits to 448 bits in length. It's fast, simple and specifically
759 designed for use on "large microprocessors".
760
761 See also:
762 <http://www.schneier.com/blowfish.html>
763
Jussi Kivilinna52ba8672011-09-02 01:45:07 +0300764config CRYPTO_BLOWFISH_COMMON
765 tristate
766 help
767 Common parts of the Blowfish cipher algorithm shared by the
768 generic c and the assembler implementations.
769
770 See also:
771 <http://www.schneier.com/blowfish.html>
772
Jussi Kivilinna64b94ce2011-09-02 01:45:22 +0300773config CRYPTO_BLOWFISH_X86_64
774 tristate "Blowfish cipher algorithm (x86_64)"
Al Virof21a7c12012-04-08 20:31:22 -0400775 depends on X86 && 64BIT
Jussi Kivilinna64b94ce2011-09-02 01:45:22 +0300776 select CRYPTO_ALGAPI
777 select CRYPTO_BLOWFISH_COMMON
778 help
779 Blowfish cipher algorithm (x86_64), by Bruce Schneier.
780
781 This is a variable key length cipher which can use keys from 32
782 bits to 448 bits in length. It's fast, simple and specifically
783 designed for use on "large microprocessors".
784
785 See also:
786 <http://www.schneier.com/blowfish.html>
787
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800788config CRYPTO_CAMELLIA
789 tristate "Camellia cipher algorithms"
790 depends on CRYPTO
791 select CRYPTO_ALGAPI
792 help
793 Camellia cipher algorithms module.
794
795 Camellia is a symmetric key block cipher developed jointly
796 at NTT and Mitsubishi Electric Corporation.
797
798 The Camellia specifies three key sizes: 128, 192 and 256 bits.
799
800 See also:
801 <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
802
Jussi Kivilinna0b95ec52012-03-05 20:26:47 +0200803config CRYPTO_CAMELLIA_X86_64
804 tristate "Camellia cipher algorithm (x86_64)"
Al Virof21a7c12012-04-08 20:31:22 -0400805 depends on X86 && 64BIT
Jussi Kivilinna0b95ec52012-03-05 20:26:47 +0200806 depends on CRYPTO
807 select CRYPTO_ALGAPI
Jussi Kivilinna964263a2012-06-18 14:07:29 +0300808 select CRYPTO_GLUE_HELPER_X86
Jussi Kivilinna0b95ec52012-03-05 20:26:47 +0200809 select CRYPTO_LRW
810 select CRYPTO_XTS
811 help
812 Camellia cipher algorithm module (x86_64).
813
814 Camellia is a symmetric key block cipher developed jointly
815 at NTT and Mitsubishi Electric Corporation.
816
817 The Camellia specifies three key sizes: 128, 192 and 256 bits.
818
819 See also:
820 <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
821
Jussi Kivilinnad9b1d2e2012-10-26 14:49:01 +0300822config CRYPTO_CAMELLIA_AESNI_AVX_X86_64
823 tristate "Camellia cipher algorithm (x86_64/AES-NI/AVX)"
824 depends on X86 && 64BIT
825 depends on CRYPTO
826 select CRYPTO_ALGAPI
827 select CRYPTO_CRYPTD
828 select CRYPTO_ABLK_HELPER_X86
829 select CRYPTO_GLUE_HELPER_X86
830 select CRYPTO_CAMELLIA_X86_64
831 select CRYPTO_LRW
832 select CRYPTO_XTS
833 help
834 Camellia cipher algorithm module (x86_64/AES-NI/AVX).
835
836 Camellia is a symmetric key block cipher developed jointly
837 at NTT and Mitsubishi Electric Corporation.
