blob: ae27b7534ea7d14ee0c5f493e3eaf6e8f123eaa2 [file] [log] [blame]
Linus Torvalds1da177e2005-04-16 15:20:36 -07001#
Dan Williams685784a2007-07-09 11:56:42 -07002# Generic algorithms support
3#
4config XOR_BLOCKS
5 tristate
6
7#
Dan Williams9bc89cd2007-01-02 11:10:44 -07008# async_tx api: hardware offloaded memory transfer/transform support
9#
10source "crypto/async_tx/Kconfig"
11
12#
Linus Torvalds1da177e2005-04-16 15:20:36 -070013# Cryptographic API Configuration
14#
Jan Engelhardt2e290f42007-05-18 15:11:01 +100015menuconfig CRYPTO
Sebastian Siewiorc3715cb92008-03-30 16:36:09 +080016 tristate "Cryptographic API"
Linus Torvalds1da177e2005-04-16 15:20:36 -070017 help
18 This option provides the core Cryptographic API.
19
Herbert Xucce9e062006-08-21 21:08:13 +100020if CRYPTO
21
Sebastian Siewior584fffc2008-04-05 21:04:48 +080022comment "Crypto core or helper"
23
Neil Hormanccb778e2008-08-05 14:13:08 +080024config CRYPTO_FIPS
25 bool "FIPS 200 compliance"
Chuck Ebberte84c5482010-09-03 19:17:49 +080026 depends on CRYPTO_ANSI_CPRNG && !CRYPTO_MANAGER_DISABLE_TESTS
Neil Hormanccb778e2008-08-05 14:13:08 +080027 help
28 This options enables the fips boot option which is
29 required if you want to system to operate in a FIPS 200
30 certification. You should say no unless you know what
Chuck Ebberte84c5482010-09-03 19:17:49 +080031 this is.
Neil Hormanccb778e2008-08-05 14:13:08 +080032
Herbert Xucce9e062006-08-21 21:08:13 +100033config CRYPTO_ALGAPI
34 tristate
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110035 select CRYPTO_ALGAPI2
Herbert Xucce9e062006-08-21 21:08:13 +100036 help
37 This option provides the API for cryptographic algorithms.
38
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110039config CRYPTO_ALGAPI2
40 tristate
41
Herbert Xu1ae97822007-08-30 15:36:14 +080042config CRYPTO_AEAD
43 tristate
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110044 select CRYPTO_AEAD2
Herbert Xu1ae97822007-08-30 15:36:14 +080045 select CRYPTO_ALGAPI
46
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110047config CRYPTO_AEAD2
48 tristate
49 select CRYPTO_ALGAPI2
50
Herbert Xu5cde0af2006-08-22 00:07:53 +100051config CRYPTO_BLKCIPHER
52 tristate
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110053 select CRYPTO_BLKCIPHER2
Herbert Xu5cde0af2006-08-22 00:07:53 +100054 select CRYPTO_ALGAPI
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110055
56config CRYPTO_BLKCIPHER2
57 tristate
58 select CRYPTO_ALGAPI2
59 select CRYPTO_RNG2
Huang Ying0a2e8212009-02-19 14:44:02 +080060 select CRYPTO_WORKQUEUE
Herbert Xu5cde0af2006-08-22 00:07:53 +100061
Herbert Xu055bcee2006-08-19 22:24:23 +100062config CRYPTO_HASH
63 tristate
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110064 select CRYPTO_HASH2
Herbert Xu055bcee2006-08-19 22:24:23 +100065 select CRYPTO_ALGAPI
66
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110067config CRYPTO_HASH2
68 tristate
69 select CRYPTO_ALGAPI2
70
Neil Horman17f0f4a2008-08-14 22:15:52 +100071config CRYPTO_RNG
72 tristate
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110073 select CRYPTO_RNG2
Neil Horman17f0f4a2008-08-14 22:15:52 +100074 select CRYPTO_ALGAPI
75
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110076config CRYPTO_RNG2
77 tristate
78 select CRYPTO_ALGAPI2
79
Geert Uytterhoevena1d2f092009-03-04 15:05:33 +080080config CRYPTO_PCOMP
81 tristate
Herbert Xubc94e592010-06-03 20:33:06 +100082 select CRYPTO_PCOMP2
83 select CRYPTO_ALGAPI
84
85config CRYPTO_PCOMP2
86 tristate
Geert Uytterhoevena1d2f092009-03-04 15:05:33 +080087 select CRYPTO_ALGAPI2
88
Herbert Xu2b8c19d2006-09-21 11:31:44 +100089config CRYPTO_MANAGER
90 tristate "Cryptographic algorithm manager"
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110091 select CRYPTO_MANAGER2
Herbert Xu2b8c19d2006-09-21 11:31:44 +100092 help
93 Create default cryptographic template instantiations such as
94 cbc(aes).
95
Herbert Xu6a0fcbb2008-12-10 23:29:44 +110096config CRYPTO_MANAGER2
97 def_tristate CRYPTO_MANAGER || (CRYPTO_MANAGER!=n && CRYPTO_ALGAPI=y)
98 select CRYPTO_AEAD2
99 select CRYPTO_HASH2
100 select CRYPTO_BLKCIPHER2
Herbert Xubc94e592010-06-03 20:33:06 +1000101 select CRYPTO_PCOMP2
Herbert Xu6a0fcbb2008-12-10 23:29:44 +1100102
Herbert Xu326a6342010-08-06 09:40:28 +0800103config CRYPTO_MANAGER_DISABLE_TESTS
104 bool "Disable run-time self tests"
Herbert Xu00ca28a2010-08-06 10:34:00 +0800105 default y
106 depends on CRYPTO_MANAGER2
Alexander Shishkin0b767f92010-06-03 20:53:43 +1000107 help
Herbert Xu326a6342010-08-06 09:40:28 +0800108 Disable run-time self tests that normally take place at
109 algorithm registration.
