2 # Generic algorithms support
8 # async_tx api: hardware offloaded memory transfer/transform support
10 source "crypto/async_tx/Kconfig"
13 # Cryptographic API Configuration
16 tristate "Cryptographic API"
18 This option provides the core Cryptographic API.
22 comment "Crypto core or helper"
25 bool "FIPS 200 compliance"
26 depends on CRYPTO_ANSI_CPRNG && !CRYPTO_MANAGER_DISABLE_TESTS
28 This options enables the fips boot option which is
29 required if you want to system to operate in a FIPS 200
30 certification. You should say no unless you know what
37 This option provides the API for cryptographic algorithms.
51 config CRYPTO_BLKCIPHER
53 select CRYPTO_BLKCIPHER2
56 config CRYPTO_BLKCIPHER2
60 select CRYPTO_WORKQUEUE
90 tristate "Cryptographic algorithm manager"
91 select CRYPTO_MANAGER2
93 Create default cryptographic template instantiations such as
96 config CRYPTO_MANAGER2
97 def_tristate CRYPTO_MANAGER || (CRYPTO_MANAGER!=n && CRYPTO_ALGAPI=y)
100 select CRYPTO_BLKCIPHER2
104 tristate "Userspace cryptographic algorithm configuration"
106 select CRYPTO_MANAGER
108 Userspace configuration for cryptographic instantiations such as
111 config CRYPTO_MANAGER_DISABLE_TESTS
112 bool "Disable run-time self tests"
114 depends on CRYPTO_MANAGER2
116 Disable run-time self tests that normally take place at
117 algorithm registration.
119 config CRYPTO_GF128MUL
120 tristate "GF(2^128) multiplication functions"
122 Efficient table driven implementation of multiplications in the
123 field GF(2^128). This is needed by some cypher modes. This
124 option will be selected automatically if you select such a
125 cipher mode. Only select this option by hand if you expect to load
126 an external module that requires these functions.
129 tristate "Null algorithms"
131 select CRYPTO_BLKCIPHER
134 These are 'Null' algorithms, used by IPsec, which do nothing.
137 tristate "Parallel crypto engine"
140 select CRYPTO_MANAGER
143 This converts an arbitrary crypto algorithm into a parallel
144 algorithm that executes in kernel threads.
146 config CRYPTO_WORKQUEUE
150 tristate "Software async crypto daemon"
151 select CRYPTO_BLKCIPHER
153 select CRYPTO_MANAGER
154 select CRYPTO_WORKQUEUE
156 This is a generic software asynchronous crypto daemon that
157 converts an arbitrary synchronous software crypto algorithm
158 into an asynchronous algorithm that executes in a kernel thread.
160 config CRYPTO_AUTHENC
161 tristate "Authenc support"
163 select CRYPTO_BLKCIPHER
164 select CRYPTO_MANAGER
167 Authenc: Combined mode wrapper for IPsec.
168 This is required for IPSec.
171 tristate "Testing module"
173 select CRYPTO_MANAGER
175 Quick & dirty crypto test module.
177 config CRYPTO_ABLK_HELPER_X86
182 config CRYPTO_ABLK_HELPER
186 config CRYPTO_GLUE_HELPER_X86
191 comment "Authenticated Encryption with Associated Data"
194 tristate "CCM support"
198 Support for Counter with CBC MAC. Required for IPsec.
201 tristate "GCM/GMAC support"
207 Support for Galois/Counter Mode (GCM) and Galois Message
208 Authentication Code (GMAC). Required for IPSec.
211 tristate "Sequence Number IV Generator"
213 select CRYPTO_BLKCIPHER
216 This IV generator generates an IV based on a sequence number by
217 xoring it with a salt. This algorithm is mainly useful for CTR
219 comment "Block modes"
222 tristate "CBC support"
223 select CRYPTO_BLKCIPHER
224 select CRYPTO_MANAGER
226 CBC: Cipher Block Chaining mode
227 This block cipher algorithm is required for IPSec.
230 tristate "CTR support"
231 select CRYPTO_BLKCIPHER
233 select CRYPTO_MANAGER
236 This block cipher algorithm is required for IPSec.
239 tristate "CTS support"
240 select CRYPTO_BLKCIPHER
242 CTS: Cipher Text Stealing
243 This is the Cipher Text Stealing mode as described by
244 Section 8 of rfc2040 and referenced by rfc3962.
245 (rfc3962 includes errata information in its Appendix A)
246 This mode is required for Kerberos gss mechanism support
250 tristate "ECB support"
251 select CRYPTO_BLKCIPHER
252 select CRYPTO_MANAGER
254 ECB: Electronic CodeBook mode
255 This is the simplest block cipher algorithm. It simply encrypts
256 the input block by block.
259 tristate "LRW support"
260 select CRYPTO_BLKCIPHER
261 select CRYPTO_MANAGER
262 select CRYPTO_GF128MUL
264 LRW: Liskov Rivest Wagner, a tweakable, non malleable, non movable
265 narrow block cipher mode for dm-crypt. Use it with cipher
266 specification string aes-lrw-benbi, the key must be 256, 320 or 384.
267 The first 128, 192 or 256 bits in the key are used for AES and the
268 rest is used to tie each cipher block to its logical position.
