Kconfig 13 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435
  1. #
  2. # Cryptographic API Configuration
  3. #
  4. menu "Cryptographic options"
  5. config CRYPTO
  6. bool "Cryptographic API"
  7. help
  8. This option provides the core Cryptographic API.
  9. if CRYPTO
  10. config CRYPTO_ALGAPI
  11. tristate
  12. help
  13. This option provides the API for cryptographic algorithms.
  14. config CRYPTO_BLKCIPHER
  15. tristate
  16. select CRYPTO_ALGAPI
  17. config CRYPTO_HASH
  18. tristate
  19. select CRYPTO_ALGAPI
  20. config CRYPTO_MANAGER
  21. tristate "Cryptographic algorithm manager"
  22. select CRYPTO_ALGAPI
  23. default m
  24. help
  25. Create default cryptographic template instantiations such as
  26. cbc(aes).
  27. config CRYPTO_HMAC
  28. bool "HMAC support"
  29. help
  30. HMAC: Keyed-Hashing for Message Authentication (RFC2104).
  31. This is required for IPSec.
  32. config CRYPTO_NULL
  33. tristate "Null algorithms"
  34. select CRYPTO_ALGAPI
  35. help
  36. These are 'Null' algorithms, used by IPsec, which do nothing.
  37. config CRYPTO_MD4
  38. tristate "MD4 digest algorithm"
  39. select CRYPTO_ALGAPI
  40. help
  41. MD4 message digest algorithm (RFC1320).
  42. config CRYPTO_MD5
  43. tristate "MD5 digest algorithm"
  44. select CRYPTO_ALGAPI
  45. help
  46. MD5 message digest algorithm (RFC1321).
  47. config CRYPTO_SHA1
  48. tristate "SHA1 digest algorithm"
  49. select CRYPTO_ALGAPI
  50. help
  51. SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2).
  52. config CRYPTO_SHA1_S390
  53. tristate "SHA1 digest algorithm (s390)"
  54. depends on S390
  55. select CRYPTO_ALGAPI
  56. help
  57. This is the s390 hardware accelerated implementation of the
  58. SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2).
  59. config CRYPTO_SHA256
  60. tristate "SHA256 digest algorithm"
  61. select CRYPTO_ALGAPI
  62. help
  63. SHA256 secure hash standard (DFIPS 180-2).
  64. This version of SHA implements a 256 bit hash with 128 bits of
  65. security against collision attacks.
  66. config CRYPTO_SHA256_S390
  67. tristate "SHA256 digest algorithm (s390)"
  68. depends on S390
  69. select CRYPTO_ALGAPI
  70. help
  71. This is the s390 hardware accelerated implementation of the
  72. SHA256 secure hash standard (DFIPS 180-2).
  73. This version of SHA implements a 256 bit hash with 128 bits of
  74. security against collision attacks.
  75. config CRYPTO_SHA512
  76. tristate "SHA384 and SHA512 digest algorithms"
  77. select CRYPTO_ALGAPI
  78. help
  79. SHA512 secure hash standard (DFIPS 180-2).
  80. This version of SHA implements a 512 bit hash with 256 bits of
  81. security against collision attacks.
  82. This code also includes SHA-384, a 384 bit hash with 192 bits
  83. of security against collision attacks.
  84. config CRYPTO_WP512
  85. tristate "Whirlpool digest algorithms"
  86. select CRYPTO_ALGAPI
  87. help
  88. Whirlpool hash algorithm 512, 384 and 256-bit hashes
  89. Whirlpool-512 is part of the NESSIE cryptographic primitives.
  90. Whirlpool will be part of the ISO/IEC 10118-3:2003(E) standard
  91. See also:
  92. <http://planeta.terra.com.br/informatica/paulobarreto/WhirlpoolPage.html>
  93. config CRYPTO_TGR192
  94. tristate "Tiger digest algorithms"
  95. select CRYPTO_ALGAPI
  96. help
  97. Tiger hash algorithm 192, 160 and 128-bit hashes
  98. Tiger is a hash function optimized for 64-bit processors while
  99. still having decent performance on 32-bit processors.