Alexander Shishkin0b767f92010-06-03 20:53:43 +1000110
Rik Snelc494e072006-11-29 18:59:44 +1100111config CRYPTO_GF128MUL
112 tristate "GF(2^128) multiplication functions (EXPERIMENTAL)"
Rik Snelc494e072006-11-29 18:59:44 +1100113 help
114 Efficient table driven implementation of multiplications in the
115 field GF(2^128). This is needed by some cypher modes. This
116 option will be selected automatically if you select such a
117 cipher mode. Only select this option by hand if you expect to load
118 an external module that requires these functions.
119
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800120config CRYPTO_NULL
121 tristate "Null algorithms"
122 select CRYPTO_ALGAPI
123 select CRYPTO_BLKCIPHER
Herbert Xud35d2452008-11-08 08:09:56 +0800124 select CRYPTO_HASH
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800125 help
126 These are 'Null' algorithms, used by IPsec, which do nothing.
127
Steffen Klassert5068c7a2010-01-07 15:57:19 +1100128config CRYPTO_PCRYPT
129 tristate "Parallel crypto engine (EXPERIMENTAL)"
130 depends on SMP && EXPERIMENTAL
131 select PADATA
132 select CRYPTO_MANAGER
133 select CRYPTO_AEAD
134 help
135 This converts an arbitrary crypto algorithm into a parallel
136 algorithm that executes in kernel threads.
137
Huang Ying25c38d32009-02-19 14:33:40 +0800138config CRYPTO_WORKQUEUE
139 tristate
140
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800141config CRYPTO_CRYPTD
142 tristate "Software async crypto daemon"
Herbert Xudb131ef2006-09-21 11:44:08 +1000143 select CRYPTO_BLKCIPHER
Loc Hob8a28252008-05-14 21:23:00 +0800144 select CRYPTO_HASH
Herbert Xu43518402006-10-16 21:28:58 +1000145 select CRYPTO_MANAGER
Huang Ying254eff72009-02-19 14:42:19 +0800146 select CRYPTO_WORKQUEUE
Herbert Xudb131ef2006-09-21 11:44:08 +1000147 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800148 This is a generic software asynchronous crypto daemon that
149 converts an arbitrary synchronous software crypto algorithm
150 into an asynchronous algorithm that executes in a kernel thread.
151
152config CRYPTO_AUTHENC
153 tristate "Authenc support"
154 select CRYPTO_AEAD
155 select CRYPTO_BLKCIPHER
156 select CRYPTO_MANAGER
157 select CRYPTO_HASH
158 help
159 Authenc: Combined mode wrapper for IPsec.
160 This is required for IPSec.
161
162config CRYPTO_TEST
163 tristate "Testing module"
164 depends on m
Herbert Xuda7f0332008-07-31 17:08:25 +0800165 select CRYPTO_MANAGER
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800166 help
167 Quick & dirty crypto test module.
168
169comment "Authenticated Encryption with Associated Data"
170
171config CRYPTO_CCM
172 tristate "CCM support"
173 select CRYPTO_CTR
174 select CRYPTO_AEAD
175 help
176 Support for Counter with CBC MAC. Required for IPsec.
177
178config CRYPTO_GCM
179 tristate "GCM/GMAC support"
180 select CRYPTO_CTR
181 select CRYPTO_AEAD
Huang Ying9382d972009-08-06 15:34:26 +1000182 select CRYPTO_GHASH
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800183 help
184 Support for Galois/Counter Mode (GCM) and Galois Message
185 Authentication Code (GMAC). Required for IPSec.
186
187config CRYPTO_SEQIV
188 tristate "Sequence Number IV Generator"
189 select CRYPTO_AEAD
190 select CRYPTO_BLKCIPHER
Herbert Xua0f000e2008-08-14 22:21:31 +1000191 select CRYPTO_RNG
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800192 help
193 This IV generator generates an IV based on a sequence number by
194 xoring it with a salt. This algorithm is mainly useful for CTR
195
196comment "Block modes"
Herbert Xudb131ef2006-09-21 11:44:08 +1000197
198config CRYPTO_CBC
199 tristate "CBC support"
200 select CRYPTO_BLKCIPHER
Herbert Xu43518402006-10-16 21:28:58 +1000201 select CRYPTO_MANAGER
Herbert Xudb131ef2006-09-21 11:44:08 +1000202 help
203 CBC: Cipher Block Chaining mode
204 This block cipher algorithm is required for IPSec.
205
Joy Latten23e353c2007-10-23 08:50:32 +0800206config CRYPTO_CTR
207 tristate "CTR support"
208 select CRYPTO_BLKCIPHER
Herbert Xu0a270322007-11-30 21:38:37 +1100209 select CRYPTO_SEQIV
Joy Latten23e353c2007-10-23 08:50:32 +0800210 select CRYPTO_MANAGER
Joy Latten23e353c2007-10-23 08:50:32 +0800211 help
212 CTR: Counter mode
213 This block cipher algorithm is required for IPSec.
214
Kevin Coffman76cb9522008-03-24 21:26:16 +0800215config CRYPTO_CTS
216 tristate "CTS support"
217 select CRYPTO_BLKCIPHER
218 help
219 CTS: Cipher Text Stealing
220 This is the Cipher Text Stealing mode as described by
221 Section 8 of rfc2040 and referenced by rfc3962.
222 (rfc3962 includes errata information in its Appendix A)
223 This mode is required for Kerberos gss mechanism support
224 for AES encryption.
