Kconfig 21 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740
  1. #
  2. # Generic algorithms support
  3. #
  4. config XOR_BLOCKS
  5. tristate
  6. #
  7. # async_tx api: hardware offloaded memory transfer/transform support
  8. #
  9. source "crypto/async_tx/Kconfig"
  10. #
  11. # Cryptographic API Configuration
  12. #
  13. menuconfig CRYPTO
  14. tristate "Cryptographic API"
  15. help
  16. This option provides the core Cryptographic API.
  17. if CRYPTO
  18. comment "Crypto core or helper"
  19. config CRYPTO_FIPS
  20. bool "FIPS 200 compliance"
  21. help
  22. This options enables the fips boot option which is
  23. required if you want to system to operate in a FIPS 200
  24. certification. You should say no unless you know what
  25. this is.
  26. config CRYPTO_ALGAPI
  27. tristate
  28. select CRYPTO_ALGAPI2
  29. help
  30. This option provides the API for cryptographic algorithms.
  31. config CRYPTO_ALGAPI2
  32. tristate
  33. config CRYPTO_AEAD
  34. tristate
  35. select CRYPTO_AEAD2
  36. select CRYPTO_ALGAPI
  37. config CRYPTO_AEAD2
  38. tristate
  39. select CRYPTO_ALGAPI2
  40. config CRYPTO_BLKCIPHER
  41. tristate
  42. select CRYPTO_BLKCIPHER2
  43. select CRYPTO_ALGAPI
  44. config CRYPTO_BLKCIPHER2
  45. tristate
  46. select CRYPTO_ALGAPI2
  47. select CRYPTO_RNG2
  48. config CRYPTO_HASH
  49. tristate
  50. select CRYPTO_HASH2
  51. select CRYPTO_ALGAPI
  52. config CRYPTO_HASH2
  53. tristate
  54. select CRYPTO_ALGAPI2
  55. config CRYPTO_RNG
  56. tristate
  57. select CRYPTO_RNG2
  58. select CRYPTO_ALGAPI
  59. config CRYPTO_RNG2
  60. tristate
  61. select CRYPTO_ALGAPI2
  62. config CRYPTO_MANAGER
  63. tristate "Cryptographic algorithm manager"
  64. select CRYPTO_MANAGER2
  65. help
  66. Create default cryptographic template instantiations such as
  67. cbc(aes).
  68. config CRYPTO_MANAGER2
  69. def_tristate CRYPTO_MANAGER || (CRYPTO_MANAGER!=n && CRYPTO_ALGAPI=y)
  70. select CRYPTO_AEAD2
  71. select CRYPTO_HASH2
  72. select CRYPTO_BLKCIPHER2
  73. config CRYPTO_GF128MUL
  74. tristate "GF(2^128) multiplication functions (EXPERIMENTAL)"
  75. depends on EXPERIMENTAL
  76. help
  77. Efficient table driven implementation of multiplications in the
  78. field GF(2^128). This is needed by some cypher modes. This
  79. option will be selected automatically if you select such a
  80. cipher mode. Only select this option by hand if you expect to load
  81. an external module that requires these functions.
  82. config CRYPTO_NULL
  83. tristate "Null algorithms"
  84. select CRYPTO_ALGAPI
  85. select CRYPTO_BLKCIPHER
  86. help
  87. These are 'Null' algorithms, used by IPsec, which do nothing.
  88. config CRYPTO_CRYPTD
  89. tristate "Software async crypto daemon"
  90. select CRYPTO_BLKCIPHER
  91. select CRYPTO_HASH
  92. select CRYPTO_MANAGER
  93. help
  94. This is a generic software asynchronous crypto daemon that
  95. converts an arbitrary synchronous software crypto algorithm
  96. into an asynchronous algorithm that executes in a kernel thread.
