2 # Generic algorithms support
8 # async_tx api: hardware offloaded memory transfer/transform support
10 source "crypto/async_tx/Kconfig"
13 # Cryptographic API Configuration
16 tristate "Cryptographic API"
18 This option provides the core Cryptographic API.
22 comment "Crypto core or helper"
25 bool "FIPS 200 compliance"
26 depends on CRYPTO_ANSI_CPRNG && !CRYPTO_MANAGER_DISABLE_TESTS
28 This options enables the fips boot option which is
29 required if you want to system to operate in a FIPS 200
30 certification. You should say no unless you know what
37 This option provides the API for cryptographic algorithms.
51 config CRYPTO_BLKCIPHER
53 select CRYPTO_BLKCIPHER2
56 config CRYPTO_BLKCIPHER2
60 select CRYPTO_WORKQUEUE
90 tristate "Cryptographic algorithm manager"
91 select CRYPTO_MANAGER2
93 Create default cryptographic template instantiations such as
96 config CRYPTO_MANAGER2
97 def_tristate CRYPTO_MANAGER || (CRYPTO_MANAGER!=n && CRYPTO_ALGAPI=y)
100 select CRYPTO_BLKCIPHER2
104 tristate "Userspace cryptographic algorithm configuration"
106 select CRYPTO_MANAGER
108 Userspace configuration for cryptographic instantiations such as
111 config CRYPTO_MANAGER_DISABLE_TESTS
112 bool "Disable run-time self tests"
114 depends on CRYPTO_MANAGER2
116 Disable run-time self tests that normally take place at
117 algorithm registration.
119 config CRYPTO_GF128MUL
120 tristate "GF(2^128) multiplication functions"
122 Efficient table driven implementation of multiplications in the
123 field GF(2^128). This is needed by some cypher modes. This
124 option will be selected automatically if you select such a
125 cipher mode. Only select this option by hand if you expect to load
126 an external module that requires these functions.
129 tristate "Null algorithms"
131 select CRYPTO_BLKCIPHER
134 These are 'Null' algorithms, used by IPsec, which do nothing.
137 tristate "Parallel crypto engine"
140 select CRYPTO_MANAGER
143 This converts an arbitrary crypto algorithm into a parallel
144 algorithm that executes in kernel threads.
146 config CRYPTO_WORKQUEUE
150 tristate "Software async crypto daemon"
151 select CRYPTO_BLKCIPHER
153 select CRYPTO_MANAGER
154 select CRYPTO_WORKQUEUE
156 This is a generic software asynchronous crypto daemon that
157 converts an arbitrary synchronous software crypto algorithm
158 into an asynchronous algorithm that executes in a kernel thread.
160 config CRYPTO_AUTHENC
161 tristate "Authenc support"
163 select CRYPTO_BLKCIPHER
164 select CRYPTO_MANAGER
167 Authenc: Combined mode wrapper for IPsec.
168 This is required for IPSec.
171 tristate "Testing module"
173 select CRYPTO_MANAGER
175 Quick & dirty crypto test module.
177 config CRYPTO_ABLK_HELPER_X86
182 config CRYPTO_GLUE_HELPER_X86
187 comment "Authenticated Encryption with Associated Data"
190 tristate "CCM support"
194 Support for Counter with CBC MAC. Required for IPsec.
197 tristate "GCM/GMAC support"
202 Support for Galois/Counter Mode (GCM) and Galois Message
203 Authentication Code (GMAC). Required for IPSec.
206 tristate "Sequence Number IV Generator"
208 select CRYPTO_BLKCIPHER
211 This IV generator generates an IV based on a sequence number by
212 xoring it with a salt. This algorithm is mainly useful for CTR
214 comment "Block modes"
217 tristate "CBC support"
218 select CRYPTO_BLKCIPHER
219 select CRYPTO_MANAGER
221 CBC: Cipher Block Chaining mode
222 This block cipher algorithm is required for IPSec.
225 tristate "CTR support"
226 select CRYPTO_BLKCIPHER
228 select CRYPTO_MANAGER
231 This block cipher algorithm is required for IPSec.
234 tristate "CTS support"
235 select CRYPTO_BLKCIPHER
237 CTS: Cipher Text Stealing
238 This is the Cipher Text Stealing mode as described by
239 Section 8 of rfc2040 and referenced by rfc3962.
240 (rfc3962 includes errata information in its Appendix A)
241 This mode is required for Kerberos gss mechanism support
245 tristate "ECB support"
246 select CRYPTO_BLKCIPHER
247 select CRYPTO_MANAGER
249 ECB: Electronic CodeBook mode
250 This is the simplest block cipher algorithm. It simply encrypts
251 the input block by block.