  100. Tiger was developed by Ross Anderson and Eli Biham.
  101. See also:
  102. <http://www.cs.technion.ac.il/~biham/Reports/Tiger/>.
  103. config CRYPTO_ECB
  104. tristate "ECB support"
  105. select CRYPTO_BLKCIPHER
  106. default m
  107. help
  108. ECB: Electronic CodeBook mode
  109. This is the simplest block cipher algorithm. It simply encrypts
  110. the input block by block.
  111. config CRYPTO_CBC
  112. tristate "CBC support"
  113. select CRYPTO_BLKCIPHER
  114. default m
  115. help
  116. CBC: Cipher Block Chaining mode
  117. This block cipher algorithm is required for IPSec.
  118. config CRYPTO_DES
  119. tristate "DES and Triple DES EDE cipher algorithms"
  120. select CRYPTO_ALGAPI
  121. help
  122. DES cipher algorithm (FIPS 46-2), and Triple DES EDE (FIPS 46-3).
  123. config CRYPTO_DES_S390
  124. tristate "DES and Triple DES cipher algorithms (s390)"
  125. depends on S390
  126. select CRYPTO_ALGAPI
  127. select CRYPTO_BLKCIPHER
  128. help
  129. DES cipher algorithm (FIPS 46-2), and Triple DES EDE (FIPS 46-3).
  130. config CRYPTO_BLOWFISH
  131. tristate "Blowfish cipher algorithm"
  132. select CRYPTO_ALGAPI
  133. help
  134. Blowfish cipher algorithm, by Bruce Schneier.
  135. This is a variable key length cipher which can use keys from 32
  136. bits to 448 bits in length. It's fast, simple and specifically
  137. designed for use on "large microprocessors".
  138. See also:
  139. <http://www.schneier.com/blowfish.html>
  140. config CRYPTO_TWOFISH
  141. tristate "Twofish cipher algorithm"
  142. select CRYPTO_ALGAPI
  143. select CRYPTO_TWOFISH_COMMON
  144. help
  145. Twofish cipher algorithm.
  146. Twofish was submitted as an AES (Advanced Encryption Standard)
  147. candidate cipher by researchers at CounterPane Systems. It is a
  148. 16 round block cipher supporting key sizes of 128, 192, and 256
  149. bits.
  150. See also:
  151. <http://www.schneier.com/twofish.html>
  152. config CRYPTO_TWOFISH_COMMON
  153. tristate
  154. help
  155. Common parts of the Twofish cipher algorithm shared by the
  156. generic c and the assembler implementations.
  157. config CRYPTO_TWOFISH_586
  158. tristate "Twofish cipher algorithms (i586)"
  159. depends on (X86 || UML_X86) && !64BIT
  160. select CRYPTO_ALGAPI
  161. select CRYPTO_TWOFISH_COMMON
  162. help
  163. Twofish cipher algorithm.
  164. Twofish was submitted as an AES (Advanced Encryption Standard)
  165. candidate cipher by researchers at CounterPane Systems. It is a
  166. 16 round block cipher supporting key sizes of 128, 192, and 256
  167. bits.
  168. See also:
  169. <http://www.schneier.com/twofish.html>
  170. config CRYPTO_TWOFISH_X86_64
  171. tristate "Twofish cipher algorithm (x86_64)"
  172. depends on (X86 || UML_X86) && 64BIT
  173. select CRYPTO_ALGAPI
  174. select CRYPTO_TWOFISH_COMMON
  175. help
  176. Twofish cipher algorithm (x86_64).
  177. Twofish was submitted as an AES (Advanced Encryption Standard)
  178. candidate cipher by researchers at CounterPane Systems. It is a
  179. 16 round block cipher supporting key sizes of 128, 192, and 256
  180. bits.
