2 # Generic algorithms support
8 # async_tx api: hardware offloaded memory transfer/transform support
10 source "crypto/async_tx/Kconfig"
13 # Cryptographic API Configuration
16 tristate "Cryptographic API"
18 This option provides the core Cryptographic API.
22 comment "Crypto core or helper"
25 bool "FIPS 200 compliance"
26 depends on CRYPTO_ANSI_CPRNG && !CRYPTO_MANAGER_DISABLE_TESTS
28 This options enables the fips boot option which is
29 required if you want to system to operate in a FIPS 200
30 certification. You should say no unless you know what
37 This option provides the API for cryptographic algorithms.
51 config CRYPTO_BLKCIPHER
53 select CRYPTO_BLKCIPHER2
56 config CRYPTO_BLKCIPHER2
60 select CRYPTO_WORKQUEUE
90 tristate "Cryptographic algorithm manager"
91 select CRYPTO_MANAGER2
93 Create default cryptographic template instantiations such as
96 config CRYPTO_MANAGER2
97 def_tristate CRYPTO_MANAGER || (CRYPTO_MANAGER!=n && CRYPTO_ALGAPI=y)
100 select CRYPTO_BLKCIPHER2
104 tristate "Userspace cryptographic algorithm configuration"
106 select CRYPTO_MANAGER
108 Userspace configuration for cryptographic instantiations such as
111 config CRYPTO_MANAGER_DISABLE_TESTS
112 bool "Disable run-time self tests"
114 depends on CRYPTO_MANAGER2
116 Disable run-time self tests that normally take place at
117 algorithm registration.
119 config CRYPTO_GF128MUL
120 tristate "GF(2^128) multiplication functions"
122 Efficient table driven implementation of multiplications in the
123 field GF(2^128). This is needed by some cypher modes. This
124 option will be selected automatically if you select such a
125 cipher mode. Only select this option by hand if you expect to load
126 an external module that requires these functions.
129 tristate "Null algorithms"
131 select CRYPTO_BLKCIPHER
134 These are 'Null' algorithms, used by IPsec, which do nothing.
137 tristate "Parallel crypto engine"
140 select CRYPTO_MANAGER
143 This converts an arbitrary crypto algorithm into a parallel
144 algorithm that executes in kernel threads.
146 config CRYPTO_WORKQUEUE
150 tristate "Software async crypto daemon"
151 select CRYPTO_BLKCIPHER
153 select CRYPTO_MANAGER
154 select CRYPTO_WORKQUEUE
156 This is a generic software asynchronous crypto daemon that
157 converts an arbitrary synchronous software crypto algorithm
158 into an asynchronous algorithm that executes in a kernel thread.
160 config CRYPTO_AUTHENC
161 tristate "Authenc support"
163 select CRYPTO_BLKCIPHER
164 select CRYPTO_MANAGER
167 Authenc: Combined mode wrapper for IPsec.
168 This is required for IPSec.
171 tristate "Testing module"
173 select CRYPTO_MANAGER
175 Quick & dirty crypto test module.
177 config CRYPTO_ABLK_HELPER
181 config CRYPTO_GLUE_HELPER_X86
186 comment "Authenticated Encryption with Associated Data"
189 tristate "CCM support"
193 Support for Counter with CBC MAC. Required for IPsec.
196 tristate "GCM/GMAC support"
202 Support for Galois/Counter Mode (GCM) and Galois Message
203 Authentication Code (GMAC). Required for IPSec.
206 tristate "Sequence Number IV Generator"
208 select CRYPTO_BLKCIPHER
211 This IV generator generates an IV based on a sequence number by
212 xoring it with a salt. This algorithm is mainly useful for CTR
214 comment "Block modes"
217 tristate "CBC support"
218 select CRYPTO_BLKCIPHER
219 select CRYPTO_MANAGER
221 CBC: Cipher Block Chaining mode
222 This block cipher algorithm is required for IPSec.
225 tristate "CTR support"
226 select CRYPTO_BLKCIPHER
228 select CRYPTO_MANAGER
231 This block cipher algorithm is required for IPSec.
234 tristate "CTS support"
235 select CRYPTO_BLKCIPHER
237 CTS: Cipher Text Stealing
238 This is the Cipher Text Stealing mode as described by
239 Section 8 of rfc2040 and referenced by rfc3962.
240 (rfc3962 includes errata information in its Appendix A)
241 This mode is required for Kerberos gss mechanism support
245 tristate "ECB support"
246 select CRYPTO_BLKCIPHER
247 select CRYPTO_MANAGER
249 ECB: Electronic CodeBook mode
250 This is the simplest block cipher algorithm. It simply encrypts
251 the input block by block.
254 tristate "LRW support"
255 select CRYPTO_BLKCIPHER
256 select CRYPTO_MANAGER
257 select CRYPTO_GF128MUL
259 LRW: Liskov Rivest Wagner, a tweakable, non malleable, non movable
260 narrow block cipher mode for dm-crypt. Use it with cipher
261 specification string aes-lrw-benbi, the key must be 256, 320 or 384.
262 The first 128, 192 or 256 bits in the key are used for AES and the
263 rest is used to tie each cipher block to its logical position.
