2 # Generic algorithms support
8 # async_tx api: hardware offloaded memory transfer/transform support
10 source "crypto/async_tx/Kconfig"
13 # Cryptographic API Configuration
16 tristate "Cryptographic API"
18 This option provides the core Cryptographic API.
22 comment "Crypto core or helper"
25 bool "FIPS 200 compliance"
26 depends on CRYPTO_ANSI_CPRNG && !CRYPTO_MANAGER_DISABLE_TESTS
28 This options enables the fips boot option which is
29 required if you want to system to operate in a FIPS 200
30 certification. You should say no unless you know what
37 This option provides the API for cryptographic algorithms.
51 config CRYPTO_BLKCIPHER
53 select CRYPTO_BLKCIPHER2
56 config CRYPTO_BLKCIPHER2
60 select CRYPTO_WORKQUEUE
90 tristate "Cryptographic algorithm manager"
91 select CRYPTO_MANAGER2
93 Create default cryptographic template instantiations such as
96 config CRYPTO_MANAGER2
97 def_tristate CRYPTO_MANAGER || (CRYPTO_MANAGER!=n && CRYPTO_ALGAPI=y)
100 select CRYPTO_BLKCIPHER2
104 tristate "Userspace cryptographic algorithm configuration"
106 select CRYPTO_MANAGER
108 Userspace configuration for cryptographic instantiations such as
111 config CRYPTO_MANAGER_DISABLE_TESTS
112 bool "Disable run-time self tests"
114 depends on CRYPTO_MANAGER2
116 Disable run-time self tests that normally take place at
117 algorithm registration.
119 config CRYPTO_GF128MUL
120 tristate "GF(2^128) multiplication functions"
122 Efficient table driven implementation of multiplications in the
123 field GF(2^128). This is needed by some cypher modes. This
124 option will be selected automatically if you select such a
125 cipher mode. Only select this option by hand if you expect to load
126 an external module that requires these functions.
129 tristate "Null algorithms"
131 select CRYPTO_BLKCIPHER
134 These are 'Null' algorithms, used by IPsec, which do nothing.
137 tristate "Parallel crypto engine (EXPERIMENTAL)"
138 depends on SMP && EXPERIMENTAL
140 select CRYPTO_MANAGER
143 This converts an arbitrary crypto algorithm into a parallel
144 algorithm that executes in kernel threads.
146 config CRYPTO_WORKQUEUE
150 tristate "Software async crypto daemon"
151 select CRYPTO_BLKCIPHER
153 select CRYPTO_MANAGER
154 select CRYPTO_WORKQUEUE
156 This is a generic software asynchronous crypto daemon that
157 converts an arbitrary synchronous software crypto algorithm
158 into an asynchronous algorithm that executes in a kernel thread.
160 config CRYPTO_AUTHENC
161 tristate "Authenc support"
163 select CRYPTO_BLKCIPHER
164 select CRYPTO_MANAGER
167 Authenc: Combined mode wrapper for IPsec.
168 This is required for IPSec.
171 tristate "Testing module"
173 select CRYPTO_MANAGER
175 Quick & dirty crypto test module.
177 comment "Authenticated Encryption with Associated Data"
180 tristate "CCM support"
184 Support for Counter with CBC MAC. Required for IPsec.
187 tristate "GCM/GMAC support"
192 Support for Galois/Counter Mode (GCM) and Galois Message
193 Authentication Code (GMAC). Required for IPSec.
196 tristate "Sequence Number IV Generator"
198 select CRYPTO_BLKCIPHER
201 This IV generator generates an IV based on a sequence number by
202 xoring it with a salt. This algorithm is mainly useful for CTR
204 comment "Block modes"
207 tristate "CBC support"
208 select CRYPTO_BLKCIPHER
209 select CRYPTO_MANAGER
211 CBC: Cipher Block Chaining mode
212 This block cipher algorithm is required for IPSec.
215 tristate "CTR support"
216 select CRYPTO_BLKCIPHER
218 select CRYPTO_MANAGER
221 This block cipher algorithm is required for IPSec.
224 tristate "CTS support"
225 select CRYPTO_BLKCIPHER
227 CTS: Cipher Text Stealing
228 This is the Cipher Text Stealing mode as described by
229 Section 8 of rfc2040 and referenced by rfc3962.
230 (rfc3962 includes errata information in its Appendix A)
231 This mode is required for Kerberos gss mechanism support
235 tristate "ECB support"
236 select CRYPTO_BLKCIPHER
237 select CRYPTO_MANAGER
239 ECB: Electronic CodeBook mode
240 This is the simplest block cipher algorithm. It simply encrypts
241 the input block by block.
