Kconfig 21 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739
  1. #
  2. # Generic algorithms support
  3. #
  4. config XOR_BLOCKS
  5. tristate
  6. #
  7. # async_tx api: hardware offloaded memory transfer/transform support
  8. #
  9. source "crypto/async_tx/Kconfig"
  10. #
  11. # Cryptographic API Configuration
  12. #
  13. menuconfig CRYPTO
  14. tristate "Cryptographic API"
  15. help
  16. This option provides the core Cryptographic API.
  17. if CRYPTO
  18. comment "Crypto core or helper"
  19. config CRYPTO_FIPS
  20. bool "FIPS 200 compliance"
  21. help
  22. This options enables the fips boot option which is
  23. required if you want to system to operate in a FIPS 200
  24. certification. You should say no unless you know what
  25. this is.
  26. config CRYPTO_ALGAPI
  27. tristate
  28. select CRYPTO_ALGAPI2
  29. help
  30. This option provides the API for cryptographic algorithms.
  31. config CRYPTO_ALGAPI2
  32. tristate
  33. config CRYPTO_AEAD
  34. tristate
  35. select CRYPTO_AEAD2
  36. select CRYPTO_ALGAPI
  37. config CRYPTO_AEAD2
  38. tristate
  39. select CRYPTO_ALGAPI2
  40. config CRYPTO_BLKCIPHER
  41. tristate
  42. select CRYPTO_BLKCIPHER2
  43. select CRYPTO_ALGAPI
  44. config CRYPTO_BLKCIPHER2
  45. tristate
  46. select CRYPTO_ALGAPI2
  47. select CRYPTO_RNG2
  48. config CRYPTO_HASH
  49. tristate
  50. select CRYPTO_HASH2
  51. select CRYPTO_ALGAPI
  52. config CRYPTO_HASH2
  53. tristate
  54. select CRYPTO_ALGAPI2
  55. config CRYPTO_RNG
  56. tristate
  57. select CRYPTO_RNG2
  58. select CRYPTO_ALGAPI
  59. config CRYPTO_RNG2
  60. tristate
  61. select CRYPTO_ALGAPI2
  62. config CRYPTO_MANAGER
  63. tristate "Cryptographic algorithm manager"
  64. select CRYPTO_MANAGER2
  65. help
  66. Create default cryptographic template instantiations such as
  67. cbc(aes).
  68. config CRYPTO_MANAGER2
  69. def_tristate CRYPTO_MANAGER || (CRYPTO_MANAGER!=n && CRYPTO_ALGAPI=y)
  70. select CRYPTO_AEAD2
  71. select CRYPTO_HASH2
  72. select CRYPTO_BLKCIPHER2
  73. config CRYPTO_GF128MUL
  74. tristate "GF(2^128) multiplication functions (EXPERIMENTAL)"
  75. depends on EXPERIMENTAL
  76. help
  77. Efficient table driven implementation of multiplications in the
  78. field GF(2^128). This is needed by some cypher modes. This
  79. option will be selected automatically if you select such a
  80. cipher mode. Only select this option by hand if you expect to load
  81. an external module that requires these functions.
  82. config CRYPTO_NULL
  83. tristate "Null algorithms"
  84. select CRYPTO_ALGAPI
  85. select CRYPTO_BLKCIPHER
  86. select CRYPTO_HASH
  87. help
  88. These are 'Null' algorithms, used by IPsec, which do nothing.
  89. config CRYPTO_CRYPTD
  90. tristate "Software async crypto daemon"
  91. select CRYPTO_BLKCIPHER
  92. select CRYPTO_HASH
  93. select CRYPTO_MANAGER
  94. help
  95. This is a generic software asynchronous crypto daemon that
  96. converts an arbitrary synchronous software crypto algorithm
  97. into an asynchronous algorithm that executes in a kernel thread.
