2 # Generic algorithms support
8 # async_tx api: hardware offloaded memory transfer/transform support
10 source "crypto/async_tx/Kconfig"
13 # Cryptographic API Configuration
16 tristate "Cryptographic API"
18 This option provides the core Cryptographic API.
22 comment "Crypto core or helper"
25 bool "FIPS 200 compliance"
26 depends on CRYPTO_ANSI_CPRNG && !CRYPTO_MANAGER_DISABLE_TESTS
28 This options enables the fips boot option which is
29 required if you want to system to operate in a FIPS 200
30 certification. You should say no unless you know what
37 This option provides the API for cryptographic algorithms.
51 config CRYPTO_BLKCIPHER
53 select CRYPTO_BLKCIPHER2
56 config CRYPTO_BLKCIPHER2
60 select CRYPTO_WORKQUEUE
90 tristate "Cryptographic algorithm manager"
91 select CRYPTO_MANAGER2
93 Create default cryptographic template instantiations such as
96 config CRYPTO_MANAGER2
97 def_tristate CRYPTO_MANAGER || (CRYPTO_MANAGER!=n && CRYPTO_ALGAPI=y)
100 select CRYPTO_BLKCIPHER2
104 tristate "Userspace cryptographic algorithm configuration"
106 select CRYPTO_MANAGER
108 Userspace configuration for cryptographic instantiations such as
111 config CRYPTO_MANAGER_DISABLE_TESTS
112 bool "Disable run-time self tests"
114 depends on CRYPTO_MANAGER2
116 Disable run-time self tests that normally take place at
117 algorithm registration.
119 config CRYPTO_GF128MUL
120 tristate "GF(2^128) multiplication functions"
122 Efficient table driven implementation of multiplications in the
123 field GF(2^128). This is needed by some cypher modes. This
124 option will be selected automatically if you select such a
125 cipher mode. Only select this option by hand if you expect to load
126 an external module that requires these functions.
129 tristate "Null algorithms"
131 select CRYPTO_BLKCIPHER
134 These are 'Null' algorithms, used by IPsec, which do nothing.
137 tristate "Parallel crypto engine (EXPERIMENTAL)"
138 depends on SMP && EXPERIMENTAL
140 select CRYPTO_MANAGER
143 This converts an arbitrary crypto algorithm into a parallel
144 algorithm that executes in kernel threads.
146 config CRYPTO_WORKQUEUE
150 tristate "Software async crypto daemon"
151 select CRYPTO_BLKCIPHER
153 select CRYPTO_MANAGER
154 select CRYPTO_WORKQUEUE
156 This is a generic software asynchronous crypto daemon that
157 converts an arbitrary synchronous software crypto algorithm
158 into an asynchronous algorithm that executes in a kernel thread.
160 config CRYPTO_AUTHENC
161 tristate "Authenc support"
163 select CRYPTO_BLKCIPHER
164 select CRYPTO_MANAGER
167 Authenc: Combined mode wrapper for IPsec.
168 This is required for IPSec.
171 tristate "Testing module"
173 select CRYPTO_MANAGER
175 Quick & dirty crypto test module.
177 config CRYPTO_ABLK_HELPER_X86
182 config CRYPTO_GLUE_HELPER_X86
187 comment "Authenticated Encryption with Associated Data"
190 tristate "CCM support"
194 Support for Counter with CBC MAC. Required for IPsec.
197 tristate "GCM/GMAC support"
202 Support for Galois/Counter Mode (GCM) and Galois Message
203 Authentication Code (GMAC). Required for IPSec.
206 tristate "Sequence Number IV Generator"
208 select CRYPTO_BLKCIPHER
211 This IV generator generates an IV based on a sequence number by
212 xoring it with a salt. This algorithm is mainly useful for CTR
214 comment "Block modes"
217 tristate "CBC support"
218 select CRYPTO_BLKCIPHER
219 select CRYPTO_MANAGER
221 CBC: Cipher Block Chaining mode
222 This block cipher algorithm is required for IPSec.
225 tristate "CTR support"
226 select CRYPTO_BLKCIPHER
228 select CRYPTO_MANAGER
231 This block cipher algorithm is required for IPSec.
234 tristate "CTS support"
235 select CRYPTO_BLKCIPHER
237 CTS: Cipher Text Stealing
238 This is the Cipher Text Stealing mode as described by
239 Section 8 of rfc2040 and referenced by rfc3962.
240 (rfc3962 includes errata information in its Appendix A)
241 This mode is required for Kerberos gss mechanism support
245 tristate "ECB support"
246 select CRYPTO_BLKCIPHER
247 select CRYPTO_MANAGER
249 ECB: Electronic CodeBook mode
250 This is the simplest block cipher algorithm. It simply encrypts
251 the input block by block.
