Kconfig 23 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834
  1. #
  2. # Generic algorithms support
  3. #
  4. config XOR_BLOCKS
  5. tristate
  6. #
  7. # async_tx api: hardware offloaded memory transfer/transform support
  8. #
  9. source "crypto/async_tx/Kconfig"
  10. #
  11. # Cryptographic API Configuration
  12. #
  13. menuconfig CRYPTO
  14. tristate "Cryptographic API"
  15. help
  16. This option provides the core Cryptographic API.
  17. if CRYPTO
  18. comment "Crypto core or helper"
  19. config CRYPTO_FIPS
  20. bool "FIPS 200 compliance"
  21. depends on CRYPTO_ANSI_CPRNG
  22. help
  23. This options enables the fips boot option which is
  24. required if you want to system to operate in a FIPS 200
  25. certification. You should say no unless you know what
  26. this is. Note that CRYPTO_ANSI_CPRNG is requred if this
  27. option is selected
  28. config CRYPTO_ALGAPI
  29. tristate
  30. select CRYPTO_ALGAPI2
  31. help
  32. This option provides the API for cryptographic algorithms.
  33. config CRYPTO_ALGAPI2
  34. tristate
  35. config CRYPTO_AEAD
  36. tristate
  37. select CRYPTO_AEAD2
  38. select CRYPTO_ALGAPI
  39. config CRYPTO_AEAD2
  40. tristate
  41. select CRYPTO_ALGAPI2
  42. config CRYPTO_BLKCIPHER
  43. tristate
  44. select CRYPTO_BLKCIPHER2
  45. select CRYPTO_ALGAPI
  46. config CRYPTO_BLKCIPHER2
  47. tristate
  48. select CRYPTO_ALGAPI2
  49. select CRYPTO_RNG2
  50. select CRYPTO_WORKQUEUE
  51. config CRYPTO_HASH
  52. tristate
  53. select CRYPTO_HASH2
  54. select CRYPTO_ALGAPI
  55. config CRYPTO_HASH2
  56. tristate
  57. select CRYPTO_ALGAPI2
  58. config CRYPTO_RNG
  59. tristate
  60. select CRYPTO_RNG2
  61. select CRYPTO_ALGAPI
  62. config CRYPTO_RNG2
  63. tristate
  64. select CRYPTO_ALGAPI2
  65. config CRYPTO_PCOMP
  66. tristate
  67. select CRYPTO_ALGAPI2
  68. config CRYPTO_MANAGER
  69. tristate "Cryptographic algorithm manager"
  70. select CRYPTO_MANAGER2
  71. help
  72. Create default cryptographic template instantiations such as
  73. cbc(aes).
  74. config CRYPTO_MANAGER2
  75. def_tristate CRYPTO_MANAGER || (CRYPTO_MANAGER!=n && CRYPTO_ALGAPI=y)
  76. select CRYPTO_AEAD2
  77. select CRYPTO_HASH2
  78. select CRYPTO_BLKCIPHER2
  79. select CRYPTO_PCOMP
  80. config CRYPTO_GF128MUL
  81. tristate "GF(2^128) multiplication functions (EXPERIMENTAL)"
  82. depends on EXPERIMENTAL
  83. help
  84. Efficient table driven implementation of multiplications in the
  85. field GF(2^128). This is needed by some cypher modes. This
  86. option will be selected automatically if you select such a
  87. cipher mode. Only select this option by hand if you expect to load
  88. an external module that requires these functions.
  89. config CRYPTO_NULL
  90. tristate "Null algorithms"
  91. select CRYPTO_ALGAPI
  92. select CRYPTO_BLKCIPHER
  93. select CRYPTO_HASH
  94. help
  95. These are 'Null' algorithms, used by IPsec, which do nothing.
  96. config CRYPTO_PCRYPT
  97. tristate "Parallel crypto engine (EXPERIMENTAL)"
  98. depends on SMP && EXPERIMENTAL
  99. select PADATA
  100. select CRYPTO_MANAGER
  101. select CRYPTO_AEAD
  102. help
  103. This converts an arbitrary crypto algorithm into a parallel
  104. algorithm that executes in kernel threads.