  97. config CRYPTO_AUTHENC
  98. tristate "Authenc support"
  99. select CRYPTO_AEAD
  100. select CRYPTO_BLKCIPHER
  101. select CRYPTO_MANAGER
  102. select CRYPTO_HASH
  103. help
  104. Authenc: Combined mode wrapper for IPsec.
  105. This is required for IPSec.
  106. config CRYPTO_TEST
  107. tristate "Testing module"
  108. depends on m
  109. select CRYPTO_MANAGER
  110. help
  111. Quick & dirty crypto test module.
  112. comment "Authenticated Encryption with Associated Data"
  113. config CRYPTO_CCM
  114. tristate "CCM support"
  115. select CRYPTO_CTR
  116. select CRYPTO_AEAD
  117. help
  118. Support for Counter with CBC MAC. Required for IPsec.
  119. config CRYPTO_GCM
  120. tristate "GCM/GMAC support"
  121. select CRYPTO_CTR
  122. select CRYPTO_AEAD
  123. select CRYPTO_GF128MUL
  124. help
  125. Support for Galois/Counter Mode (GCM) and Galois Message
  126. Authentication Code (GMAC). Required for IPSec.
  127. config CRYPTO_SEQIV
  128. tristate "Sequence Number IV Generator"
  129. select CRYPTO_AEAD
  130. select CRYPTO_BLKCIPHER
  131. select CRYPTO_RNG
  132. help
  133. This IV generator generates an IV based on a sequence number by
  134. xoring it with a salt. This algorithm is mainly useful for CTR
  135. comment "Block modes"
  136. config CRYPTO_CBC
  137. tristate "CBC support"
  138. select CRYPTO_BLKCIPHER
  139. select CRYPTO_MANAGER
  140. help
  141. CBC: Cipher Block Chaining mode
  142. This block cipher algorithm is required for IPSec.
  143. config CRYPTO_CTR
  144. tristate "CTR support"
  145. select CRYPTO_BLKCIPHER
  146. select CRYPTO_SEQIV
  147. select CRYPTO_MANAGER
  148. help
  149. CTR: Counter mode
  150. This block cipher algorithm is required for IPSec.
  151. config CRYPTO_CTS
  152. tristate "CTS support"
  153. select CRYPTO_BLKCIPHER
  154. help
  155. CTS: Cipher Text Stealing
  156. This is the Cipher Text Stealing mode as described by
  157. Section 8 of rfc2040 and referenced by rfc3962.
  158. (rfc3962 includes errata information in its Appendix A)
  159. This mode is required for Kerberos gss mechanism support
  160. for AES encryption.
  161. config CRYPTO_ECB
  162. tristate "ECB support"
  163. select CRYPTO_BLKCIPHER
  164. select CRYPTO_MANAGER
  165. help
  166. ECB: Electronic CodeBook mode
  167. This is the simplest block cipher algorithm. It simply encrypts
  168. the input block by block.
  169. config CRYPTO_LRW
  170. tristate "LRW support (EXPERIMENTAL)"
  171. depends on EXPERIMENTAL
  172. select CRYPTO_BLKCIPHER
  173. select CRYPTO_MANAGER
  174. select CRYPTO_GF128MUL
  175. help
  176. LRW: Liskov Rivest Wagner, a tweakable, non malleable, non movable
  177. narrow block cipher mode for dm-crypt. Use it with cipher
  178. specification string aes-lrw-benbi, the key must be 256, 320 or 384.
  179. The first 128, 192 or 256 bits in the key are used for AES and the
  180. rest is used to tie each cipher block to its logical position.
  181. config CRYPTO_PCBC
  182. tristate "PCBC support"
  183. select CRYPTO_BLKCIPHER
  184. select CRYPTO_MANAGER
  185. help
  186. PCBC: Propagating Cipher Block Chaining mode
  187. This block cipher algorithm is required for RxRPC.
  188. config CRYPTO_XTS
  189. tristate "XTS support (EXPERIMENTAL)"
  190. depends on EXPERIMENTAL
  191. select CRYPTO_BLKCIPHER
  192. select CRYPTO_MANAGER
  193. select CRYPTO_GF128MUL
  194. help
  195. XTS: IEEE1619/D16 narrow block cipher use with aes-xts-plain,
  196. key size 256, 384 or 512 bits. This implementation currently
  197. can't handle a sectorsize which is not a multiple of 16 bytes.