271 tristate "PCBC support"
272 select CRYPTO_BLKCIPHER
273 select CRYPTO_MANAGER
275 PCBC: Propagating Cipher Block Chaining mode
276 This block cipher algorithm is required for RxRPC.
279 tristate "XTS support"
280 select CRYPTO_BLKCIPHER
281 select CRYPTO_MANAGER
282 select CRYPTO_GF128MUL
284 XTS: IEEE1619/D16 narrow block cipher use with aes-xts-plain,
285 key size 256, 384 or 512 bits. This implementation currently
286 can't handle a sectorsize which is not a multiple of 16 bytes.
291 tristate "CMAC support"
293 select CRYPTO_MANAGER
295 Cipher-based Message Authentication Code (CMAC) specified by
296 The National Institute of Standards and Technology (NIST).
298 https://tools.ietf.org/html/rfc4493
299 http://csrc.nist.gov/publications/nistpubs/800-38B/SP_800-38B.pdf
302 tristate "HMAC support"
304 select CRYPTO_MANAGER
306 HMAC: Keyed-Hashing for Message Authentication (RFC2104).
307 This is required for IPSec.
310 tristate "XCBC support"
312 select CRYPTO_MANAGER
314 XCBC: Keyed-Hashing with encryption algorithm
315 http://www.ietf.org/rfc/rfc3566.txt
316 http://csrc.nist.gov/encryption/modes/proposedmodes/
317 xcbc-mac/xcbc-mac-spec.pdf
320 tristate "VMAC support"
322 select CRYPTO_MANAGER
324 VMAC is a message authentication algorithm designed for
325 very high speed on 64-bit architectures.
328 <http://fastcrypto.org/vmac>
333 tristate "CRC32c CRC algorithm"
337 Castagnoli, et al Cyclic Redundancy-Check Algorithm. Used
338 by iSCSI for header and data digests and by others.
339 See Castagnoli93. Module will be crc32c.
341 config CRYPTO_CRC32C_INTEL
342 tristate "CRC32c INTEL hardware acceleration"
346 In Intel processor with SSE4.2 supported, the processor will
347 support CRC32C implementation using hardware accelerated CRC32
348 instruction. This option will create 'crc32c-intel' module,
349 which will enable any routine to use the CRC32 instruction to
350 gain performance compared with software implementation.
351 Module will be crc32c-intel.
353 config CRYPTO_CRC32C_SPARC64
354 tristate "CRC32c CRC algorithm (SPARC64)"
359 CRC32c CRC algorithm implemented using sparc64 crypto instructions,
363 tristate "CRC32 CRC algorithm"
367 CRC-32-IEEE 802.3 cyclic redundancy-check algorithm.
368 Shash crypto api wrappers to crc32_le function.
370 config CRYPTO_CRC32_PCLMUL
371 tristate "CRC32 PCLMULQDQ hardware acceleration"
376 From Intel Westmere and AMD Bulldozer processor with SSE4.2
377 and PCLMULQDQ supported, the processor will support
378 CRC32 PCLMULQDQ implementation using hardware accelerated PCLMULQDQ
379 instruction. This option will create 'crc32-plcmul' module,
380 which will enable any routine to use the CRC-32-IEEE 802.3 checksum
381 and gain better performance as compared with the table implementation.
384 tristate "GHASH digest algorithm"
385 select CRYPTO_GF128MUL
387 GHASH is message digest algorithm for GCM (Galois/Counter Mode).
390 tristate "MD4 digest algorithm"
393 MD4 message digest algorithm (RFC1320).
396 tristate "MD5 digest algorithm"
399 MD5 message digest algorithm (RFC1321).
401 config CRYPTO_MD5_SPARC64
402 tristate "MD5 digest algorithm (SPARC64)"
407 MD5 message digest algorithm (RFC1321) implemented
408 using sparc64 crypto instructions, when available.
410 config CRYPTO_MICHAEL_MIC
411 tristate "Michael MIC keyed digest algorithm"
414 Michael MIC is used for message integrity protection in TKIP
415 (IEEE 802.11i). This algorithm is required for TKIP, but it
416 should not be used for other purposes because of the weakness
420 tristate "RIPEMD-128 digest algorithm"
423 RIPEMD-128 (ISO/IEC 10118-3:2004).
425 RIPEMD-128 is a 128-bit cryptographic hash function. It should only
426 be used as a secure replacement for RIPEMD. For other use cases,
427 RIPEMD-160 should be used.
429 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
430 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
433 tristate "RIPEMD-160 digest algorithm"
436 RIPEMD-160 (ISO/IEC 10118-3:2004).
438 RIPEMD-160 is a 160-bit cryptographic hash function. It is intended
439 to be used as a secure replacement for the 128-bit hash functions
440 MD4, MD5 and it's predecessor RIPEMD
441 (not to be confused with RIPEMD-128).
443 It's speed is comparable to SHA1 and there are no known attacks
446 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
447 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
450 tristate "RIPEMD-256 digest algorithm"
453 RIPEMD-256 is an optional extension of RIPEMD-128 with a
454 256 bit hash. It is intended for applications that require
455 longer hash-results, without needing a larger security level
458 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
459 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
462 tristate "RIPEMD-320 digest algorithm"
465 RIPEMD-320 is an optional extension of RIPEMD-160 with a
466 320 bit hash. It is intended for applications that require
467 longer hash-results, without needing a larger security level
470 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
471 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
474 tristate "SHA1 digest algorithm"
477 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2).