266 tristate "PCBC support"
267 select CRYPTO_BLKCIPHER
268 select CRYPTO_MANAGER
270 PCBC: Propagating Cipher Block Chaining mode
271 This block cipher algorithm is required for RxRPC.
274 tristate "XTS support"
275 select CRYPTO_BLKCIPHER
276 select CRYPTO_MANAGER
277 select CRYPTO_GF128MUL
279 XTS: IEEE1619/D16 narrow block cipher use with aes-xts-plain,
280 key size 256, 384 or 512 bits. This implementation currently
281 can't handle a sectorsize which is not a multiple of 16 bytes.
286 tristate "CMAC support"
288 select CRYPTO_MANAGER
290 Cipher-based Message Authentication Code (CMAC) specified by
291 The National Institute of Standards and Technology (NIST).
293 https://tools.ietf.org/html/rfc4493
294 http://csrc.nist.gov/publications/nistpubs/800-38B/SP_800-38B.pdf
297 tristate "HMAC support"
299 select CRYPTO_MANAGER
301 HMAC: Keyed-Hashing for Message Authentication (RFC2104).
302 This is required for IPSec.
305 tristate "XCBC support"
307 select CRYPTO_MANAGER
309 XCBC: Keyed-Hashing with encryption algorithm
310 http://www.ietf.org/rfc/rfc3566.txt
311 http://csrc.nist.gov/encryption/modes/proposedmodes/
312 xcbc-mac/xcbc-mac-spec.pdf
315 tristate "VMAC support"
317 select CRYPTO_MANAGER
319 VMAC is a message authentication algorithm designed for
320 very high speed on 64-bit architectures.
323 <http://fastcrypto.org/vmac>
328 tristate "CRC32c CRC algorithm"
332 Castagnoli, et al Cyclic Redundancy-Check Algorithm. Used
333 by iSCSI for header and data digests and by others.
334 See Castagnoli93. Module will be crc32c.
336 config CRYPTO_CRC32C_INTEL
337 tristate "CRC32c INTEL hardware acceleration"
341 In Intel processor with SSE4.2 supported, the processor will
342 support CRC32C implementation using hardware accelerated CRC32
343 instruction. This option will create 'crc32c-intel' module,
344 which will enable any routine to use the CRC32 instruction to
345 gain performance compared with software implementation.
346 Module will be crc32c-intel.
348 config CRYPTO_CRC32C_SPARC64
349 tristate "CRC32c CRC algorithm (SPARC64)"
354 CRC32c CRC algorithm implemented using sparc64 crypto instructions,
358 tristate "CRC32 CRC algorithm"
362 CRC-32-IEEE 802.3 cyclic redundancy-check algorithm.
363 Shash crypto api wrappers to crc32_le function.
365 config CRYPTO_CRC32_PCLMUL
366 tristate "CRC32 PCLMULQDQ hardware acceleration"
371 From Intel Westmere and AMD Bulldozer processor with SSE4.2
372 and PCLMULQDQ supported, the processor will support
373 CRC32 PCLMULQDQ implementation using hardware accelerated PCLMULQDQ
374 instruction. This option will create 'crc32-plcmul' module,
375 which will enable any routine to use the CRC-32-IEEE 802.3 checksum
376 and gain better performance as compared with the table implementation.
378 config CRYPTO_CRCT10DIF
379 tristate "CRCT10DIF algorithm"
382 CRC T10 Data Integrity Field computation is being cast as
383 a crypto transform. This allows for faster crc t10 diff
384 transforms to be used if they are available.
386 config CRYPTO_CRCT10DIF_PCLMUL
387 tristate "CRCT10DIF PCLMULQDQ hardware acceleration"
388 depends on X86 && 64BIT && CRC_T10DIF
391 For x86_64 processors with SSE4.2 and PCLMULQDQ supported,
392 CRC T10 DIF PCLMULQDQ computation can be hardware
393 accelerated PCLMULQDQ instruction. This option will create
394 'crct10dif-plcmul' module, which is faster when computing the
395 crct10dif checksum as compared with the generic table implementation.
398 tristate "GHASH digest algorithm"
399 select CRYPTO_GF128MUL
401 GHASH is message digest algorithm for GCM (Galois/Counter Mode).
404 tristate "MD4 digest algorithm"
407 MD4 message digest algorithm (RFC1320).
410 tristate "MD5 digest algorithm"
413 MD5 message digest algorithm (RFC1321).
415 config CRYPTO_MD5_SPARC64
416 tristate "MD5 digest algorithm (SPARC64)"
421 MD5 message digest algorithm (RFC1321) implemented
422 using sparc64 crypto instructions, when available.
