Kconfig 21 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738
  1. #
  2. # Generic algorithms support
  3. #
  4. config XOR_BLOCKS
  5. tristate
  6. #
  7. # async_tx api: hardware offloaded memory transfer/transform support
  8. #
  9. source "crypto/async_tx/Kconfig"
  10. #
  11. # Cryptographic API Configuration
  12. #
  13. menuconfig CRYPTO
  14. tristate "Cryptographic API"
  15. help
  16. This option provides the core Cryptographic API.
  17. if CRYPTO
  18. comment "Crypto core or helper"
  19. config CRYPTO_FIPS
  20. bool "FIPS 200 compliance"
  21. help
  22. This options enables the fips boot option which is
  23. required if you want to system to operate in a FIPS 200
  24. certification. You should say no unless you know what
  25. this is.
  26. config CRYPTO_ALGAPI
  27. tristate
  28. select CRYPTO_ALGAPI2
  29. help
  30. This option provides the API for cryptographic algorithms.
  31. config CRYPTO_ALGAPI2
  32. tristate
  33. config CRYPTO_AEAD
  34. tristate
  35. select CRYPTO_AEAD2
  36. select CRYPTO_ALGAPI
  37. config CRYPTO_AEAD2
  38. tristate
  39. select CRYPTO_ALGAPI2
  40. config CRYPTO_BLKCIPHER
  41. tristate
  42. select CRYPTO_BLKCIPHER2
  43. select CRYPTO_ALGAPI
  44. config CRYPTO_BLKCIPHER2
  45. tristate
  46. select CRYPTO_ALGAPI2
  47. select CRYPTO_RNG2
  48. config CRYPTO_HASH
  49. tristate
  50. select CRYPTO_HASH2
  51. select CRYPTO_ALGAPI
  52. config CRYPTO_HASH2
  53. tristate
  54. select CRYPTO_ALGAPI2
  55. config CRYPTO_RNG
  56. tristate
  57. select CRYPTO_RNG2
  58. select CRYPTO_ALGAPI
  59. config CRYPTO_RNG2
  60. tristate
  61. select CRYPTO_ALGAPI2
  62. config CRYPTO_MANAGER
  63. tristate "Cryptographic algorithm manager"
  64. select CRYPTO_MANAGER2
  65. help
  66. Create default cryptographic template instantiations such as
  67. cbc(aes).
  68. config CRYPTO_MANAGER2
  69. def_tristate CRYPTO_MANAGER || (CRYPTO_MANAGER!=n && CRYPTO_ALGAPI=y)
  70. select CRYPTO_AEAD2
  71. select CRYPTO_HASH2
  72. select CRYPTO_BLKCIPHER2
  73. config CRYPTO_GF128MUL
  74. tristate "GF(2^128) multiplication functions (EXPERIMENTAL)"
  75. depends on EXPERIMENTAL
  76. help
  77. Efficient table driven implementation of multiplications in the
  78. field GF(2^128). This is needed by some cypher modes. This
  79. option will be selected automatically if you select such a
  80. cipher mode. Only select this option by hand if you expect to load
  81. an external module that requires these functions.
  82. config CRYPTO_NULL
  83. tristate "Null algorithms"
  84. select CRYPTO_ALGAPI
  85. select CRYPTO_BLKCIPHER
  86. help
  87. These are 'Null' algorithms, used by IPsec, which do nothing.
  88. config CRYPTO_CRYPTD
  89. tristate "Software async crypto daemon"
  90. select CRYPTO_BLKCIPHER
  91. select CRYPTO_HASH
  92. select CRYPTO_MANAGER
  93. help
  94. This is a generic software asynchronous crypto daemon that
  95. converts an arbitrary synchronous software crypto algorithm
  96. into an asynchronous algorithm that executes in a kernel thread.