479 config CRYPTO_SHA1_SSSE3
480 tristate "SHA1 digest algorithm (SSSE3/AVX)"
481 depends on X86 && 64BIT
485 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented
486 using Supplemental SSE3 (SSSE3) instructions or Advanced Vector
487 Extensions (AVX), when available.
489 config CRYPTO_SHA256_SSSE3
490 tristate "SHA256 digest algorithm (SSSE3/AVX/AVX2)"
491 depends on X86 && 64BIT
495 SHA-256 secure hash standard (DFIPS 180-2) implemented
496 using Supplemental SSE3 (SSSE3) instructions, or Advanced Vector
497 Extensions version 1 (AVX1), or Advanced Vector Extensions
498 version 2 (AVX2) instructions, when available.
500 config CRYPTO_SHA512_SSSE3
501 tristate "SHA512 digest algorithm (SSSE3/AVX/AVX2)"
502 depends on X86 && 64BIT
506 SHA-512 secure hash standard (DFIPS 180-2) implemented
507 using Supplemental SSE3 (SSSE3) instructions, or Advanced Vector
508 Extensions version 1 (AVX1), or Advanced Vector Extensions
509 version 2 (AVX2) instructions, when available.
511 config CRYPTO_SHA1_SPARC64
512 tristate "SHA1 digest algorithm (SPARC64)"
517 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented
518 using sparc64 crypto instructions, when available.
520 config CRYPTO_SHA1_ARM
521 tristate "SHA1 digest algorithm (ARM-asm)"
526 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented
527 using optimized ARM assembler.
529 config CRYPTO_SHA1_PPC
530 tristate "SHA1 digest algorithm (powerpc)"
533 This is the powerpc hardware accelerated implementation of the
534 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2).
536 config CRYPTO_SHA1_ARM_NEON
537 tristate "SHA1 digest algorithm (ARM NEON)"
538 depends on ARM && KERNEL_MODE_NEON && !CPU_BIG_ENDIAN
539 select CRYPTO_SHA1_ARM
543 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented
544 using optimized ARM NEON assembly, when NEON instructions are
548 tristate "SHA224 and SHA256 digest algorithm"
551 SHA256 secure hash standard (DFIPS 180-2).
553 This version of SHA implements a 256 bit hash with 128 bits of
554 security against collision attacks.
556 This code also includes SHA-224, a 224 bit hash with 112 bits
557 of security against collision attacks.
559 config CRYPTO_SHA256_ARM
560 tristate "SHA-224/256 digest algorithm (ARM-asm and NEON)"
563 SHA-256 secure hash standard (DFIPS 180-2) implemented
564 using optimized ARM assembler and NEON, when available.
566 config CRYPTO_SHA256_SPARC64
567 tristate "SHA224 and SHA256 digest algorithm (SPARC64)"
572 SHA-256 secure hash standard (DFIPS 180-2) implemented
573 using sparc64 crypto instructions, when available.
576 tristate "SHA384 and SHA512 digest algorithms"
579 SHA512 secure hash standard (DFIPS 180-2).
581 This version of SHA implements a 512 bit hash with 256 bits of
582 security against collision attacks.
584 This code also includes SHA-384, a 384 bit hash with 192 bits
585 of security against collision attacks.
587 config CRYPTO_SHA512_ARM_NEON
588 tristate "SHA384 and SHA512 digest algorithm (ARM NEON)"
589 depends on ARM && KERNEL_MODE_NEON && !CPU_BIG_ENDIAN
593 SHA-512 secure hash standard (DFIPS 180-2) implemented
594 using ARM NEON instructions, when available.
596 This version of SHA implements a 512 bit hash with 256 bits of
597 security against collision attacks.
599 This code also includes SHA-384, a 384 bit hash with 192 bits
600 of security against collision attacks.
602 config CRYPTO_SHA512_SPARC64
603 tristate "SHA384 and SHA512 digest algorithm (SPARC64)"
608 SHA-512 secure hash standard (DFIPS 180-2) implemented
609 using sparc64 crypto instructions, when available.
612 tristate "Tiger digest algorithms"
615 Tiger hash algorithm 192, 160 and 128-bit hashes
617 Tiger is a hash function optimized for 64-bit processors while
618 still having decent performance on 32-bit processors.
619 Tiger was developed by Ross Anderson and Eli Biham.
622 <http://www.cs.technion.ac.il/~biham/Reports/Tiger/>.