  105. config CRYPTO_WORKQUEUE
  106. tristate
  107. config CRYPTO_CRYPTD
  108. tristate "Software async crypto daemon"
  109. select CRYPTO_BLKCIPHER
  110. select CRYPTO_HASH
  111. select CRYPTO_MANAGER
  112. select CRYPTO_WORKQUEUE
  113. help
  114. This is a generic software asynchronous crypto daemon that
  115. converts an arbitrary synchronous software crypto algorithm
  116. into an asynchronous algorithm that executes in a kernel thread.
  117. config CRYPTO_AUTHENC
  118. tristate "Authenc support"
  119. select CRYPTO_AEAD
  120. select CRYPTO_BLKCIPHER
  121. select CRYPTO_MANAGER
  122. select CRYPTO_HASH
  123. help
  124. Authenc: Combined mode wrapper for IPsec.
  125. This is required for IPSec.
  126. config CRYPTO_TEST
  127. tristate "Testing module"
  128. depends on m
  129. select CRYPTO_MANAGER
  130. help
  131. Quick & dirty crypto test module.
  132. comment "Authenticated Encryption with Associated Data"
  133. config CRYPTO_CCM
  134. tristate "CCM support"
  135. select CRYPTO_CTR
  136. select CRYPTO_AEAD
  137. help
  138. Support for Counter with CBC MAC. Required for IPsec.
  139. config CRYPTO_GCM
  140. tristate "GCM/GMAC support"
  141. select CRYPTO_CTR
  142. select CRYPTO_AEAD
  143. select CRYPTO_GHASH
  144. help
  145. Support for Galois/Counter Mode (GCM) and Galois Message
  146. Authentication Code (GMAC). Required for IPSec.
  147. config CRYPTO_SEQIV
  148. tristate "Sequence Number IV Generator"
  149. select CRYPTO_AEAD
  150. select CRYPTO_BLKCIPHER
  151. select CRYPTO_RNG
  152. help
  153. This IV generator generates an IV based on a sequence number by
  154. xoring it with a salt. This algorithm is mainly useful for CTR
  155. comment "Block modes"
  156. config CRYPTO_CBC
  157. tristate "CBC support"
  158. select CRYPTO_BLKCIPHER
  159. select CRYPTO_MANAGER
  160. help
  161. CBC: Cipher Block Chaining mode
  162. This block cipher algorithm is required for IPSec.
  163. config CRYPTO_CTR
  164. tristate "CTR support"
  165. select CRYPTO_BLKCIPHER
  166. select CRYPTO_SEQIV
  167. select CRYPTO_MANAGER
  168. help
  169. CTR: Counter mode
  170. This block cipher algorithm is required for IPSec.
  171. config CRYPTO_CTS
  172. tristate "CTS support"
  173. select CRYPTO_BLKCIPHER
  174. help
  175. CTS: Cipher Text Stealing
  176. This is the Cipher Text Stealing mode as described by
  177. Section 8 of rfc2040 and referenced by rfc3962.
  178. (rfc3962 includes errata information in its Appendix A)
  179. This mode is required for Kerberos gss mechanism support
  180. for AES encryption.
  181. config CRYPTO_ECB
  182. tristate "ECB support"
  183. select CRYPTO_BLKCIPHER
  184. select CRYPTO_MANAGER
  185. help
  186. ECB: Electronic CodeBook mode
  187. This is the simplest block cipher algorithm. It simply encrypts
  188. the input block by block.