  97. config CRYPTO_AUTHENC
  98. tristate "Authenc support"
  99. select CRYPTO_AEAD
  100. select CRYPTO_BLKCIPHER
  101. select CRYPTO_MANAGER
  102. select CRYPTO_HASH
  103. help
  104. Authenc: Combined mode wrapper for IPsec.
  105. This is required for IPSec.
  106. config CRYPTO_TEST
  107. tristate "Testing module"
  108. depends on m
  109. select CRYPTO_MANAGER
  110. help
  111. Quick & dirty crypto test module.
  112. comment "Authenticated Encryption with Associated Data"
  113. config CRYPTO_CCM
  114. tristate "CCM support"
  115. select CRYPTO_CTR
  116. select CRYPTO_AEAD
  117. help
  118. Support for Counter with CBC MAC. Required for IPsec.
  119. config CRYPTO_GCM
  120. tristate "GCM/GMAC support"
  121. select CRYPTO_CTR
  122. select CRYPTO_AEAD
  123. select CRYPTO_GF128MUL
  124. help
  125. Support for Galois/Counter Mode (GCM) and Galois Message
  126. Authentication Code (GMAC). Required for IPSec.
  127. config CRYPTO_SEQIV
  128. tristate "Sequence Number IV Generator"
  129. select CRYPTO_AEAD
  130. select CRYPTO_BLKCIPHER
  131. select CRYPTO_RNG
  132. help
  133. This IV generator generates an IV based on a sequence number by
  134. xoring it with a salt. This algorithm is mainly useful for CTR
  135. comment "Block modes"
  136. config CRYPTO_CBC
  137. tristate "CBC support"
  138. select CRYPTO_BLKCIPHER
  139. select CRYPTO_MANAGER
  140. help
  141. CBC: Cipher Block Chaining mode
  142. This block cipher algorithm is required for IPSec.
  143. config CRYPTO_CTR
  144. tristate "CTR support"
  145. select CRYPTO_BLKCIPHER
  146. select CRYPTO_SEQIV
  147. select CRYPTO_MANAGER
  148. help
  149. CTR: Counter mode
  150. This block cipher algorithm is required for IPSec.
  151. config CRYPTO_CTS
  152. tristate "CTS support"
  153. select CRYPTO_BLKCIPHER
  154. help
  155. CTS: Cipher Text Stealing
  156. This is the Cipher Text Stealing mode as described by
  157. Section 8 of rfc2040 and referenced by rfc3962.
  158. (rfc3962 includes errata information in its Appendix A)
  159. This mode is required for Kerberos gss mechanism support
  160. for AES encryption.
  161. config CRYPTO_ECB
  162. tristate "ECB support"
  163. select CRYPTO_BLKCIPHER
  164. select CRYPTO_MANAGER
  165. help
  166. ECB: Electronic CodeBook mode
  167. This is the simplest block cipher algorithm. It simply encrypts
  168. the input block by block.
  169. config CRYPTO_LRW
  170. tristate "LRW support (EXPERIMENTAL)"
  171. depends on EXPERIMENTAL
  172. select CRYPTO_BLKCIPHER
  173. select CRYPTO_MANAGER
  174. select CRYPTO_GF128MUL
  175. help
  176. LRW: Liskov Rivest Wagner, a tweakable, non malleable, non movable
  177. narrow block cipher mode for dm-crypt. Use it with cipher
  178. specification string aes-lrw-benbi, the key must be 256, 320 or 384.
  179. The first 128, 192 or 256 bits in the key are used for AES and the
  180. rest is used to tie each cipher block to its logical position.
  181. config CRYPTO_PCBC
  182. tristate "PCBC support"
  183. select CRYPTO_BLKCIPHER
  184. select CRYPTO_MANAGER
  185. help
  186. PCBC: Propagating Cipher Block Chaining mode
  187. This block cipher algorithm is required for RxRPC.
  188. config CRYPTO_XTS
  189. tristate "XTS support (EXPERIMENTAL)"
  190. depends on EXPERIMENTAL
  191. select CRYPTO_BLKCIPHER
  192. select CRYPTO_MANAGER
  193. select CRYPTO_GF128MUL
  194. help
  195. XTS: IEEE1619/D16 narrow block cipher use with aes-xts-plain,
  196. key size 256, 384 or 512 bits. This implementation currently
  197. can't handle a sectorsize which is not a multiple of 16 bytes.