625 tristate "Whirlpool digest algorithms"
628 Whirlpool hash algorithm 512, 384 and 256-bit hashes
630 Whirlpool-512 is part of the NESSIE cryptographic primitives.
631 Whirlpool will be part of the ISO/IEC 10118-3:2003(E) standard
634 <http://www.larc.usp.br/~pbarreto/WhirlpoolPage.html>
636 config CRYPTO_GHASH_CLMUL_NI_INTEL
637 tristate "GHASH digest algorithm (CLMUL-NI accelerated)"
638 depends on X86 && 64BIT
641 GHASH is message digest algorithm for GCM (Galois/Counter Mode).
642 The implementation is accelerated by CLMUL-NI of Intel.
647 tristate "AES cipher algorithms"
650 AES cipher algorithms (FIPS-197). AES uses the Rijndael
653 Rijndael appears to be consistently a very good performer in
654 both hardware and software across a wide range of computing
655 environments regardless of its use in feedback or non-feedback
656 modes. Its key setup time is excellent, and its key agility is
657 good. Rijndael's very low memory requirements make it very well
658 suited for restricted-space environments, in which it also
659 demonstrates excellent performance. Rijndael's operations are
660 among the easiest to defend against power and timing attacks.
662 The AES specifies three key sizes: 128, 192 and 256 bits
664 See <http://csrc.nist.gov/CryptoToolkit/aes/> for more information.
666 config CRYPTO_AES_586
667 tristate "AES cipher algorithms (i586)"
668 depends on (X86 || UML_X86) && !64BIT
672 AES cipher algorithms (FIPS-197). AES uses the Rijndael
675 Rijndael appears to be consistently a very good performer in
676 both hardware and software across a wide range of computing
677 environments regardless of its use in feedback or non-feedback
678 modes. Its key setup time is excellent, and its key agility is
679 good. Rijndael's very low memory requirements make it very well
680 suited for restricted-space environments, in which it also
681 demonstrates excellent performance. Rijndael's operations are
682 among the easiest to defend against power and timing attacks.
684 The AES specifies three key sizes: 128, 192 and 256 bits
686 See <http://csrc.nist.gov/encryption/aes/> for more information.
688 config CRYPTO_AES_X86_64
689 tristate "AES cipher algorithms (x86_64)"
690 depends on (X86 || UML_X86) && 64BIT
694 AES cipher algorithms (FIPS-197). AES uses the Rijndael
697 Rijndael appears to be consistently a very good performer in
698 both hardware and software across a wide range of computing
699 environments regardless of its use in feedback or non-feedback
700 modes. Its key setup time is excellent, and its key agility is
701 good. Rijndael's very low memory requirements make it very well
702 suited for restricted-space environments, in which it also
703 demonstrates excellent performance. Rijndael's operations are
704 among the easiest to defend against power and timing attacks.
706 The AES specifies three key sizes: 128, 192 and 256 bits
708 See <http://csrc.nist.gov/encryption/aes/> for more information.
710 config CRYPTO_AES_NI_INTEL
711 tristate "AES cipher algorithms (AES-NI)"
713 select CRYPTO_AES_X86_64 if 64BIT
714 select CRYPTO_AES_586 if !64BIT
716 select CRYPTO_ABLK_HELPER_X86
718 select CRYPTO_GLUE_HELPER_X86 if 64BIT
722 Use Intel AES-NI instructions for AES algorithm.
724 AES cipher algorithms (FIPS-197). AES uses the Rijndael
727 Rijndael appears to be consistently a very good performer in
728 both hardware and software across a wide range of computing
729 environments regardless of its use in feedback or non-feedback
730 modes. Its key setup time is excellent, and its key agility is
731 good. Rijndael's very low memory requirements make it very well
732 suited for restricted-space environments, in which it also
733 demonstrates excellent performance. Rijndael's operations are
734 among the easiest to defend against power and timing attacks.
736 The AES specifies three key sizes: 128, 192 and 256 bits
738 See <http://csrc.nist.gov/encryption/aes/> for more information.
740 In addition to AES cipher algorithm support, the acceleration
741 for some popular block cipher mode is supported too, including
742 ECB, CBC, LRW, PCBC, XTS. The 64 bit version has additional
743 acceleration for CTR.
745 config CRYPTO_AES_SPARC64
746 tristate "AES cipher algorithms (SPARC64)"
751 Use SPARC64 crypto opcodes for AES algorithm.
753 AES cipher algorithms (FIPS-197). AES uses the Rijndael
756 Rijndael appears to be consistently a very good performer in
757 both hardware and software across a wide range of computing
758 environments regardless of its use in feedback or non-feedback
759 modes. Its key setup time is excellent, and its key agility is
760 good. Rijndael's very low memory requirements make it very well
761 suited for restricted-space environments, in which it also
762 demonstrates excellent performance. Rijndael's operations are
763 among the easiest to defend against power and timing attacks.
765 The AES specifies three key sizes: 128, 192 and 256 bits
767 See <http://csrc.nist.gov/encryption/aes/> for more information.
769 In addition to AES cipher algorithm support, the acceleration
770 for some popular block cipher mode is supported too, including
773 config CRYPTO_AES_ARM
774 tristate "AES cipher algorithms (ARM-asm)"
779 Use optimized AES assembler routines for ARM platforms.
781 AES cipher algorithms (FIPS-197). AES uses the Rijndael
784 Rijndael appears to be consistently a very good performer in
785 both hardware and software across a wide range of computing
786 environments regardless of its use in feedback or non-feedback
787 modes. Its key setup time is excellent, and its key agility is
788 good. Rijndael's very low memory requirements make it very well
789 suited for restricted-space environments, in which it also
790 demonstrates excellent performance. Rijndael's operations are
791 among the easiest to defend against power and timing attacks.