  189. config CRYPTO_LRW
  190. tristate "LRW support (EXPERIMENTAL)"
  191. depends on EXPERIMENTAL
  192. select CRYPTO_BLKCIPHER
  193. select CRYPTO_MANAGER
  194. select CRYPTO_GF128MUL
  195. help
  196. LRW: Liskov Rivest Wagner, a tweakable, non malleable, non movable
  197. narrow block cipher mode for dm-crypt. Use it with cipher
  198. specification string aes-lrw-benbi, the key must be 256, 320 or 384.
  199. The first 128, 192 or 256 bits in the key are used for AES and the
  200. rest is used to tie each cipher block to its logical position.
  201. config CRYPTO_PCBC
  202. tristate "PCBC support"
  203. select CRYPTO_BLKCIPHER
  204. select CRYPTO_MANAGER
  205. help
  206. PCBC: Propagating Cipher Block Chaining mode
  207. This block cipher algorithm is required for RxRPC.
  208. config CRYPTO_XTS
  209. tristate "XTS support (EXPERIMENTAL)"
  210. depends on EXPERIMENTAL
  211. select CRYPTO_BLKCIPHER
  212. select CRYPTO_MANAGER
  213. select CRYPTO_GF128MUL
  214. help
  215. XTS: IEEE1619/D16 narrow block cipher use with aes-xts-plain,
  216. key size 256, 384 or 512 bits. This implementation currently
  217. can't handle a sectorsize which is not a multiple of 16 bytes.
  218. config CRYPTO_FPU
  219. tristate
  220. select CRYPTO_BLKCIPHER
  221. select CRYPTO_MANAGER
  222. comment "Hash modes"
  223. config CRYPTO_HMAC
  224. tristate "HMAC support"
  225. select CRYPTO_HASH
  226. select CRYPTO_MANAGER
  227. help
  228. HMAC: Keyed-Hashing for Message Authentication (RFC2104).
  229. This is required for IPSec.
  230. config CRYPTO_XCBC
  231. tristate "XCBC support"
  232. depends on EXPERIMENTAL
  233. select CRYPTO_HASH
  234. select CRYPTO_MANAGER
  235. help
  236. XCBC: Keyed-Hashing with encryption algorithm
  237. http://www.ietf.org/rfc/rfc3566.txt
  238. http://csrc.nist.gov/encryption/modes/proposedmodes/
  239. xcbc-mac/xcbc-mac-spec.pdf
  240. config CRYPTO_VMAC
  241. tristate "VMAC support"
  242. depends on EXPERIMENTAL
  243. select CRYPTO_HASH
  244. select CRYPTO_MANAGER
  245. help
  246. VMAC is a message authentication algorithm designed for
  247. very high speed on 64-bit architectures.
  248. See also:
  249. <http://fastcrypto.org/vmac>
  250. comment "Digest"
  251. config CRYPTO_CRC32C
  252. tristate "CRC32c CRC algorithm"
  253. select CRYPTO_HASH
  254. help
  255. Castagnoli, et al Cyclic Redundancy-Check Algorithm. Used
  256. by iSCSI for header and data digests and by others.
  257. See Castagnoli93. Module will be crc32c.
  258. config CRYPTO_CRC32C_INTEL
  259. tristate "CRC32c INTEL hardware acceleration"
  260. depends on X86
  261. select CRYPTO_HASH
  262. help
  263. In Intel processor with SSE4.2 supported, the processor will
  264. support CRC32C implementation using hardware accelerated CRC32
  265. instruction. This option will create 'crc32c-intel' module,
  266. which will enable any routine to use the CRC32 instruction to
  267. gain performance compared with software implementation.