254 tristate "LRW support"
255 select CRYPTO_BLKCIPHER
256 select CRYPTO_MANAGER
257 select CRYPTO_GF128MUL
259 LRW: Liskov Rivest Wagner, a tweakable, non malleable, non movable
260 narrow block cipher mode for dm-crypt. Use it with cipher
261 specification string aes-lrw-benbi, the key must be 256, 320 or 384.
262 The first 128, 192 or 256 bits in the key are used for AES and the
263 rest is used to tie each cipher block to its logical position.
266 tristate "PCBC support"
267 select CRYPTO_BLKCIPHER
268 select CRYPTO_MANAGER
270 PCBC: Propagating Cipher Block Chaining mode
271 This block cipher algorithm is required for RxRPC.
274 tristate "XTS support"
275 select CRYPTO_BLKCIPHER
276 select CRYPTO_MANAGER
277 select CRYPTO_GF128MUL
279 XTS: IEEE1619/D16 narrow block cipher use with aes-xts-plain,
280 key size 256, 384 or 512 bits. This implementation currently
281 can't handle a sectorsize which is not a multiple of 16 bytes.
286 tristate "HMAC support"
288 select CRYPTO_MANAGER
290 HMAC: Keyed-Hashing for Message Authentication (RFC2104).
291 This is required for IPSec.
294 tristate "XCBC support"
295 depends on EXPERIMENTAL
297 select CRYPTO_MANAGER
299 XCBC: Keyed-Hashing with encryption algorithm
300 http://www.ietf.org/rfc/rfc3566.txt
301 http://csrc.nist.gov/encryption/modes/proposedmodes/
302 xcbc-mac/xcbc-mac-spec.pdf
305 tristate "VMAC support"
306 depends on EXPERIMENTAL
308 select CRYPTO_MANAGER
310 VMAC is a message authentication algorithm designed for
311 very high speed on 64-bit architectures.
314 <http://fastcrypto.org/vmac>
319 tristate "CRC32c CRC algorithm"
323 Castagnoli, et al Cyclic Redundancy-Check Algorithm. Used
324 by iSCSI for header and data digests and by others.
325 See Castagnoli93. Module will be crc32c.
327 config CRYPTO_CRC32C_INTEL
328 tristate "CRC32c INTEL hardware acceleration"
332 In Intel processor with SSE4.2 supported, the processor will
333 support CRC32C implementation using hardware accelerated CRC32
334 instruction. This option will create 'crc32c-intel' module,
335 which will enable any routine to use the CRC32 instruction to
336 gain performance compared with software implementation.
337 Module will be crc32c-intel.
339 config CRYPTO_CRC32C_SPARC64
340 tristate "CRC32c CRC algorithm (SPARC64)"
345 CRC32c CRC algorithm implemented using sparc64 crypto instructions,
349 tristate "GHASH digest algorithm"
350 select CRYPTO_GF128MUL
352 GHASH is message digest algorithm for GCM (Galois/Counter Mode).
355 tristate "MD4 digest algorithm"
358 MD4 message digest algorithm (RFC1320).
361 tristate "MD5 digest algorithm"
364 MD5 message digest algorithm (RFC1321).
366 config CRYPTO_MD5_SPARC64
367 tristate "MD5 digest algorithm (SPARC64)"
372 MD5 message digest algorithm (RFC1321) implemented
373 using sparc64 crypto instructions, when available.
375 config CRYPTO_MICHAEL_MIC
376 tristate "Michael MIC keyed digest algorithm"
379 Michael MIC is used for message integrity protection in TKIP
380 (IEEE 802.11i). This algorithm is required for TKIP, but it
381 should not be used for other purposes because of the weakness
385 tristate "RIPEMD-128 digest algorithm"
388 RIPEMD-128 (ISO/IEC 10118-3:2004).
390 RIPEMD-128 is a 128-bit cryptographic hash function. It should only
391 be used as a secure replacement for RIPEMD. For other use cases,
392 RIPEMD-160 should be used.
394 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
395 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
398 tristate "RIPEMD-160 digest algorithm"
401 RIPEMD-160 (ISO/IEC 10118-3:2004).
403 RIPEMD-160 is a 160-bit cryptographic hash function. It is intended
404 to be used as a secure replacement for the 128-bit hash functions
405 MD4, MD5 and it's predecessor RIPEMD
406 (not to be confused with RIPEMD-128).