  181. See also:
  182. <http://www.schneier.com/twofish.html>
  183. config CRYPTO_SERPENT
  184. tristate "Serpent cipher algorithm"
  185. select CRYPTO_ALGAPI
  186. help
  187. Serpent cipher algorithm, by Anderson, Biham & Knudsen.
  188. Keys are allowed to be from 0 to 256 bits in length, in steps
  189. of 8 bits. Also includes the 'Tnepres' algorithm, a reversed
  190. variant of Serpent for compatibility with old kerneli code.
  191. See also:
  192. <http://www.cl.cam.ac.uk/~rja14/serpent.html>
  193. config CRYPTO_AES
  194. tristate "AES cipher algorithms"
  195. select CRYPTO_ALGAPI
  196. help
  197. AES cipher algorithms (FIPS-197). AES uses the Rijndael
  198. algorithm.
  199. Rijndael appears to be consistently a very good performer in
  200. both hardware and software across a wide range of computing
  201. environments regardless of its use in feedback or non-feedback
  202. modes. Its key setup time is excellent, and its key agility is
  203. good. Rijndael's very low memory requirements make it very well
  204. suited for restricted-space environments, in which it also
  205. demonstrates excellent performance. Rijndael's operations are
  206. among the easiest to defend against power and timing attacks.
  207. The AES specifies three key sizes: 128, 192 and 256 bits
  208. See <http://csrc.nist.gov/CryptoToolkit/aes/> for more information.
  209. config CRYPTO_AES_586
  210. tristate "AES cipher algorithms (i586)"
  211. depends on (X86 || UML_X86) && !64BIT
  212. select CRYPTO_ALGAPI
  213. help
  214. AES cipher algorithms (FIPS-197). AES uses the Rijndael
  215. algorithm.
  216. Rijndael appears to be consistently a very good performer in
  217. both hardware and software across a wide range of computing
  218. environments regardless of its use in feedback or non-feedback
  219. modes. Its key setup time is excellent, and its key agility is
  220. good. Rijndael's very low memory requirements make it very well
  221. suited for restricted-space environments, in which it also
  222. demonstrates excellent performance. Rijndael's operations are
  223. among the easiest to defend against power and timing attacks.
  224. The AES specifies three key sizes: 128, 192 and 256 bits
  225. See <http://csrc.nist.gov/encryption/aes/> for more information.
  226. config CRYPTO_AES_X86_64
  227. tristate "AES cipher algorithms (x86_64)"
  228. depends on (X86 || UML_X86) && 64BIT
  229. select CRYPTO_ALGAPI
  230. help
  231. AES cipher algorithms (FIPS-197). AES uses the Rijndael
  232. algorithm.
  233. Rijndael appears to be consistently a very good performer in
  234. both hardware and software across a wide range of computing
  235. environments regardless of its use in feedback or non-feedback
  236. modes. Its key setup time is excellent, and its key agility is
  237. good. Rijndael's very low memory requirements make it very well
  238. suited for restricted-space environments, in which it also
  239. demonstrates excellent performance. Rijndael's operations are
  240. among the easiest to defend against power and timing attacks.
  241. The AES specifies three key sizes: 128, 192 and 256 bits
  242. See <http://csrc.nist.gov/encryption/aes/> for more information.
  243. config CRYPTO_AES_S390
  244. tristate "AES cipher algorithms (s390)"
  245. depends on S390
  246. select CRYPTO_ALGAPI
  247. select CRYPTO_BLKCIPHER
  248. help
  249. This is the s390 hardware accelerated implementation of the
  250. AES cipher algorithms (FIPS-197). AES uses the Rijndael
  251. algorithm.
  252. Rijndael appears to be consistently a very good performer in
  253. both hardware and software across a wide range of computing
  254. environments regardless of its use in feedback or non-feedback
  255. modes. Its key setup time is excellent, and its key agility is
  256. good. Rijndael's very low memory requirements make it very well
  257. suited for restricted-space environments, in which it also
  258. demonstrates excellent performance. Rijndael's operations are
  259. among the easiest to defend against power and timing attacks.
  260. On s390 the System z9-109 currently only supports the key size
  261. of 128 bit.
  262. config CRYPTO_CAST5
  263. tristate "CAST5 (CAST-128) cipher algorithm"
  264. select CRYPTO_ALGAPI
  265. help
  266. The CAST5 encryption algorithm (synonymous with CAST-128) is
  267. described in RFC2144.