838
839 The Camellia specifies three key sizes: 128, 192 and 256 bits.
840
841 See also:
842 <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
843
David S. Miller81658ad2012-08-28 12:05:54 -0700844config CRYPTO_CAMELLIA_SPARC64
845 tristate "Camellia cipher algorithm (SPARC64)"
846 depends on SPARC64
847 depends on CRYPTO
848 select CRYPTO_ALGAPI
849 help
850 Camellia cipher algorithm module (SPARC64).
851
852 Camellia is a symmetric key block cipher developed jointly
853 at NTT and Mitsubishi Electric Corporation.
854
855 The Camellia specifies three key sizes: 128, 192 and 256 bits.
856
857 See also:
858 <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
859
Jussi Kivilinna044ab522012-11-13 11:43:14 +0200860config CRYPTO_CAST_COMMON
861 tristate
862 help
863 Common parts of the CAST cipher algorithms shared by the
864 generic c and the assembler implementations.
865
Linus Torvalds1da177e2005-04-16 15:20:36 -0700866config CRYPTO_CAST5
867 tristate "CAST5 (CAST-128) cipher algorithm"
Herbert Xucce9e062006-08-21 21:08:13 +1000868 select CRYPTO_ALGAPI
Jussi Kivilinna044ab522012-11-13 11:43:14 +0200869 select CRYPTO_CAST_COMMON
Linus Torvalds1da177e2005-04-16 15:20:36 -0700870 help
871 The CAST5 encryption algorithm (synonymous with CAST-128) is
872 described in RFC2144.
873
Johannes Goetzfried4d6d6a22012-07-11 19:37:37 +0200874config CRYPTO_CAST5_AVX_X86_64
875 tristate "CAST5 (CAST-128) cipher algorithm (x86_64/AVX)"
876 depends on X86 && 64BIT
877 select CRYPTO_ALGAPI
878 select CRYPTO_CRYPTD
879 select CRYPTO_ABLK_HELPER_X86
Jussi Kivilinna044ab522012-11-13 11:43:14 +0200880 select CRYPTO_CAST_COMMON
Johannes Goetzfried4d6d6a22012-07-11 19:37:37 +0200881 select CRYPTO_CAST5
882 help
883 The CAST5 encryption algorithm (synonymous with CAST-128) is
884 described in RFC2144.
885
886 This module provides the Cast5 cipher algorithm that processes
887 sixteen blocks parallel using the AVX instruction set.
888
Linus Torvalds1da177e2005-04-16 15:20:36 -0700889config CRYPTO_CAST6
890 tristate "CAST6 (CAST-256) cipher algorithm"
Herbert Xucce9e062006-08-21 21:08:13 +1000891 select CRYPTO_ALGAPI
Jussi Kivilinna044ab522012-11-13 11:43:14 +0200892 select CRYPTO_CAST_COMMON
Linus Torvalds1da177e2005-04-16 15:20:36 -0700893 help
894 The CAST6 encryption algorithm (synonymous with CAST-256) is
895 described in RFC2612.
896
Johannes Goetzfried4ea12772012-07-11 19:38:57 +0200897config CRYPTO_CAST6_AVX_X86_64
898 tristate "CAST6 (CAST-256) cipher algorithm (x86_64/AVX)"
899 depends on X86 && 64BIT
900 select CRYPTO_ALGAPI
901 select CRYPTO_CRYPTD
902 select CRYPTO_ABLK_HELPER_X86
903 select CRYPTO_GLUE_HELPER_X86
Jussi Kivilinna044ab522012-11-13 11:43:14 +0200904 select CRYPTO_CAST_COMMON
Johannes Goetzfried4ea12772012-07-11 19:38:57 +0200905 select CRYPTO_CAST6
906 select CRYPTO_LRW
907 select CRYPTO_XTS
908 help
909 The CAST6 encryption algorithm (synonymous with CAST-256) is
910 described in RFC2612.
911
912 This module provides the Cast6 cipher algorithm that processes
913 eight blocks parallel using the AVX instruction set.