254 tristate "LRW support"
255 select CRYPTO_BLKCIPHER
256 select CRYPTO_MANAGER
257 select CRYPTO_GF128MUL
259 LRW: Liskov Rivest Wagner, a tweakable, non malleable, non movable
260 narrow block cipher mode for dm-crypt. Use it with cipher
261 specification string aes-lrw-benbi, the key must be 256, 320 or 384.
262 The first 128, 192 or 256 bits in the key are used for AES and the
263 rest is used to tie each cipher block to its logical position.
266 tristate "PCBC support"
267 select CRYPTO_BLKCIPHER
268 select CRYPTO_MANAGER
270 PCBC: Propagating Cipher Block Chaining mode
271 This block cipher algorithm is required for RxRPC.
274 tristate "XTS support"
275 select CRYPTO_BLKCIPHER
276 select CRYPTO_MANAGER
277 select CRYPTO_GF128MUL
279 XTS: IEEE1619/D16 narrow block cipher use with aes-xts-plain,
280 key size 256, 384 or 512 bits. This implementation currently
281 can't handle a sectorsize which is not a multiple of 16 bytes.
286 tristate "HMAC support"
288 select CRYPTO_MANAGER
290 HMAC: Keyed-Hashing for Message Authentication (RFC2104).
291 This is required for IPSec.
294 tristate "XCBC support"
296 select CRYPTO_MANAGER
298 XCBC: Keyed-Hashing with encryption algorithm
299 http://www.ietf.org/rfc/rfc3566.txt
300 http://csrc.nist.gov/encryption/modes/proposedmodes/
301 xcbc-mac/xcbc-mac-spec.pdf
304 tristate "VMAC support"
306 select CRYPTO_MANAGER
308 VMAC is a message authentication algorithm designed for
309 very high speed on 64-bit architectures.
312 <http://fastcrypto.org/vmac>
317 tristate "CRC32c CRC algorithm"
321 Castagnoli, et al Cyclic Redundancy-Check Algorithm. Used
322 by iSCSI for header and data digests and by others.
323 See Castagnoli93. Module will be crc32c.
325 config CRYPTO_CRC32C_INTEL
326 tristate "CRC32c INTEL hardware acceleration"
330 In Intel processor with SSE4.2 supported, the processor will
331 support CRC32C implementation using hardware accelerated CRC32
332 instruction. This option will create 'crc32c-intel' module,
333 which will enable any routine to use the CRC32 instruction to
334 gain performance compared with software implementation.
335 Module will be crc32c-intel.
337 config CRYPTO_CRC32C_SPARC64
338 tristate "CRC32c CRC algorithm (SPARC64)"
343 CRC32c CRC algorithm implemented using sparc64 crypto instructions,
347 tristate "CRC32 CRC algorithm"
351 CRC-32-IEEE 802.3 cyclic redundancy-check algorithm.
352 Shash crypto api wrappers to crc32_le function.
354 config CRYPTO_CRC32_PCLMUL
355 tristate "CRC32 PCLMULQDQ hardware acceleration"
360 From Intel Westmere and AMD Bulldozer processor with SSE4.2
361 and PCLMULQDQ supported, the processor will support
362 CRC32 PCLMULQDQ implementation using hardware accelerated PCLMULQDQ
363 instruction. This option will create 'crc32-plcmul' module,
364 which will enable any routine to use the CRC-32-IEEE 802.3 checksum
365 and gain better performance as compared with the table implementation.
368 tristate "GHASH digest algorithm"
369 select CRYPTO_GF128MUL
371 GHASH is message digest algorithm for GCM (Galois/Counter Mode).
374 tristate "MD4 digest algorithm"
377 MD4 message digest algorithm (RFC1320).
380 tristate "MD5 digest algorithm"
383 MD5 message digest algorithm (RFC1321).
385 config CRYPTO_MD5_SPARC64
386 tristate "MD5 digest algorithm (SPARC64)"
391 MD5 message digest algorithm (RFC1321) implemented
392 using sparc64 crypto instructions, when available.