424 config CRYPTO_MICHAEL_MIC
425 tristate "Michael MIC keyed digest algorithm"
428 Michael MIC is used for message integrity protection in TKIP
429 (IEEE 802.11i). This algorithm is required for TKIP, but it
430 should not be used for other purposes because of the weakness
434 tristate "RIPEMD-128 digest algorithm"
437 RIPEMD-128 (ISO/IEC 10118-3:2004).
439 RIPEMD-128 is a 128-bit cryptographic hash function. It should only
440 be used as a secure replacement for RIPEMD. For other use cases,
441 RIPEMD-160 should be used.
443 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
444 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
447 tristate "RIPEMD-160 digest algorithm"
450 RIPEMD-160 (ISO/IEC 10118-3:2004).
452 RIPEMD-160 is a 160-bit cryptographic hash function. It is intended
453 to be used as a secure replacement for the 128-bit hash functions
454 MD4, MD5 and it's predecessor RIPEMD
455 (not to be confused with RIPEMD-128).
457 It's speed is comparable to SHA1 and there are no known attacks
460 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
461 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
464 tristate "RIPEMD-256 digest algorithm"
467 RIPEMD-256 is an optional extension of RIPEMD-128 with a
468 256 bit hash. It is intended for applications that require
469 longer hash-results, without needing a larger security level
472 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
473 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
476 tristate "RIPEMD-320 digest algorithm"
479 RIPEMD-320 is an optional extension of RIPEMD-160 with a
480 320 bit hash. It is intended for applications that require
481 longer hash-results, without needing a larger security level
484 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
485 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
488 tristate "SHA1 digest algorithm"
491 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2).
493 config CRYPTO_SHA1_SSSE3
494 tristate "SHA1 digest algorithm (SSSE3/AVX/AVX2)"
495 depends on X86 && 64BIT
499 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented
500 using Supplemental SSE3 (SSSE3) instructions or Advanced Vector
501 Extensions (AVX/AVX2), when available.
503 config CRYPTO_SHA256_SSSE3
504 tristate "SHA256 digest algorithm (SSSE3/AVX/AVX2)"
505 depends on X86 && 64BIT
509 SHA-256 secure hash standard (DFIPS 180-2) implemented
510 using Supplemental SSE3 (SSSE3) instructions, or Advanced Vector
511 Extensions version 1 (AVX1), or Advanced Vector Extensions
512 version 2 (AVX2) instructions, when available.
514 config CRYPTO_SHA512_SSSE3
515 tristate "SHA512 digest algorithm (SSSE3/AVX/AVX2)"
516 depends on X86 && 64BIT
520 SHA-512 secure hash standard (DFIPS 180-2) implemented
521 using Supplemental SSE3 (SSSE3) instructions, or Advanced Vector
522 Extensions version 1 (AVX1), or Advanced Vector Extensions
523 version 2 (AVX2) instructions, when available.
525 config CRYPTO_SHA1_SPARC64
526 tristate "SHA1 digest algorithm (SPARC64)"
531 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented
532 using sparc64 crypto instructions, when available.
534 config CRYPTO_SHA1_ARM
535 tristate "SHA1 digest algorithm (ARM-asm)"
540 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented
541 using optimized ARM assembler.
543 config CRYPTO_SHA1_ARM_NEON
544 tristate "SHA1 digest algorithm (ARM NEON)"
545 depends on ARM && KERNEL_MODE_NEON && !CPU_BIG_ENDIAN
546 select CRYPTO_SHA1_ARM
550 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented
551 using optimized ARM NEON assembly, when NEON instructions are
554 config CRYPTO_SHA1_PPC
555 tristate "SHA1 digest algorithm (powerpc)"
558 This is the powerpc hardware accelerated implementation of the
559 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2).
562 tristate "SHA224 and SHA256 digest algorithm"
565 SHA256 secure hash standard (DFIPS 180-2).
567 This version of SHA implements a 256 bit hash with 128 bits of
568 security against collision attacks.
570 This code also includes SHA-224, a 224 bit hash with 112 bits
571 of security against collision attacks.
573 config CRYPTO_SHA256_SPARC64
574 tristate "SHA224 and SHA256 digest algorithm (SPARC64)"
579 SHA-256 secure hash standard (DFIPS 180-2) implemented
580 using sparc64 crypto instructions, when available.
583 tristate "SHA384 and SHA512 digest algorithms"
586 SHA512 secure hash standard (DFIPS 180-2).
588 This version of SHA implements a 512 bit hash with 256 bits of
589 security against collision attacks.
591 This code also includes SHA-384, a 384 bit hash with 192 bits
592 of security against collision attacks.
594 config CRYPTO_SHA512_SPARC64
595 tristate "SHA384 and SHA512 digest algorithm (SPARC64)"
600 SHA-512 secure hash standard (DFIPS 180-2) implemented
601 using sparc64 crypto instructions, when available.
603 config CRYPTO_SHA512_ARM_NEON
604 tristate "SHA384 and SHA512 digest algorithm (ARM NEON)"
605 depends on ARM && KERNEL_MODE_NEON && !CPU_BIG_ENDIAN
609 SHA-512 secure hash standard (DFIPS 180-2) implemented
610 using ARM NEON instructions, when available.
612 This version of SHA implements a 512 bit hash with 256 bits of
613 security against collision attacks.
615 This code also includes SHA-384, a 384 bit hash with 192 bits
616 of security against collision attacks.
619 tristate "Tiger digest algorithms"
622 Tiger hash algorithm 192, 160 and 128-bit hashes
624 Tiger is a hash function optimized for 64-bit processors while
625 still having decent performance on 32-bit processors.