225
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800226config CRYPTO_ECB
227 tristate "ECB support"
Herbert Xu653ebd92007-11-27 19:48:27 +0800228 select CRYPTO_BLKCIPHER
Herbert Xu124b53d2007-04-16 20:49:20 +1000229 select CRYPTO_MANAGER
230 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800231 ECB: Electronic CodeBook mode
232 This is the simplest block cipher algorithm. It simply encrypts
233 the input block by block.
Herbert Xu124b53d2007-04-16 20:49:20 +1000234
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800235config CRYPTO_LRW
236 tristate "LRW support (EXPERIMENTAL)"
237 depends on EXPERIMENTAL
David Howells90831632006-12-16 12:13:14 +1100238 select CRYPTO_BLKCIPHER
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800239 select CRYPTO_MANAGER
240 select CRYPTO_GF128MUL
David Howells90831632006-12-16 12:13:14 +1100241 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800242 LRW: Liskov Rivest Wagner, a tweakable, non malleable, non movable
243 narrow block cipher mode for dm-crypt. Use it with cipher
244 specification string aes-lrw-benbi, the key must be 256, 320 or 384.
245 The first 128, 192 or 256 bits in the key are used for AES and the
246 rest is used to tie each cipher block to its logical position.
David Howells90831632006-12-16 12:13:14 +1100247
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800248config CRYPTO_PCBC
249 tristate "PCBC support"
250 select CRYPTO_BLKCIPHER
251 select CRYPTO_MANAGER
252 help
253 PCBC: Propagating Cipher Block Chaining mode
254 This block cipher algorithm is required for RxRPC.
255
256config CRYPTO_XTS
257 tristate "XTS support (EXPERIMENTAL)"
258 depends on EXPERIMENTAL
259 select CRYPTO_BLKCIPHER
260 select CRYPTO_MANAGER
261 select CRYPTO_GF128MUL
262 help
263 XTS: IEEE1619/D16 narrow block cipher use with aes-xts-plain,
264 key size 256, 384 or 512 bits. This implementation currently
265 can't handle a sectorsize which is not a multiple of 16 bytes.
266
267comment "Hash modes"
268
269config CRYPTO_HMAC
270 tristate "HMAC support"
271 select CRYPTO_HASH
272 select CRYPTO_MANAGER
273 help
274 HMAC: Keyed-Hashing for Message Authentication (RFC2104).
275 This is required for IPSec.
276
277config CRYPTO_XCBC
278 tristate "XCBC support"
279 depends on EXPERIMENTAL
280 select CRYPTO_HASH
281 select CRYPTO_MANAGER
282 help
283 XCBC: Keyed-Hashing with encryption algorithm
284 http://www.ietf.org/rfc/rfc3566.txt
285 http://csrc.nist.gov/encryption/modes/proposedmodes/
286 xcbc-mac/xcbc-mac-spec.pdf
287
Shane Wangf1939f72009-09-02 20:05:22 +1000288config CRYPTO_VMAC
289 tristate "VMAC support"
290 depends on EXPERIMENTAL
291 select CRYPTO_HASH
292 select CRYPTO_MANAGER
293 help
294 VMAC is a message authentication algorithm designed for
295 very high speed on 64-bit architectures.
296
297 See also:
298 <http://fastcrypto.org/vmac>
299
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800300comment "Digest"
301
302config CRYPTO_CRC32C
303 tristate "CRC32c CRC algorithm"
Herbert Xu5773a3e2008-07-08 20:54:28 +0800304 select CRYPTO_HASH
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800305 help
306 Castagnoli, et al Cyclic Redundancy-Check Algorithm. Used
307 by iSCSI for header and data digests and by others.
Herbert Xu69c35ef2008-11-07 15:11:47 +0800308 See Castagnoli93. Module will be crc32c.
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800309
Austin Zhang8cb51ba2008-08-07 09:57:03 +0800310config CRYPTO_CRC32C_INTEL
311 tristate "CRC32c INTEL hardware acceleration"
312 depends on X86
313 select CRYPTO_HASH
314 help
315 In Intel processor with SSE4.2 supported, the processor will
316 support CRC32C implementation using hardware accelerated CRC32
317 instruction. This option will create 'crc32c-intel' module,
318 which will enable any routine to use the CRC32 instruction to
319 gain performance compared with software implementation.
320 Module will be crc32c-intel.
321
Huang Ying2cdc6892009-08-06 15:32:38 +1000322config CRYPTO_GHASH
323 tristate "GHASH digest algorithm"
324 select CRYPTO_SHASH
325 select CRYPTO_GF128MUL
326 help
327 GHASH is message digest algorithm for GCM (Galois/Counter Mode).
328
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800329config CRYPTO_MD4
330 tristate "MD4 digest algorithm"
Adrian-Ken Rueegsegger808a1762008-12-03 19:55:27 +0800331 select CRYPTO_HASH
Linus Torvalds1da177e2005-04-16 15:20:36 -0700332 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800333 MD4 message digest algorithm (RFC1320).
Linus Torvalds1da177e2005-04-16 15:20:36 -0700334
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800335config CRYPTO_MD5
336 tristate "MD5 digest algorithm"
Adrian-Ken Rueegsegger14b75ba2008-12-03 19:57:12 +0800337 select CRYPTO_HASH
Linus Torvalds1da177e2005-04-16 15:20:36 -0700338 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800339 MD5 message digest algorithm (RFC1321).