793 The AES specifies three key sizes: 128, 192 and 256 bits
795 See <http://csrc.nist.gov/encryption/aes/> for more information.
797 config CRYPTO_AES_ARM_BS
798 tristate "Bit sliced AES using NEON instructions"
799 depends on ARM && KERNEL_MODE_NEON
801 select CRYPTO_AES_ARM
802 select CRYPTO_ABLK_HELPER
804 Use a faster and more secure NEON based implementation of AES in CBC,
807 Bit sliced AES gives around 45% speedup on Cortex-A15 for CTR mode
808 and for XTS mode encryption, CBC and XTS mode decryption speedup is
809 around 25%. (CBC encryption speed is not affected by this driver.)
810 This implementation does not rely on any lookup tables so it is
811 believed to be invulnerable to cache timing attacks.
814 tristate "Anubis cipher algorithm"
817 Anubis cipher algorithm.
819 Anubis is a variable key length cipher which can use keys from
820 128 bits to 320 bits in length. It was evaluated as a entrant
821 in the NESSIE competition.
824 <https://www.cosic.esat.kuleuven.be/nessie/reports/>
825 <http://www.larc.usp.br/~pbarreto/AnubisPage.html>
828 tristate "ARC4 cipher algorithm"
829 select CRYPTO_BLKCIPHER
831 ARC4 cipher algorithm.
833 ARC4 is a stream cipher using keys ranging from 8 bits to 2048
834 bits in length. This algorithm is required for driver-based
835 WEP, but it should not be for other purposes because of the
836 weakness of the algorithm.
838 config CRYPTO_BLOWFISH
839 tristate "Blowfish cipher algorithm"
841 select CRYPTO_BLOWFISH_COMMON
843 Blowfish cipher algorithm, by Bruce Schneier.
845 This is a variable key length cipher which can use keys from 32
846 bits to 448 bits in length. It's fast, simple and specifically
847 designed for use on "large microprocessors".
850 <http://www.schneier.com/blowfish.html>
852 config CRYPTO_BLOWFISH_COMMON
855 Common parts of the Blowfish cipher algorithm shared by the
856 generic c and the assembler implementations.
859 <http://www.schneier.com/blowfish.html>
861 config CRYPTO_BLOWFISH_X86_64
862 tristate "Blowfish cipher algorithm (x86_64)"
863 depends on X86 && 64BIT
865 select CRYPTO_BLOWFISH_COMMON
867 Blowfish cipher algorithm (x86_64), by Bruce Schneier.
869 This is a variable key length cipher which can use keys from 32
870 bits to 448 bits in length. It's fast, simple and specifically
871 designed for use on "large microprocessors".
874 <http://www.schneier.com/blowfish.html>
876 config CRYPTO_BLOWFISH_AVX2_X86_64
877 tristate "Blowfish cipher algorithm (x86_64/AVX2)"
878 depends on X86 && 64BIT
882 select CRYPTO_ABLK_HELPER_X86
883 select CRYPTO_BLOWFISH_COMMON
884 select CRYPTO_BLOWFISH_X86_64
886 Blowfish cipher algorithm (x86_64/AVX2), by Bruce Schneier.
888 This is a variable key length cipher which can use keys from 32
889 bits to 448 bits in length. It's fast, simple and specifically
890 designed for use on "large microprocessors".
893 <http://www.schneier.com/blowfish.html>
895 config CRYPTO_CAMELLIA
896 tristate "Camellia cipher algorithms"
900 Camellia cipher algorithms module.
902 Camellia is a symmetric key block cipher developed jointly
903 at NTT and Mitsubishi Electric Corporation.
905 The Camellia specifies three key sizes: 128, 192 and 256 bits.
908 <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
910 config CRYPTO_CAMELLIA_X86_64
911 tristate "Camellia cipher algorithm (x86_64)"
912 depends on X86 && 64BIT
915 select CRYPTO_GLUE_HELPER_X86
919 Camellia cipher algorithm module (x86_64).
921 Camellia is a symmetric key block cipher developed jointly
922 at NTT and Mitsubishi Electric Corporation.
924 The Camellia specifies three key sizes: 128, 192 and 256 bits.
927 <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
929 config CRYPTO_CAMELLIA_AESNI_AVX_X86_64
930 tristate "Camellia cipher algorithm (x86_64/AES-NI/AVX)"
931 depends on X86 && 64BIT
935 select CRYPTO_ABLK_HELPER_X86
936 select CRYPTO_GLUE_HELPER_X86
937 select CRYPTO_CAMELLIA_X86_64
941 Camellia cipher algorithm module (x86_64/AES-NI/AVX).
943 Camellia is a symmetric key block cipher developed jointly
944 at NTT and Mitsubishi Electric Corporation.
946 The Camellia specifies three key sizes: 128, 192 and 256 bits.
949 <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
951 config CRYPTO_CAMELLIA_AESNI_AVX2_X86_64
952 tristate "Camellia cipher algorithm (x86_64/AES-NI/AVX2)"
953 depends on X86 && 64BIT
957 select CRYPTO_ABLK_HELPER_X86
958 select CRYPTO_GLUE_HELPER_X86
959 select CRYPTO_CAMELLIA_X86_64
960 select CRYPTO_CAMELLIA_AESNI_AVX_X86_64
964 Camellia cipher algorithm module (x86_64/AES-NI/AVX2).
966 Camellia is a symmetric key block cipher developed jointly
967 at NTT and Mitsubishi Electric Corporation.