626 Tiger was developed by Ross Anderson and Eli Biham.
629 <http://www.cs.technion.ac.il/~biham/Reports/Tiger/>.
632 tristate "Whirlpool digest algorithms"
635 Whirlpool hash algorithm 512, 384 and 256-bit hashes
637 Whirlpool-512 is part of the NESSIE cryptographic primitives.
638 Whirlpool will be part of the ISO/IEC 10118-3:2003(E) standard
641 <http://www.larc.usp.br/~pbarreto/WhirlpoolPage.html>
643 config CRYPTO_GHASH_CLMUL_NI_INTEL
644 tristate "GHASH digest algorithm (CLMUL-NI accelerated)"
645 depends on X86 && 64BIT
648 GHASH is message digest algorithm for GCM (Galois/Counter Mode).
649 The implementation is accelerated by CLMUL-NI of Intel.
654 tristate "AES cipher algorithms"
657 AES cipher algorithms (FIPS-197). AES uses the Rijndael
660 Rijndael appears to be consistently a very good performer in
661 both hardware and software across a wide range of computing
662 environments regardless of its use in feedback or non-feedback
663 modes. Its key setup time is excellent, and its key agility is
664 good. Rijndael's very low memory requirements make it very well
665 suited for restricted-space environments, in which it also
666 demonstrates excellent performance. Rijndael's operations are
667 among the easiest to defend against power and timing attacks.
669 The AES specifies three key sizes: 128, 192 and 256 bits
671 See <http://csrc.nist.gov/CryptoToolkit/aes/> for more information.
673 config CRYPTO_AES_586
674 tristate "AES cipher algorithms (i586)"
675 depends on (X86 || UML_X86) && !64BIT
679 AES cipher algorithms (FIPS-197). AES uses the Rijndael
682 Rijndael appears to be consistently a very good performer in
683 both hardware and software across a wide range of computing
684 environments regardless of its use in feedback or non-feedback
685 modes. Its key setup time is excellent, and its key agility is
686 good. Rijndael's very low memory requirements make it very well
687 suited for restricted-space environments, in which it also
688 demonstrates excellent performance. Rijndael's operations are
689 among the easiest to defend against power and timing attacks.
691 The AES specifies three key sizes: 128, 192 and 256 bits
693 See <http://csrc.nist.gov/encryption/aes/> for more information.
695 config CRYPTO_AES_X86_64
696 tristate "AES cipher algorithms (x86_64)"
697 depends on (X86 || UML_X86) && 64BIT
701 AES cipher algorithms (FIPS-197). AES uses the Rijndael
704 Rijndael appears to be consistently a very good performer in
705 both hardware and software across a wide range of computing
706 environments regardless of its use in feedback or non-feedback
707 modes. Its key setup time is excellent, and its key agility is
708 good. Rijndael's very low memory requirements make it very well
709 suited for restricted-space environments, in which it also
710 demonstrates excellent performance. Rijndael's operations are
711 among the easiest to defend against power and timing attacks.
713 The AES specifies three key sizes: 128, 192 and 256 bits
715 See <http://csrc.nist.gov/encryption/aes/> for more information.
717 config CRYPTO_AES_NI_INTEL
718 tristate "AES cipher algorithms (AES-NI)"
720 select CRYPTO_AES_X86_64 if 64BIT
721 select CRYPTO_AES_586 if !64BIT
723 select CRYPTO_ABLK_HELPER
725 select CRYPTO_GLUE_HELPER_X86 if 64BIT
729 Use Intel AES-NI instructions for AES algorithm.
731 AES cipher algorithms (FIPS-197). AES uses the Rijndael
734 Rijndael appears to be consistently a very good performer in
735 both hardware and software across a wide range of computing
736 environments regardless of its use in feedback or non-feedback
737 modes. Its key setup time is excellent, and its key agility is
738 good. Rijndael's very low memory requirements make it very well
739 suited for restricted-space environments, in which it also
740 demonstrates excellent performance. Rijndael's operations are
741 among the easiest to defend against power and timing attacks.
743 The AES specifies three key sizes: 128, 192 and 256 bits
745 See <http://csrc.nist.gov/encryption/aes/> for more information.
747 In addition to AES cipher algorithm support, the acceleration
748 for some popular block cipher mode is supported too, including
749 ECB, CBC, LRW, PCBC, XTS. The 64 bit version has additional
750 acceleration for CTR.
752 config CRYPTO_AES_SPARC64
753 tristate "AES cipher algorithms (SPARC64)"
758 Use SPARC64 crypto opcodes for AES algorithm.
760 AES cipher algorithms (FIPS-197). AES uses the Rijndael
763 Rijndael appears to be consistently a very good performer in
764 both hardware and software across a wide range of computing
765 environments regardless of its use in feedback or non-feedback
766 modes. Its key setup time is excellent, and its key agility is
767 good. Rijndael's very low memory requirements make it very well
768 suited for restricted-space environments, in which it also
769 demonstrates excellent performance. Rijndael's operations are
770 among the easiest to defend against power and timing attacks.