Linus Torvalds1da177e2005-04-16 15:20:36 -0700340
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800341config CRYPTO_MICHAEL_MIC
342 tristate "Michael MIC keyed digest algorithm"
Adrian-Ken Rueegsegger19e2bf12008-12-07 19:35:38 +0800343 select CRYPTO_HASH
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800344 help
345 Michael MIC is used for message integrity protection in TKIP
346 (IEEE 802.11i). This algorithm is required for TKIP, but it
347 should not be used for other purposes because of the weakness
348 of the algorithm.
349
Adrian-Ken Rueegsegger82798f92008-05-07 22:17:37 +0800350config CRYPTO_RMD128
Adrian Bunkb6d44342008-07-16 19:28:00 +0800351 tristate "RIPEMD-128 digest algorithm"
Herbert Xu7c4468b2008-11-08 09:10:40 +0800352 select CRYPTO_HASH
Adrian Bunkb6d44342008-07-16 19:28:00 +0800353 help
354 RIPEMD-128 (ISO/IEC 10118-3:2004).
Adrian-Ken Rueegsegger82798f92008-05-07 22:17:37 +0800355
Adrian Bunkb6d44342008-07-16 19:28:00 +0800356 RIPEMD-128 is a 128-bit cryptographic hash function. It should only
Michael Witten35ed4b32011-07-09 04:02:31 +0000357 be used as a secure replacement for RIPEMD. For other use cases,
Adrian Bunkb6d44342008-07-16 19:28:00 +0800358 RIPEMD-160 should be used.
Adrian-Ken Rueegsegger82798f92008-05-07 22:17:37 +0800359
Adrian Bunkb6d44342008-07-16 19:28:00 +0800360 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
Justin P. Mattock6d8de742010-09-12 10:42:47 +0800361 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
Adrian-Ken Rueegsegger82798f92008-05-07 22:17:37 +0800362
363config CRYPTO_RMD160
Adrian Bunkb6d44342008-07-16 19:28:00 +0800364 tristate "RIPEMD-160 digest algorithm"
Herbert Xue5835fb2008-11-08 09:18:51 +0800365 select CRYPTO_HASH
Adrian Bunkb6d44342008-07-16 19:28:00 +0800366 help
367 RIPEMD-160 (ISO/IEC 10118-3:2004).
Adrian-Ken Rueegsegger82798f92008-05-07 22:17:37 +0800368
Adrian Bunkb6d44342008-07-16 19:28:00 +0800369 RIPEMD-160 is a 160-bit cryptographic hash function. It is intended
370 to be used as a secure replacement for the 128-bit hash functions
371 MD4, MD5 and it's predecessor RIPEMD
372 (not to be confused with RIPEMD-128).
Adrian-Ken Rueegsegger82798f92008-05-07 22:17:37 +0800373
Adrian Bunkb6d44342008-07-16 19:28:00 +0800374 It's speed is comparable to SHA1 and there are no known attacks
375 against RIPEMD-160.
Adrian-Ken Rueegsegger534fe2c2008-05-09 21:30:27 +0800376
Adrian Bunkb6d44342008-07-16 19:28:00 +0800377 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
Justin P. Mattock6d8de742010-09-12 10:42:47 +0800378 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
Adrian-Ken Rueegsegger534fe2c2008-05-09 21:30:27 +0800379
380config CRYPTO_RMD256
Adrian Bunkb6d44342008-07-16 19:28:00 +0800381 tristate "RIPEMD-256 digest algorithm"
Herbert Xud8a5e2e2008-11-08 09:58:10 +0800382 select CRYPTO_HASH
Adrian Bunkb6d44342008-07-16 19:28:00 +0800383 help
384 RIPEMD-256 is an optional extension of RIPEMD-128 with a
385 256 bit hash. It is intended for applications that require
386 longer hash-results, without needing a larger security level
387 (than RIPEMD-128).
Adrian-Ken Rueegsegger534fe2c2008-05-09 21:30:27 +0800388
Adrian Bunkb6d44342008-07-16 19:28:00 +0800389 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
Justin P. Mattock6d8de742010-09-12 10:42:47 +0800390 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
Adrian-Ken Rueegsegger534fe2c2008-05-09 21:30:27 +0800391
392config CRYPTO_RMD320
Adrian Bunkb6d44342008-07-16 19:28:00 +0800393 tristate "RIPEMD-320 digest algorithm"
Herbert Xu3b8efb42008-11-08 10:11:09 +0800394 select CRYPTO_HASH
Adrian Bunkb6d44342008-07-16 19:28:00 +0800395 help
396 RIPEMD-320 is an optional extension of RIPEMD-160 with a
397 320 bit hash. It is intended for applications that require
398 longer hash-results, without needing a larger security level
399 (than RIPEMD-160).
Adrian-Ken Rueegsegger534fe2c2008-05-09 21:30:27 +0800400
Adrian Bunkb6d44342008-07-16 19:28:00 +0800401 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
Justin P. Mattock6d8de742010-09-12 10:42:47 +0800402 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
Adrian-Ken Rueegsegger82798f92008-05-07 22:17:37 +0800403
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800404config CRYPTO_SHA1
405 tristate "SHA1 digest algorithm"
Adrian-Ken Rueegsegger54ccb362008-12-02 21:08:20 +0800406 select CRYPTO_HASH
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800407 help
408 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2).
