| Jan Engelhardt | b511431 | 2007-07-15 23:39:36 -0700 | [diff] [blame] | 1 |  | 
 | 2 | menuconfig CRYPTO_HW | 
 | 3 | 	bool "Hardware crypto devices" | 
 | 4 | 	default y | 
| Jan Engelhardt | 06bfb7e | 2007-08-18 12:56:21 +0200 | [diff] [blame] | 5 | 	---help--- | 
 | 6 | 	  Say Y here to get to see options for hardware crypto devices and | 
 | 7 | 	  processors. This option alone does not add any kernel code. | 
 | 8 |  | 
 | 9 | 	  If you say N, all options in this submenu will be skipped and disabled. | 
| Jan Engelhardt | b511431 | 2007-07-15 23:39:36 -0700 | [diff] [blame] | 10 |  | 
 | 11 | if CRYPTO_HW | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 12 |  | 
 | 13 | config CRYPTO_DEV_PADLOCK | 
| Herbert Xu | d158325 | 2007-05-18 13:17:22 +1000 | [diff] [blame] | 14 | 	tristate "Support for VIA PadLock ACE" | 
| Herbert Xu | 2f81741 | 2009-04-22 13:00:15 +0800 | [diff] [blame] | 15 | 	depends on X86 && !UML | 
| Herbert Xu | cce9e06 | 2006-08-21 21:08:13 +1000 | [diff] [blame] | 16 | 	select CRYPTO_ALGAPI | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 17 | 	help | 
 | 18 | 	  Some VIA processors come with an integrated crypto engine | 
 | 19 | 	  (so called VIA PadLock ACE, Advanced Cryptography Engine) | 
| Michal Ludvig | 1191f0a | 2006-08-06 22:46:20 +1000 | [diff] [blame] | 20 | 	  that provides instructions for very fast cryptographic | 
 | 21 | 	  operations with supported algorithms. | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 22 | 	   | 
 | 23 | 	  The instructions are used only when the CPU supports them. | 
| Michal Ludvig | 5644bda | 2006-08-06 22:50:30 +1000 | [diff] [blame] | 24 | 	  Otherwise software encryption is used. | 
 | 25 |  | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 26 | config CRYPTO_DEV_PADLOCK_AES | 
| Michal Ludvig | 1191f0a | 2006-08-06 22:46:20 +1000 | [diff] [blame] | 27 | 	tristate "PadLock driver for AES algorithm" | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 28 | 	depends on CRYPTO_DEV_PADLOCK | 
| Herbert Xu | 28ce728 | 2006-08-21 21:38:42 +1000 | [diff] [blame] | 29 | 	select CRYPTO_BLKCIPHER | 
| Sebastian Siewior | 7dc748e | 2008-04-01 21:24:50 +0800 | [diff] [blame] | 30 | 	select CRYPTO_AES | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 31 | 	help | 
 | 32 | 	  Use VIA PadLock for AES algorithm. | 
 | 33 |  | 
| Michal Ludvig | 1191f0a | 2006-08-06 22:46:20 +1000 | [diff] [blame] | 34 | 	  Available in VIA C3 and newer CPUs. | 
 | 35 |  | 
 | 36 | 	  If unsure say M. The compiled module will be | 
| Pavel Machek | 4737f09 | 2009-06-05 00:44:53 +0200 | [diff] [blame] | 37 | 	  called padlock-aes. | 
| Michal Ludvig | 1191f0a | 2006-08-06 22:46:20 +1000 | [diff] [blame] | 38 |  | 
| Michal Ludvig | 6c83327 | 2006-07-12 12:29:38 +1000 | [diff] [blame] | 39 | config CRYPTO_DEV_PADLOCK_SHA | 
 | 40 | 	tristate "PadLock driver for SHA1 and SHA256 algorithms" | 
 | 41 | 	depends on CRYPTO_DEV_PADLOCK | 
 | 42 | 	select CRYPTO_SHA1 | 
 | 43 | 	select CRYPTO_SHA256 | 
| Michal Ludvig | 6c83327 | 2006-07-12 12:29:38 +1000 | [diff] [blame] | 44 | 	help | 
 | 45 | 	  Use VIA PadLock for SHA1/SHA256 algorithms. | 
 | 46 |  | 
 | 47 | 	  Available in VIA C7 and newer processors. | 
 | 48 |  | 
 | 49 | 	  If unsure say M. The compiled module will be | 