394 config CRYPTO_MICHAEL_MIC
395 tristate "Michael MIC keyed digest algorithm"
398 Michael MIC is used for message integrity protection in TKIP
399 (IEEE 802.11i). This algorithm is required for TKIP, but it
400 should not be used for other purposes because of the weakness
404 tristate "RIPEMD-128 digest algorithm"
407 RIPEMD-128 (ISO/IEC 10118-3:2004).
409 RIPEMD-128 is a 128-bit cryptographic hash function. It should only
410 be used as a secure replacement for RIPEMD. For other use cases,
411 RIPEMD-160 should be used.
413 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
414 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
417 tristate "RIPEMD-160 digest algorithm"
420 RIPEMD-160 (ISO/IEC 10118-3:2004).
422 RIPEMD-160 is a 160-bit cryptographic hash function. It is intended
423 to be used as a secure replacement for the 128-bit hash functions
424 MD4, MD5 and it's predecessor RIPEMD
425 (not to be confused with RIPEMD-128).
427 It's speed is comparable to SHA1 and there are no known attacks
430 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
431 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
434 tristate "RIPEMD-256 digest algorithm"
437 RIPEMD-256 is an optional extension of RIPEMD-128 with a
438 256 bit hash. It is intended for applications that require
439 longer hash-results, without needing a larger security level
442 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
443 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
446 tristate "RIPEMD-320 digest algorithm"
449 RIPEMD-320 is an optional extension of RIPEMD-160 with a
450 320 bit hash. It is intended for applications that require
451 longer hash-results, without needing a larger security level
454 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
455 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
458 tristate "SHA1 digest algorithm"
461 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2).
463 config CRYPTO_SHA1_SSSE3
464 tristate "SHA1 digest algorithm (SSSE3/AVX)"
465 depends on X86 && 64BIT
469 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented
470 using Supplemental SSE3 (SSSE3) instructions or Advanced Vector
471 Extensions (AVX), when available.
473 config CRYPTO_SHA256_SSSE3
474 tristate "SHA256 digest algorithm (SSSE3/AVX/AVX2)"
475 depends on X86 && 64BIT
479 SHA-256 secure hash standard (DFIPS 180-2) implemented
480 using Supplemental SSE3 (SSSE3) instructions, or Advanced Vector
481 Extensions version 1 (AVX1), or Advanced Vector Extensions
482 version 2 (AVX2) instructions, when available.
484 config CRYPTO_SHA1_SPARC64
485 tristate "SHA1 digest algorithm (SPARC64)"
490 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented
491 using sparc64 crypto instructions, when available.
493 config CRYPTO_SHA1_ARM
494 tristate "SHA1 digest algorithm (ARM-asm)"
499 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented
500 using optimized ARM assembler.
502 config CRYPTO_SHA1_PPC
503 tristate "SHA1 digest algorithm (powerpc)"
506 This is the powerpc hardware accelerated implementation of the
507 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2).
510 tristate "SHA224 and SHA256 digest algorithm"
513 SHA256 secure hash standard (DFIPS 180-2).
515 This version of SHA implements a 256 bit hash with 128 bits of
516 security against collision attacks.
518 This code also includes SHA-224, a 224 bit hash with 112 bits
519 of security against collision attacks.
521 config CRYPTO_SHA256_SPARC64
522 tristate "SHA224 and SHA256 digest algorithm (SPARC64)"
527 SHA-256 secure hash standard (DFIPS 180-2) implemented
528 using sparc64 crypto instructions, when available.
531 tristate "SHA384 and SHA512 digest algorithms"
534 SHA512 secure hash standard (DFIPS 180-2).
536 This version of SHA implements a 512 bit hash with 256 bits of
537 security against collision attacks.
539 This code also includes SHA-384, a 384 bit hash with 192 bits
540 of security against collision attacks.
542 config CRYPTO_SHA512_SPARC64
543 tristate "SHA384 and SHA512 digest algorithm (SPARC64)"
548 SHA-512 secure hash standard (DFIPS 180-2) implemented
549 using sparc64 crypto instructions, when available.
552 tristate "Tiger digest algorithms"
555 Tiger hash algorithm 192, 160 and 128-bit hashes
557 Tiger is a hash function optimized for 64-bit processors while
558 still having decent performance on 32-bit processors.
559 Tiger was developed by Ross Anderson and Eli Biham.
562 <http://www.cs.technion.ac.il/~biham/Reports/Tiger/>.