914
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800915config CRYPTO_DES
916 tristate "DES and Triple DES EDE cipher algorithms"
Herbert Xucce9e062006-08-21 21:08:13 +1000917 select CRYPTO_ALGAPI
Linus Torvalds1da177e2005-04-16 15:20:36 -0700918 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800919 DES cipher algorithm (FIPS 46-2), and Triple DES EDE (FIPS 46-3).
Linus Torvalds1da177e2005-04-16 15:20:36 -0700920
David S. Millerc5aac2d2012-08-25 22:37:23 -0700921config CRYPTO_DES_SPARC64
922 tristate "DES and Triple DES EDE cipher algorithms (SPARC64)"
Dave Jones97da37b2012-10-02 17:13:20 -0400923 depends on SPARC64
David S. Millerc5aac2d2012-08-25 22:37:23 -0700924 select CRYPTO_ALGAPI
925 select CRYPTO_DES
926 help
927 DES cipher algorithm (FIPS 46-2), and Triple DES EDE (FIPS 46-3),
928 optimized using SPARC64 crypto opcodes.
929
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800930config CRYPTO_FCRYPT
931 tristate "FCrypt cipher algorithm"
Herbert Xucce9e062006-08-21 21:08:13 +1000932 select CRYPTO_ALGAPI
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800933 select CRYPTO_BLKCIPHER
Linus Torvalds1da177e2005-04-16 15:20:36 -0700934 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800935 FCrypt algorithm used by RxRPC.
Linus Torvalds1da177e2005-04-16 15:20:36 -0700936
937config CRYPTO_KHAZAD
938 tristate "Khazad cipher algorithm"
Herbert Xucce9e062006-08-21 21:08:13 +1000939 select CRYPTO_ALGAPI
Linus Torvalds1da177e2005-04-16 15:20:36 -0700940 help
941 Khazad cipher algorithm.
942
943 Khazad was a finalist in the initial NESSIE competition. It is
944 an algorithm optimized for 64-bit processors with good performance
945 on 32-bit processors. Khazad uses an 128 bit key size.
946
947 See also:
Justin P. Mattock6d8de742010-09-12 10:42:47 +0800948 <http://www.larc.usp.br/~pbarreto/KhazadPage.html>
Linus Torvalds1da177e2005-04-16 15:20:36 -0700949
Tan Swee Heng2407d602007-11-23 19:45:00 +0800950config CRYPTO_SALSA20
Kees Cook3b4afaf2012-10-02 11:16:49 -0700951 tristate "Salsa20 stream cipher algorithm"
Tan Swee Heng2407d602007-11-23 19:45:00 +0800952 select CRYPTO_BLKCIPHER
953 help
954 Salsa20 stream cipher algorithm.
955
956 Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
957 Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
958
959 The Salsa20 stream cipher algorithm is designed by Daniel J.
960 Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
Linus Torvalds1da177e2005-04-16 15:20:36 -0700961
Tan Swee Heng974e4b72007-12-10 15:52:56 +0800962config CRYPTO_SALSA20_586
Kees Cook3b4afaf2012-10-02 11:16:49 -0700963 tristate "Salsa20 stream cipher algorithm (i586)"
Tan Swee Heng974e4b72007-12-10 15:52:56 +0800964 depends on (X86 || UML_X86) && !64BIT