969 The Camellia specifies three key sizes: 128, 192 and 256 bits.
972 <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
974 config CRYPTO_CAMELLIA_SPARC64
975 tristate "Camellia cipher algorithm (SPARC64)"
980 Camellia cipher algorithm module (SPARC64).
982 Camellia is a symmetric key block cipher developed jointly
983 at NTT and Mitsubishi Electric Corporation.
985 The Camellia specifies three key sizes: 128, 192 and 256 bits.
988 <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
990 config CRYPTO_CAST_COMMON
993 Common parts of the CAST cipher algorithms shared by the
994 generic c and the assembler implementations.
997 tristate "CAST5 (CAST-128) cipher algorithm"
999 select CRYPTO_CAST_COMMON
1001 The CAST5 encryption algorithm (synonymous with CAST-128) is
1002 described in RFC2144.
1004 config CRYPTO_CAST5_AVX_X86_64
1005 tristate "CAST5 (CAST-128) cipher algorithm (x86_64/AVX)"
1006 depends on X86 && 64BIT
1007 select CRYPTO_ALGAPI
1008 select CRYPTO_CRYPTD
1009 select CRYPTO_ABLK_HELPER_X86
1010 select CRYPTO_CAST_COMMON
1013 The CAST5 encryption algorithm (synonymous with CAST-128) is
1014 described in RFC2144.
1016 This module provides the Cast5 cipher algorithm that processes
1017 sixteen blocks parallel using the AVX instruction set.
1020 tristate "CAST6 (CAST-256) cipher algorithm"
1021 select CRYPTO_ALGAPI
1022 select CRYPTO_CAST_COMMON
1024 The CAST6 encryption algorithm (synonymous with CAST-256) is
1025 described in RFC2612.
1027 config CRYPTO_CAST6_AVX_X86_64
1028 tristate "CAST6 (CAST-256) cipher algorithm (x86_64/AVX)"
1029 depends on X86 && 64BIT
1030 select CRYPTO_ALGAPI
1031 select CRYPTO_CRYPTD
1032 select CRYPTO_ABLK_HELPER_X86
1033 select CRYPTO_GLUE_HELPER_X86
1034 select CRYPTO_CAST_COMMON
1039 The CAST6 encryption algorithm (synonymous with CAST-256) is
1040 described in RFC2612.
1042 This module provides the Cast6 cipher algorithm that processes
1043 eight blocks parallel using the AVX instruction set.
1046 tristate "DES and Triple DES EDE cipher algorithms"
1047 select CRYPTO_ALGAPI
1049 DES cipher algorithm (FIPS 46-2), and Triple DES EDE (FIPS 46-3).
1051 config CRYPTO_DES_SPARC64
1052 tristate "DES and Triple DES EDE cipher algorithms (SPARC64)"
1054 select CRYPTO_ALGAPI
1057 DES cipher algorithm (FIPS 46-2), and Triple DES EDE (FIPS 46-3),
1058 optimized using SPARC64 crypto opcodes.
1060 config CRYPTO_FCRYPT
1061 tristate "FCrypt cipher algorithm"
1062 select CRYPTO_ALGAPI
1063 select CRYPTO_BLKCIPHER
1065 FCrypt algorithm used by RxRPC.
1067 config CRYPTO_KHAZAD
1068 tristate "Khazad cipher algorithm"
1069 select CRYPTO_ALGAPI
1071 Khazad cipher algorithm.
1073 Khazad was a finalist in the initial NESSIE competition. It is
1074 an algorithm optimized for 64-bit processors with good performance
1075 on 32-bit processors. Khazad uses an 128 bit key size.
1078 <http://www.larc.usp.br/~pbarreto/KhazadPage.html>
1080 config CRYPTO_SALSA20
1081 tristate "Salsa20 stream cipher algorithm"
1082 select CRYPTO_BLKCIPHER
1084 Salsa20 stream cipher algorithm.
1086 Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
1087 Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
1089 The Salsa20 stream cipher algorithm is designed by Daniel J.
1090 Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
1092 config CRYPTO_SALSA20_586
1093 tristate "Salsa20 stream cipher algorithm (i586)"
1094 depends on (X86 || UML_X86) && !64BIT
1095 select CRYPTO_BLKCIPHER
1097 Salsa20 stream cipher algorithm.
1099 Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
1100 Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
1102 The Salsa20 stream cipher algorithm is designed by Daniel J.
1103 Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
1105 config CRYPTO_SALSA20_X86_64
1106 tristate "Salsa20 stream cipher algorithm (x86_64)"
1107 depends on (X86 || UML_X86) && 64BIT
1108 select CRYPTO_BLKCIPHER
1110 Salsa20 stream cipher algorithm.
1112 Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
1113 Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
1115 The Salsa20 stream cipher algorithm is designed by Daniel J.
1116 Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
1119 tristate "SEED cipher algorithm"
1120 select CRYPTO_ALGAPI
1122 SEED cipher algorithm (RFC4269).
1124 SEED is a 128-bit symmetric key block cipher that has been
1125 developed by KISA (Korea Information Security Agency) as a
1126 national standard encryption algorithm of the Republic of Korea.