  198. comment "Hash modes"
  199. config CRYPTO_HMAC
  200. tristate "HMAC support"
  201. select CRYPTO_HASH
  202. select CRYPTO_MANAGER
  203. help
  204. HMAC: Keyed-Hashing for Message Authentication (RFC2104).
  205. This is required for IPSec.
  206. config CRYPTO_XCBC
  207. tristate "XCBC support"
  208. depends on EXPERIMENTAL
  209. select CRYPTO_HASH
  210. select CRYPTO_MANAGER
  211. help
  212. XCBC: Keyed-Hashing with encryption algorithm
  213. http://www.ietf.org/rfc/rfc3566.txt
  214. http://csrc.nist.gov/encryption/modes/proposedmodes/
  215. xcbc-mac/xcbc-mac-spec.pdf
  216. comment "Digest"
  217. config CRYPTO_CRC32C
  218. tristate "CRC32c CRC algorithm"
  219. select CRYPTO_HASH
  220. select LIBCRC32C
  221. help
  222. Castagnoli, et al Cyclic Redundancy-Check Algorithm. Used
  223. by iSCSI for header and data digests and by others.
  224. See Castagnoli93. This implementation uses lib/libcrc32c.
  225. Module will be crc32c.
  226. config CRYPTO_CRC32C_INTEL
  227. tristate "CRC32c INTEL hardware acceleration"
  228. depends on X86
  229. select CRYPTO_HASH
  230. help
  231. In Intel processor with SSE4.2 supported, the processor will
  232. support CRC32C implementation using hardware accelerated CRC32
  233. instruction. This option will create 'crc32c-intel' module,
  234. which will enable any routine to use the CRC32 instruction to
  235. gain performance compared with software implementation.
  236. Module will be crc32c-intel.
  237. config CRYPTO_MD4
  238. tristate "MD4 digest algorithm"
  239. select CRYPTO_ALGAPI
  240. help
  241. MD4 message digest algorithm (RFC1320).
  242. config CRYPTO_MD5
  243. tristate "MD5 digest algorithm"
  244. select CRYPTO_ALGAPI
  245. help
  246. MD5 message digest algorithm (RFC1321).
  247. config CRYPTO_MICHAEL_MIC
  248. tristate "Michael MIC keyed digest algorithm"
  249. select CRYPTO_ALGAPI
  250. help
  251. Michael MIC is used for message integrity protection in TKIP
  252. (IEEE 802.11i). This algorithm is required for TKIP, but it
  253. should not be used for other purposes because of the weakness
  254. of the algorithm.
  255. config CRYPTO_RMD128
  256. tristate "RIPEMD-128 digest algorithm"
  257. select CRYPTO_ALGAPI
  258. help
  259. RIPEMD-128 (ISO/IEC 10118-3:2004).
  260. RIPEMD-128 is a 128-bit cryptographic hash function. It should only
  261. to be used as a secure replacement for RIPEMD. For other use cases
  262. RIPEMD-160 should be used.
  263. Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
  264. See <http://home.esat.kuleuven.be/~bosselae/ripemd160.html>
  265. config CRYPTO_RMD160
  266. tristate "RIPEMD-160 digest algorithm"
  267. select CRYPTO_ALGAPI
  268. help
  269. RIPEMD-160 (ISO/IEC 10118-3:2004).
  270. RIPEMD-160 is a 160-bit cryptographic hash function. It is intended
  271. to be used as a secure replacement for the 128-bit hash functions
  272. MD4, MD5 and it's predecessor RIPEMD
  273. (not to be confused with RIPEMD-128).
  274. It's speed is comparable to SHA1 and there are no known attacks
  275. against RIPEMD-160.