Tan Swee Heng974e4b72007-12-10 15:52:56 +0800965 select CRYPTO_BLKCIPHER
Tan Swee Heng974e4b72007-12-10 15:52:56 +0800966 help
967 Salsa20 stream cipher algorithm.
968
969 Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
970 Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
971
972 The Salsa20 stream cipher algorithm is designed by Daniel J.
973 Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
974
Tan Swee Heng9a7dafb2007-12-18 00:04:40 +0800975config CRYPTO_SALSA20_X86_64
Kees Cook3b4afaf2012-10-02 11:16:49 -0700976 tristate "Salsa20 stream cipher algorithm (x86_64)"
Tan Swee Heng9a7dafb2007-12-18 00:04:40 +0800977 depends on (X86 || UML_X86) && 64BIT
Tan Swee Heng9a7dafb2007-12-18 00:04:40 +0800978 select CRYPTO_BLKCIPHER
Tan Swee Heng9a7dafb2007-12-18 00:04:40 +0800979 help
980 Salsa20 stream cipher algorithm.
981
982 Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
983 Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
984
985 The Salsa20 stream cipher algorithm is designed by Daniel J.
986 Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
987
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800988config CRYPTO_SEED
989 tristate "SEED cipher algorithm"
990 select CRYPTO_ALGAPI
991 help
992 SEED cipher algorithm (RFC4269).
993
994 SEED is a 128-bit symmetric key block cipher that has been
995 developed by KISA (Korea Information Security Agency) as a
996 national standard encryption algorithm of the Republic of Korea.
997 It is a 16 round block cipher with the key size of 128 bit.
998
999 See also:
1000 <http://www.kisa.or.kr/kisa/seed/jsp/seed_eng.jsp>
1001
1002config CRYPTO_SERPENT
1003 tristate "Serpent cipher algorithm"
1004 select CRYPTO_ALGAPI
1005 help
1006 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
1007
1008 Keys are allowed to be from 0 to 256 bits in length, in steps
1009 of 8 bits. Also includes the 'Tnepres' algorithm, a reversed
1010 variant of Serpent for compatibility with old kerneli.org code.
1011
1012 See also:
1013 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
1014
Jussi Kivilinna937c30d2011-11-09 16:26:25 +02001015config CRYPTO_SERPENT_SSE2_X86_64
1016 tristate "Serpent cipher algorithm (x86_64/SSE2)"
1017 depends on X86 && 64BIT
1018 select CRYPTO_ALGAPI
Jussi Kivilinna341975b2011-11-24 08:37:41 +02001019 select CRYPTO_CRYPTD
Jussi Kivilinnaffaf9152012-06-18 14:06:58 +03001020 select CRYPTO_ABLK_HELPER_X86
Jussi Kivilinna596d8752012-06-18 14:07:19 +03001021 select CRYPTO_GLUE_HELPER_X86
Jussi Kivilinna937c30d2011-11-09 16:26:25 +02001022 select CRYPTO_SERPENT
Jussi Kivilinnafeaf0cf2011-12-13 12:53:12 +02001023 select CRYPTO_LRW
1024 select CRYPTO_XTS
Jussi Kivilinna937c30d2011-11-09 16:26:25 +02001025 help
1026 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
1027
1028 Keys are allowed to be from 0 to 256 bits in length, in steps
1029 of 8 bits.
1030
1031 This module provides Serpent cipher algorithm that processes eigth
1032 blocks parallel using SSE2 instruction set.
1033
1034 See also:
1035 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
1036
Jussi Kivilinna251496d2011-11-09 16:26:31 +02001037config CRYPTO_SERPENT_SSE2_586
1038 tristate "Serpent cipher algorithm (i586/SSE2)"
1039 depends on X86 && !64BIT
1040 select CRYPTO_ALGAPI
Jussi Kivilinna341975b2011-11-24 08:37:41 +02001041 select CRYPTO_CRYPTD
Jussi Kivilinnaffaf9152012-06-18 14:06:58 +03001042 select CRYPTO_ABLK_HELPER_X86
Jussi Kivilinna596d8752012-06-18 14:07:19 +03001043 select CRYPTO_GLUE_HELPER_X86
Jussi Kivilinna251496d2011-11-09 16:26:31 +02001044 select CRYPTO_SERPENT
Jussi Kivilinnafeaf0cf2011-12-13 12:53:12 +02001045 select CRYPTO_LRW
1046 select CRYPTO_XTS
Jussi Kivilinna251496d2011-11-09 16:26:31 +02001047 help
1048 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
1049
1050 Keys are allowed to be from 0 to 256 bits in length, in steps
1051 of 8 bits.