1127 It is a 16 round block cipher with the key size of 128 bit.
1130 <http://www.kisa.or.kr/kisa/seed/jsp/seed_eng.jsp>
1132 config CRYPTO_SERPENT
1133 tristate "Serpent cipher algorithm"
1134 select CRYPTO_ALGAPI
1136 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
1138 Keys are allowed to be from 0 to 256 bits in length, in steps
1139 of 8 bits. Also includes the 'Tnepres' algorithm, a reversed
1140 variant of Serpent for compatibility with old kerneli.org code.
1143 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
1145 config CRYPTO_SERPENT_SSE2_X86_64
1146 tristate "Serpent cipher algorithm (x86_64/SSE2)"
1147 depends on X86 && 64BIT
1148 select CRYPTO_ALGAPI
1149 select CRYPTO_CRYPTD
1150 select CRYPTO_ABLK_HELPER_X86
1151 select CRYPTO_GLUE_HELPER_X86
1152 select CRYPTO_SERPENT
1156 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
1158 Keys are allowed to be from 0 to 256 bits in length, in steps
1161 This module provides Serpent cipher algorithm that processes eigth
1162 blocks parallel using SSE2 instruction set.
1165 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
1167 config CRYPTO_SERPENT_SSE2_586
1168 tristate "Serpent cipher algorithm (i586/SSE2)"
1169 depends on X86 && !64BIT
1170 select CRYPTO_ALGAPI
1171 select CRYPTO_CRYPTD
1172 select CRYPTO_ABLK_HELPER_X86
1173 select CRYPTO_GLUE_HELPER_X86
1174 select CRYPTO_SERPENT
1178 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
1180 Keys are allowed to be from 0 to 256 bits in length, in steps
1183 This module provides Serpent cipher algorithm that processes four
1184 blocks parallel using SSE2 instruction set.
1187 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
1189 config CRYPTO_SERPENT_AVX_X86_64
1190 tristate "Serpent cipher algorithm (x86_64/AVX)"
1191 depends on X86 && 64BIT
1192 select CRYPTO_ALGAPI
1193 select CRYPTO_CRYPTD
1194 select CRYPTO_ABLK_HELPER_X86
1195 select CRYPTO_GLUE_HELPER_X86
1196 select CRYPTO_SERPENT
1200 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
1202 Keys are allowed to be from 0 to 256 bits in length, in steps
1205 This module provides the Serpent cipher algorithm that processes
1206 eight blocks parallel using the AVX instruction set.
1209 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
1211 config CRYPTO_SERPENT_AVX2_X86_64
1212 tristate "Serpent cipher algorithm (x86_64/AVX2)"
1213 depends on X86 && 64BIT
1214 select CRYPTO_ALGAPI
1215 select CRYPTO_CRYPTD
1216 select CRYPTO_ABLK_HELPER_X86
1217 select CRYPTO_GLUE_HELPER_X86
1218 select CRYPTO_SERPENT
1219 select CRYPTO_SERPENT_AVX_X86_64
1223 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
1225 Keys are allowed to be from 0 to 256 bits in length, in steps
1228 This module provides Serpent cipher algorithm that processes 16
1229 blocks parallel using AVX2 instruction set.
1232 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
1235 tristate "TEA, XTEA and XETA cipher algorithms"
1236 select CRYPTO_ALGAPI
1238 TEA cipher algorithm.
1240 Tiny Encryption Algorithm is a simple cipher that uses
1241 many rounds for security. It is very fast and uses
1244 Xtendend Tiny Encryption Algorithm is a modification to
1245 the TEA algorithm to address a potential key weakness
1246 in the TEA algorithm.
1248 Xtendend Encryption Tiny Algorithm is a mis-implementation
1249 of the XTEA algorithm for compatibility purposes.
1251 config CRYPTO_TWOFISH
1252 tristate "Twofish cipher algorithm"
1253 select CRYPTO_ALGAPI
1254 select CRYPTO_TWOFISH_COMMON
1256 Twofish cipher algorithm.
1258 Twofish was submitted as an AES (Advanced Encryption Standard)
1259 candidate cipher by researchers at CounterPane Systems. It is a
1260 16 round block cipher supporting key sizes of 128, 192, and 256
1264 <http://www.schneier.com/twofish.html>
1266 config CRYPTO_TWOFISH_COMMON
1269 Common parts of the Twofish cipher algorithm shared by the
1270 generic c and the assembler implementations.