772 The AES specifies three key sizes: 128, 192 and 256 bits
774 See <http://csrc.nist.gov/encryption/aes/> for more information.
776 In addition to AES cipher algorithm support, the acceleration
777 for some popular block cipher mode is supported too, including
780 config CRYPTO_AES_ARM
781 tristate "AES cipher algorithms (ARM-asm)"
786 Use optimized AES assembler routines for ARM platforms.
788 AES cipher algorithms (FIPS-197). AES uses the Rijndael
791 Rijndael appears to be consistently a very good performer in
792 both hardware and software across a wide range of computing
793 environments regardless of its use in feedback or non-feedback
794 modes. Its key setup time is excellent, and its key agility is
795 good. Rijndael's very low memory requirements make it very well
796 suited for restricted-space environments, in which it also
797 demonstrates excellent performance. Rijndael's operations are
798 among the easiest to defend against power and timing attacks.
800 The AES specifies three key sizes: 128, 192 and 256 bits
802 See <http://csrc.nist.gov/encryption/aes/> for more information.
804 config CRYPTO_AES_ARM_BS
805 tristate "Bit sliced AES using NEON instructions"
806 depends on ARM && KERNEL_MODE_NEON
808 select CRYPTO_AES_ARM
809 select CRYPTO_ABLK_HELPER
811 Use a faster and more secure NEON based implementation of AES in CBC,
814 Bit sliced AES gives around 45% speedup on Cortex-A15 for CTR mode
815 and for XTS mode encryption, CBC and XTS mode decryption speedup is
816 around 25%. (CBC encryption speed is not affected by this driver.)
817 This implementation does not rely on any lookup tables so it is
818 believed to be invulnerable to cache timing attacks.
821 tristate "Anubis cipher algorithm"
824 Anubis cipher algorithm.
826 Anubis is a variable key length cipher which can use keys from
827 128 bits to 320 bits in length. It was evaluated as a entrant
828 in the NESSIE competition.
831 <https://www.cosic.esat.kuleuven.be/nessie/reports/>
832 <http://www.larc.usp.br/~pbarreto/AnubisPage.html>
835 tristate "ARC4 cipher algorithm"
836 select CRYPTO_BLKCIPHER
838 ARC4 cipher algorithm.
840 ARC4 is a stream cipher using keys ranging from 8 bits to 2048
841 bits in length. This algorithm is required for driver-based
842 WEP, but it should not be for other purposes because of the
843 weakness of the algorithm.
845 config CRYPTO_BLOWFISH
846 tristate "Blowfish cipher algorithm"
848 select CRYPTO_BLOWFISH_COMMON
850 Blowfish cipher algorithm, by Bruce Schneier.
852 This is a variable key length cipher which can use keys from 32
853 bits to 448 bits in length. It's fast, simple and specifically
854 designed for use on "large microprocessors".
857 <http://www.schneier.com/blowfish.html>
859 config CRYPTO_BLOWFISH_COMMON
862 Common parts of the Blowfish cipher algorithm shared by the
863 generic c and the assembler implementations.
866 <http://www.schneier.com/blowfish.html>
868 config CRYPTO_BLOWFISH_X86_64
869 tristate "Blowfish cipher algorithm (x86_64)"
870 depends on X86 && 64BIT
872 select CRYPTO_BLOWFISH_COMMON
874 Blowfish cipher algorithm (x86_64), by Bruce Schneier.
876 This is a variable key length cipher which can use keys from 32
877 bits to 448 bits in length. It's fast, simple and specifically
878 designed for use on "large microprocessors".
881 <http://www.schneier.com/blowfish.html>
883 config CRYPTO_CAMELLIA
884 tristate "Camellia cipher algorithms"
888 Camellia cipher algorithms module.
890 Camellia is a symmetric key block cipher developed jointly
891 at NTT and Mitsubishi Electric Corporation.
893 The Camellia specifies three key sizes: 128, 192 and 256 bits.
896 <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
898 config CRYPTO_CAMELLIA_X86_64
899 tristate "Camellia cipher algorithm (x86_64)"
900 depends on X86 && 64BIT
903 select CRYPTO_GLUE_HELPER_X86
907 Camellia cipher algorithm module (x86_64).
909 Camellia is a symmetric key block cipher developed jointly
910 at NTT and Mitsubishi Electric Corporation.
912 The Camellia specifies three key sizes: 128, 192 and 256 bits.
915 <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
917 config CRYPTO_CAMELLIA_AESNI_AVX_X86_64
918 tristate "Camellia cipher algorithm (x86_64/AES-NI/AVX)"
919 depends on X86 && 64BIT
923 select CRYPTO_ABLK_HELPER
924 select CRYPTO_GLUE_HELPER_X86
925 select CRYPTO_CAMELLIA_X86_64
929 Camellia cipher algorithm module (x86_64/AES-NI/AVX).
931 Camellia is a symmetric key block cipher developed jointly
932 at NTT and Mitsubishi Electric Corporation.