1052
1053 This module provides Serpent cipher algorithm that processes four
1054 blocks parallel using SSE2 instruction set.
1055
1056 See also:
1057 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
1058
Johannes Goetzfried7efe4072012-06-12 16:47:43 +08001059config CRYPTO_SERPENT_AVX_X86_64
1060 tristate "Serpent cipher algorithm (x86_64/AVX)"
1061 depends on X86 && 64BIT
1062 select CRYPTO_ALGAPI
1063 select CRYPTO_CRYPTD
Jussi Kivilinnaffaf9152012-06-18 14:06:58 +03001064 select CRYPTO_ABLK_HELPER_X86
Jussi Kivilinna1d0debb2012-06-18 14:07:24 +03001065 select CRYPTO_GLUE_HELPER_X86
Johannes Goetzfried7efe4072012-06-12 16:47:43 +08001066 select CRYPTO_SERPENT
1067 select CRYPTO_LRW
1068 select CRYPTO_XTS
1069 help
1070 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
1071
1072 Keys are allowed to be from 0 to 256 bits in length, in steps
1073 of 8 bits.
1074
1075 This module provides the Serpent cipher algorithm that processes
1076 eight blocks parallel using the AVX instruction set.
1077
1078 See also:
1079 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
1080
Sebastian Siewior584fffc2008-04-05 21:04:48 +08001081config CRYPTO_TEA
1082 tristate "TEA, XTEA and XETA cipher algorithms"
1083 select CRYPTO_ALGAPI
1084 help
1085 TEA cipher algorithm.
1086
1087 Tiny Encryption Algorithm is a simple cipher that uses
1088 many rounds for security. It is very fast and uses
1089 little memory.
1090
1091 Xtendend Tiny Encryption Algorithm is a modification to
1092 the TEA algorithm to address a potential key weakness
1093 in the TEA algorithm.
1094
1095 Xtendend Encryption Tiny Algorithm is a mis-implementation
1096 of the XTEA algorithm for compatibility purposes.
1097
1098config CRYPTO_TWOFISH
1099 tristate "Twofish cipher algorithm"
1100 select CRYPTO_ALGAPI
1101 select CRYPTO_TWOFISH_COMMON
1102 help
1103 Twofish cipher algorithm.
1104
1105 Twofish was submitted as an AES (Advanced Encryption Standard)
1106 candidate cipher by researchers at CounterPane Systems. It is a
1107 16 round block cipher supporting key sizes of 128, 192, and 256
1108 bits.
1109
1110 See also:
1111 <http://www.schneier.com/twofish.html>
1112
1113config CRYPTO_TWOFISH_COMMON
1114 tristate
1115 help
1116 Common parts of the Twofish cipher algorithm shared by the
1117 generic c and the assembler implementations.
1118
1119config CRYPTO_TWOFISH_586
1120 tristate "Twofish cipher algorithms (i586)"
1121 depends on (X86 || UML_X86) && !64BIT
1122 select CRYPTO_ALGAPI
1123 select CRYPTO_TWOFISH_COMMON
1124 help
1125 Twofish cipher algorithm.
1126
1127 Twofish was submitted as an AES (Advanced Encryption Standard)
1128 candidate cipher by researchers at CounterPane Systems. It is a
1129 16 round block cipher supporting key sizes of 128, 192, and 256
1130 bits.
1131
1132 See also:
1133 <http://www.schneier.com/twofish.html>
1134
1135config CRYPTO_TWOFISH_X86_64
1136 tristate "Twofish cipher algorithm (x86_64)"
1137 depends on (X86 || UML_X86) && 64BIT
1138 select CRYPTO_ALGAPI
1139 select CRYPTO_TWOFISH_COMMON
1140 help
1141 Twofish cipher algorithm (x86_64).
1142
1143 Twofish was submitted as an AES (Advanced Encryption Standard)
1144 candidate cipher by researchers at CounterPane Systems. It is a
1145 16 round block cipher supporting key sizes of 128, 192, and 256
1146 bits.