408 It's speed is comparable to SHA1 and there are no known attacks
411 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
412 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
415 tristate "RIPEMD-256 digest algorithm"
418 RIPEMD-256 is an optional extension of RIPEMD-128 with a
419 256 bit hash. It is intended for applications that require
420 longer hash-results, without needing a larger security level
423 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
424 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
427 tristate "RIPEMD-320 digest algorithm"
430 RIPEMD-320 is an optional extension of RIPEMD-160 with a
431 320 bit hash. It is intended for applications that require
432 longer hash-results, without needing a larger security level
435 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
436 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
439 tristate "SHA1 digest algorithm"
442 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2).
444 config CRYPTO_SHA1_SSSE3
445 tristate "SHA1 digest algorithm (SSSE3/AVX)"
446 depends on X86 && 64BIT
450 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented
451 using Supplemental SSE3 (SSSE3) instructions or Advanced Vector
452 Extensions (AVX), when available.
454 config CRYPTO_SHA1_SPARC64
455 tristate "SHA1 digest algorithm (SPARC64)"
460 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented
461 using sparc64 crypto instructions, when available.
464 tristate "SHA224 and SHA256 digest algorithm"
467 SHA256 secure hash standard (DFIPS 180-2).
469 This version of SHA implements a 256 bit hash with 128 bits of
470 security against collision attacks.
472 This code also includes SHA-224, a 224 bit hash with 112 bits
473 of security against collision attacks.
475 config CRYPTO_SHA256_SPARC64
476 tristate "SHA224 and SHA256 digest algorithm (SPARC64)"
481 SHA-256 secure hash standard (DFIPS 180-2) implemented
482 using sparc64 crypto instructions, when available.
485 tristate "SHA384 and SHA512 digest algorithms"
488 SHA512 secure hash standard (DFIPS 180-2).
490 This version of SHA implements a 512 bit hash with 256 bits of
491 security against collision attacks.
493 This code also includes SHA-384, a 384 bit hash with 192 bits
494 of security against collision attacks.
496 config CRYPTO_SHA512_SPARC64
497 tristate "SHA384 and SHA512 digest algorithm (SPARC64)"
502 SHA-512 secure hash standard (DFIPS 180-2) implemented
503 using sparc64 crypto instructions, when available.
506 tristate "Tiger digest algorithms"
509 Tiger hash algorithm 192, 160 and 128-bit hashes
511 Tiger is a hash function optimized for 64-bit processors while
512 still having decent performance on 32-bit processors.
513 Tiger was developed by Ross Anderson and Eli Biham.
516 <http://www.cs.technion.ac.il/~biham/Reports/Tiger/>.
519 tristate "Whirlpool digest algorithms"
522 Whirlpool hash algorithm 512, 384 and 256-bit hashes
524 Whirlpool-512 is part of the NESSIE cryptographic primitives.
525 Whirlpool will be part of the ISO/IEC 10118-3:2003(E) standard
528 <http://www.larc.usp.br/~pbarreto/WhirlpoolPage.html>
530 config CRYPTO_GHASH_CLMUL_NI_INTEL
531 tristate "GHASH digest algorithm (CLMUL-NI accelerated)"
532 depends on X86 && 64BIT
535 GHASH is message digest algorithm for GCM (Galois/Counter Mode).
536 The implementation is accelerated by CLMUL-NI of Intel.
541 tristate "AES cipher algorithms"
544 AES cipher algorithms (FIPS-197). AES uses the Rijndael
547 Rijndael appears to be consistently a very good performer in
548 both hardware and software across a wide range of computing
549 environments regardless of its use in feedback or non-feedback
550 modes. Its key setup time is excellent, and its key agility is
551 good. Rijndael's very low memory requirements make it very well
552 suited for restricted-space environments, in which it also
553 demonstrates excellent performance. Rijndael's operations are
554 among the easiest to defend against power and timing attacks.