244 tristate "LRW support"
245 select CRYPTO_BLKCIPHER
246 select CRYPTO_MANAGER
247 select CRYPTO_GF128MUL
249 LRW: Liskov Rivest Wagner, a tweakable, non malleable, non movable
250 narrow block cipher mode for dm-crypt. Use it with cipher
251 specification string aes-lrw-benbi, the key must be 256, 320 or 384.
252 The first 128, 192 or 256 bits in the key are used for AES and the
253 rest is used to tie each cipher block to its logical position.
256 tristate "PCBC support"
257 select CRYPTO_BLKCIPHER
258 select CRYPTO_MANAGER
260 PCBC: Propagating Cipher Block Chaining mode
261 This block cipher algorithm is required for RxRPC.
264 tristate "XTS support"
265 select CRYPTO_BLKCIPHER
266 select CRYPTO_MANAGER
267 select CRYPTO_GF128MUL
269 XTS: IEEE1619/D16 narrow block cipher use with aes-xts-plain,
270 key size 256, 384 or 512 bits. This implementation currently
271 can't handle a sectorsize which is not a multiple of 16 bytes.
276 tristate "HMAC support"
278 select CRYPTO_MANAGER
280 HMAC: Keyed-Hashing for Message Authentication (RFC2104).
281 This is required for IPSec.
284 tristate "XCBC support"
285 depends on EXPERIMENTAL
287 select CRYPTO_MANAGER
289 XCBC: Keyed-Hashing with encryption algorithm
290 http://www.ietf.org/rfc/rfc3566.txt
291 http://csrc.nist.gov/encryption/modes/proposedmodes/
292 xcbc-mac/xcbc-mac-spec.pdf
295 tristate "VMAC support"
296 depends on EXPERIMENTAL
298 select CRYPTO_MANAGER
300 VMAC is a message authentication algorithm designed for
301 very high speed on 64-bit architectures.
304 <http://fastcrypto.org/vmac>
309 tristate "CRC32c CRC algorithm"
312 Castagnoli, et al Cyclic Redundancy-Check Algorithm. Used
313 by iSCSI for header and data digests and by others.
314 See Castagnoli93. Module will be crc32c.
316 config CRYPTO_CRC32C_INTEL
317 tristate "CRC32c INTEL hardware acceleration"
321 In Intel processor with SSE4.2 supported, the processor will
322 support CRC32C implementation using hardware accelerated CRC32
323 instruction. This option will create 'crc32c-intel' module,
324 which will enable any routine to use the CRC32 instruction to
325 gain performance compared with software implementation.
326 Module will be crc32c-intel.
329 tristate "GHASH digest algorithm"
331 select CRYPTO_GF128MUL
333 GHASH is message digest algorithm for GCM (Galois/Counter Mode).
336 tristate "MD4 digest algorithm"
339 MD4 message digest algorithm (RFC1320).
342 tristate "MD5 digest algorithm"
345 MD5 message digest algorithm (RFC1321).
347 config CRYPTO_MICHAEL_MIC
348 tristate "Michael MIC keyed digest algorithm"
351 Michael MIC is used for message integrity protection in TKIP
352 (IEEE 802.11i). This algorithm is required for TKIP, but it
353 should not be used for other purposes because of the weakness
357 tristate "RIPEMD-128 digest algorithm"
360 RIPEMD-128 (ISO/IEC 10118-3:2004).
362 RIPEMD-128 is a 128-bit cryptographic hash function. It should only
363 be used as a secure replacement for RIPEMD. For other use cases,
364 RIPEMD-160 should be used.
366 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
367 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
370 tristate "RIPEMD-160 digest algorithm"
373 RIPEMD-160 (ISO/IEC 10118-3:2004).
375 RIPEMD-160 is a 160-bit cryptographic hash function. It is intended
376 to be used as a secure replacement for the 128-bit hash functions
377 MD4, MD5 and it's predecessor RIPEMD
378 (not to be confused with RIPEMD-128).