  276. Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
  277. See <http://home.esat.kuleuven.be/~bosselae/ripemd160.html>
  278. config CRYPTO_RMD256
  279. tristate "RIPEMD-256 digest algorithm"
  280. select CRYPTO_ALGAPI
  281. help
  282. RIPEMD-256 is an optional extension of RIPEMD-128 with a
  283. 256 bit hash. It is intended for applications that require
  284. longer hash-results, without needing a larger security level
  285. (than RIPEMD-128).
  286. Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
  287. See <http://home.esat.kuleuven.be/~bosselae/ripemd160.html>
  288. config CRYPTO_RMD320
  289. tristate "RIPEMD-320 digest algorithm"
  290. select CRYPTO_ALGAPI
  291. help
  292. RIPEMD-320 is an optional extension of RIPEMD-160 with a
  293. 320 bit hash. It is intended for applications that require
  294. longer hash-results, without needing a larger security level
  295. (than RIPEMD-160).
  296. Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
  297. See <http://home.esat.kuleuven.be/~bosselae/ripemd160.html>
  298. config CRYPTO_SHA1
  299. tristate "SHA1 digest algorithm"
  300. select CRYPTO_ALGAPI
  301. help
  302. SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2).
  303. config CRYPTO_SHA256
  304. tristate "SHA224 and SHA256 digest algorithm"
  305. select CRYPTO_ALGAPI
  306. help
  307. SHA256 secure hash standard (DFIPS 180-2).
  308. This version of SHA implements a 256 bit hash with 128 bits of
  309. security against collision attacks.
  310. This code also includes SHA-224, a 224 bit hash with 112 bits
  311. of security against collision attacks.
  312. config CRYPTO_SHA512
  313. tristate "SHA384 and SHA512 digest algorithms"
  314. select CRYPTO_ALGAPI
  315. help
  316. SHA512 secure hash standard (DFIPS 180-2).
  317. This version of SHA implements a 512 bit hash with 256 bits of
  318. security against collision attacks.
  319. This code also includes SHA-384, a 384 bit hash with 192 bits
  320. of security against collision attacks.
  321. config CRYPTO_TGR192
  322. tristate "Tiger digest algorithms"
  323. select CRYPTO_ALGAPI
  324. help
  325. Tiger hash algorithm 192, 160 and 128-bit hashes
  326. Tiger is a hash function optimized for 64-bit processors while
  327. still having decent performance on 32-bit processors.
  328. Tiger was developed by Ross Anderson and Eli Biham.
  329. See also:
  330. <http://www.cs.technion.ac.il/~biham/Reports/Tiger/>.
  331. config CRYPTO_WP512
  332. tristate "Whirlpool digest algorithms"
  333. select CRYPTO_ALGAPI
  334. help
  335. Whirlpool hash algorithm 512, 384 and 256-bit hashes
  336. Whirlpool-512 is part of the NESSIE cryptographic primitives.
  337. Whirlpool will be part of the ISO/IEC 10118-3:2003(E) standard
  338. See also:
  339. <http://planeta.terra.com.br/informatica/paulobarreto/WhirlpoolPage.html>
  340. comment "Ciphers"
  341. config CRYPTO_AES
  342. tristate "AES cipher algorithms"
  343. select CRYPTO_ALGAPI
  344. help
  345. AES cipher algorithms (FIPS-197). AES uses the Rijndael
  346. algorithm.
  347. Rijndael appears to be consistently a very good performer in
  348. both hardware and software across a wide range of computing
  349. environments regardless of its use in feedback or non-feedback
  350. modes. Its key setup time is excellent, and its key agility is
  351. good. Rijndael's very low memory requirements make it very well
  352. suited for restricted-space environments, in which it also
  353. demonstrates excellent performance. Rijndael's operations are
  354. among the easiest to defend against power and timing attacks.