565 tristate "Whirlpool digest algorithms"
568 Whirlpool hash algorithm 512, 384 and 256-bit hashes
570 Whirlpool-512 is part of the NESSIE cryptographic primitives.
571 Whirlpool will be part of the ISO/IEC 10118-3:2003(E) standard
574 <http://www.larc.usp.br/~pbarreto/WhirlpoolPage.html>
576 config CRYPTO_GHASH_CLMUL_NI_INTEL
577 tristate "GHASH digest algorithm (CLMUL-NI accelerated)"
578 depends on X86 && 64BIT
581 GHASH is message digest algorithm for GCM (Galois/Counter Mode).
582 The implementation is accelerated by CLMUL-NI of Intel.
587 tristate "AES cipher algorithms"
590 AES cipher algorithms (FIPS-197). AES uses the Rijndael
593 Rijndael appears to be consistently a very good performer in
594 both hardware and software across a wide range of computing
595 environments regardless of its use in feedback or non-feedback
596 modes. Its key setup time is excellent, and its key agility is
597 good. Rijndael's very low memory requirements make it very well
598 suited for restricted-space environments, in which it also
599 demonstrates excellent performance. Rijndael's operations are
600 among the easiest to defend against power and timing attacks.
602 The AES specifies three key sizes: 128, 192 and 256 bits
604 See <http://csrc.nist.gov/CryptoToolkit/aes/> for more information.
606 config CRYPTO_AES_586
607 tristate "AES cipher algorithms (i586)"
608 depends on (X86 || UML_X86) && !64BIT
612 AES cipher algorithms (FIPS-197). AES uses the Rijndael
615 Rijndael appears to be consistently a very good performer in
616 both hardware and software across a wide range of computing
617 environments regardless of its use in feedback or non-feedback
618 modes. Its key setup time is excellent, and its key agility is
619 good. Rijndael's very low memory requirements make it very well
620 suited for restricted-space environments, in which it also
621 demonstrates excellent performance. Rijndael's operations are
622 among the easiest to defend against power and timing attacks.
624 The AES specifies three key sizes: 128, 192 and 256 bits
626 See <http://csrc.nist.gov/encryption/aes/> for more information.
628 config CRYPTO_AES_X86_64
629 tristate "AES cipher algorithms (x86_64)"
630 depends on (X86 || UML_X86) && 64BIT
634 AES cipher algorithms (FIPS-197). AES uses the Rijndael
637 Rijndael appears to be consistently a very good performer in
638 both hardware and software across a wide range of computing
639 environments regardless of its use in feedback or non-feedback
640 modes. Its key setup time is excellent, and its key agility is
641 good. Rijndael's very low memory requirements make it very well
642 suited for restricted-space environments, in which it also
643 demonstrates excellent performance. Rijndael's operations are
644 among the easiest to defend against power and timing attacks.
646 The AES specifies three key sizes: 128, 192 and 256 bits
648 See <http://csrc.nist.gov/encryption/aes/> for more information.
650 config CRYPTO_AES_NI_INTEL
651 tristate "AES cipher algorithms (AES-NI)"
653 select CRYPTO_AES_X86_64 if 64BIT
654 select CRYPTO_AES_586 if !64BIT
656 select CRYPTO_ABLK_HELPER_X86
661 Use Intel AES-NI instructions for AES algorithm.
663 AES cipher algorithms (FIPS-197). AES uses the Rijndael
666 Rijndael appears to be consistently a very good performer in
667 both hardware and software across a wide range of computing
668 environments regardless of its use in feedback or non-feedback
669 modes. Its key setup time is excellent, and its key agility is
670 good. Rijndael's very low memory requirements make it very well
671 suited for restricted-space environments, in which it also
672 demonstrates excellent performance. Rijndael's operations are
673 among the easiest to defend against power and timing attacks.
675 The AES specifies three key sizes: 128, 192 and 256 bits
677 See <http://csrc.nist.gov/encryption/aes/> for more information.
679 In addition to AES cipher algorithm support, the acceleration
680 for some popular block cipher mode is supported too, including
681 ECB, CBC, LRW, PCBC, XTS. The 64 bit version has additional
682 acceleration for CTR.
684 config CRYPTO_AES_SPARC64
685 tristate "AES cipher algorithms (SPARC64)"
690 Use SPARC64 crypto opcodes for AES algorithm.
692 AES cipher algorithms (FIPS-197). AES uses the Rijndael
695 Rijndael appears to be consistently a very good performer in
696 both hardware and software across a wide range of computing
697 environments regardless of its use in feedback or non-feedback
698 modes. Its key setup time is excellent, and its key agility is
699 good. Rijndael's very low memory requirements make it very well
700 suited for restricted-space environments, in which it also
701 demonstrates excellent performance. Rijndael's operations are
702 among the easiest to defend against power and timing attacks.