380 It's speed is comparable to SHA1 and there are no known attacks
383 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
384 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
387 tristate "RIPEMD-256 digest algorithm"
390 RIPEMD-256 is an optional extension of RIPEMD-128 with a
391 256 bit hash. It is intended for applications that require
392 longer hash-results, without needing a larger security level
395 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
396 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
399 tristate "RIPEMD-320 digest algorithm"
402 RIPEMD-320 is an optional extension of RIPEMD-160 with a
403 320 bit hash. It is intended for applications that require
404 longer hash-results, without needing a larger security level
407 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
408 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
411 tristate "SHA1 digest algorithm"
414 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2).
416 config CRYPTO_SHA1_SSSE3
417 tristate "SHA1 digest algorithm (SSSE3/AVX)"
418 depends on X86 && 64BIT
422 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented
423 using Supplemental SSE3 (SSSE3) instructions or Advanced Vector
424 Extensions (AVX), when available.
427 tristate "SHA224 and SHA256 digest algorithm"
430 SHA256 secure hash standard (DFIPS 180-2).
432 This version of SHA implements a 256 bit hash with 128 bits of
433 security against collision attacks.
435 This code also includes SHA-224, a 224 bit hash with 112 bits
436 of security against collision attacks.
439 tristate "SHA384 and SHA512 digest algorithms"
442 SHA512 secure hash standard (DFIPS 180-2).
444 This version of SHA implements a 512 bit hash with 256 bits of
445 security against collision attacks.
447 This code also includes SHA-384, a 384 bit hash with 192 bits
448 of security against collision attacks.
451 tristate "Tiger digest algorithms"
454 Tiger hash algorithm 192, 160 and 128-bit hashes
456 Tiger is a hash function optimized for 64-bit processors while
457 still having decent performance on 32-bit processors.
458 Tiger was developed by Ross Anderson and Eli Biham.
461 <http://www.cs.technion.ac.il/~biham/Reports/Tiger/>.
464 tristate "Whirlpool digest algorithms"
467 Whirlpool hash algorithm 512, 384 and 256-bit hashes
469 Whirlpool-512 is part of the NESSIE cryptographic primitives.
470 Whirlpool will be part of the ISO/IEC 10118-3:2003(E) standard
473 <http://www.larc.usp.br/~pbarreto/WhirlpoolPage.html>
475 config CRYPTO_GHASH_CLMUL_NI_INTEL
476 tristate "GHASH digest algorithm (CLMUL-NI accelerated)"
477 depends on X86 && 64BIT
481 GHASH is message digest algorithm for GCM (Galois/Counter Mode).
482 The implementation is accelerated by CLMUL-NI of Intel.
487 tristate "AES cipher algorithms"
490 AES cipher algorithms (FIPS-197). AES uses the Rijndael
493 Rijndael appears to be consistently a very good performer in
494 both hardware and software across a wide range of computing
495 environments regardless of its use in feedback or non-feedback
496 modes. Its key setup time is excellent, and its key agility is
497 good. Rijndael's very low memory requirements make it very well
498 suited for restricted-space environments, in which it also
499 demonstrates excellent performance. Rijndael's operations are
500 among the easiest to defend against power and timing attacks.
502 The AES specifies three key sizes: 128, 192 and 256 bits
504 See <http://csrc.nist.gov/CryptoToolkit/aes/> for more information.
506 config CRYPTO_AES_586
507 tristate "AES cipher algorithms (i586)"
508 depends on (X86 || UML_X86) && !64BIT
512 AES cipher algorithms (FIPS-197). AES uses the Rijndael
515 Rijndael appears to be consistently a very good performer in
516 both hardware and software across a wide range of computing
517 environments regardless of its use in feedback or non-feedback
518 modes. Its key setup time is excellent, and its key agility is
519 good. Rijndael's very low memory requirements make it very well
520 suited for restricted-space environments, in which it also
521 demonstrates excellent performance. Rijndael's operations are
522 among the easiest to defend against power and timing attacks.