  268. Module will be crc32c-intel.
  269. config CRYPTO_GHASH
  270. tristate "GHASH digest algorithm"
  271. select CRYPTO_SHASH
  272. select CRYPTO_GF128MUL
  273. help
  274. GHASH is message digest algorithm for GCM (Galois/Counter Mode).
  275. config CRYPTO_MD4
  276. tristate "MD4 digest algorithm"
  277. select CRYPTO_HASH
  278. help
  279. MD4 message digest algorithm (RFC1320).
  280. config CRYPTO_MD5
  281. tristate "MD5 digest algorithm"
  282. select CRYPTO_HASH
  283. help
  284. MD5 message digest algorithm (RFC1321).
  285. config CRYPTO_MICHAEL_MIC
  286. tristate "Michael MIC keyed digest algorithm"
  287. select CRYPTO_HASH
  288. help
  289. Michael MIC is used for message integrity protection in TKIP
  290. (IEEE 802.11i). This algorithm is required for TKIP, but it
  291. should not be used for other purposes because of the weakness
  292. of the algorithm.
  293. config CRYPTO_RMD128
  294. tristate "RIPEMD-128 digest algorithm"
  295. select CRYPTO_HASH
  296. help
  297. RIPEMD-128 (ISO/IEC 10118-3:2004).
  298. RIPEMD-128 is a 128-bit cryptographic hash function. It should only
  299. to be used as a secure replacement for RIPEMD. For other use cases
  300. RIPEMD-160 should be used.
  301. Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
  302. See <http://home.esat.kuleuven.be/~bosselae/ripemd160.html>
  303. config CRYPTO_RMD160
  304. tristate "RIPEMD-160 digest algorithm"
  305. select CRYPTO_HASH
  306. help
  307. RIPEMD-160 (ISO/IEC 10118-3:2004).
  308. RIPEMD-160 is a 160-bit cryptographic hash function. It is intended
  309. to be used as a secure replacement for the 128-bit hash functions
  310. MD4, MD5 and it's predecessor RIPEMD
  311. (not to be confused with RIPEMD-128).
  312. It's speed is comparable to SHA1 and there are no known attacks
  313. against RIPEMD-160.
  314. Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
  315. See <http://home.esat.kuleuven.be/~bosselae/ripemd160.html>
  316. config CRYPTO_RMD256
  317. tristate "RIPEMD-256 digest algorithm"
  318. select CRYPTO_HASH
  319. help
  320. RIPEMD-256 is an optional extension of RIPEMD-128 with a
  321. 256 bit hash. It is intended for applications that require
  322. longer hash-results, without needing a larger security level
  323. (than RIPEMD-128).
  324. Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
  325. See <http://home.esat.kuleuven.be/~bosselae/ripemd160.html>
  326. config CRYPTO_RMD320
  327. tristate "RIPEMD-320 digest algorithm"
  328. select CRYPTO_HASH
  329. help
  330. RIPEMD-320 is an optional extension of RIPEMD-160 with a
  331. 320 bit hash. It is intended for applications that require
  332. longer hash-results, without needing a larger security level
  333. (than RIPEMD-160).
  334. Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
  335. See <http://home.esat.kuleuven.be/~bosselae/ripemd160.html>
  336. config CRYPTO_SHA1
  337. tristate "SHA1 digest algorithm"
  338. select CRYPTO_HASH
  339. help
  340. SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2).
  341. config CRYPTO_SHA256
  342. tristate "SHA224 and SHA256 digest algorithm"
  343. select CRYPTO_HASH
  344. help
  345. SHA256 secure hash standard (DFIPS 180-2).
  346. This version of SHA implements a 256 bit hash with 128 bits of
  347. security against collision attacks.
  348. This code also includes SHA-224, a 224 bit hash with 112 bits
  349. of security against collision attacks.
  350. config CRYPTO_SHA512
  351. tristate "SHA384 and SHA512 digest algorithms"
  352. select CRYPTO_HASH
  353. help
  354. SHA512 secure hash standard (DFIPS 180-2).
  355. This version of SHA implements a 512 bit hash with 256 bits of
  356. security against collision attacks.
  357. This code also includes SHA-384, a 384 bit hash with 192 bits
  358. of security against collision attacks.