| Pavel Machek | 4737f09 | 2009-06-05 00:44:53 +0200 | [diff] [blame] | 50 | 	  called padlock-sha. | 
| Michal Ludvig | 6c83327 | 2006-07-12 12:29:38 +1000 | [diff] [blame] | 51 |  | 
| Jordan Crouse | 9fe757b | 2006-10-04 18:48:57 +1000 | [diff] [blame] | 52 | config CRYPTO_DEV_GEODE | 
 | 53 | 	tristate "Support for the Geode LX AES engine" | 
| Simon Arlott | f6259de | 2007-05-02 22:08:26 +1000 | [diff] [blame] | 54 | 	depends on X86_32 && PCI | 
| Jordan Crouse | 9fe757b | 2006-10-04 18:48:57 +1000 | [diff] [blame] | 55 | 	select CRYPTO_ALGAPI | 
 | 56 | 	select CRYPTO_BLKCIPHER | 
| Jordan Crouse | 9fe757b | 2006-10-04 18:48:57 +1000 | [diff] [blame] | 57 | 	help | 
 | 58 | 	  Say 'Y' here to use the AMD Geode LX processor on-board AES | 
| David Sterba | 3dde6ad | 2007-05-09 07:12:20 +0200 | [diff] [blame] | 59 | 	  engine for the CryptoAPI AES algorithm. | 
| Jordan Crouse | 9fe757b | 2006-10-04 18:48:57 +1000 | [diff] [blame] | 60 |  | 
 | 61 | 	  To compile this driver as a module, choose M here: the module | 
 | 62 | 	  will be called geode-aes. | 
 | 63 |  | 
| Martin Schwidefsky | 61d48c2 | 2007-05-10 15:46:00 +0200 | [diff] [blame] | 64 | config ZCRYPT | 
 | 65 | 	tristate "Support for PCI-attached cryptographic adapters" | 
 | 66 | 	depends on S390 | 
 | 67 | 	select ZCRYPT_MONOLITHIC if ZCRYPT="y" | 
| Ralph Wuerthner | 2f7c8bd | 2008-04-17 07:46:15 +0200 | [diff] [blame] | 68 | 	select HW_RANDOM | 
| Martin Schwidefsky | 61d48c2 | 2007-05-10 15:46:00 +0200 | [diff] [blame] | 69 | 	help | 
 | 70 | 	  Select this option if you want to use a PCI-attached cryptographic | 
 | 71 | 	  adapter like: | 
 | 72 | 	  + PCI Cryptographic Accelerator (PCICA) | 
 | 73 | 	  + PCI Cryptographic Coprocessor (PCICC) | 
 | 74 | 	  + PCI-X Cryptographic Coprocessor (PCIXCC) | 
 | 75 | 	  + Crypto Express2 Coprocessor (CEX2C) | 
 | 76 | 	  + Crypto Express2 Accelerator (CEX2A) | 
 | 77 |  | 
 | 78 | config ZCRYPT_MONOLITHIC | 
 | 79 | 	bool "Monolithic zcrypt module" | 
 | 80 | 	depends on ZCRYPT="m" | 
 | 81 | 	help | 
| Pavel Machek | 4737f09 | 2009-06-05 00:44:53 +0200 | [diff] [blame] | 82 | 	  Select this option if you want to have a single module z90crypt, | 
| Martin Schwidefsky | 61d48c2 | 2007-05-10 15:46:00 +0200 | [diff] [blame] | 83 | 	  that contains all parts of the crypto device driver (ap bus, | 
 | 84 | 	  request router and all the card drivers). | 
 | 85 |  | 
| Jan Glauber | 3f5615e | 2008-01-26 14:11:07 +0100 | [diff] [blame] | 86 | config CRYPTO_SHA1_S390 | 
 | 87 | 	tristate "SHA1 digest algorithm" | 
 | 88 | 	depends on S390 | 
| Herbert Xu | 563f346 | 2009-01-18 20:33:33 +1100 | [diff] [blame] | 89 | 	select CRYPTO_HASH | 
| Jan Glauber | 3f5615e | 2008-01-26 14:11:07 +0100 | [diff] [blame] | 90 | 	help | 
 | 91 | 	  This is the s390 hardware accelerated implementation of the | 
 | 92 | 	  SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2). | 
 | 93 |  | 
 | 94 | config CRYPTO_SHA256_S390 | 
 | 95 | 	tristate "SHA256 digest algorithm" | 
 | 96 | 	depends on S390 | 
| Herbert Xu | 563f346 | 2009-01-18 20:33:33 +1100 | [diff] [blame] | 97 | 	select CRYPTO_HASH | 
| Jan Glauber | 3f5615e | 2008-01-26 14:11:07 +0100 | [diff] [blame] | 98 | 	help | 
 | 99 | 	  This is the s390 hardware accelerated implementation of the | 