  198. comment "Hash modes"
  199. config CRYPTO_HMAC
  200. tristate "HMAC support"
  201. select CRYPTO_HASH
  202. select CRYPTO_MANAGER
  203. help
  204. HMAC: Keyed-Hashing for Message Authentication (RFC2104).
  205. This is required for IPSec.
  206. config CRYPTO_XCBC
  207. tristate "XCBC support"
  208. depends on EXPERIMENTAL
  209. select CRYPTO_HASH
  210. select CRYPTO_MANAGER
  211. help
  212. XCBC: Keyed-Hashing with encryption algorithm
  213. http://www.ietf.org/rfc/rfc3566.txt
  214. http://csrc.nist.gov/encryption/modes/proposedmodes/
  215. xcbc-mac/xcbc-mac-spec.pdf
  216. comment "Digest"
  217. config CRYPTO_CRC32C
  218. tristate "CRC32c CRC algorithm"
  219. select CRYPTO_HASH
  220. help
  221. Castagnoli, et al Cyclic Redundancy-Check Algorithm. Used
  222. by iSCSI for header and data digests and by others.
  223. See Castagnoli93. Module will be crc32c.
  224. config CRYPTO_CRC32C_INTEL
  225. tristate "CRC32c INTEL hardware acceleration"
  226. depends on X86
  227. select CRYPTO_HASH
  228. help
  229. In Intel processor with SSE4.2 supported, the processor will
  230. support CRC32C implementation using hardware accelerated CRC32
  231. instruction. This option will create 'crc32c-intel' module,
  232. which will enable any routine to use the CRC32 instruction to
  233. gain performance compared with software implementation.
  234. Module will be crc32c-intel.
  235. config CRYPTO_MD4
  236. tristate "MD4 digest algorithm"
  237. select CRYPTO_ALGAPI
  238. help
  239. MD4 message digest algorithm (RFC1320).
  240. config CRYPTO_MD5
  241. tristate "MD5 digest algorithm"
  242. select CRYPTO_ALGAPI
  243. help
  244. MD5 message digest algorithm (RFC1321).
  245. config CRYPTO_MICHAEL_MIC
  246. tristate "Michael MIC keyed digest algorithm"
  247. select CRYPTO_ALGAPI
  248. help
  249. Michael MIC is used for message integrity protection in TKIP
  250. (IEEE 802.11i). This algorithm is required for TKIP, but it
  251. should not be used for other purposes because of the weakness
  252. of the algorithm.
  253. config CRYPTO_RMD128
  254. tristate "RIPEMD-128 digest algorithm"
  255. select CRYPTO_ALGAPI
  256. help
  257. RIPEMD-128 (ISO/IEC 10118-3:2004).
  258. RIPEMD-128 is a 128-bit cryptographic hash function. It should only
  259. to be used as a secure replacement for RIPEMD. For other use cases
  260. RIPEMD-160 should be used.
  261. Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
  262. See <http://home.esat.kuleuven.be/~bosselae/ripemd160.html>
  263. config CRYPTO_RMD160
  264. tristate "RIPEMD-160 digest algorithm"
  265. select CRYPTO_ALGAPI
  266. help
  267. RIPEMD-160 (ISO/IEC 10118-3:2004).
  268. RIPEMD-160 is a 160-bit cryptographic hash function. It is intended
  269. to be used as a secure replacement for the 128-bit hash functions
  270. MD4, MD5 and it's predecessor RIPEMD
  271. (not to be confused with RIPEMD-128).
  272. It's speed is comparable to SHA1 and there are no known attacks
  273. against RIPEMD-160.