  359. config CRYPTO_TGR192
  360. tristate "Tiger digest algorithms"
  361. select CRYPTO_HASH
  362. help
  363. Tiger hash algorithm 192, 160 and 128-bit hashes
  364. Tiger is a hash function optimized for 64-bit processors while
  365. still having decent performance on 32-bit processors.
  366. Tiger was developed by Ross Anderson and Eli Biham.
  367. See also:
  368. <http://www.cs.technion.ac.il/~biham/Reports/Tiger/>.
  369. config CRYPTO_WP512
  370. tristate "Whirlpool digest algorithms"
  371. select CRYPTO_HASH
  372. help
  373. Whirlpool hash algorithm 512, 384 and 256-bit hashes
  374. Whirlpool-512 is part of the NESSIE cryptographic primitives.
  375. Whirlpool will be part of the ISO/IEC 10118-3:2003(E) standard
  376. See also:
  377. <http://planeta.terra.com.br/informatica/paulobarreto/WhirlpoolPage.html>
  378. config CRYPTO_GHASH_CLMUL_NI_INTEL
  379. tristate "GHASH digest algorithm (CLMUL-NI accelerated)"
  380. depends on (X86 || UML_X86) && 64BIT
  381. select CRYPTO_SHASH
  382. select CRYPTO_CRYPTD
  383. help
  384. GHASH is message digest algorithm for GCM (Galois/Counter Mode).
  385. The implementation is accelerated by CLMUL-NI of Intel.
  386. comment "Ciphers"
  387. config CRYPTO_AES
  388. tristate "AES cipher algorithms"
  389. select CRYPTO_ALGAPI
  390. help
  391. AES cipher algorithms (FIPS-197). AES uses the Rijndael
  392. algorithm.
  393. Rijndael appears to be consistently a very good performer in
  394. both hardware and software across a wide range of computing
  395. environments regardless of its use in feedback or non-feedback
  396. modes. Its key setup time is excellent, and its key agility is
  397. good. Rijndael's very low memory requirements make it very well
  398. suited for restricted-space environments, in which it also
  399. demonstrates excellent performance. Rijndael's operations are
  400. among the easiest to defend against power and timing attacks.
  401. The AES specifies three key sizes: 128, 192 and 256 bits
  402. See <http://csrc.nist.gov/CryptoToolkit/aes/> for more information.
  403. config CRYPTO_AES_586
  404. tristate "AES cipher algorithms (i586)"
  405. depends on (X86 || UML_X86) && !64BIT
  406. select CRYPTO_ALGAPI
  407. select CRYPTO_AES
  408. help
  409. AES cipher algorithms (FIPS-197). AES uses the Rijndael
  410. algorithm.
  411. Rijndael appears to be consistently a very good performer in
  412. both hardware and software across a wide range of computing
  413. environments regardless of its use in feedback or non-feedback
  414. modes. Its key setup time is excellent, and its key agility is
  415. good. Rijndael's very low memory requirements make it very well
  416. suited for restricted-space environments, in which it also
  417. demonstrates excellent performance. Rijndael's operations are
  418. among the easiest to defend against power and timing attacks.
  419. The AES specifies three key sizes: 128, 192 and 256 bits
  420. See <http://csrc.nist.gov/encryption/aes/> for more information.
  421. config CRYPTO_AES_X86_64
  422. tristate "AES cipher algorithms (x86_64)"
  423. depends on (X86 || UML_X86) && 64BIT
  424. select CRYPTO_ALGAPI
  425. select CRYPTO_AES
  426. help
  427. AES cipher algorithms (FIPS-197). AES uses the Rijndael
  428. algorithm.
  429. Rijndael appears to be consistently a very good performer in
  430. both hardware and software across a wide range of computing
  431. environments regardless of its use in feedback or non-feedback
  432. modes. Its key setup time is excellent, and its key agility is
  433. good. Rijndael's very low memory requirements make it very well
  434. suited for restricted-space environments, in which it also
  435. demonstrates excellent performance. Rijndael's operations are
  436. among the easiest to defend against power and timing attacks.