524 The AES specifies three key sizes: 128, 192 and 256 bits
526 See <http://csrc.nist.gov/encryption/aes/> for more information.
528 config CRYPTO_AES_X86_64
529 tristate "AES cipher algorithms (x86_64)"
530 depends on (X86 || UML_X86) && 64BIT
534 AES cipher algorithms (FIPS-197). AES uses the Rijndael
537 Rijndael appears to be consistently a very good performer in
538 both hardware and software across a wide range of computing
539 environments regardless of its use in feedback or non-feedback
540 modes. Its key setup time is excellent, and its key agility is
541 good. Rijndael's very low memory requirements make it very well
542 suited for restricted-space environments, in which it also
543 demonstrates excellent performance. Rijndael's operations are
544 among the easiest to defend against power and timing attacks.
546 The AES specifies three key sizes: 128, 192 and 256 bits
548 See <http://csrc.nist.gov/encryption/aes/> for more information.
550 config CRYPTO_AES_NI_INTEL
551 tristate "AES cipher algorithms (AES-NI)"
553 select CRYPTO_AES_X86_64 if 64BIT
554 select CRYPTO_AES_586 if !64BIT
558 Use Intel AES-NI instructions for AES algorithm.
560 AES cipher algorithms (FIPS-197). AES uses the Rijndael
563 Rijndael appears to be consistently a very good performer in
564 both hardware and software across a wide range of computing
565 environments regardless of its use in feedback or non-feedback
566 modes. Its key setup time is excellent, and its key agility is
567 good. Rijndael's very low memory requirements make it very well
568 suited for restricted-space environments, in which it also
569 demonstrates excellent performance. Rijndael's operations are
570 among the easiest to defend against power and timing attacks.
572 The AES specifies three key sizes: 128, 192 and 256 bits
574 See <http://csrc.nist.gov/encryption/aes/> for more information.
576 In addition to AES cipher algorithm support, the acceleration
577 for some popular block cipher mode is supported too, including
578 ECB, CBC, LRW, PCBC, XTS. The 64 bit version has additional
579 acceleration for CTR.
582 tristate "Anubis cipher algorithm"
585 Anubis cipher algorithm.
587 Anubis is a variable key length cipher which can use keys from
588 128 bits to 320 bits in length. It was evaluated as a entrant
589 in the NESSIE competition.
592 <https://www.cosic.esat.kuleuven.be/nessie/reports/>
593 <http://www.larc.usp.br/~pbarreto/AnubisPage.html>
596 tristate "ARC4 cipher algorithm"
599 ARC4 cipher algorithm.
601 ARC4 is a stream cipher using keys ranging from 8 bits to 2048
602 bits in length. This algorithm is required for driver-based
603 WEP, but it should not be for other purposes because of the
604 weakness of the algorithm.
606 config CRYPTO_BLOWFISH
607 tristate "Blowfish cipher algorithm"
609 select CRYPTO_BLOWFISH_COMMON
611 Blowfish cipher algorithm, by Bruce Schneier.
613 This is a variable key length cipher which can use keys from 32
614 bits to 448 bits in length. It's fast, simple and specifically
615 designed for use on "large microprocessors".
618 <http://www.schneier.com/blowfish.html>
620 config CRYPTO_BLOWFISH_COMMON
623 Common parts of the Blowfish cipher algorithm shared by the
624 generic c and the assembler implementations.
627 <http://www.schneier.com/blowfish.html>
629 config CRYPTO_BLOWFISH_X86_64
630 tristate "Blowfish cipher algorithm (x86_64)"
631 depends on (X86 || UML_X86) && 64BIT
633 select CRYPTO_BLOWFISH_COMMON
635 Blowfish cipher algorithm (x86_64), by Bruce Schneier.
637 This is a variable key length cipher which can use keys from 32
638 bits to 448 bits in length. It's fast, simple and specifically
639 designed for use on "large microprocessors".
642 <http://www.schneier.com/blowfish.html>
644 config CRYPTO_CAMELLIA
645 tristate "Camellia cipher algorithms"
649 Camellia cipher algorithms module.
651 Camellia is a symmetric key block cipher developed jointly
652 at NTT and Mitsubishi Electric Corporation.