  274. Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
  275. See <http://home.esat.kuleuven.be/~bosselae/ripemd160.html>
  276. config CRYPTO_RMD256
  277. tristate "RIPEMD-256 digest algorithm"
  278. select CRYPTO_ALGAPI
  279. help
  280. RIPEMD-256 is an optional extension of RIPEMD-128 with a
  281. 256 bit hash. It is intended for applications that require
  282. longer hash-results, without needing a larger security level
  283. (than RIPEMD-128).
  284. Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
  285. See <http://home.esat.kuleuven.be/~bosselae/ripemd160.html>
  286. config CRYPTO_RMD320
  287. tristate "RIPEMD-320 digest algorithm"
  288. select CRYPTO_ALGAPI
  289. help
  290. RIPEMD-320 is an optional extension of RIPEMD-160 with a
  291. 320 bit hash. It is intended for applications that require
  292. longer hash-results, without needing a larger security level
  293. (than RIPEMD-160).
  294. Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
  295. See <http://home.esat.kuleuven.be/~bosselae/ripemd160.html>
  296. config CRYPTO_SHA1
  297. tristate "SHA1 digest algorithm"
  298. select CRYPTO_ALGAPI
  299. help
  300. SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2).
  301. config CRYPTO_SHA256
  302. tristate "SHA224 and SHA256 digest algorithm"
  303. select CRYPTO_ALGAPI
  304. help
  305. SHA256 secure hash standard (DFIPS 180-2).
  306. This version of SHA implements a 256 bit hash with 128 bits of
  307. security against collision attacks.
  308. This code also includes SHA-224, a 224 bit hash with 112 bits
  309. of security against collision attacks.
  310. config CRYPTO_SHA512
  311. tristate "SHA384 and SHA512 digest algorithms"
  312. select CRYPTO_ALGAPI
  313. help
  314. SHA512 secure hash standard (DFIPS 180-2).
  315. This version of SHA implements a 512 bit hash with 256 bits of
  316. security against collision attacks.
  317. This code also includes SHA-384, a 384 bit hash with 192 bits
  318. of security against collision attacks.
  319. config CRYPTO_TGR192
  320. tristate "Tiger digest algorithms"
  321. select CRYPTO_ALGAPI
  322. help
  323. Tiger hash algorithm 192, 160 and 128-bit hashes
  324. Tiger is a hash function optimized for 64-bit processors while
  325. still having decent performance on 32-bit processors.
  326. Tiger was developed by Ross Anderson and Eli Biham.
  327. See also:
  328. <http://www.cs.technion.ac.il/~biham/Reports/Tiger/>.
  329. config CRYPTO_WP512
  330. tristate "Whirlpool digest algorithms"
  331. select CRYPTO_ALGAPI
  332. help
  333. Whirlpool hash algorithm 512, 384 and 256-bit hashes
  334. Whirlpool-512 is part of the NESSIE cryptographic primitives.
  335. Whirlpool will be part of the ISO/IEC 10118-3:2003(E) standard
  336. See also:
  337. <http://planeta.terra.com.br/informatica/paulobarreto/WhirlpoolPage.html>
  338. comment "Ciphers"
  339. config CRYPTO_AES
  340. tristate "AES cipher algorithms"
  341. select CRYPTO_ALGAPI
  342. help
  343. AES cipher algorithms (FIPS-197). AES uses the Rijndael
  344. algorithm.
  345. Rijndael appears to be consistently a very good performer in
  346. both hardware and software across a wide range of computing
  347. environments regardless of its use in feedback or non-feedback
  348. modes. Its key setup time is excellent, and its key agility is
  349. good. Rijndael's very low memory requirements make it very well
  350. suited for restricted-space environments, in which it also
  351. demonstrates excellent performance. Rijndael's operations are
  352. among the easiest to defend against power and timing attacks.