409
410config CRYPTO_SHA256
411 tristate "SHA224 and SHA256 digest algorithm"
Adrian-Ken Rueegsegger50e109b2008-12-03 19:57:49 +0800412 select CRYPTO_HASH
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800413 help
414 SHA256 secure hash standard (DFIPS 180-2).
415
416 This version of SHA implements a 256 bit hash with 128 bits of
417 security against collision attacks.
418
Adrian Bunkb6d44342008-07-16 19:28:00 +0800419 This code also includes SHA-224, a 224 bit hash with 112 bits
420 of security against collision attacks.
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800421
422config CRYPTO_SHA512
423 tristate "SHA384 and SHA512 digest algorithms"
Adrian-Ken Rueegseggerbd9d20d2008-12-17 16:49:02 +1100424 select CRYPTO_HASH
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800425 help
426 SHA512 secure hash standard (DFIPS 180-2).
427
428 This version of SHA implements a 512 bit hash with 256 bits of
429 security against collision attacks.
430
431 This code also includes SHA-384, a 384 bit hash with 192 bits
432 of security against collision attacks.
433
434config CRYPTO_TGR192
435 tristate "Tiger digest algorithms"
Adrian-Ken Rueegseggerf63fbd32008-12-03 19:58:32 +0800436 select CRYPTO_HASH
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800437 help
438 Tiger hash algorithm 192, 160 and 128-bit hashes
439
440 Tiger is a hash function optimized for 64-bit processors while
441 still having decent performance on 32-bit processors.
442 Tiger was developed by Ross Anderson and Eli Biham.
Linus Torvalds1da177e2005-04-16 15:20:36 -0700443
444 See also:
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800445 <http://www.cs.technion.ac.il/~biham/Reports/Tiger/>.
446
447config CRYPTO_WP512
448 tristate "Whirlpool digest algorithms"
Adrian-Ken Rueegsegger49465102008-12-07 19:34:37 +0800449 select CRYPTO_HASH
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800450 help
451 Whirlpool hash algorithm 512, 384 and 256-bit hashes
452
453 Whirlpool-512 is part of the NESSIE cryptographic primitives.
454 Whirlpool will be part of the ISO/IEC 10118-3:2003(E) standard
455
456 See also:
Justin P. Mattock6d8de742010-09-12 10:42:47 +0800457 <http://www.larc.usp.br/~pbarreto/WhirlpoolPage.html>
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800458
Huang Ying0e1227d2009-10-19 11:53:06 +0900459config CRYPTO_GHASH_CLMUL_NI_INTEL
460 tristate "GHASH digest algorithm (CLMUL-NI accelerated)"
Richard Weinberger8af00862011-06-08 20:56:29 +0800461 depends on X86 && 64BIT
Huang Ying0e1227d2009-10-19 11:53:06 +0900462 select CRYPTO_SHASH
463 select CRYPTO_CRYPTD
464 help
465 GHASH is message digest algorithm for GCM (Galois/Counter Mode).
466 The implementation is accelerated by CLMUL-NI of Intel.
467
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800468comment "Ciphers"
Linus Torvalds1da177e2005-04-16 15:20:36 -0700469
470config CRYPTO_AES
471 tristate "AES cipher algorithms"
Herbert Xucce9e062006-08-21 21:08:13 +1000472 select CRYPTO_ALGAPI
Linus Torvalds1da177e2005-04-16 15:20:36 -0700473 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800474 AES cipher algorithms (FIPS-197). AES uses the Rijndael
Linus Torvalds1da177e2005-04-16 15:20:36 -0700475 algorithm.
476
477 Rijndael appears to be consistently a very good performer in
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800478 both hardware and software across a wide range of computing
479 environments regardless of its use in feedback or non-feedback
480 modes. Its key setup time is excellent, and its key agility is
481 good. Rijndael's very low memory requirements make it very well
482 suited for restricted-space environments, in which it also
483 demonstrates excellent performance. Rijndael's operations are
484 among the easiest to defend against power and timing attacks.
Linus Torvalds1da177e2005-04-16 15:20:36 -0700485
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800486 The AES specifies three key sizes: 128, 192 and 256 bits
Linus Torvalds1da177e2005-04-16 15:20:36 -0700487
488 See <http://csrc.nist.gov/CryptoToolkit/aes/> for more information.
489
490config CRYPTO_AES_586
491 tristate "AES cipher algorithms (i586)"
Herbert Xucce9e062006-08-21 21:08:13 +1000492 depends on (X86 || UML_X86) && !64BIT
493 select CRYPTO_ALGAPI
Sebastian Siewior5157dea2007-11-10 19:07:16 +0800494 select CRYPTO_AES
Linus Torvalds1da177e2005-04-16 15:20:36 -0700495 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800496 AES cipher algorithms (FIPS-197). AES uses the Rijndael
Linus Torvalds1da177e2005-04-16 15:20:36 -0700497 algorithm.
498
499 Rijndael appears to be consistently a very good performer in
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800500 both hardware and software across a wide range of computing
501 environments regardless of its use in feedback or non-feedback
502 modes. Its key setup time is excellent, and its key agility is
503 good. Rijndael's very low memory requirements make it very well
504 suited for restricted-space environments, in which it also
505 demonstrates excellent performance. Rijndael's operations are
506 among the easiest to defend against power and timing attacks.