  437. The AES specifies three key sizes: 128, 192 and 256 bits
  438. See <http://csrc.nist.gov/encryption/aes/> for more information.
  439. config CRYPTO_AES_NI_INTEL
  440. tristate "AES cipher algorithms (AES-NI)"
  441. depends on (X86 || UML_X86) && 64BIT
  442. select CRYPTO_AES_X86_64
  443. select CRYPTO_CRYPTD
  444. select CRYPTO_ALGAPI
  445. select CRYPTO_FPU
  446. help
  447. Use Intel AES-NI instructions for AES algorithm.
  448. AES cipher algorithms (FIPS-197). AES uses the Rijndael
  449. algorithm.
  450. Rijndael appears to be consistently a very good performer in
  451. both hardware and software across a wide range of computing
  452. environments regardless of its use in feedback or non-feedback
  453. modes. Its key setup time is excellent, and its key agility is
  454. good. Rijndael's very low memory requirements make it very well
  455. suited for restricted-space environments, in which it also
  456. demonstrates excellent performance. Rijndael's operations are
  457. among the easiest to defend against power and timing attacks.
  458. The AES specifies three key sizes: 128, 192 and 256 bits
  459. See <http://csrc.nist.gov/encryption/aes/> for more information.
  460. In addition to AES cipher algorithm support, the
  461. acceleration for some popular block cipher mode is supported
  462. too, including ECB, CBC, CTR, LRW, PCBC, XTS.
  463. config CRYPTO_ANUBIS
  464. tristate "Anubis cipher algorithm"
  465. select CRYPTO_ALGAPI
  466. help
  467. Anubis cipher algorithm.
  468. Anubis is a variable key length cipher which can use keys from
  469. 128 bits to 320 bits in length. It was evaluated as a entrant
  470. in the NESSIE competition.
  471. See also:
  472. <https://www.cosic.esat.kuleuven.ac.be/nessie/reports/>
  473. <http://planeta.terra.com.br/informatica/paulobarreto/AnubisPage.html>
  474. config CRYPTO_ARC4
  475. tristate "ARC4 cipher algorithm"
  476. select CRYPTO_ALGAPI
  477. help
  478. ARC4 cipher algorithm.
  479. ARC4 is a stream cipher using keys ranging from 8 bits to 2048
  480. bits in length. This algorithm is required for driver-based
  481. WEP, but it should not be for other purposes because of the
  482. weakness of the algorithm.
  483. config CRYPTO_BLOWFISH
  484. tristate "Blowfish cipher algorithm"
  485. select CRYPTO_ALGAPI
  486. help
  487. Blowfish cipher algorithm, by Bruce Schneier.
  488. This is a variable key length cipher which can use keys from 32
  489. bits to 448 bits in length. It's fast, simple and specifically
  490. designed for use on "large microprocessors".
  491. See also:
  492. <http://www.schneier.com/blowfish.html>
  493. config CRYPTO_CAMELLIA
  494. tristate "Camellia cipher algorithms"
  495. depends on CRYPTO
  496. select CRYPTO_ALGAPI
  497. help
  498. Camellia cipher algorithms module.
  499. Camellia is a symmetric key block cipher developed jointly
  500. at NTT and Mitsubishi Electric Corporation.
  501. The Camellia specifies three key sizes: 128, 192 and 256 bits.
  502. See also:
  503. <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
  504. config CRYPTO_CAST5
  505. tristate "CAST5 (CAST-128) cipher algorithm"
  506. select CRYPTO_ALGAPI
  507. help
  508. The CAST5 encryption algorithm (synonymous with CAST-128) is
  509. described in RFC2144.
  510. config CRYPTO_CAST6
  511. tristate "CAST6 (CAST-256) cipher algorithm"
  512. select CRYPTO_ALGAPI
  513. help
  514. The CAST6 encryption algorithm (synonymous with CAST-256) is
  515. described in RFC2612.