  355. The AES specifies three key sizes: 128, 192 and 256 bits
  356. See <http://csrc.nist.gov/CryptoToolkit/aes/> for more information.
  357. config CRYPTO_AES_586
  358. tristate "AES cipher algorithms (i586)"
  359. depends on (X86 || UML_X86) && !64BIT
  360. select CRYPTO_ALGAPI
  361. select CRYPTO_AES
  362. help
  363. AES cipher algorithms (FIPS-197). AES uses the Rijndael
  364. algorithm.
  365. Rijndael appears to be consistently a very good performer in
  366. both hardware and software across a wide range of computing
  367. environments regardless of its use in feedback or non-feedback
  368. modes. Its key setup time is excellent, and its key agility is
  369. good. Rijndael's very low memory requirements make it very well
  370. suited for restricted-space environments, in which it also
  371. demonstrates excellent performance. Rijndael's operations are
  372. among the easiest to defend against power and timing attacks.
  373. The AES specifies three key sizes: 128, 192 and 256 bits
  374. See <http://csrc.nist.gov/encryption/aes/> for more information.
  375. config CRYPTO_AES_X86_64
  376. tristate "AES cipher algorithms (x86_64)"
  377. depends on (X86 || UML_X86) && 64BIT
  378. select CRYPTO_ALGAPI
  379. select CRYPTO_AES
  380. help
  381. AES cipher algorithms (FIPS-197). AES uses the Rijndael
  382. algorithm.
  383. Rijndael appears to be consistently a very good performer in
  384. both hardware and software across a wide range of computing
  385. environments regardless of its use in feedback or non-feedback
  386. modes. Its key setup time is excellent, and its key agility is
  387. good. Rijndael's very low memory requirements make it very well
  388. suited for restricted-space environments, in which it also
  389. demonstrates excellent performance. Rijndael's operations are
  390. among the easiest to defend against power and timing attacks.
  391. The AES specifies three key sizes: 128, 192 and 256 bits
  392. See <http://csrc.nist.gov/encryption/aes/> for more information.
  393. config CRYPTO_ANUBIS
  394. tristate "Anubis cipher algorithm"
  395. select CRYPTO_ALGAPI
  396. help
  397. Anubis cipher algorithm.
  398. Anubis is a variable key length cipher which can use keys from
  399. 128 bits to 320 bits in length. It was evaluated as a entrant
  400. in the NESSIE competition.
  401. See also:
  402. <https://www.cosic.esat.kuleuven.ac.be/nessie/reports/>
  403. <http://planeta.terra.com.br/informatica/paulobarreto/AnubisPage.html>
  404. config CRYPTO_ARC4
  405. tristate "ARC4 cipher algorithm"
  406. select CRYPTO_ALGAPI
  407. help
  408. ARC4 cipher algorithm.
  409. ARC4 is a stream cipher using keys ranging from 8 bits to 2048
  410. bits in length. This algorithm is required for driver-based
  411. WEP, but it should not be for other purposes because of the
  412. weakness of the algorithm.
  413. config CRYPTO_BLOWFISH
  414. tristate "Blowfish cipher algorithm"
  415. select CRYPTO_ALGAPI
  416. help
  417. Blowfish cipher algorithm, by Bruce Schneier.
  418. This is a variable key length cipher which can use keys from 32
  419. bits to 448 bits in length. It's fast, simple and specifically
  420. designed for use on "large microprocessors".
  421. See also:
  422. <http://www.schneier.com/blowfish.html>
  423. config CRYPTO_CAMELLIA
  424. tristate "Camellia cipher algorithms"
  425. depends on CRYPTO
  426. select CRYPTO_ALGAPI
  427. help
  428. Camellia cipher algorithms module.
  429. Camellia is a symmetric key block cipher developed jointly
  430. at NTT and Mitsubishi Electric Corporation.
  431. The Camellia specifies three key sizes: 128, 192 and 256 bits.
  432. See also:
  433. <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
  434. config CRYPTO_CAST5
  435. tristate "CAST5 (CAST-128) cipher algorithm"
  436. select CRYPTO_ALGAPI
  437. help
  438. The CAST5 encryption algorithm (synonymous with CAST-128) is
  439. described in RFC2144.