Linus Torvalds1da177e2005-04-16 15:20:36 -0700507
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800508 The AES specifies three key sizes: 128, 192 and 256 bits
Linus Torvalds1da177e2005-04-16 15:20:36 -0700509
510 See <http://csrc.nist.gov/encryption/aes/> for more information.
511
Andreas Steinmetza2a892a2005-07-06 13:55:00 -0700512config CRYPTO_AES_X86_64
513 tristate "AES cipher algorithms (x86_64)"
Herbert Xucce9e062006-08-21 21:08:13 +1000514 depends on (X86 || UML_X86) && 64BIT
515 select CRYPTO_ALGAPI
Sebastian Siewior81190b32007-11-08 21:25:04 +0800516 select CRYPTO_AES
Andreas Steinmetza2a892a2005-07-06 13:55:00 -0700517 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800518 AES cipher algorithms (FIPS-197). AES uses the Rijndael
Andreas Steinmetza2a892a2005-07-06 13:55:00 -0700519 algorithm.
520
521 Rijndael appears to be consistently a very good performer in
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800522 both hardware and software across a wide range of computing
523 environments regardless of its use in feedback or non-feedback
524 modes. Its key setup time is excellent, and its key agility is
525 good. Rijndael's very low memory requirements make it very well
526 suited for restricted-space environments, in which it also
527 demonstrates excellent performance. Rijndael's operations are
528 among the easiest to defend against power and timing attacks.
Andreas Steinmetza2a892a2005-07-06 13:55:00 -0700529
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800530 The AES specifies three key sizes: 128, 192 and 256 bits
Andreas Steinmetza2a892a2005-07-06 13:55:00 -0700531
532 See <http://csrc.nist.gov/encryption/aes/> for more information.
533
Huang Ying54b6a1b2009-01-18 16:28:34 +1100534config CRYPTO_AES_NI_INTEL
535 tristate "AES cipher algorithms (AES-NI)"
Richard Weinberger8af00862011-06-08 20:56:29 +0800536 depends on X86
Mathias Krause0d258ef2010-11-27 16:34:46 +0800537 select CRYPTO_AES_X86_64 if 64BIT
538 select CRYPTO_AES_586 if !64BIT
Huang Ying54b6a1b2009-01-18 16:28:34 +1100539 select CRYPTO_CRYPTD
540 select CRYPTO_ALGAPI
541 help
542 Use Intel AES-NI instructions for AES algorithm.
543
544 AES cipher algorithms (FIPS-197). AES uses the Rijndael
545 algorithm.
546
547 Rijndael appears to be consistently a very good performer in
548 both hardware and software across a wide range of computing
549 environments regardless of its use in feedback or non-feedback
550 modes. Its key setup time is excellent, and its key agility is
551 good. Rijndael's very low memory requirements make it very well
552 suited for restricted-space environments, in which it also
553 demonstrates excellent performance. Rijndael's operations are
554 among the easiest to defend against power and timing attacks.
555
556 The AES specifies three key sizes: 128, 192 and 256 bits
557
558 See <http://csrc.nist.gov/encryption/aes/> for more information.
559
Mathias Krause0d258ef2010-11-27 16:34:46 +0800560 In addition to AES cipher algorithm support, the acceleration
561 for some popular block cipher mode is supported too, including
562 ECB, CBC, LRW, PCBC, XTS. The 64 bit version has additional
563 acceleration for CTR.
Huang Ying2cf4ac82009-03-29 15:41:20 +0800564
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800565config CRYPTO_ANUBIS
566 tristate "Anubis cipher algorithm"
567 select CRYPTO_ALGAPI
568 help
569 Anubis cipher algorithm.
570
571 Anubis is a variable key length cipher which can use keys from
572 128 bits to 320 bits in length. It was evaluated as a entrant
573 in the NESSIE competition.
574
575 See also:
Justin P. Mattock6d8de742010-09-12 10:42:47 +0800576 <https://www.cosic.esat.kuleuven.be/nessie/reports/>
577 <http://www.larc.usp.br/~pbarreto/AnubisPage.html>
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800578
579config CRYPTO_ARC4
580 tristate "ARC4 cipher algorithm"
581 select CRYPTO_ALGAPI
582 help
583 ARC4 cipher algorithm.
584
585 ARC4 is a stream cipher using keys ranging from 8 bits to 2048
586 bits in length. This algorithm is required for driver-based
587 WEP, but it should not be for other purposes because of the
588 weakness of the algorithm.
589
590config CRYPTO_BLOWFISH
591 tristate "Blowfish cipher algorithm"
592 select CRYPTO_ALGAPI
593 help
594 Blowfish cipher algorithm, by Bruce Schneier.
595
596 This is a variable key length cipher which can use keys from 32
597 bits to 448 bits in length. It's fast, simple and specifically
598 designed for use on "large microprocessors".
599
600 See also:
601 <http://www.schneier.com/blowfish.html>
602
603config CRYPTO_CAMELLIA
604 tristate "Camellia cipher algorithms"
605 depends on CRYPTO
606 select CRYPTO_ALGAPI
607 help
608 Camellia cipher algorithms module.
609
610 Camellia is a symmetric key block cipher developed jointly
611 at NTT and Mitsubishi Electric Corporation.
612
613 The Camellia specifies three key sizes: 128, 192 and 256 bits.
614
615 See also:
616 <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
617
Linus Torvalds1da177e2005-04-16 15:20:36 -0700618config CRYPTO_CAST5
619 tristate "CAST5 (CAST-128) cipher algorithm"
Herbert Xucce9e062006-08-21 21:08:13 +1000620 select CRYPTO_ALGAPI
Linus Torvalds1da177e2005-04-16 15:20:36 -0700621 help
622 The CAST5 encryption algorithm (synonymous with CAST-128) is
623 described in RFC2144.