1147
1148 See also:
1149 <http://www.schneier.com/twofish.html>
1150
Jussi Kivilinna8280daa2011-09-26 16:47:25 +03001151config CRYPTO_TWOFISH_X86_64_3WAY
1152 tristate "Twofish cipher algorithm (x86_64, 3-way parallel)"
Al Virof21a7c12012-04-08 20:31:22 -04001153 depends on X86 && 64BIT
Jussi Kivilinna8280daa2011-09-26 16:47:25 +03001154 select CRYPTO_ALGAPI
1155 select CRYPTO_TWOFISH_COMMON
1156 select CRYPTO_TWOFISH_X86_64
Jussi Kivilinna414cb5e2012-06-18 14:07:34 +03001157 select CRYPTO_GLUE_HELPER_X86
Jussi Kivilinnae7cda5d2011-12-13 12:53:01 +02001158 select CRYPTO_LRW
1159 select CRYPTO_XTS
Jussi Kivilinna8280daa2011-09-26 16:47:25 +03001160 help
1161 Twofish cipher algorithm (x86_64, 3-way parallel).
1162
1163 Twofish was submitted as an AES (Advanced Encryption Standard)
1164 candidate cipher by researchers at CounterPane Systems. It is a
1165 16 round block cipher supporting key sizes of 128, 192, and 256
1166 bits.
1167
1168 This module provides Twofish cipher algorithm that processes three
1169 blocks parallel, utilizing resources of out-of-order CPUs better.
1170
1171 See also:
1172 <http://www.schneier.com/twofish.html>
1173
Johannes Goetzfried107778b52012-05-28 15:54:24 +02001174config CRYPTO_TWOFISH_AVX_X86_64
1175 tristate "Twofish cipher algorithm (x86_64/AVX)"
1176 depends on X86 && 64BIT
1177 select CRYPTO_ALGAPI
1178 select CRYPTO_CRYPTD
Jussi Kivilinna30a04002012-06-18 14:07:03 +03001179 select CRYPTO_ABLK_HELPER_X86
Jussi Kivilinnaa7378d42012-06-18 14:07:39 +03001180 select CRYPTO_GLUE_HELPER_X86
Johannes Goetzfried107778b52012-05-28 15:54:24 +02001181 select CRYPTO_TWOFISH_COMMON
1182 select CRYPTO_TWOFISH_X86_64
1183 select CRYPTO_TWOFISH_X86_64_3WAY
1184 select CRYPTO_LRW
1185 select CRYPTO_XTS
1186 help
1187 Twofish cipher algorithm (x86_64/AVX).
1188
1189 Twofish was submitted as an AES (Advanced Encryption Standard)
1190 candidate cipher by researchers at CounterPane Systems. It is a
1191 16 round block cipher supporting key sizes of 128, 192, and 256
1192 bits.
1193
1194 This module provides the Twofish cipher algorithm that processes
1195 eight blocks parallel using the AVX Instruction Set.
1196
1197 See also:
1198 <http://www.schneier.com/twofish.html>
1199
Sebastian Siewior584fffc2008-04-05 21:04:48 +08001200comment "Compression"
1201
Linus Torvalds1da177e2005-04-16 15:20:36 -07001202config CRYPTO_DEFLATE
1203 tristate "Deflate compression algorithm"
Herbert Xucce9e062006-08-21 21:08:13 +10001204 select CRYPTO_ALGAPI
Linus Torvalds1da177e2005-04-16 15:20:36 -07001205 select ZLIB_INFLATE
1206 select ZLIB_DEFLATE
1207 help
1208 This is the Deflate algorithm (RFC1951), specified for use in
1209 IPSec with the IPCOMP protocol (RFC3173, RFC2394).
Sebastian Siewior584fffc2008-04-05 21:04:48 +08001210
Linus Torvalds1da177e2005-04-16 15:20:36 -07001211 You will most probably want this if using IPSec.