556 The AES specifies three key sizes: 128, 192 and 256 bits
558 See <http://csrc.nist.gov/CryptoToolkit/aes/> for more information.
560 config CRYPTO_AES_586
561 tristate "AES cipher algorithms (i586)"
562 depends on (X86 || UML_X86) && !64BIT
566 AES cipher algorithms (FIPS-197). AES uses the Rijndael
569 Rijndael appears to be consistently a very good performer in
570 both hardware and software across a wide range of computing
571 environments regardless of its use in feedback or non-feedback
572 modes. Its key setup time is excellent, and its key agility is
573 good. Rijndael's very low memory requirements make it very well
574 suited for restricted-space environments, in which it also
575 demonstrates excellent performance. Rijndael's operations are
576 among the easiest to defend against power and timing attacks.
578 The AES specifies three key sizes: 128, 192 and 256 bits
580 See <http://csrc.nist.gov/encryption/aes/> for more information.
582 config CRYPTO_AES_X86_64
583 tristate "AES cipher algorithms (x86_64)"
584 depends on (X86 || UML_X86) && 64BIT
588 AES cipher algorithms (FIPS-197). AES uses the Rijndael
591 Rijndael appears to be consistently a very good performer in
592 both hardware and software across a wide range of computing
593 environments regardless of its use in feedback or non-feedback
594 modes. Its key setup time is excellent, and its key agility is
595 good. Rijndael's very low memory requirements make it very well
596 suited for restricted-space environments, in which it also
597 demonstrates excellent performance. Rijndael's operations are
598 among the easiest to defend against power and timing attacks.
600 The AES specifies three key sizes: 128, 192 and 256 bits
602 See <http://csrc.nist.gov/encryption/aes/> for more information.
604 config CRYPTO_AES_NI_INTEL
605 tristate "AES cipher algorithms (AES-NI)"
607 select CRYPTO_AES_X86_64 if 64BIT
608 select CRYPTO_AES_586 if !64BIT
610 select CRYPTO_ABLK_HELPER_X86
613 Use Intel AES-NI instructions for AES algorithm.
615 AES cipher algorithms (FIPS-197). AES uses the Rijndael
618 Rijndael appears to be consistently a very good performer in
619 both hardware and software across a wide range of computing
620 environments regardless of its use in feedback or non-feedback
621 modes. Its key setup time is excellent, and its key agility is
622 good. Rijndael's very low memory requirements make it very well
623 suited for restricted-space environments, in which it also
624 demonstrates excellent performance. Rijndael's operations are
625 among the easiest to defend against power and timing attacks.
627 The AES specifies three key sizes: 128, 192 and 256 bits
629 See <http://csrc.nist.gov/encryption/aes/> for more information.
631 In addition to AES cipher algorithm support, the acceleration
632 for some popular block cipher mode is supported too, including
633 ECB, CBC, LRW, PCBC, XTS. The 64 bit version has additional
634 acceleration for CTR.
636 config CRYPTO_AES_SPARC64
637 tristate "AES cipher algorithms (SPARC64)"
642 Use SPARC64 crypto opcodes for AES algorithm.
644 AES cipher algorithms (FIPS-197). AES uses the Rijndael
647 Rijndael appears to be consistently a very good performer in
648 both hardware and software across a wide range of computing
649 environments regardless of its use in feedback or non-feedback
650 modes. Its key setup time is excellent, and its key agility is
651 good. Rijndael's very low memory requirements make it very well
652 suited for restricted-space environments, in which it also
653 demonstrates excellent performance. Rijndael's operations are
654 among the easiest to defend against power and timing attacks.
656 The AES specifies three key sizes: 128, 192 and 256 bits
658 See <http://csrc.nist.gov/encryption/aes/> for more information.
660 In addition to AES cipher algorithm support, the acceleration
661 for some popular block cipher mode is supported too, including
665 tristate "Anubis cipher algorithm"
668 Anubis cipher algorithm.
670 Anubis is a variable key length cipher which can use keys from
671 128 bits to 320 bits in length. It was evaluated as a entrant
672 in the NESSIE competition.
675 <https://www.cosic.esat.kuleuven.be/nessie/reports/>
676 <http://www.larc.usp.br/~pbarreto/AnubisPage.html>
679 tristate "ARC4 cipher algorithm"
680 select CRYPTO_BLKCIPHER
682 ARC4 cipher algorithm.
684 ARC4 is a stream cipher using keys ranging from 8 bits to 2048
685 bits in length. This algorithm is required for driver-based
686 WEP, but it should not be for other purposes because of the
687 weakness of the algorithm.