  268. config CRYPTO_CAST6
  269. tristate "CAST6 (CAST-256) cipher algorithm"
  270. select CRYPTO_ALGAPI
  271. help
  272. The CAST6 encryption algorithm (synonymous with CAST-256) is
  273. described in RFC2612.
  274. config CRYPTO_TEA
  275. tristate "TEA, XTEA and XETA cipher algorithms"
  276. select CRYPTO_ALGAPI
  277. help
  278. TEA cipher algorithm.
  279. Tiny Encryption Algorithm is a simple cipher that uses
  280. many rounds for security. It is very fast and uses
  281. little memory.
  282. Xtendend Tiny Encryption Algorithm is a modification to
  283. the TEA algorithm to address a potential key weakness
  284. in the TEA algorithm.
  285. Xtendend Encryption Tiny Algorithm is a mis-implementation
  286. of the XTEA algorithm for compatibility purposes.
  287. config CRYPTO_ARC4
  288. tristate "ARC4 cipher algorithm"
  289. select CRYPTO_ALGAPI
  290. help
  291. ARC4 cipher algorithm.
  292. ARC4 is a stream cipher using keys ranging from 8 bits to 2048
  293. bits in length. This algorithm is required for driver-based
  294. WEP, but it should not be for other purposes because of the
  295. weakness of the algorithm.
  296. config CRYPTO_KHAZAD
  297. tristate "Khazad cipher algorithm"
  298. select CRYPTO_ALGAPI
  299. help
  300. Khazad cipher algorithm.
  301. Khazad was a finalist in the initial NESSIE competition. It is
  302. an algorithm optimized for 64-bit processors with good performance
  303. on 32-bit processors. Khazad uses an 128 bit key size.
  304. See also:
  305. <http://planeta.terra.com.br/informatica/paulobarreto/KhazadPage.html>
  306. config CRYPTO_ANUBIS
  307. tristate "Anubis cipher algorithm"
  308. select CRYPTO_ALGAPI
  309. help
  310. Anubis cipher algorithm.
  311. Anubis is a variable key length cipher which can use keys from
  312. 128 bits to 320 bits in length. It was evaluated as a entrant
  313. in the NESSIE competition.
  314. See also:
  315. <https://www.cosic.esat.kuleuven.ac.be/nessie/reports/>
  316. <http://planeta.terra.com.br/informatica/paulobarreto/AnubisPage.html>
  317. config CRYPTO_DEFLATE
  318. tristate "Deflate compression algorithm"
  319. select CRYPTO_ALGAPI
  320. select ZLIB_INFLATE
  321. select ZLIB_DEFLATE
  322. help
  323. This is the Deflate algorithm (RFC1951), specified for use in
  324. IPSec with the IPCOMP protocol (RFC3173, RFC2394).
  325. You will most probably want this if using IPSec.
  326. config CRYPTO_MICHAEL_MIC
  327. tristate "Michael MIC keyed digest algorithm"
  328. select CRYPTO_ALGAPI
  329. help
  330. Michael MIC is used for message integrity protection in TKIP
  331. (IEEE 802.11i). This algorithm is required for TKIP, but it
  332. should not be used for other purposes because of the weakness
  333. of the algorithm.
  334. config CRYPTO_CRC32C
  335. tristate "CRC32c CRC algorithm"
  336. select CRYPTO_ALGAPI
  337. select LIBCRC32C
  338. help
  339. Castagnoli, et al Cyclic Redundancy-Check Algorithm. Used
  340. by iSCSI for header and data digests and by others.
  341. See Castagnoli93. This implementation uses lib/libcrc32c.
  342. Module will be crc32c.
  343. config CRYPTO_TEST
  344. tristate "Testing module"
  345. depends on m
  346. select CRYPTO_ALGAPI
  347. help
  348. Quick & dirty crypto test module.
  349. source "drivers/crypto/Kconfig"
  350. endif # if CRYPTO
  351. endmenu