  516. config CRYPTO_DES
  517. tristate "DES and Triple DES EDE cipher algorithms"
  518. select CRYPTO_ALGAPI
  519. help
  520. DES cipher algorithm (FIPS 46-2), and Triple DES EDE (FIPS 46-3).
  521. config CRYPTO_FCRYPT
  522. tristate "FCrypt cipher algorithm"
  523. select CRYPTO_ALGAPI
  524. select CRYPTO_BLKCIPHER
  525. help
  526. FCrypt algorithm used by RxRPC.
  527. config CRYPTO_KHAZAD
  528. tristate "Khazad cipher algorithm"
  529. select CRYPTO_ALGAPI
  530. help
  531. Khazad cipher algorithm.
  532. Khazad was a finalist in the initial NESSIE competition. It is
  533. an algorithm optimized for 64-bit processors with good performance
  534. on 32-bit processors. Khazad uses an 128 bit key size.
  535. See also:
  536. <http://planeta.terra.com.br/informatica/paulobarreto/KhazadPage.html>
  537. config CRYPTO_SALSA20
  538. tristate "Salsa20 stream cipher algorithm (EXPERIMENTAL)"
  539. depends on EXPERIMENTAL
  540. select CRYPTO_BLKCIPHER
  541. help
  542. Salsa20 stream cipher algorithm.
  543. Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
  544. Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
  545. The Salsa20 stream cipher algorithm is designed by Daniel J.
  546. Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
  547. config CRYPTO_SALSA20_586
  548. tristate "Salsa20 stream cipher algorithm (i586) (EXPERIMENTAL)"
  549. depends on (X86 || UML_X86) && !64BIT
  550. depends on EXPERIMENTAL
  551. select CRYPTO_BLKCIPHER
  552. help
  553. Salsa20 stream cipher algorithm.
  554. Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
  555. Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
  556. The Salsa20 stream cipher algorithm is designed by Daniel J.
  557. Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
  558. config CRYPTO_SALSA20_X86_64
  559. tristate "Salsa20 stream cipher algorithm (x86_64) (EXPERIMENTAL)"
  560. depends on (X86 || UML_X86) && 64BIT
  561. depends on EXPERIMENTAL
  562. select CRYPTO_BLKCIPHER
  563. help
  564. Salsa20 stream cipher algorithm.
  565. Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
  566. Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
  567. The Salsa20 stream cipher algorithm is designed by Daniel J.
  568. Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
  569. config CRYPTO_SEED
  570. tristate "SEED cipher algorithm"
  571. select CRYPTO_ALGAPI
  572. help
  573. SEED cipher algorithm (RFC4269).
  574. SEED is a 128-bit symmetric key block cipher that has been
  575. developed by KISA (Korea Information Security Agency) as a
  576. national standard encryption algorithm of the Republic of Korea.
  577. It is a 16 round block cipher with the key size of 128 bit.
  578. See also:
  579. <http://www.kisa.or.kr/kisa/seed/jsp/seed_eng.jsp>
  580. config CRYPTO_SERPENT
  581. tristate "Serpent cipher algorithm"
  582. select CRYPTO_ALGAPI
  583. help
  584. Serpent cipher algorithm, by Anderson, Biham & Knudsen.
  585. Keys are allowed to be from 0 to 256 bits in length, in steps
  586. of 8 bits. Also includes the 'Tnepres' algorithm, a reversed
  587. variant of Serpent for compatibility with old kerneli.org code.
  588. See also:
  589. <http://www.cl.cam.ac.uk/~rja14/serpent.html>
  590. config CRYPTO_TEA
  591. tristate "TEA, XTEA and XETA cipher algorithms"
  592. select CRYPTO_ALGAPI
  593. help
  594. TEA cipher algorithm.
  595. Tiny Encryption Algorithm is a simple cipher that uses
  596. many rounds for security. It is very fast and uses
  597. little memory.