704 The AES specifies three key sizes: 128, 192 and 256 bits
706 See <http://csrc.nist.gov/encryption/aes/> for more information.
708 In addition to AES cipher algorithm support, the acceleration
709 for some popular block cipher mode is supported too, including
712 config CRYPTO_AES_ARM
713 tristate "AES cipher algorithms (ARM-asm)"
718 Use optimized AES assembler routines for ARM platforms.
720 AES cipher algorithms (FIPS-197). AES uses the Rijndael
723 Rijndael appears to be consistently a very good performer in
724 both hardware and software across a wide range of computing
725 environments regardless of its use in feedback or non-feedback
726 modes. Its key setup time is excellent, and its key agility is
727 good. Rijndael's very low memory requirements make it very well
728 suited for restricted-space environments, in which it also
729 demonstrates excellent performance. Rijndael's operations are
730 among the easiest to defend against power and timing attacks.
732 The AES specifies three key sizes: 128, 192 and 256 bits
734 See <http://csrc.nist.gov/encryption/aes/> for more information.
737 tristate "Anubis cipher algorithm"
740 Anubis cipher algorithm.
742 Anubis is a variable key length cipher which can use keys from
743 128 bits to 320 bits in length. It was evaluated as a entrant
744 in the NESSIE competition.
747 <https://www.cosic.esat.kuleuven.be/nessie/reports/>
748 <http://www.larc.usp.br/~pbarreto/AnubisPage.html>
751 tristate "ARC4 cipher algorithm"
752 select CRYPTO_BLKCIPHER
754 ARC4 cipher algorithm.
756 ARC4 is a stream cipher using keys ranging from 8 bits to 2048
757 bits in length. This algorithm is required for driver-based
758 WEP, but it should not be for other purposes because of the
759 weakness of the algorithm.
761 config CRYPTO_BLOWFISH
762 tristate "Blowfish cipher algorithm"
764 select CRYPTO_BLOWFISH_COMMON
766 Blowfish cipher algorithm, by Bruce Schneier.
768 This is a variable key length cipher which can use keys from 32
769 bits to 448 bits in length. It's fast, simple and specifically
770 designed for use on "large microprocessors".
773 <http://www.schneier.com/blowfish.html>
775 config CRYPTO_BLOWFISH_COMMON
778 Common parts of the Blowfish cipher algorithm shared by the
779 generic c and the assembler implementations.
782 <http://www.schneier.com/blowfish.html>
784 config CRYPTO_BLOWFISH_X86_64
785 tristate "Blowfish cipher algorithm (x86_64)"
786 depends on X86 && 64BIT
788 select CRYPTO_BLOWFISH_COMMON
790 Blowfish cipher algorithm (x86_64), by Bruce Schneier.
792 This is a variable key length cipher which can use keys from 32
793 bits to 448 bits in length. It's fast, simple and specifically
794 designed for use on "large microprocessors".
797 <http://www.schneier.com/blowfish.html>
799 config CRYPTO_CAMELLIA
800 tristate "Camellia cipher algorithms"
804 Camellia cipher algorithms module.
806 Camellia is a symmetric key block cipher developed jointly
807 at NTT and Mitsubishi Electric Corporation.
809 The Camellia specifies three key sizes: 128, 192 and 256 bits.
812 <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
814 config CRYPTO_CAMELLIA_X86_64
815 tristate "Camellia cipher algorithm (x86_64)"
816 depends on X86 && 64BIT
819 select CRYPTO_GLUE_HELPER_X86
823 Camellia cipher algorithm module (x86_64).
825 Camellia is a symmetric key block cipher developed jointly
826 at NTT and Mitsubishi Electric Corporation.
828 The Camellia specifies three key sizes: 128, 192 and 256 bits.
831 <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
833 config CRYPTO_CAMELLIA_AESNI_AVX_X86_64
834 tristate "Camellia cipher algorithm (x86_64/AES-NI/AVX)"
835 depends on X86 && 64BIT
839 select CRYPTO_ABLK_HELPER_X86
840 select CRYPTO_GLUE_HELPER_X86
841 select CRYPTO_CAMELLIA_X86_64
845 Camellia cipher algorithm module (x86_64/AES-NI/AVX).
847 Camellia is a symmetric key block cipher developed jointly
848 at NTT and Mitsubishi Electric Corporation.