934 The Camellia specifies three key sizes: 128, 192 and 256 bits.
937 <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
939 config CRYPTO_CAMELLIA_AESNI_AVX2_X86_64
940 tristate "Camellia cipher algorithm (x86_64/AES-NI/AVX2)"
941 depends on X86 && 64BIT
945 select CRYPTO_ABLK_HELPER
946 select CRYPTO_GLUE_HELPER_X86
947 select CRYPTO_CAMELLIA_X86_64
948 select CRYPTO_CAMELLIA_AESNI_AVX_X86_64
952 Camellia cipher algorithm module (x86_64/AES-NI/AVX2).
954 Camellia is a symmetric key block cipher developed jointly
955 at NTT and Mitsubishi Electric Corporation.
957 The Camellia specifies three key sizes: 128, 192 and 256 bits.
960 <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
962 config CRYPTO_CAMELLIA_SPARC64
963 tristate "Camellia cipher algorithm (SPARC64)"
968 Camellia cipher algorithm module (SPARC64).
970 Camellia is a symmetric key block cipher developed jointly
971 at NTT and Mitsubishi Electric Corporation.
973 The Camellia specifies three key sizes: 128, 192 and 256 bits.
976 <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
978 config CRYPTO_CAST_COMMON
981 Common parts of the CAST cipher algorithms shared by the
982 generic c and the assembler implementations.
985 tristate "CAST5 (CAST-128) cipher algorithm"
987 select CRYPTO_CAST_COMMON
989 The CAST5 encryption algorithm (synonymous with CAST-128) is
990 described in RFC2144.
992 config CRYPTO_CAST5_AVX_X86_64
993 tristate "CAST5 (CAST-128) cipher algorithm (x86_64/AVX)"
994 depends on X86 && 64BIT
997 select CRYPTO_ABLK_HELPER
998 select CRYPTO_CAST_COMMON
1001 The CAST5 encryption algorithm (synonymous with CAST-128) is
1002 described in RFC2144.
1004 This module provides the Cast5 cipher algorithm that processes
1005 sixteen blocks parallel using the AVX instruction set.
1008 tristate "CAST6 (CAST-256) cipher algorithm"
1009 select CRYPTO_ALGAPI
1010 select CRYPTO_CAST_COMMON
1012 The CAST6 encryption algorithm (synonymous with CAST-256) is
1013 described in RFC2612.
1015 config CRYPTO_CAST6_AVX_X86_64
1016 tristate "CAST6 (CAST-256) cipher algorithm (x86_64/AVX)"
1017 depends on X86 && 64BIT
1018 select CRYPTO_ALGAPI
1019 select CRYPTO_CRYPTD
1020 select CRYPTO_ABLK_HELPER
1021 select CRYPTO_GLUE_HELPER_X86
1022 select CRYPTO_CAST_COMMON
1027 The CAST6 encryption algorithm (synonymous with CAST-256) is
1028 described in RFC2612.
1030 This module provides the Cast6 cipher algorithm that processes
1031 eight blocks parallel using the AVX instruction set.
1034 tristate "DES and Triple DES EDE cipher algorithms"
1035 select CRYPTO_ALGAPI
1037 DES cipher algorithm (FIPS 46-2), and Triple DES EDE (FIPS 46-3).
1039 config CRYPTO_DES_SPARC64
1040 tristate "DES and Triple DES EDE cipher algorithms (SPARC64)"
1042 select CRYPTO_ALGAPI
1045 DES cipher algorithm (FIPS 46-2), and Triple DES EDE (FIPS 46-3),
1046 optimized using SPARC64 crypto opcodes.
1048 config CRYPTO_FCRYPT
1049 tristate "FCrypt cipher algorithm"
1050 select CRYPTO_ALGAPI
1051 select CRYPTO_BLKCIPHER
1053 FCrypt algorithm used by RxRPC.
1055 config CRYPTO_KHAZAD
1056 tristate "Khazad cipher algorithm"
1057 select CRYPTO_ALGAPI
1059 Khazad cipher algorithm.
1061 Khazad was a finalist in the initial NESSIE competition. It is
1062 an algorithm optimized for 64-bit processors with good performance
1063 on 32-bit processors. Khazad uses an 128 bit key size.
1066 <http://www.larc.usp.br/~pbarreto/KhazadPage.html>
1068 config CRYPTO_SALSA20
1069 tristate "Salsa20 stream cipher algorithm"
1070 select CRYPTO_BLKCIPHER
1072 Salsa20 stream cipher algorithm.
1074 Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
1075 Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
1077 The Salsa20 stream cipher algorithm is designed by Daniel J.
1078 Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
1080 config CRYPTO_SALSA20_586
1081 tristate "Salsa20 stream cipher algorithm (i586)"
1082 depends on (X86 || UML_X86) && !64BIT
1083 select CRYPTO_BLKCIPHER
1085 Salsa20 stream cipher algorithm.
1087 Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
1088 Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
1090 The Salsa20 stream cipher algorithm is designed by Daniel J.
1091 Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
1093 config CRYPTO_SALSA20_X86_64
1094 tristate "Salsa20 stream cipher algorithm (x86_64)"
1095 depends on (X86 || UML_X86) && 64BIT
1096 select CRYPTO_BLKCIPHER
1098 Salsa20 stream cipher algorithm.
1100 Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
1101 Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
1103 The Salsa20 stream cipher algorithm is designed by Daniel J.
1104 Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
1107 tristate "SEED cipher algorithm"
1108 select CRYPTO_ALGAPI
1110 SEED cipher algorithm (RFC4269).
1112 SEED is a 128-bit symmetric key block cipher that has been
1113 developed by KISA (Korea Information Security Agency) as a
1114 national standard encryption algorithm of the Republic of Korea.