  440. config CRYPTO_CAST6
  441. tristate "CAST6 (CAST-256) cipher algorithm"
  442. select CRYPTO_ALGAPI
  443. help
  444. The CAST6 encryption algorithm (synonymous with CAST-256) is
  445. described in RFC2612.
  446. config CRYPTO_DES
  447. tristate "DES and Triple DES EDE cipher algorithms"
  448. select CRYPTO_ALGAPI
  449. help
  450. DES cipher algorithm (FIPS 46-2), and Triple DES EDE (FIPS 46-3).
  451. config CRYPTO_FCRYPT
  452. tristate "FCrypt cipher algorithm"
  453. select CRYPTO_ALGAPI
  454. select CRYPTO_BLKCIPHER
  455. help
  456. FCrypt algorithm used by RxRPC.
  457. config CRYPTO_KHAZAD
  458. tristate "Khazad cipher algorithm"
  459. select CRYPTO_ALGAPI
  460. help
  461. Khazad cipher algorithm.
  462. Khazad was a finalist in the initial NESSIE competition. It is
  463. an algorithm optimized for 64-bit processors with good performance
  464. on 32-bit processors. Khazad uses an 128 bit key size.
  465. See also:
  466. <http://planeta.terra.com.br/informatica/paulobarreto/KhazadPage.html>
  467. config CRYPTO_SALSA20
  468. tristate "Salsa20 stream cipher algorithm (EXPERIMENTAL)"
  469. depends on EXPERIMENTAL
  470. select CRYPTO_BLKCIPHER
  471. help
  472. Salsa20 stream cipher algorithm.
  473. Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
  474. Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
  475. The Salsa20 stream cipher algorithm is designed by Daniel J.
  476. Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
  477. config CRYPTO_SALSA20_586
  478. tristate "Salsa20 stream cipher algorithm (i586) (EXPERIMENTAL)"
  479. depends on (X86 || UML_X86) && !64BIT
  480. depends on EXPERIMENTAL
  481. select CRYPTO_BLKCIPHER
  482. help
  483. Salsa20 stream cipher algorithm.
  484. Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
  485. Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
  486. The Salsa20 stream cipher algorithm is designed by Daniel J.
  487. Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
  488. config CRYPTO_SALSA20_X86_64
  489. tristate "Salsa20 stream cipher algorithm (x86_64) (EXPERIMENTAL)"
  490. depends on (X86 || UML_X86) && 64BIT
  491. depends on EXPERIMENTAL
  492. select CRYPTO_BLKCIPHER
  493. help
  494. Salsa20 stream cipher algorithm.
  495. Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
  496. Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
  497. The Salsa20 stream cipher algorithm is designed by Daniel J.
  498. Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
  499. config CRYPTO_SEED
  500. tristate "SEED cipher algorithm"
  501. select CRYPTO_ALGAPI
  502. help
  503. SEED cipher algorithm (RFC4269).
  504. SEED is a 128-bit symmetric key block cipher that has been
  505. developed by KISA (Korea Information Security Agency) as a
  506. national standard encryption algorithm of the Republic of Korea.
  507. It is a 16 round block cipher with the key size of 128 bit.
  508. See also:
  509. <http://www.kisa.or.kr/kisa/seed/jsp/seed_eng.jsp>
  510. config CRYPTO_SERPENT
  511. tristate "Serpent cipher algorithm"
  512. select CRYPTO_ALGAPI
  513. help
  514. Serpent cipher algorithm, by Anderson, Biham & Knudsen.
  515. Keys are allowed to be from 0 to 256 bits in length, in steps
  516. of 8 bits. Also includes the 'Tnepres' algorithm, a reversed
  517. variant of Serpent for compatibility with old kerneli.org code.