850 The Camellia specifies three key sizes: 128, 192 and 256 bits.
853 <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
855 config CRYPTO_CAMELLIA_SPARC64
856 tristate "Camellia cipher algorithm (SPARC64)"
861 Camellia cipher algorithm module (SPARC64).
863 Camellia is a symmetric key block cipher developed jointly
864 at NTT and Mitsubishi Electric Corporation.
866 The Camellia specifies three key sizes: 128, 192 and 256 bits.
869 <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
871 config CRYPTO_CAST_COMMON
874 Common parts of the CAST cipher algorithms shared by the
875 generic c and the assembler implementations.
878 tristate "CAST5 (CAST-128) cipher algorithm"
880 select CRYPTO_CAST_COMMON
882 The CAST5 encryption algorithm (synonymous with CAST-128) is
883 described in RFC2144.
885 config CRYPTO_CAST5_AVX_X86_64
886 tristate "CAST5 (CAST-128) cipher algorithm (x86_64/AVX)"
887 depends on X86 && 64BIT
890 select CRYPTO_ABLK_HELPER_X86
891 select CRYPTO_CAST_COMMON
894 The CAST5 encryption algorithm (synonymous with CAST-128) is
895 described in RFC2144.
897 This module provides the Cast5 cipher algorithm that processes
898 sixteen blocks parallel using the AVX instruction set.
901 tristate "CAST6 (CAST-256) cipher algorithm"
903 select CRYPTO_CAST_COMMON
905 The CAST6 encryption algorithm (synonymous with CAST-256) is
906 described in RFC2612.
908 config CRYPTO_CAST6_AVX_X86_64
909 tristate "CAST6 (CAST-256) cipher algorithm (x86_64/AVX)"
910 depends on X86 && 64BIT
913 select CRYPTO_ABLK_HELPER_X86
914 select CRYPTO_GLUE_HELPER_X86
915 select CRYPTO_CAST_COMMON
920 The CAST6 encryption algorithm (synonymous with CAST-256) is
921 described in RFC2612.
923 This module provides the Cast6 cipher algorithm that processes
924 eight blocks parallel using the AVX instruction set.
927 tristate "DES and Triple DES EDE cipher algorithms"
930 DES cipher algorithm (FIPS 46-2), and Triple DES EDE (FIPS 46-3).
932 config CRYPTO_DES_SPARC64
933 tristate "DES and Triple DES EDE cipher algorithms (SPARC64)"
938 DES cipher algorithm (FIPS 46-2), and Triple DES EDE (FIPS 46-3),
939 optimized using SPARC64 crypto opcodes.
942 tristate "FCrypt cipher algorithm"
944 select CRYPTO_BLKCIPHER
946 FCrypt algorithm used by RxRPC.
949 tristate "Khazad cipher algorithm"
952 Khazad cipher algorithm.
954 Khazad was a finalist in the initial NESSIE competition. It is
955 an algorithm optimized for 64-bit processors with good performance
956 on 32-bit processors. Khazad uses an 128 bit key size.
959 <http://www.larc.usp.br/~pbarreto/KhazadPage.html>
961 config CRYPTO_SALSA20
962 tristate "Salsa20 stream cipher algorithm"
963 select CRYPTO_BLKCIPHER
965 Salsa20 stream cipher algorithm.
967 Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
968 Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
970 The Salsa20 stream cipher algorithm is designed by Daniel J.
971 Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
973 config CRYPTO_SALSA20_586
974 tristate "Salsa20 stream cipher algorithm (i586)"
975 depends on (X86 || UML_X86) && !64BIT
976 select CRYPTO_BLKCIPHER
978 Salsa20 stream cipher algorithm.
980 Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
981 Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
983 The Salsa20 stream cipher algorithm is designed by Daniel J.
984 Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
986 config CRYPTO_SALSA20_X86_64
987 tristate "Salsa20 stream cipher algorithm (x86_64)"
988 depends on (X86 || UML_X86) && 64BIT
989 select CRYPTO_BLKCIPHER
991 Salsa20 stream cipher algorithm.
993 Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
994 Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
996 The Salsa20 stream cipher algorithm is designed by Daniel J.
997 Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
1000 tristate "SEED cipher algorithm"
1001 select CRYPTO_ALGAPI
1003 SEED cipher algorithm (RFC4269).
1005 SEED is a 128-bit symmetric key block cipher that has been
1006 developed by KISA (Korea Information Security Agency) as a
1007 national standard encryption algorithm of the Republic of Korea.