689 config CRYPTO_BLOWFISH
690 tristate "Blowfish cipher algorithm"
692 select CRYPTO_BLOWFISH_COMMON
694 Blowfish cipher algorithm, by Bruce Schneier.
696 This is a variable key length cipher which can use keys from 32
697 bits to 448 bits in length. It's fast, simple and specifically
698 designed for use on "large microprocessors".
701 <http://www.schneier.com/blowfish.html>
703 config CRYPTO_BLOWFISH_COMMON
706 Common parts of the Blowfish cipher algorithm shared by the
707 generic c and the assembler implementations.
710 <http://www.schneier.com/blowfish.html>
712 config CRYPTO_BLOWFISH_X86_64
713 tristate "Blowfish cipher algorithm (x86_64)"
714 depends on X86 && 64BIT
716 select CRYPTO_BLOWFISH_COMMON
718 Blowfish cipher algorithm (x86_64), by Bruce Schneier.
720 This is a variable key length cipher which can use keys from 32
721 bits to 448 bits in length. It's fast, simple and specifically
722 designed for use on "large microprocessors".
725 <http://www.schneier.com/blowfish.html>
727 config CRYPTO_CAMELLIA
728 tristate "Camellia cipher algorithms"
732 Camellia cipher algorithms module.
734 Camellia is a symmetric key block cipher developed jointly
735 at NTT and Mitsubishi Electric Corporation.
737 The Camellia specifies three key sizes: 128, 192 and 256 bits.
740 <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
742 config CRYPTO_CAMELLIA_X86_64
743 tristate "Camellia cipher algorithm (x86_64)"
744 depends on X86 && 64BIT
747 select CRYPTO_GLUE_HELPER_X86
751 Camellia cipher algorithm module (x86_64).
753 Camellia is a symmetric key block cipher developed jointly
754 at NTT and Mitsubishi Electric Corporation.
756 The Camellia specifies three key sizes: 128, 192 and 256 bits.
759 <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
761 config CRYPTO_CAMELLIA_SPARC64
762 tristate "Camellia cipher algorithm (SPARC64)"
767 Camellia cipher algorithm module (SPARC64).
769 Camellia is a symmetric key block cipher developed jointly
770 at NTT and Mitsubishi Electric Corporation.
772 The Camellia specifies three key sizes: 128, 192 and 256 bits.
775 <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
778 tristate "CAST5 (CAST-128) cipher algorithm"
781 The CAST5 encryption algorithm (synonymous with CAST-128) is
782 described in RFC2144.
785 tristate "CAST6 (CAST-256) cipher algorithm"
788 The CAST6 encryption algorithm (synonymous with CAST-256) is
789 described in RFC2612.
792 tristate "DES and Triple DES EDE cipher algorithms"
795 DES cipher algorithm (FIPS 46-2), and Triple DES EDE (FIPS 46-3).
797 config CRYPTO_DES_SPARC64
798 tristate "DES and Triple DES EDE cipher algorithms (SPARC64)"
802 DES cipher algorithm (FIPS 46-2), and Triple DES EDE (FIPS 46-3),
803 optimized using SPARC64 crypto opcodes.
806 tristate "FCrypt cipher algorithm"
808 select CRYPTO_BLKCIPHER
810 FCrypt algorithm used by RxRPC.
813 tristate "Khazad cipher algorithm"
816 Khazad cipher algorithm.
818 Khazad was a finalist in the initial NESSIE competition. It is
819 an algorithm optimized for 64-bit processors with good performance
820 on 32-bit processors. Khazad uses an 128 bit key size.
823 <http://www.larc.usp.br/~pbarreto/KhazadPage.html>
825 config CRYPTO_SALSA20
826 tristate "Salsa20 stream cipher algorithm (EXPERIMENTAL)"
827 depends on EXPERIMENTAL
828 select CRYPTO_BLKCIPHER
830 Salsa20 stream cipher algorithm.
832 Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
833 Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
835 The Salsa20 stream cipher algorithm is designed by Daniel J.
836 Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
838 config CRYPTO_SALSA20_586
839 tristate "Salsa20 stream cipher algorithm (i586) (EXPERIMENTAL)"