1115 It is a 16 round block cipher with the key size of 128 bit.
1118 <http://www.kisa.or.kr/kisa/seed/jsp/seed_eng.jsp>
1120 config CRYPTO_SERPENT
1121 tristate "Serpent cipher algorithm"
1122 select CRYPTO_ALGAPI
1124 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
1126 Keys are allowed to be from 0 to 256 bits in length, in steps
1127 of 8 bits. Also includes the 'Tnepres' algorithm, a reversed
1128 variant of Serpent for compatibility with old kerneli.org code.
1131 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
1133 config CRYPTO_SERPENT_SSE2_X86_64
1134 tristate "Serpent cipher algorithm (x86_64/SSE2)"
1135 depends on X86 && 64BIT
1136 select CRYPTO_ALGAPI
1137 select CRYPTO_CRYPTD
1138 select CRYPTO_ABLK_HELPER
1139 select CRYPTO_GLUE_HELPER_X86
1140 select CRYPTO_SERPENT
1144 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
1146 Keys are allowed to be from 0 to 256 bits in length, in steps
1149 This module provides Serpent cipher algorithm that processes eigth
1150 blocks parallel using SSE2 instruction set.
1153 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
1155 config CRYPTO_SERPENT_SSE2_586
1156 tristate "Serpent cipher algorithm (i586/SSE2)"
1157 depends on X86 && !64BIT
1158 select CRYPTO_ALGAPI
1159 select CRYPTO_CRYPTD
1160 select CRYPTO_ABLK_HELPER
1161 select CRYPTO_GLUE_HELPER_X86
1162 select CRYPTO_SERPENT
1166 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
1168 Keys are allowed to be from 0 to 256 bits in length, in steps
1171 This module provides Serpent cipher algorithm that processes four
1172 blocks parallel using SSE2 instruction set.
1175 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
1177 config CRYPTO_SERPENT_AVX_X86_64
1178 tristate "Serpent cipher algorithm (x86_64/AVX)"
1179 depends on X86 && 64BIT
1180 select CRYPTO_ALGAPI
1181 select CRYPTO_CRYPTD
1182 select CRYPTO_ABLK_HELPER
1183 select CRYPTO_GLUE_HELPER_X86
1184 select CRYPTO_SERPENT
1188 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
1190 Keys are allowed to be from 0 to 256 bits in length, in steps
1193 This module provides the Serpent cipher algorithm that processes
1194 eight blocks parallel using the AVX instruction set.
1197 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
1199 config CRYPTO_SERPENT_AVX2_X86_64
1200 tristate "Serpent cipher algorithm (x86_64/AVX2)"
1201 depends on X86 && 64BIT
1202 select CRYPTO_ALGAPI
1203 select CRYPTO_CRYPTD
1204 select CRYPTO_ABLK_HELPER
1205 select CRYPTO_GLUE_HELPER_X86
1206 select CRYPTO_SERPENT
1207 select CRYPTO_SERPENT_AVX_X86_64
1211 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
1213 Keys are allowed to be from 0 to 256 bits in length, in steps
1216 This module provides Serpent cipher algorithm that processes 16
1217 blocks parallel using AVX2 instruction set.
1220 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
1223 tristate "TEA, XTEA and XETA cipher algorithms"
1224 select CRYPTO_ALGAPI
1226 TEA cipher algorithm.
1228 Tiny Encryption Algorithm is a simple cipher that uses
1229 many rounds for security. It is very fast and uses
1232 Xtendend Tiny Encryption Algorithm is a modification to
1233 the TEA algorithm to address a potential key weakness
1234 in the TEA algorithm.
1236 Xtendend Encryption Tiny Algorithm is a mis-implementation
1237 of the XTEA algorithm for compatibility purposes.
1239 config CRYPTO_TWOFISH
1240 tristate "Twofish cipher algorithm"
1241 select CRYPTO_ALGAPI
1242 select CRYPTO_TWOFISH_COMMON
1244 Twofish cipher algorithm.
1246 Twofish was submitted as an AES (Advanced Encryption Standard)
1247 candidate cipher by researchers at CounterPane Systems. It is a
1248 16 round block cipher supporting key sizes of 128, 192, and 256
1252 <http://www.schneier.com/twofish.html>
1254 config CRYPTO_TWOFISH_COMMON
1257 Common parts of the Twofish cipher algorithm shared by the
1258 generic c and the assembler implementations.