  353. The AES specifies three key sizes: 128, 192 and 256 bits
  354. See <http://csrc.nist.gov/CryptoToolkit/aes/> for more information.
  355. config CRYPTO_AES_586
  356. tristate "AES cipher algorithms (i586)"
  357. depends on (X86 || UML_X86) && !64BIT
  358. select CRYPTO_ALGAPI
  359. select CRYPTO_AES
  360. help
  361. AES cipher algorithms (FIPS-197). AES uses the Rijndael
  362. algorithm.
  363. Rijndael appears to be consistently a very good performer in
  364. both hardware and software across a wide range of computing
  365. environments regardless of its use in feedback or non-feedback
  366. modes. Its key setup time is excellent, and its key agility is
  367. good. Rijndael's very low memory requirements make it very well
  368. suited for restricted-space environments, in which it also
  369. demonstrates excellent performance. Rijndael's operations are
  370. among the easiest to defend against power and timing attacks.
  371. The AES specifies three key sizes: 128, 192 and 256 bits
  372. See <http://csrc.nist.gov/encryption/aes/> for more information.
  373. config CRYPTO_AES_X86_64
  374. tristate "AES cipher algorithms (x86_64)"
  375. depends on (X86 || UML_X86) && 64BIT
  376. select CRYPTO_ALGAPI
  377. select CRYPTO_AES
  378. help
  379. AES cipher algorithms (FIPS-197). AES uses the Rijndael
  380. algorithm.
  381. Rijndael appears to be consistently a very good performer in
  382. both hardware and software across a wide range of computing
  383. environments regardless of its use in feedback or non-feedback
  384. modes. Its key setup time is excellent, and its key agility is
  385. good. Rijndael's very low memory requirements make it very well
  386. suited for restricted-space environments, in which it also
  387. demonstrates excellent performance. Rijndael's operations are
  388. among the easiest to defend against power and timing attacks.
  389. The AES specifies three key sizes: 128, 192 and 256 bits
  390. See <http://csrc.nist.gov/encryption/aes/> for more information.
  391. config CRYPTO_ANUBIS
  392. tristate "Anubis cipher algorithm"
  393. select CRYPTO_ALGAPI
  394. help
  395. Anubis cipher algorithm.
  396. Anubis is a variable key length cipher which can use keys from
  397. 128 bits to 320 bits in length. It was evaluated as a entrant
  398. in the NESSIE competition.
  399. See also:
  400. <https://www.cosic.esat.kuleuven.ac.be/nessie/reports/>
  401. <http://planeta.terra.com.br/informatica/paulobarreto/AnubisPage.html>
  402. config CRYPTO_ARC4
  403. tristate "ARC4 cipher algorithm"
  404. select CRYPTO_ALGAPI
  405. help
  406. ARC4 cipher algorithm.
  407. ARC4 is a stream cipher using keys ranging from 8 bits to 2048
  408. bits in length. This algorithm is required for driver-based
  409. WEP, but it should not be for other purposes because of the
  410. weakness of the algorithm.
  411. config CRYPTO_BLOWFISH
  412. tristate "Blowfish cipher algorithm"
  413. select CRYPTO_ALGAPI
  414. help
  415. Blowfish cipher algorithm, by Bruce Schneier.
  416. This is a variable key length cipher which can use keys from 32
  417. bits to 448 bits in length. It's fast, simple and specifically
  418. designed for use on "large microprocessors".
  419. See also:
  420. <http://www.schneier.com/blowfish.html>
  421. config CRYPTO_CAMELLIA
  422. tristate "Camellia cipher algorithms"
  423. depends on CRYPTO
  424. select CRYPTO_ALGAPI
  425. help
  426. Camellia cipher algorithms module.
  427. Camellia is a symmetric key block cipher developed jointly
  428. at NTT and Mitsubishi Electric Corporation.
  429. The Camellia specifies three key sizes: 128, 192 and 256 bits.
  430. See also:
  431. <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
  432. config CRYPTO_CAST5
  433. tristate "CAST5 (CAST-128) cipher algorithm"
  434. select CRYPTO_ALGAPI
  435. help
  436. The CAST5 encryption algorithm (synonymous with CAST-128) is
  437. described in RFC2144.