1008 It is a 16 round block cipher with the key size of 128 bit.
1011 <http://www.kisa.or.kr/kisa/seed/jsp/seed_eng.jsp>
1013 config CRYPTO_SERPENT
1014 tristate "Serpent cipher algorithm"
1015 select CRYPTO_ALGAPI
1017 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
1019 Keys are allowed to be from 0 to 256 bits in length, in steps
1020 of 8 bits. Also includes the 'Tnepres' algorithm, a reversed
1021 variant of Serpent for compatibility with old kerneli.org code.
1024 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
1026 config CRYPTO_SERPENT_SSE2_X86_64
1027 tristate "Serpent cipher algorithm (x86_64/SSE2)"
1028 depends on X86 && 64BIT
1029 select CRYPTO_ALGAPI
1030 select CRYPTO_CRYPTD
1031 select CRYPTO_ABLK_HELPER_X86
1032 select CRYPTO_GLUE_HELPER_X86
1033 select CRYPTO_SERPENT
1037 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
1039 Keys are allowed to be from 0 to 256 bits in length, in steps
1042 This module provides Serpent cipher algorithm that processes eigth
1043 blocks parallel using SSE2 instruction set.
1046 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
1048 config CRYPTO_SERPENT_SSE2_586
1049 tristate "Serpent cipher algorithm (i586/SSE2)"
1050 depends on X86 && !64BIT
1051 select CRYPTO_ALGAPI
1052 select CRYPTO_CRYPTD
1053 select CRYPTO_ABLK_HELPER_X86
1054 select CRYPTO_GLUE_HELPER_X86
1055 select CRYPTO_SERPENT
1059 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
1061 Keys are allowed to be from 0 to 256 bits in length, in steps
1064 This module provides Serpent cipher algorithm that processes four
1065 blocks parallel using SSE2 instruction set.
1068 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
1070 config CRYPTO_SERPENT_AVX_X86_64
1071 tristate "Serpent cipher algorithm (x86_64/AVX)"
1072 depends on X86 && 64BIT
1073 select CRYPTO_ALGAPI
1074 select CRYPTO_CRYPTD
1075 select CRYPTO_ABLK_HELPER_X86
1076 select CRYPTO_GLUE_HELPER_X86
1077 select CRYPTO_SERPENT
1081 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
1083 Keys are allowed to be from 0 to 256 bits in length, in steps
1086 This module provides the Serpent cipher algorithm that processes
1087 eight blocks parallel using the AVX instruction set.
1090 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
1093 tristate "TEA, XTEA and XETA cipher algorithms"
1094 select CRYPTO_ALGAPI
1096 TEA cipher algorithm.
1098 Tiny Encryption Algorithm is a simple cipher that uses
1099 many rounds for security. It is very fast and uses
1102 Xtendend Tiny Encryption Algorithm is a modification to
1103 the TEA algorithm to address a potential key weakness
1104 in the TEA algorithm.
1106 Xtendend Encryption Tiny Algorithm is a mis-implementation
1107 of the XTEA algorithm for compatibility purposes.
1109 config CRYPTO_TWOFISH
1110 tristate "Twofish cipher algorithm"
1111 select CRYPTO_ALGAPI
1112 select CRYPTO_TWOFISH_COMMON
1114 Twofish cipher algorithm.
1116 Twofish was submitted as an AES (Advanced Encryption Standard)
1117 candidate cipher by researchers at CounterPane Systems. It is a
1118 16 round block cipher supporting key sizes of 128, 192, and 256
1122 <http://www.schneier.com/twofish.html>
1124 config CRYPTO_TWOFISH_COMMON
1127 Common parts of the Twofish cipher algorithm shared by the
1128 generic c and the assembler implementations.