1212
Geert Uytterhoevenbf68e652009-03-04 15:15:49 +08001213config CRYPTO_ZLIB
1214 tristate "Zlib compression algorithm"
1215 select CRYPTO_PCOMP
1216 select ZLIB_INFLATE
1217 select ZLIB_DEFLATE
1218 select NLATTR
1219 help
1220 This is the zlib algorithm.
1221
Zoltan Sogor0b77abb2007-12-07 16:53:23 +08001222config CRYPTO_LZO
1223 tristate "LZO compression algorithm"
1224 select CRYPTO_ALGAPI
1225 select LZO_COMPRESS
1226 select LZO_DECOMPRESS
1227 help
1228 This is the LZO algorithm.
1229
Seth Jennings35a1fc12012-07-19 09:42:41 -05001230config CRYPTO_842
1231 tristate "842 compression algorithm"
1232 depends on CRYPTO_DEV_NX_COMPRESS
1233 # 842 uses lzo if the hardware becomes unavailable
1234 select LZO_COMPRESS
1235 select LZO_DECOMPRESS
1236 help
1237 This is the 842 algorithm.
1238
Neil Horman17f0f4a2008-08-14 22:15:52 +10001239comment "Random Number Generation"
1240
1241config CRYPTO_ANSI_CPRNG
1242 tristate "Pseudo Random Number Generation for Cryptographic modules"
Neil Horman4e4ed832009-08-20 17:54:16 +10001243 default m
Neil Horman17f0f4a2008-08-14 22:15:52 +10001244 select CRYPTO_AES
1245 select CRYPTO_RNG
Neil Horman17f0f4a2008-08-14 22:15:52 +10001246 help
1247 This option enables the generic pseudo random number generator
1248 for cryptographic modules. Uses the Algorithm specified in
Jiri Kosina7dd607e2010-01-27 01:00:10 +01001249 ANSI X9.31 A.2.4. Note that this option must be enabled if
1250 CRYPTO_FIPS is selected
Neil Horman17f0f4a2008-08-14 22:15:52 +10001251
Herbert Xu03c8efc2010-10-19 21:12:39 +08001252config CRYPTO_USER_API
1253 tristate
1254
Herbert Xufe869cd2010-10-19 21:23:00 +08001255config CRYPTO_USER_API_HASH
1256 tristate "User-space interface for hash algorithms"
Herbert Xu74517082010-11-29 22:56:03 +08001257 depends on NET
Herbert Xufe869cd2010-10-19 21:23:00 +08001258 select CRYPTO_HASH
1259 select CRYPTO_USER_API
1260 help
1261 This option enables the user-spaces interface for hash
1262 algorithms.
1263
Herbert Xu8ff59092010-10-19 21:31:55 +08001264config CRYPTO_USER_API_SKCIPHER
1265 tristate "User-space interface for symmetric key cipher algorithms"
Herbert Xu74517082010-11-29 22:56:03 +08001266 depends on NET
Herbert Xu8ff59092010-10-19 21:31:55 +08001267 select CRYPTO_BLKCIPHER
1268 select CRYPTO_USER_API
1269 help
1270 This option enables the user-spaces interface for symmetric
1271 key cipher algorithms.
1272
Linus Torvalds1da177e2005-04-16 15:20:36 -07001273source "drivers/crypto/Kconfig"
David Howells964f3b32012-09-13 15:17:21 +01001274source crypto/asymmetric_keys/Kconfig
Linus Torvalds1da177e2005-04-16 15:20:36 -07001275
Herbert Xucce9e062006-08-21 21:08:13 +10001276endif # if CRYPTO