840 depends on (X86 || UML_X86) && !64BIT
841 depends on EXPERIMENTAL
842 select CRYPTO_BLKCIPHER
844 Salsa20 stream cipher algorithm.
846 Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
847 Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
849 The Salsa20 stream cipher algorithm is designed by Daniel J.
850 Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
852 config CRYPTO_SALSA20_X86_64
853 tristate "Salsa20 stream cipher algorithm (x86_64) (EXPERIMENTAL)"
854 depends on (X86 || UML_X86) && 64BIT
855 depends on EXPERIMENTAL
856 select CRYPTO_BLKCIPHER
858 Salsa20 stream cipher algorithm.
860 Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
861 Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
863 The Salsa20 stream cipher algorithm is designed by Daniel J.
864 Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
867 tristate "SEED cipher algorithm"
870 SEED cipher algorithm (RFC4269).
872 SEED is a 128-bit symmetric key block cipher that has been
873 developed by KISA (Korea Information Security Agency) as a
874 national standard encryption algorithm of the Republic of Korea.
875 It is a 16 round block cipher with the key size of 128 bit.
878 <http://www.kisa.or.kr/kisa/seed/jsp/seed_eng.jsp>
880 config CRYPTO_SERPENT
881 tristate "Serpent cipher algorithm"
884 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
886 Keys are allowed to be from 0 to 256 bits in length, in steps
887 of 8 bits. Also includes the 'Tnepres' algorithm, a reversed
888 variant of Serpent for compatibility with old kerneli.org code.
891 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
893 config CRYPTO_SERPENT_SSE2_X86_64
894 tristate "Serpent cipher algorithm (x86_64/SSE2)"
895 depends on X86 && 64BIT
898 select CRYPTO_ABLK_HELPER_X86
899 select CRYPTO_GLUE_HELPER_X86
900 select CRYPTO_SERPENT
904 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
906 Keys are allowed to be from 0 to 256 bits in length, in steps
909 This module provides Serpent cipher algorithm that processes eigth
910 blocks parallel using SSE2 instruction set.
913 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
915 config CRYPTO_SERPENT_SSE2_586
916 tristate "Serpent cipher algorithm (i586/SSE2)"
917 depends on X86 && !64BIT
920 select CRYPTO_ABLK_HELPER_X86
921 select CRYPTO_GLUE_HELPER_X86
922 select CRYPTO_SERPENT
926 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
928 Keys are allowed to be from 0 to 256 bits in length, in steps
931 This module provides Serpent cipher algorithm that processes four
932 blocks parallel using SSE2 instruction set.
935 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
937 config CRYPTO_SERPENT_AVX_X86_64
938 tristate "Serpent cipher algorithm (x86_64/AVX)"
939 depends on X86 && 64BIT
942 select CRYPTO_ABLK_HELPER_X86
943 select CRYPTO_GLUE_HELPER_X86
944 select CRYPTO_SERPENT
948 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
950 Keys are allowed to be from 0 to 256 bits in length, in steps
953 This module provides the Serpent cipher algorithm that processes
954 eight blocks parallel using the AVX instruction set.
957 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
960 tristate "TEA, XTEA and XETA cipher algorithms"
963 TEA cipher algorithm.
965 Tiny Encryption Algorithm is a simple cipher that uses
966 many rounds for security. It is very fast and uses
969 Xtendend Tiny Encryption Algorithm is a modification to
970 the TEA algorithm to address a potential key weakness
971 in the TEA algorithm.
973 Xtendend Encryption Tiny Algorithm is a mis-implementation
974 of the XTEA algorithm for compatibility purposes.
976 config CRYPTO_TWOFISH
977 tristate "Twofish cipher algorithm"
979 select CRYPTO_TWOFISH_COMMON
981 Twofish cipher algorithm.
983 Twofish was submitted as an AES (Advanced Encryption Standard)
984 candidate cipher by researchers at CounterPane Systems. It is a
985 16 round block cipher supporting key sizes of 128, 192, and 256
989 <http://www.schneier.com/twofish.html>
991 config CRYPTO_TWOFISH_COMMON
994 Common parts of the Twofish cipher algorithm shared by the
995 generic c and the assembler implementations.