654 The Camellia specifies three key sizes: 128, 192 and 256 bits.
657 <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
660 tristate "CAST5 (CAST-128) cipher algorithm"
663 The CAST5 encryption algorithm (synonymous with CAST-128) is
664 described in RFC2144.
667 tristate "CAST6 (CAST-256) cipher algorithm"
670 The CAST6 encryption algorithm (synonymous with CAST-256) is
671 described in RFC2612.
674 tristate "DES and Triple DES EDE cipher algorithms"
677 DES cipher algorithm (FIPS 46-2), and Triple DES EDE (FIPS 46-3).
680 tristate "FCrypt cipher algorithm"
682 select CRYPTO_BLKCIPHER
684 FCrypt algorithm used by RxRPC.
687 tristate "Khazad cipher algorithm"
690 Khazad cipher algorithm.
692 Khazad was a finalist in the initial NESSIE competition. It is
693 an algorithm optimized for 64-bit processors with good performance
694 on 32-bit processors. Khazad uses an 128 bit key size.
697 <http://www.larc.usp.br/~pbarreto/KhazadPage.html>
699 config CRYPTO_SALSA20
700 tristate "Salsa20 stream cipher algorithm (EXPERIMENTAL)"
701 depends on EXPERIMENTAL
702 select CRYPTO_BLKCIPHER
704 Salsa20 stream cipher algorithm.
706 Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
707 Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
709 The Salsa20 stream cipher algorithm is designed by Daniel J.
710 Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
712 config CRYPTO_SALSA20_586
713 tristate "Salsa20 stream cipher algorithm (i586) (EXPERIMENTAL)"
714 depends on (X86 || UML_X86) && !64BIT
715 depends on EXPERIMENTAL
716 select CRYPTO_BLKCIPHER
718 Salsa20 stream cipher algorithm.
720 Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
721 Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
723 The Salsa20 stream cipher algorithm is designed by Daniel J.
724 Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
726 config CRYPTO_SALSA20_X86_64
727 tristate "Salsa20 stream cipher algorithm (x86_64) (EXPERIMENTAL)"
728 depends on (X86 || UML_X86) && 64BIT
729 depends on EXPERIMENTAL
730 select CRYPTO_BLKCIPHER
732 Salsa20 stream cipher algorithm.
734 Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
735 Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
737 The Salsa20 stream cipher algorithm is designed by Daniel J.
738 Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
741 tristate "SEED cipher algorithm"
744 SEED cipher algorithm (RFC4269).
746 SEED is a 128-bit symmetric key block cipher that has been
747 developed by KISA (Korea Information Security Agency) as a
748 national standard encryption algorithm of the Republic of Korea.
749 It is a 16 round block cipher with the key size of 128 bit.
752 <http://www.kisa.or.kr/kisa/seed/jsp/seed_eng.jsp>
754 config CRYPTO_SERPENT
755 tristate "Serpent cipher algorithm"
758 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
760 Keys are allowed to be from 0 to 256 bits in length, in steps
761 of 8 bits. Also includes the 'Tnepres' algorithm, a reversed
762 variant of Serpent for compatibility with old kerneli.org code.
765 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
767 config CRYPTO_SERPENT_SSE2_X86_64
768 tristate "Serpent cipher algorithm (x86_64/SSE2)"
769 depends on X86 && 64BIT
772 select CRYPTO_SERPENT
776 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
778 Keys are allowed to be from 0 to 256 bits in length, in steps
781 This module provides Serpent cipher algorithm that processes eigth
782 blocks parallel using SSE2 instruction set.
785 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
787 config CRYPTO_SERPENT_SSE2_586
788 tristate "Serpent cipher algorithm (i586/SSE2)"
789 depends on X86 && !64BIT
792 select CRYPTO_SERPENT
796 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
798 Keys are allowed to be from 0 to 256 bits in length, in steps
801 This module provides Serpent cipher algorithm that processes four
802 blocks parallel using SSE2 instruction set.