624
625config CRYPTO_CAST6
626 tristate "CAST6 (CAST-256) cipher algorithm"
Herbert Xucce9e062006-08-21 21:08:13 +1000627 select CRYPTO_ALGAPI
Linus Torvalds1da177e2005-04-16 15:20:36 -0700628 help
629 The CAST6 encryption algorithm (synonymous with CAST-256) is
630 described in RFC2612.
631
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800632config CRYPTO_DES
633 tristate "DES and Triple DES EDE cipher algorithms"
Herbert Xucce9e062006-08-21 21:08:13 +1000634 select CRYPTO_ALGAPI
Linus Torvalds1da177e2005-04-16 15:20:36 -0700635 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800636 DES cipher algorithm (FIPS 46-2), and Triple DES EDE (FIPS 46-3).
Linus Torvalds1da177e2005-04-16 15:20:36 -0700637
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800638config CRYPTO_FCRYPT
639 tristate "FCrypt cipher algorithm"
Herbert Xucce9e062006-08-21 21:08:13 +1000640 select CRYPTO_ALGAPI
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800641 select CRYPTO_BLKCIPHER
Linus Torvalds1da177e2005-04-16 15:20:36 -0700642 help
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800643 FCrypt algorithm used by RxRPC.
Linus Torvalds1da177e2005-04-16 15:20:36 -0700644
645config CRYPTO_KHAZAD
646 tristate "Khazad cipher algorithm"
Herbert Xucce9e062006-08-21 21:08:13 +1000647 select CRYPTO_ALGAPI
Linus Torvalds1da177e2005-04-16 15:20:36 -0700648 help
649 Khazad cipher algorithm.
650
651 Khazad was a finalist in the initial NESSIE competition. It is
652 an algorithm optimized for 64-bit processors with good performance
653 on 32-bit processors. Khazad uses an 128 bit key size.
654
655 See also:
Justin P. Mattock6d8de742010-09-12 10:42:47 +0800656 <http://www.larc.usp.br/~pbarreto/KhazadPage.html>
Linus Torvalds1da177e2005-04-16 15:20:36 -0700657
Tan Swee Heng2407d602007-11-23 19:45:00 +0800658config CRYPTO_SALSA20
659 tristate "Salsa20 stream cipher algorithm (EXPERIMENTAL)"
660 depends on EXPERIMENTAL
661 select CRYPTO_BLKCIPHER
662 help
663 Salsa20 stream cipher algorithm.
664
665 Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
666 Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
667
668 The Salsa20 stream cipher algorithm is designed by Daniel J.
669 Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
Linus Torvalds1da177e2005-04-16 15:20:36 -0700670
Tan Swee Heng974e4b72007-12-10 15:52:56 +0800671config CRYPTO_SALSA20_586
672 tristate "Salsa20 stream cipher algorithm (i586) (EXPERIMENTAL)"
673 depends on (X86 || UML_X86) && !64BIT
674 depends on EXPERIMENTAL
675 select CRYPTO_BLKCIPHER
Tan Swee Heng974e4b72007-12-10 15:52:56 +0800676 help
677 Salsa20 stream cipher algorithm.
678
679 Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
680 Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
681
682 The Salsa20 stream cipher algorithm is designed by Daniel J.
683 Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
684
Tan Swee Heng9a7dafb2007-12-18 00:04:40 +0800685config CRYPTO_SALSA20_X86_64
686 tristate "Salsa20 stream cipher algorithm (x86_64) (EXPERIMENTAL)"
687 depends on (X86 || UML_X86) && 64BIT
688 depends on EXPERIMENTAL
689 select CRYPTO_BLKCIPHER
Tan Swee Heng9a7dafb2007-12-18 00:04:40 +0800690 help
691 Salsa20 stream cipher algorithm.
692
693 Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
694 Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
695
696 The Salsa20 stream cipher algorithm is designed by Daniel J.
697 Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
698
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800699config CRYPTO_SEED
700 tristate "SEED cipher algorithm"
701 select CRYPTO_ALGAPI
702 help
703 SEED cipher algorithm (RFC4269).
704
705 SEED is a 128-bit symmetric key block cipher that has been
706 developed by KISA (Korea Information Security Agency) as a
707 national standard encryption algorithm of the Republic of Korea.
708 It is a 16 round block cipher with the key size of 128 bit.
709
710 See also:
711 <http://www.kisa.or.kr/kisa/seed/jsp/seed_eng.jsp>
712
713config CRYPTO_SERPENT
714 tristate "Serpent cipher algorithm"
715 select CRYPTO_ALGAPI
716 help
717 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
718
719 Keys are allowed to be from 0 to 256 bits in length, in steps
720 of 8 bits. Also includes the 'Tnepres' algorithm, a reversed
721 variant of Serpent for compatibility with old kerneli.org code.
722
723 See also:
724 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
725
726config CRYPTO_TEA
727 tristate "TEA, XTEA and XETA cipher algorithms"
728 select CRYPTO_ALGAPI
729 help
730 TEA cipher algorithm.
731
732 Tiny Encryption Algorithm is a simple cipher that uses
733 many rounds for security. It is very fast and uses
734 little memory.
735
736 Xtendend Tiny Encryption Algorithm is a modification to
737 the TEA algorithm to address a potential key weakness
738 in the TEA algorithm.
739
740 Xtendend Encryption Tiny Algorithm is a mis-implementation
741 of the XTEA algorithm for compatibility purposes.