997 config CRYPTO_TWOFISH_586
998 tristate "Twofish cipher algorithms (i586)"
999 depends on (X86 || UML_X86) && !64BIT
1000 select CRYPTO_ALGAPI
1001 select CRYPTO_TWOFISH_COMMON
1003 Twofish cipher algorithm.
1005 Twofish was submitted as an AES (Advanced Encryption Standard)
1006 candidate cipher by researchers at CounterPane Systems. It is a
1007 16 round block cipher supporting key sizes of 128, 192, and 256
1011 <http://www.schneier.com/twofish.html>
1013 config CRYPTO_TWOFISH_X86_64
1014 tristate "Twofish cipher algorithm (x86_64)"
1015 depends on (X86 || UML_X86) && 64BIT
1016 select CRYPTO_ALGAPI
1017 select CRYPTO_TWOFISH_COMMON
1019 Twofish cipher algorithm (x86_64).
1021 Twofish was submitted as an AES (Advanced Encryption Standard)
1022 candidate cipher by researchers at CounterPane Systems. It is a
1023 16 round block cipher supporting key sizes of 128, 192, and 256
1027 <http://www.schneier.com/twofish.html>
1029 config CRYPTO_TWOFISH_X86_64_3WAY
1030 tristate "Twofish cipher algorithm (x86_64, 3-way parallel)"
1031 depends on X86 && 64BIT
1032 select CRYPTO_ALGAPI
1033 select CRYPTO_TWOFISH_COMMON
1034 select CRYPTO_TWOFISH_X86_64
1035 select CRYPTO_GLUE_HELPER_X86
1039 Twofish cipher algorithm (x86_64, 3-way parallel).
1041 Twofish was submitted as an AES (Advanced Encryption Standard)
1042 candidate cipher by researchers at CounterPane Systems. It is a
1043 16 round block cipher supporting key sizes of 128, 192, and 256
1046 This module provides Twofish cipher algorithm that processes three
1047 blocks parallel, utilizing resources of out-of-order CPUs better.
1050 <http://www.schneier.com/twofish.html>
1052 config CRYPTO_TWOFISH_AVX_X86_64
1053 tristate "Twofish cipher algorithm (x86_64/AVX)"
1054 depends on X86 && 64BIT
1055 select CRYPTO_ALGAPI
1056 select CRYPTO_CRYPTD
1057 select CRYPTO_ABLK_HELPER_X86
1058 select CRYPTO_GLUE_HELPER_X86
1059 select CRYPTO_TWOFISH_COMMON
1060 select CRYPTO_TWOFISH_X86_64
1061 select CRYPTO_TWOFISH_X86_64_3WAY
1065 Twofish cipher algorithm (x86_64/AVX).
1067 Twofish was submitted as an AES (Advanced Encryption Standard)
1068 candidate cipher by researchers at CounterPane Systems. It is a
1069 16 round block cipher supporting key sizes of 128, 192, and 256
1072 This module provides the Twofish cipher algorithm that processes
1073 eight blocks parallel using the AVX Instruction Set.
1076 <http://www.schneier.com/twofish.html>
1078 comment "Compression"
1080 config CRYPTO_DEFLATE
1081 tristate "Deflate compression algorithm"
1082 select CRYPTO_ALGAPI
1086 This is the Deflate algorithm (RFC1951), specified for use in
1087 IPSec with the IPCOMP protocol (RFC3173, RFC2394).
1089 You will most probably want this if using IPSec.
1092 tristate "Zlib compression algorithm"
1098 This is the zlib algorithm.
1101 tristate "LZO compression algorithm"
1102 select CRYPTO_ALGAPI
1104 select LZO_DECOMPRESS
1106 This is the LZO algorithm.
1108 comment "Random Number Generation"
1110 config CRYPTO_ANSI_CPRNG
1111 tristate "Pseudo Random Number Generation for Cryptographic modules"
1116 This option enables the generic pseudo random number generator
1117 for cryptographic modules. Uses the Algorithm specified in
1118 ANSI X9.31 A.2.4. Note that this option must be enabled if
1119 CRYPTO_FIPS is selected
1121 config CRYPTO_USER_API
1124 config CRYPTO_USER_API_HASH
1125 tristate "User-space interface for hash algorithms"
1128 select CRYPTO_USER_API
1130 This option enables the user-spaces interface for hash
1133 config CRYPTO_USER_API_SKCIPHER
1134 tristate "User-space interface for symmetric key cipher algorithms"
1136 select CRYPTO_BLKCIPHER
1137 select CRYPTO_USER_API
1139 This option enables the user-spaces interface for symmetric
1140 key cipher algorithms.
1142 source "drivers/crypto/Kconfig"