1260 config CRYPTO_TWOFISH_586
1261 tristate "Twofish cipher algorithms (i586)"
1262 depends on (X86 || UML_X86) && !64BIT
1263 select CRYPTO_ALGAPI
1264 select CRYPTO_TWOFISH_COMMON
1266 Twofish cipher algorithm.
1268 Twofish was submitted as an AES (Advanced Encryption Standard)
1269 candidate cipher by researchers at CounterPane Systems. It is a
1270 16 round block cipher supporting key sizes of 128, 192, and 256
1274 <http://www.schneier.com/twofish.html>
1276 config CRYPTO_TWOFISH_X86_64
1277 tristate "Twofish cipher algorithm (x86_64)"
1278 depends on (X86 || UML_X86) && 64BIT
1279 select CRYPTO_ALGAPI
1280 select CRYPTO_TWOFISH_COMMON
1282 Twofish cipher algorithm (x86_64).
1284 Twofish was submitted as an AES (Advanced Encryption Standard)
1285 candidate cipher by researchers at CounterPane Systems. It is a
1286 16 round block cipher supporting key sizes of 128, 192, and 256
1290 <http://www.schneier.com/twofish.html>
1292 config CRYPTO_TWOFISH_X86_64_3WAY
1293 tristate "Twofish cipher algorithm (x86_64, 3-way parallel)"
1294 depends on X86 && 64BIT
1295 select CRYPTO_ALGAPI
1296 select CRYPTO_TWOFISH_COMMON
1297 select CRYPTO_TWOFISH_X86_64
1298 select CRYPTO_GLUE_HELPER_X86
1302 Twofish cipher algorithm (x86_64, 3-way parallel).
1304 Twofish was submitted as an AES (Advanced Encryption Standard)
1305 candidate cipher by researchers at CounterPane Systems. It is a
1306 16 round block cipher supporting key sizes of 128, 192, and 256
1309 This module provides Twofish cipher algorithm that processes three
1310 blocks parallel, utilizing resources of out-of-order CPUs better.
1313 <http://www.schneier.com/twofish.html>
1315 config CRYPTO_TWOFISH_AVX_X86_64
1316 tristate "Twofish cipher algorithm (x86_64/AVX)"
1317 depends on X86 && 64BIT
1318 select CRYPTO_ALGAPI
1319 select CRYPTO_CRYPTD
1320 select CRYPTO_ABLK_HELPER
1321 select CRYPTO_GLUE_HELPER_X86
1322 select CRYPTO_TWOFISH_COMMON
1323 select CRYPTO_TWOFISH_X86_64
1324 select CRYPTO_TWOFISH_X86_64_3WAY
1328 Twofish cipher algorithm (x86_64/AVX).
1330 Twofish was submitted as an AES (Advanced Encryption Standard)
1331 candidate cipher by researchers at CounterPane Systems. It is a
1332 16 round block cipher supporting key sizes of 128, 192, and 256
1335 This module provides the Twofish cipher algorithm that processes
1336 eight blocks parallel using the AVX Instruction Set.
1339 <http://www.schneier.com/twofish.html>
1341 comment "Compression"
1343 config CRYPTO_DEFLATE
1344 tristate "Deflate compression algorithm"
1345 select CRYPTO_ALGAPI
1349 This is the Deflate algorithm (RFC1951), specified for use in
1350 IPSec with the IPCOMP protocol (RFC3173, RFC2394).
1352 You will most probably want this if using IPSec.
1355 tristate "Zlib compression algorithm"
1361 This is the zlib algorithm.
1364 tristate "LZO compression algorithm"
1365 select CRYPTO_ALGAPI
1367 select LZO_DECOMPRESS
1369 This is the LZO algorithm.
1372 tristate "842 compression algorithm"
1373 depends on CRYPTO_DEV_NX_COMPRESS
1374 # 842 uses lzo if the hardware becomes unavailable
1376 select LZO_DECOMPRESS
1378 This is the 842 algorithm.
1381 tristate "LZ4 compression algorithm"
1382 select CRYPTO_ALGAPI
1384 select LZ4_DECOMPRESS
1386 This is the LZ4 algorithm.
1389 tristate "LZ4HC compression algorithm"
1390 select CRYPTO_ALGAPI
1391 select LZ4HC_COMPRESS
1392 select LZ4_DECOMPRESS
1394 This is the LZ4 high compression mode algorithm.
1396 comment "Random Number Generation"
1398 config CRYPTO_ANSI_CPRNG
1399 tristate "Pseudo Random Number Generation for Cryptographic modules"
1404 This option enables the generic pseudo random number generator
1405 for cryptographic modules. Uses the Algorithm specified in
1406 ANSI X9.31 A.2.4. Note that this option must be enabled if
1407 CRYPTO_FIPS is selected
1409 config CRYPTO_USER_API
1412 config CRYPTO_USER_API_HASH
1413 tristate "User-space interface for hash algorithms"
1416 select CRYPTO_USER_API
1418 This option enables the user-spaces interface for hash
1421 config CRYPTO_USER_API_SKCIPHER
1422 tristate "User-space interface for symmetric key cipher algorithms"
1424 select CRYPTO_BLKCIPHER
1425 select CRYPTO_USER_API
1427 This option enables the user-spaces interface for symmetric
1428 key cipher algorithms.
1430 config CRYPTO_HASH_INFO
1433 source "drivers/crypto/Kconfig"
1434 source crypto/asymmetric_keys/Kconfig