805 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
808 tristate "TEA, XTEA and XETA cipher algorithms"
811 TEA cipher algorithm.
813 Tiny Encryption Algorithm is a simple cipher that uses
814 many rounds for security. It is very fast and uses
817 Xtendend Tiny Encryption Algorithm is a modification to
818 the TEA algorithm to address a potential key weakness
819 in the TEA algorithm.
821 Xtendend Encryption Tiny Algorithm is a mis-implementation
822 of the XTEA algorithm for compatibility purposes.
824 config CRYPTO_TWOFISH
825 tristate "Twofish cipher algorithm"
827 select CRYPTO_TWOFISH_COMMON
829 Twofish cipher algorithm.
831 Twofish was submitted as an AES (Advanced Encryption Standard)
832 candidate cipher by researchers at CounterPane Systems. It is a
833 16 round block cipher supporting key sizes of 128, 192, and 256
837 <http://www.schneier.com/twofish.html>
839 config CRYPTO_TWOFISH_COMMON
842 Common parts of the Twofish cipher algorithm shared by the
843 generic c and the assembler implementations.
845 config CRYPTO_TWOFISH_586
846 tristate "Twofish cipher algorithms (i586)"
847 depends on (X86 || UML_X86) && !64BIT
849 select CRYPTO_TWOFISH_COMMON
851 Twofish cipher algorithm.
853 Twofish was submitted as an AES (Advanced Encryption Standard)
854 candidate cipher by researchers at CounterPane Systems. It is a
855 16 round block cipher supporting key sizes of 128, 192, and 256
859 <http://www.schneier.com/twofish.html>
861 config CRYPTO_TWOFISH_X86_64
862 tristate "Twofish cipher algorithm (x86_64)"
863 depends on (X86 || UML_X86) && 64BIT
865 select CRYPTO_TWOFISH_COMMON
867 Twofish cipher algorithm (x86_64).
869 Twofish was submitted as an AES (Advanced Encryption Standard)
870 candidate cipher by researchers at CounterPane Systems. It is a
871 16 round block cipher supporting key sizes of 128, 192, and 256
875 <http://www.schneier.com/twofish.html>
877 config CRYPTO_TWOFISH_X86_64_3WAY
878 tristate "Twofish cipher algorithm (x86_64, 3-way parallel)"
879 depends on (X86 || UML_X86) && 64BIT
881 select CRYPTO_TWOFISH_COMMON
882 select CRYPTO_TWOFISH_X86_64
886 Twofish cipher algorithm (x86_64, 3-way parallel).
888 Twofish was submitted as an AES (Advanced Encryption Standard)
889 candidate cipher by researchers at CounterPane Systems. It is a
890 16 round block cipher supporting key sizes of 128, 192, and 256
893 This module provides Twofish cipher algorithm that processes three
894 blocks parallel, utilizing resources of out-of-order CPUs better.
897 <http://www.schneier.com/twofish.html>
899 comment "Compression"
901 config CRYPTO_DEFLATE
902 tristate "Deflate compression algorithm"
907 This is the Deflate algorithm (RFC1951), specified for use in
908 IPSec with the IPCOMP protocol (RFC3173, RFC2394).
910 You will most probably want this if using IPSec.
913 tristate "Zlib compression algorithm"
919 This is the zlib algorithm.
922 tristate "LZO compression algorithm"
925 select LZO_DECOMPRESS
927 This is the LZO algorithm.
929 comment "Random Number Generation"
931 config CRYPTO_ANSI_CPRNG
932 tristate "Pseudo Random Number Generation for Cryptographic modules"
937 This option enables the generic pseudo random number generator
938 for cryptographic modules. Uses the Algorithm specified in
939 ANSI X9.31 A.2.4. Note that this option must be enabled if
940 CRYPTO_FIPS is selected
942 config CRYPTO_USER_API
945 config CRYPTO_USER_API_HASH
946 tristate "User-space interface for hash algorithms"
949 select CRYPTO_USER_API
951 This option enables the user-spaces interface for hash
954 config CRYPTO_USER_API_SKCIPHER
955 tristate "User-space interface for symmetric key cipher algorithms"
957 select CRYPTO_BLKCIPHER
958 select CRYPTO_USER_API
960 This option enables the user-spaces interface for symmetric
961 key cipher algorithms.
963 source "drivers/crypto/Kconfig"