  438. config CRYPTO_CAST6
  439. tristate "CAST6 (CAST-256) cipher algorithm"
  440. select CRYPTO_ALGAPI
  441. help
  442. The CAST6 encryption algorithm (synonymous with CAST-256) is
  443. described in RFC2612.
  444. config CRYPTO_DES
  445. tristate "DES and Triple DES EDE cipher algorithms"
  446. select CRYPTO_ALGAPI
  447. help
  448. DES cipher algorithm (FIPS 46-2), and Triple DES EDE (FIPS 46-3).
  449. config CRYPTO_FCRYPT
  450. tristate "FCrypt cipher algorithm"
  451. select CRYPTO_ALGAPI
  452. select CRYPTO_BLKCIPHER
  453. help
  454. FCrypt algorithm used by RxRPC.
  455. config CRYPTO_KHAZAD
  456. tristate "Khazad cipher algorithm"
  457. select CRYPTO_ALGAPI
  458. help
  459. Khazad cipher algorithm.
  460. Khazad was a finalist in the initial NESSIE competition. It is
  461. an algorithm optimized for 64-bit processors with good performance
  462. on 32-bit processors. Khazad uses an 128 bit key size.
  463. See also:
  464. <http://planeta.terra.com.br/informatica/paulobarreto/KhazadPage.html>
  465. config CRYPTO_SALSA20
  466. tristate "Salsa20 stream cipher algorithm (EXPERIMENTAL)"
  467. depends on EXPERIMENTAL
  468. select CRYPTO_BLKCIPHER
  469. help
  470. Salsa20 stream cipher algorithm.
  471. Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
  472. Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
  473. The Salsa20 stream cipher algorithm is designed by Daniel J.
  474. Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
  475. config CRYPTO_SALSA20_586
  476. tristate "Salsa20 stream cipher algorithm (i586) (EXPERIMENTAL)"
  477. depends on (X86 || UML_X86) && !64BIT
  478. depends on EXPERIMENTAL
  479. select CRYPTO_BLKCIPHER
  480. help
  481. Salsa20 stream cipher algorithm.
  482. Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
  483. Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
  484. The Salsa20 stream cipher algorithm is designed by Daniel J.
  485. Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
  486. config CRYPTO_SALSA20_X86_64
  487. tristate "Salsa20 stream cipher algorithm (x86_64) (EXPERIMENTAL)"
  488. depends on (X86 || UML_X86) && 64BIT
  489. depends on EXPERIMENTAL
  490. select CRYPTO_BLKCIPHER
  491. help
  492. Salsa20 stream cipher algorithm.
  493. Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
  494. Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
  495. The Salsa20 stream cipher algorithm is designed by Daniel J.
  496. Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
  497. config CRYPTO_SEED
  498. tristate "SEED cipher algorithm"
  499. select CRYPTO_ALGAPI
  500. help
  501. SEED cipher algorithm (RFC4269).
  502. SEED is a 128-bit symmetric key block cipher that has been
  503. developed by KISA (Korea Information Security Agency) as a
  504. national standard encryption algorithm of the Republic of Korea.
  505. It is a 16 round block cipher with the key size of 128 bit.
  506. See also:
  507. <http://www.kisa.or.kr/kisa/seed/jsp/seed_eng.jsp>
  508. config CRYPTO_SERPENT
  509. tristate "Serpent cipher algorithm"
  510. select CRYPTO_ALGAPI
  511. help
  512. Serpent cipher algorithm, by Anderson, Biham & Knudsen.
  513. Keys are allowed to be from 0 to 256 bits in length, in steps
  514. of 8 bits. Also includes the 'Tnepres' algorithm, a reversed
  515. variant of Serpent for compatibility with old kerneli.org code.