742
743config CRYPTO_TWOFISH
744 tristate "Twofish cipher algorithm"
745 select CRYPTO_ALGAPI
746 select CRYPTO_TWOFISH_COMMON
747 help
748 Twofish cipher algorithm.
749
750 Twofish was submitted as an AES (Advanced Encryption Standard)
751 candidate cipher by researchers at CounterPane Systems. It is a
752 16 round block cipher supporting key sizes of 128, 192, and 256
753 bits.
754
755 See also:
756 <http://www.schneier.com/twofish.html>
757
758config CRYPTO_TWOFISH_COMMON
759 tristate
760 help
761 Common parts of the Twofish cipher algorithm shared by the
762 generic c and the assembler implementations.
763
764config CRYPTO_TWOFISH_586
765 tristate "Twofish cipher algorithms (i586)"
766 depends on (X86 || UML_X86) && !64BIT
767 select CRYPTO_ALGAPI
768 select CRYPTO_TWOFISH_COMMON
769 help
770 Twofish cipher algorithm.
771
772 Twofish was submitted as an AES (Advanced Encryption Standard)
773 candidate cipher by researchers at CounterPane Systems. It is a
774 16 round block cipher supporting key sizes of 128, 192, and 256
775 bits.
776
777 See also:
778 <http://www.schneier.com/twofish.html>
779
780config CRYPTO_TWOFISH_X86_64
781 tristate "Twofish cipher algorithm (x86_64)"
782 depends on (X86 || UML_X86) && 64BIT
783 select CRYPTO_ALGAPI
784 select CRYPTO_TWOFISH_COMMON
785 help
786 Twofish cipher algorithm (x86_64).
787
788 Twofish was submitted as an AES (Advanced Encryption Standard)
789 candidate cipher by researchers at CounterPane Systems. It is a
790 16 round block cipher supporting key sizes of 128, 192, and 256
791 bits.
792
793 See also:
794 <http://www.schneier.com/twofish.html>
795
796comment "Compression"
797
Linus Torvalds1da177e2005-04-16 15:20:36 -0700798config CRYPTO_DEFLATE
799 tristate "Deflate compression algorithm"
Herbert Xucce9e062006-08-21 21:08:13 +1000800 select CRYPTO_ALGAPI
Linus Torvalds1da177e2005-04-16 15:20:36 -0700801 select ZLIB_INFLATE
802 select ZLIB_DEFLATE
803 help
804 This is the Deflate algorithm (RFC1951), specified for use in
805 IPSec with the IPCOMP protocol (RFC3173, RFC2394).
Sebastian Siewior584fffc2008-04-05 21:04:48 +0800806
Linus Torvalds1da177e2005-04-16 15:20:36 -0700807 You will most probably want this if using IPSec.
808
Geert Uytterhoevenbf68e652009-03-04 15:15:49 +0800809config CRYPTO_ZLIB
810 tristate "Zlib compression algorithm"
811 select CRYPTO_PCOMP
812 select ZLIB_INFLATE
813 select ZLIB_DEFLATE
814 select NLATTR
815 help
816 This is the zlib algorithm.
817
Zoltan Sogor0b77abb2007-12-07 16:53:23 +0800818config CRYPTO_LZO
819 tristate "LZO compression algorithm"
820 select CRYPTO_ALGAPI
821 select LZO_COMPRESS
822 select LZO_DECOMPRESS
823 help
824 This is the LZO algorithm.
825
Neil Horman17f0f4a2008-08-14 22:15:52 +1000826comment "Random Number Generation"
827
828config CRYPTO_ANSI_CPRNG
829 tristate "Pseudo Random Number Generation for Cryptographic modules"
Neil Horman4e4ed832009-08-20 17:54:16 +1000830 default m
Neil Horman17f0f4a2008-08-14 22:15:52 +1000831 select CRYPTO_AES
832 select CRYPTO_RNG
Neil Horman17f0f4a2008-08-14 22:15:52 +1000833 help
834 This option enables the generic pseudo random number generator
835 for cryptographic modules. Uses the Algorithm specified in
Jiri Kosina7dd607e2010-01-27 01:00:10 +0100836 ANSI X9.31 A.2.4. Note that this option must be enabled if
837 CRYPTO_FIPS is selected
Neil Horman17f0f4a2008-08-14 22:15:52 +1000838
Herbert Xu03c8efc2010-10-19 21:12:39 +0800839config CRYPTO_USER_API
840 tristate
841
Herbert Xufe869cd2010-10-19 21:23:00 +0800842config CRYPTO_USER_API_HASH
843 tristate "User-space interface for hash algorithms"
Herbert Xu74517082010-11-29 22:56:03 +0800844 depends on NET
Herbert Xufe869cd2010-10-19 21:23:00 +0800845 select CRYPTO_HASH
846 select CRYPTO_USER_API
847 help
848 This option enables the user-spaces interface for hash
849 algorithms.
850
Herbert Xu8ff59092010-10-19 21:31:55 +0800851config CRYPTO_USER_API_SKCIPHER
852 tristate "User-space interface for symmetric key cipher algorithms"
Herbert Xu74517082010-11-29 22:56:03 +0800853 depends on NET
Herbert Xu8ff59092010-10-19 21:31:55 +0800854 select CRYPTO_BLKCIPHER
855 select CRYPTO_USER_API
856 help
857 This option enables the user-spaces interface for symmetric
858 key cipher algorithms.
859
Linus Torvalds1da177e2005-04-16 15:20:36 -0700860source "drivers/crypto/Kconfig"
Linus Torvalds1da177e2005-04-16 15:20:36 -0700861
Herbert Xucce9e062006-08-21 21:08:13 +1000862endif # if CRYPTO