  598. Xtendend Tiny Encryption Algorithm is a modification to
  599. the TEA algorithm to address a potential key weakness
  600. in the TEA algorithm.
  601. Xtendend Encryption Tiny Algorithm is a mis-implementation
  602. of the XTEA algorithm for compatibility purposes.
  603. config CRYPTO_TWOFISH
  604. tristate "Twofish cipher algorithm"
  605. select CRYPTO_ALGAPI
  606. select CRYPTO_TWOFISH_COMMON
  607. help
  608. Twofish cipher algorithm.
  609. Twofish was submitted as an AES (Advanced Encryption Standard)
  610. candidate cipher by researchers at CounterPane Systems. It is a
  611. 16 round block cipher supporting key sizes of 128, 192, and 256
  612. bits.
  613. See also:
  614. <http://www.schneier.com/twofish.html>
  615. config CRYPTO_TWOFISH_COMMON
  616. tristate
  617. help
  618. Common parts of the Twofish cipher algorithm shared by the
  619. generic c and the assembler implementations.
  620. config CRYPTO_TWOFISH_586
  621. tristate "Twofish cipher algorithms (i586)"
  622. depends on (X86 || UML_X86) && !64BIT
  623. select CRYPTO_ALGAPI
  624. select CRYPTO_TWOFISH_COMMON
  625. help
  626. Twofish cipher algorithm.
  627. Twofish was submitted as an AES (Advanced Encryption Standard)
  628. candidate cipher by researchers at CounterPane Systems. It is a
  629. 16 round block cipher supporting key sizes of 128, 192, and 256
  630. bits.
  631. See also:
  632. <http://www.schneier.com/twofish.html>
  633. config CRYPTO_TWOFISH_X86_64
  634. tristate "Twofish cipher algorithm (x86_64)"
  635. depends on (X86 || UML_X86) && 64BIT
  636. select CRYPTO_ALGAPI
  637. select CRYPTO_TWOFISH_COMMON
  638. help
  639. Twofish cipher algorithm (x86_64).
  640. Twofish was submitted as an AES (Advanced Encryption Standard)
  641. candidate cipher by researchers at CounterPane Systems. It is a
  642. 16 round block cipher supporting key sizes of 128, 192, and 256
  643. bits.
  644. See also:
  645. <http://www.schneier.com/twofish.html>
  646. comment "Compression"
  647. config CRYPTO_DEFLATE
  648. tristate "Deflate compression algorithm"
  649. select CRYPTO_ALGAPI
  650. select ZLIB_INFLATE
  651. select ZLIB_DEFLATE
  652. help
  653. This is the Deflate algorithm (RFC1951), specified for use in
  654. IPSec with the IPCOMP protocol (RFC3173, RFC2394).
  655. You will most probably want this if using IPSec.
  656. config CRYPTO_ZLIB
  657. tristate "Zlib compression algorithm"
  658. select CRYPTO_PCOMP
  659. select ZLIB_INFLATE
  660. select ZLIB_DEFLATE
  661. select NLATTR
  662. help
  663. This is the zlib algorithm.
  664. config CRYPTO_LZO
  665. tristate "LZO compression algorithm"
  666. select CRYPTO_ALGAPI
  667. select LZO_COMPRESS
  668. select LZO_DECOMPRESS
  669. help
  670. This is the LZO algorithm.
  671. comment "Random Number Generation"
  672. config CRYPTO_ANSI_CPRNG
  673. tristate "Pseudo Random Number Generation for Cryptographic modules"
  674. default m
  675. select CRYPTO_AES
  676. select CRYPTO_RNG
  677. help
  678. This option enables the generic pseudo random number generator
  679. for cryptographic modules. Uses the Algorithm specified in
  680. ANSI X9.31 A.2.4. Note that this option must be enabled if
  681. CRYPTO_FIPS is selected
  682. source "drivers/crypto/Kconfig"
  683. endif # if CRYPTO