  516. See also:
  517. <http://www.cl.cam.ac.uk/~rja14/serpent.html>
  518. config CRYPTO_TEA
  519. tristate "TEA, XTEA and XETA cipher algorithms"
  520. select CRYPTO_ALGAPI
  521. help
  522. TEA cipher algorithm.
  523. Tiny Encryption Algorithm is a simple cipher that uses
  524. many rounds for security. It is very fast and uses
  525. little memory.
  526. Xtendend Tiny Encryption Algorithm is a modification to
  527. the TEA algorithm to address a potential key weakness
  528. in the TEA algorithm.
  529. Xtendend Encryption Tiny Algorithm is a mis-implementation
  530. of the XTEA algorithm for compatibility purposes.
  531. config CRYPTO_TWOFISH
  532. tristate "Twofish cipher algorithm"
  533. select CRYPTO_ALGAPI
  534. select CRYPTO_TWOFISH_COMMON
  535. help
  536. Twofish cipher algorithm.
  537. Twofish was submitted as an AES (Advanced Encryption Standard)
  538. candidate cipher by researchers at CounterPane Systems. It is a
  539. 16 round block cipher supporting key sizes of 128, 192, and 256
  540. bits.
  541. See also:
  542. <http://www.schneier.com/twofish.html>
  543. config CRYPTO_TWOFISH_COMMON
  544. tristate
  545. help
  546. Common parts of the Twofish cipher algorithm shared by the
  547. generic c and the assembler implementations.
  548. config CRYPTO_TWOFISH_586
  549. tristate "Twofish cipher algorithms (i586)"
  550. depends on (X86 || UML_X86) && !64BIT
  551. select CRYPTO_ALGAPI
  552. select CRYPTO_TWOFISH_COMMON
  553. help
  554. Twofish cipher algorithm.
  555. Twofish was submitted as an AES (Advanced Encryption Standard)
  556. candidate cipher by researchers at CounterPane Systems. It is a
  557. 16 round block cipher supporting key sizes of 128, 192, and 256
  558. bits.
  559. See also:
  560. <http://www.schneier.com/twofish.html>
  561. config CRYPTO_TWOFISH_X86_64
  562. tristate "Twofish cipher algorithm (x86_64)"
  563. depends on (X86 || UML_X86) && 64BIT
  564. select CRYPTO_ALGAPI
  565. select CRYPTO_TWOFISH_COMMON
  566. help
  567. Twofish cipher algorithm (x86_64).
  568. Twofish was submitted as an AES (Advanced Encryption Standard)
  569. candidate cipher by researchers at CounterPane Systems. It is a
  570. 16 round block cipher supporting key sizes of 128, 192, and 256
  571. bits.
  572. See also:
  573. <http://www.schneier.com/twofish.html>
  574. comment "Compression"
  575. config CRYPTO_DEFLATE
  576. tristate "Deflate compression algorithm"
  577. select CRYPTO_ALGAPI
  578. select ZLIB_INFLATE
  579. select ZLIB_DEFLATE
  580. help
  581. This is the Deflate algorithm (RFC1951), specified for use in
  582. IPSec with the IPCOMP protocol (RFC3173, RFC2394).
  583. You will most probably want this if using IPSec.
  584. config CRYPTO_LZO
  585. tristate "LZO compression algorithm"
  586. select CRYPTO_ALGAPI
  587. select LZO_COMPRESS
  588. select LZO_DECOMPRESS
  589. help
  590. This is the LZO algorithm.
  591. comment "Random Number Generation"
  592. config CRYPTO_ANSI_CPRNG
  593. tristate "Pseudo Random Number Generation for Cryptographic modules"
  594. select CRYPTO_AES
  595. select CRYPTO_RNG
  596. select CRYPTO_FIPS
  597. help
  598. This option enables the generic pseudo random number generator
  599. for cryptographic modules. Uses the Algorithm specified in
  600. ANSI X9.31 A.2.4
  601. source "drivers/crypto/Kconfig"
  602. endif # if CRYPTO