  518. See also:
  519. <http://www.cl.cam.ac.uk/~rja14/serpent.html>
  520. config CRYPTO_TEA
  521. tristate "TEA, XTEA and XETA cipher algorithms"
  522. select CRYPTO_ALGAPI
  523. help
  524. TEA cipher algorithm.
  525. Tiny Encryption Algorithm is a simple cipher that uses
  526. many rounds for security. It is very fast and uses
  527. little memory.
  528. Xtendend Tiny Encryption Algorithm is a modification to
  529. the TEA algorithm to address a potential key weakness
  530. in the TEA algorithm.
  531. Xtendend Encryption Tiny Algorithm is a mis-implementation
  532. of the XTEA algorithm for compatibility purposes.
  533. config CRYPTO_TWOFISH
  534. tristate "Twofish cipher algorithm"
  535. select CRYPTO_ALGAPI
  536. select CRYPTO_TWOFISH_COMMON
  537. help
  538. Twofish cipher algorithm.
  539. Twofish was submitted as an AES (Advanced Encryption Standard)
  540. candidate cipher by researchers at CounterPane Systems. It is a
  541. 16 round block cipher supporting key sizes of 128, 192, and 256
  542. bits.
  543. See also:
  544. <http://www.schneier.com/twofish.html>
  545. config CRYPTO_TWOFISH_COMMON
  546. tristate
  547. help
  548. Common parts of the Twofish cipher algorithm shared by the
  549. generic c and the assembler implementations.
  550. config CRYPTO_TWOFISH_586
  551. tristate "Twofish cipher algorithms (i586)"
  552. depends on (X86 || UML_X86) && !64BIT
  553. select CRYPTO_ALGAPI
  554. select CRYPTO_TWOFISH_COMMON
  555. help
  556. Twofish cipher algorithm.
  557. Twofish was submitted as an AES (Advanced Encryption Standard)
  558. candidate cipher by researchers at CounterPane Systems. It is a
  559. 16 round block cipher supporting key sizes of 128, 192, and 256
  560. bits.
  561. See also:
  562. <http://www.schneier.com/twofish.html>
  563. config CRYPTO_TWOFISH_X86_64
  564. tristate "Twofish cipher algorithm (x86_64)"
  565. depends on (X86 || UML_X86) && 64BIT
  566. select CRYPTO_ALGAPI
  567. select CRYPTO_TWOFISH_COMMON
  568. help
  569. Twofish cipher algorithm (x86_64).
  570. Twofish was submitted as an AES (Advanced Encryption Standard)
  571. candidate cipher by researchers at CounterPane Systems. It is a
  572. 16 round block cipher supporting key sizes of 128, 192, and 256
  573. bits.
  574. See also:
  575. <http://www.schneier.com/twofish.html>
  576. comment "Compression"
  577. config CRYPTO_DEFLATE
  578. tristate "Deflate compression algorithm"
  579. select CRYPTO_ALGAPI
  580. select ZLIB_INFLATE
  581. select ZLIB_DEFLATE
  582. help
  583. This is the Deflate algorithm (RFC1951), specified for use in
  584. IPSec with the IPCOMP protocol (RFC3173, RFC2394).
  585. You will most probably want this if using IPSec.
  586. config CRYPTO_LZO
  587. tristate "LZO compression algorithm"
  588. select CRYPTO_ALGAPI
  589. select LZO_COMPRESS
  590. select LZO_DECOMPRESS
  591. help
  592. This is the LZO algorithm.
  593. comment "Random Number Generation"
  594. config CRYPTO_ANSI_CPRNG
  595. tristate "Pseudo Random Number Generation for Cryptographic modules"
  596. select CRYPTO_AES
  597. select CRYPTO_RNG
  598. select CRYPTO_FIPS
  599. help
  600. This option enables the generic pseudo random number generator
  601. for cryptographic modules. Uses the Algorithm specified in
  602. ANSI X9.31 A.2.4
  603. source "drivers/crypto/Kconfig"
  604. endif # if CRYPTO