 | 100 | 	  SHA256 secure hash standard (DFIPS 180-2). | 
 | 101 |  | 
 | 102 | 	  This version of SHA implements a 256 bit hash with 128 bits of | 
 | 103 | 	  security against collision attacks. | 
 | 104 |  | 
| Jan Glauber | 291dc7c | 2008-03-06 19:52:00 +0800 | [diff] [blame] | 105 | config CRYPTO_SHA512_S390 | 
| Jan Glauber | 4e2c6d7 | 2008-03-06 19:53:50 +0800 | [diff] [blame] | 106 | 	tristate "SHA384 and SHA512 digest algorithm" | 
| Jan Glauber | 291dc7c | 2008-03-06 19:52:00 +0800 | [diff] [blame] | 107 | 	depends on S390 | 
| Herbert Xu | 563f346 | 2009-01-18 20:33:33 +1100 | [diff] [blame] | 108 | 	select CRYPTO_HASH | 
| Jan Glauber | 291dc7c | 2008-03-06 19:52:00 +0800 | [diff] [blame] | 109 | 	help | 
 | 110 | 	  This is the s390 hardware accelerated implementation of the | 
 | 111 | 	  SHA512 secure hash standard. | 
 | 112 |  | 
 | 113 | 	  This version of SHA implements a 512 bit hash with 256 bits of | 
| Jan Glauber | 4e2c6d7 | 2008-03-06 19:53:50 +0800 | [diff] [blame] | 114 | 	  security against collision attacks. The code also includes SHA-384, | 
 | 115 | 	  a 384 bit hash with 192 bits of security against collision attacks. | 
 | 116 |  | 
| Jan Glauber | 291dc7c | 2008-03-06 19:52:00 +0800 | [diff] [blame] | 117 |  | 
| Jan Glauber | 3f5615e | 2008-01-26 14:11:07 +0100 | [diff] [blame] | 118 | config CRYPTO_DES_S390 | 
 | 119 | 	tristate "DES and Triple DES cipher algorithms" | 
 | 120 | 	depends on S390 | 
 | 121 | 	select CRYPTO_ALGAPI | 
 | 122 | 	select CRYPTO_BLKCIPHER | 
 | 123 | 	help | 
 | 124 | 	  This us the s390 hardware accelerated implementation of the | 
 | 125 | 	  DES cipher algorithm (FIPS 46-2), and Triple DES EDE (FIPS 46-3). | 
 | 126 |  | 
 | 127 | config CRYPTO_AES_S390 | 
 | 128 | 	tristate "AES cipher algorithms" | 
 | 129 | 	depends on S390 | 
 | 130 | 	select CRYPTO_ALGAPI | 
 | 131 | 	select CRYPTO_BLKCIPHER | 
 | 132 | 	help | 
 | 133 | 	  This is the s390 hardware accelerated implementation of the | 
 | 134 | 	  AES cipher algorithms (FIPS-197). AES uses the Rijndael | 
 | 135 | 	  algorithm. | 
 | 136 |  | 
 | 137 | 	  Rijndael appears to be consistently a very good performer in | 
 | 138 | 	  both hardware and software across a wide range of computing | 
 | 139 | 	  environments regardless of its use in feedback or non-feedback | 
 | 140 | 	  modes. Its key setup time is excellent, and its key agility is | 
 | 141 | 	  good. Rijndael's very low memory requirements make it very well | 
 | 142 | 	  suited for restricted-space environments, in which it also | 
 | 143 | 	  demonstrates excellent performance. Rijndael's operations are | 
 | 144 | 	  among the easiest to defend against power and timing attacks. | 
 | 145 |  | 
 | 146 | 	  On s390 the System z9-109 currently only supports the key size | 
 | 147 | 	  of 128 bit. | 
 | 148 |  | 
 | 149 | config S390_PRNG | 
 | 150 | 	tristate "Pseudo random number generator device driver" | 
 | 151 | 	depends on S390 | 
 | 152 | 	default "m" | 
 | 153 | 	help | 
 | 154 | 	  Select this option if you want to use the s390 pseudo random number | 
 | 155 | 	  generator. The PRNG is part of the cryptographic processor functions | 
 | 156 | 	  and uses triple-DES to generate secure random numbers like the | 