1130 config CRYPTO_TWOFISH_586
1131 tristate "Twofish cipher algorithms (i586)"
1132 depends on (X86 || UML_X86) && !64BIT
1133 select CRYPTO_ALGAPI
1134 select CRYPTO_TWOFISH_COMMON
1136 Twofish cipher algorithm.
1138 Twofish was submitted as an AES (Advanced Encryption Standard)
1139 candidate cipher by researchers at CounterPane Systems. It is a
1140 16 round block cipher supporting key sizes of 128, 192, and 256
1144 <http://www.schneier.com/twofish.html>
1146 config CRYPTO_TWOFISH_X86_64
1147 tristate "Twofish cipher algorithm (x86_64)"
1148 depends on (X86 || UML_X86) && 64BIT
1149 select CRYPTO_ALGAPI
1150 select CRYPTO_TWOFISH_COMMON
1152 Twofish cipher algorithm (x86_64).
1154 Twofish was submitted as an AES (Advanced Encryption Standard)
1155 candidate cipher by researchers at CounterPane Systems. It is a
1156 16 round block cipher supporting key sizes of 128, 192, and 256
1160 <http://www.schneier.com/twofish.html>
1162 config CRYPTO_TWOFISH_X86_64_3WAY
1163 tristate "Twofish cipher algorithm (x86_64, 3-way parallel)"
1164 depends on X86 && 64BIT
1165 select CRYPTO_ALGAPI
1166 select CRYPTO_TWOFISH_COMMON
1167 select CRYPTO_TWOFISH_X86_64
1168 select CRYPTO_GLUE_HELPER_X86
1172 Twofish cipher algorithm (x86_64, 3-way parallel).
1174 Twofish was submitted as an AES (Advanced Encryption Standard)
1175 candidate cipher by researchers at CounterPane Systems. It is a
1176 16 round block cipher supporting key sizes of 128, 192, and 256
1179 This module provides Twofish cipher algorithm that processes three
1180 blocks parallel, utilizing resources of out-of-order CPUs better.
1183 <http://www.schneier.com/twofish.html>
1185 config CRYPTO_TWOFISH_AVX_X86_64
1186 tristate "Twofish cipher algorithm (x86_64/AVX)"
1187 depends on X86 && 64BIT
1188 select CRYPTO_ALGAPI
1189 select CRYPTO_CRYPTD
1190 select CRYPTO_ABLK_HELPER_X86
1191 select CRYPTO_GLUE_HELPER_X86
1192 select CRYPTO_TWOFISH_COMMON
1193 select CRYPTO_TWOFISH_X86_64
1194 select CRYPTO_TWOFISH_X86_64_3WAY
1198 Twofish cipher algorithm (x86_64/AVX).
1200 Twofish was submitted as an AES (Advanced Encryption Standard)
1201 candidate cipher by researchers at CounterPane Systems. It is a
1202 16 round block cipher supporting key sizes of 128, 192, and 256
1205 This module provides the Twofish cipher algorithm that processes
1206 eight blocks parallel using the AVX Instruction Set.
1209 <http://www.schneier.com/twofish.html>
1211 comment "Compression"
1213 config CRYPTO_DEFLATE
1214 tristate "Deflate compression algorithm"
1215 select CRYPTO_ALGAPI
1219 This is the Deflate algorithm (RFC1951), specified for use in
1220 IPSec with the IPCOMP protocol (RFC3173, RFC2394).
1222 You will most probably want this if using IPSec.
1225 tristate "Zlib compression algorithm"
1231 This is the zlib algorithm.
1234 tristate "LZO compression algorithm"
1235 select CRYPTO_ALGAPI
1237 select LZO_DECOMPRESS
1239 This is the LZO algorithm.
1242 tristate "842 compression algorithm"
1243 depends on CRYPTO_DEV_NX_COMPRESS
1244 # 842 uses lzo if the hardware becomes unavailable
1246 select LZO_DECOMPRESS
1248 This is the 842 algorithm.
1250 comment "Random Number Generation"
1252 config CRYPTO_ANSI_CPRNG
1253 tristate "Pseudo Random Number Generation for Cryptographic modules"
1258 This option enables the generic pseudo random number generator
1259 for cryptographic modules. Uses the Algorithm specified in
1260 ANSI X9.31 A.2.4. Note that this option must be enabled if
1261 CRYPTO_FIPS is selected
1263 config CRYPTO_USER_API
1266 config CRYPTO_USER_API_HASH
1267 tristate "User-space interface for hash algorithms"
1270 select CRYPTO_USER_API
1272 This option enables the user-spaces interface for hash
1275 config CRYPTO_USER_API_SKCIPHER
1276 tristate "User-space interface for symmetric key cipher algorithms"
1278 select CRYPTO_BLKCIPHER
1279 select CRYPTO_USER_API
1281 This option enables the user-spaces interface for symmetric
1282 key cipher algorithms.
1284 source "drivers/crypto/Kconfig"
1285 source crypto/asymmetric_keys/Kconfig