1272 config CRYPTO_TWOFISH_586
1273 tristate "Twofish cipher algorithms (i586)"
1274 depends on (X86 || UML_X86) && !64BIT
1275 select CRYPTO_ALGAPI
1276 select CRYPTO_TWOFISH_COMMON
1278 Twofish cipher algorithm.
1280 Twofish was submitted as an AES (Advanced Encryption Standard)
1281 candidate cipher by researchers at CounterPane Systems. It is a
1282 16 round block cipher supporting key sizes of 128, 192, and 256
1286 <http://www.schneier.com/twofish.html>
1288 config CRYPTO_TWOFISH_X86_64
1289 tristate "Twofish cipher algorithm (x86_64)"
1290 depends on (X86 || UML_X86) && 64BIT
1291 select CRYPTO_ALGAPI
1292 select CRYPTO_TWOFISH_COMMON
1294 Twofish cipher algorithm (x86_64).
1296 Twofish was submitted as an AES (Advanced Encryption Standard)
1297 candidate cipher by researchers at CounterPane Systems. It is a
1298 16 round block cipher supporting key sizes of 128, 192, and 256
1302 <http://www.schneier.com/twofish.html>
1304 config CRYPTO_TWOFISH_X86_64_3WAY
1305 tristate "Twofish cipher algorithm (x86_64, 3-way parallel)"
1306 depends on X86 && 64BIT
1307 select CRYPTO_ALGAPI
1308 select CRYPTO_TWOFISH_COMMON
1309 select CRYPTO_TWOFISH_X86_64
1310 select CRYPTO_GLUE_HELPER_X86
1314 Twofish cipher algorithm (x86_64, 3-way parallel).
1316 Twofish was submitted as an AES (Advanced Encryption Standard)
1317 candidate cipher by researchers at CounterPane Systems. It is a
1318 16 round block cipher supporting key sizes of 128, 192, and 256
1321 This module provides Twofish cipher algorithm that processes three
1322 blocks parallel, utilizing resources of out-of-order CPUs better.
1325 <http://www.schneier.com/twofish.html>
1327 config CRYPTO_TWOFISH_AVX_X86_64
1328 tristate "Twofish cipher algorithm (x86_64/AVX)"
1329 depends on X86 && 64BIT
1330 select CRYPTO_ALGAPI
1331 select CRYPTO_CRYPTD
1332 select CRYPTO_ABLK_HELPER_X86
1333 select CRYPTO_GLUE_HELPER_X86
1334 select CRYPTO_TWOFISH_COMMON
1335 select CRYPTO_TWOFISH_X86_64
1336 select CRYPTO_TWOFISH_X86_64_3WAY
1340 Twofish cipher algorithm (x86_64/AVX).
1342 Twofish was submitted as an AES (Advanced Encryption Standard)
1343 candidate cipher by researchers at CounterPane Systems. It is a
1344 16 round block cipher supporting key sizes of 128, 192, and 256
1347 This module provides the Twofish cipher algorithm that processes
1348 eight blocks parallel using the AVX Instruction Set.
1351 <http://www.schneier.com/twofish.html>
1353 config CRYPTO_TWOFISH_AVX2_X86_64
1354 tristate "Twofish cipher algorithm (x86_64/AVX2)"
1355 depends on X86 && 64BIT
1357 select CRYPTO_ALGAPI
1358 select CRYPTO_CRYPTD
1359 select CRYPTO_ABLK_HELPER_X86
1360 select CRYPTO_GLUE_HELPER_X86
1361 select CRYPTO_TWOFISH_COMMON
1362 select CRYPTO_TWOFISH_X86_64
1363 select CRYPTO_TWOFISH_X86_64_3WAY
1364 select CRYPTO_TWOFISH_AVX_X86_64
1368 Twofish cipher algorithm (x86_64/AVX2).
1370 Twofish was submitted as an AES (Advanced Encryption Standard)
1371 candidate cipher by researchers at CounterPane Systems. It is a
1372 16 round block cipher supporting key sizes of 128, 192, and 256
1376 <http://www.schneier.com/twofish.html>
1378 comment "Compression"
1380 config CRYPTO_DEFLATE
1381 tristate "Deflate compression algorithm"
1382 select CRYPTO_ALGAPI
1386 This is the Deflate algorithm (RFC1951), specified for use in
1387 IPSec with the IPCOMP protocol (RFC3173, RFC2394).
1389 You will most probably want this if using IPSec.
1392 tristate "Zlib compression algorithm"
1398 This is the zlib algorithm.
1401 tristate "LZO compression algorithm"
1402 select CRYPTO_ALGAPI
1404 select LZO_DECOMPRESS
1406 This is the LZO algorithm.
1409 tristate "842 compression algorithm"
1410 depends on CRYPTO_DEV_NX_COMPRESS
1411 # 842 uses lzo if the hardware becomes unavailable
1413 select LZO_DECOMPRESS
1415 This is the 842 algorithm.
1417 comment "Random Number Generation"
1419 config CRYPTO_ANSI_CPRNG
1420 tristate "Pseudo Random Number Generation for Cryptographic modules"
1425 This option enables the generic pseudo random number generator
1426 for cryptographic modules. Uses the Algorithm specified in
1427 ANSI X9.31 A.2.4. Note that this option must be enabled if
1428 CRYPTO_FIPS is selected
1430 config CRYPTO_USER_API
1433 config CRYPTO_USER_API_HASH
1434 tristate "User-space interface for hash algorithms"
1437 select CRYPTO_USER_API
1439 This option enables the user-spaces interface for hash
1442 config CRYPTO_USER_API_SKCIPHER
1443 tristate "User-space interface for symmetric key cipher algorithms"
1445 select CRYPTO_BLKCIPHER
1446 select CRYPTO_USER_API
1448 This option enables the user-spaces interface for symmetric
1449 key cipher algorithms.
1451 source "drivers/crypto/Kconfig"
1452 source crypto/asymmetric_keys/Kconfig