 | 157 | 	  ANSI X9.17 standard. The PRNG is usable via the char device | 
 | 158 | 	  /dev/prandom. | 
 | 159 |  | 
| Evgeniy Polyakov | f7d0561 | 2007-10-26 21:31:14 +0800 | [diff] [blame] | 160 | config CRYPTO_DEV_HIFN_795X | 
 | 161 | 	tristate "Driver HIFN 795x crypto accelerator chips" | 
| Evgeniy Polyakov | c3041f9 | 2007-10-11 19:58:16 +0800 | [diff] [blame] | 162 | 	select CRYPTO_DES | 
| Evgeniy Polyakov | f7d0561 | 2007-10-26 21:31:14 +0800 | [diff] [blame] | 163 | 	select CRYPTO_ALGAPI | 
| Herbert Xu | 653ebd9c | 2007-11-27 19:48:27 +0800 | [diff] [blame] | 164 | 	select CRYPTO_BLKCIPHER | 
| Herbert Xu | 946fef4 | 2008-01-26 09:48:44 +1100 | [diff] [blame] | 165 | 	select HW_RANDOM if CRYPTO_DEV_HIFN_795X_RNG | 
| Jan Glauber | 2707b93 | 2007-11-12 21:56:38 +0800 | [diff] [blame] | 166 | 	depends on PCI | 
| Evgeniy Polyakov | f7d0561 | 2007-10-26 21:31:14 +0800 | [diff] [blame] | 167 | 	help | 
 | 168 | 	  This option allows you to have support for HIFN 795x crypto adapters. | 
 | 169 |  | 
| Herbert Xu | 946fef4 | 2008-01-26 09:48:44 +1100 | [diff] [blame] | 170 | config CRYPTO_DEV_HIFN_795X_RNG | 
 | 171 | 	bool "HIFN 795x random number generator" | 
 | 172 | 	depends on CRYPTO_DEV_HIFN_795X | 
 | 173 | 	help | 
 | 174 | 	  Select this option if you want to enable the random number generator | 
 | 175 | 	  on the HIFN 795x crypto adapters. | 
| Evgeniy Polyakov | f7d0561 | 2007-10-26 21:31:14 +0800 | [diff] [blame] | 176 |  | 
| Kim Phillips | 9c4a796 | 2008-06-23 19:50:15 +0800 | [diff] [blame] | 177 | config CRYPTO_DEV_TALITOS | 
 | 178 | 	tristate "Talitos Freescale Security Engine (SEC)" | 
 | 179 | 	select CRYPTO_ALGAPI | 
 | 180 | 	select CRYPTO_AUTHENC | 
 | 181 | 	select HW_RANDOM | 
 | 182 | 	depends on FSL_SOC | 
 | 183 | 	help | 
 | 184 | 	  Say 'Y' here to use the Freescale Security Engine (SEC) | 
 | 185 | 	  to offload cryptographic algorithm computation. | 
 | 186 |  | 
 | 187 | 	  The Freescale SEC is present on PowerQUICC 'E' processors, such | 
 | 188 | 	  as the MPC8349E and MPC8548E. | 
 | 189 |  | 
 | 190 | 	  To compile this driver as a module, choose M here: the module | 
 | 191 | 	  will be called talitos. | 
 | 192 |  | 
| Christian Hohnstaedt | 81bef01 | 2008-06-25 14:38:47 +0800 | [diff] [blame] | 193 | config CRYPTO_DEV_IXP4XX | 
 | 194 | 	tristate "Driver for IXP4xx crypto hardware acceleration" | 
 | 195 | 	depends on ARCH_IXP4XX | 
 | 196 | 	select CRYPTO_DES | 
 | 197 | 	select CRYPTO_ALGAPI | 
| Imre Kaloz | 090657e | 2008-07-13 20:12:11 +0800 | [diff] [blame] | 198 | 	select CRYPTO_AUTHENC | 
| Christian Hohnstaedt | 81bef01 | 2008-06-25 14:38:47 +0800 | [diff] [blame] | 199 | 	select CRYPTO_BLKCIPHER | 
 | 200 | 	help | 
 | 201 | 	  Driver for the IXP4xx NPE crypto engine. | 
 | 202 |  | 
| James Hsiao | 049359d | 2009-02-05 16:18:13 +1100 | [diff] [blame] | 203 | config CRYPTO_DEV_PPC4XX | 
 | 204 | 	tristate "Driver AMCC PPC4xx crypto accelerator" | 
 | 205 | 	depends on PPC && 4xx | 
 | 206 | 	select CRYPTO_HASH | 
 | 207 | 	select CRYPTO_ALGAPI | 
 | 208 | 	select CRYPTO_BLKCIPHER | 
 | 209 | 	help | 
 | 210 | 	  This option allows you to have support for AMCC crypto acceleration. | 
 | 211 |  | 
| Jan Engelhardt | b511431 | 2007-07-15 23:39:36 -0700 | [diff] [blame] | 212 | endif # CRYPTO_HW |