  98. config CRYPTO_AUTHENC
  99. tristate "Authenc support"
  100. select CRYPTO_AEAD
  101. select CRYPTO_BLKCIPHER
  102. select CRYPTO_MANAGER
  103. select CRYPTO_HASH
  104. help
  105. Authenc: Combined mode wrapper for IPsec.
  106. This is required for IPSec.
  107. config CRYPTO_TEST
  108. tristate "Testing module"
  109. depends on m
  110. select CRYPTO_MANAGER
  111. help
  112. Quick & dirty crypto test module.
  113. comment "Authenticated Encryption with Associated Data"
  114. config CRYPTO_CCM
  115. tristate "CCM support"
  116. select CRYPTO_CTR
  117. select CRYPTO_AEAD
  118. help
  119. Support for Counter with CBC MAC. Required for IPsec.
  120. config CRYPTO_GCM
  121. tristate "GCM/GMAC support"
  122. select CRYPTO_CTR
  123. select CRYPTO_AEAD
  124. select CRYPTO_GF128MUL
  125. help
  126. Support for Galois/Counter Mode (GCM) and Galois Message
  127. Authentication Code (GMAC). Required for IPSec.
  128. config CRYPTO_SEQIV
  129. tristate "Sequence Number IV Generator"
  130. select CRYPTO_AEAD
  131. select CRYPTO_BLKCIPHER
  132. select CRYPTO_RNG
  133. help
  134. This IV generator generates an IV based on a sequence number by
  135. xoring it with a salt. This algorithm is mainly useful for CTR
  136. comment "Block modes"
  137. config CRYPTO_CBC
  138. tristate "CBC support"
  139. select CRYPTO_BLKCIPHER
  140. select CRYPTO_MANAGER
  141. help
  142. CBC: Cipher Block Chaining mode
  143. This block cipher algorithm is required for IPSec.
  144. config CRYPTO_CTR
  145. tristate "CTR support"
  146. select CRYPTO_BLKCIPHER
  147. select CRYPTO_SEQIV
  148. select CRYPTO_MANAGER
  149. help
  150. CTR: Counter mode
  151. This block cipher algorithm is required for IPSec.
  152. config CRYPTO_CTS
  153. tristate "CTS support"
  154. select CRYPTO_BLKCIPHER
  155. help
  156. CTS: Cipher Text Stealing
  157. This is the Cipher Text Stealing mode as described by
  158. Section 8 of rfc2040 and referenced by rfc3962.
  159. (rfc3962 includes errata information in its Appendix A)
  160. This mode is required for Kerberos gss mechanism support
  161. for AES encryption.
  162. config CRYPTO_ECB
  163. tristate "ECB support"
  164. select CRYPTO_BLKCIPHER
  165. select CRYPTO_MANAGER
  166. help
  167. ECB: Electronic CodeBook mode
  168. This is the simplest block cipher algorithm. It simply encrypts
  169. the input block by block.
  170. config CRYPTO_LRW
  171. tristate "LRW support (EXPERIMENTAL)"
  172. depends on EXPERIMENTAL
  173. select CRYPTO_BLKCIPHER
  174. select CRYPTO_MANAGER
  175. select CRYPTO_GF128MUL
  176. help
  177. LRW: Liskov Rivest Wagner, a tweakable, non malleable, non movable
  178. narrow block cipher mode for dm-crypt. Use it with cipher
  179. specification string aes-lrw-benbi, the key must be 256, 320 or 384.
  180. The first 128, 192 or 256 bits in the key are used for AES and the
  181. rest is used to tie each cipher block to its logical position.
  182. config CRYPTO_PCBC
  183. tristate "PCBC support"
  184. select CRYPTO_BLKCIPHER
  185. select CRYPTO_MANAGER
  186. help
  187. PCBC: Propagating Cipher Block Chaining mode
  188. This block cipher algorithm is required for RxRPC.
  189. config CRYPTO_XTS
  190. tristate "XTS support (EXPERIMENTAL)"
  191. depends on EXPERIMENTAL
  192. select CRYPTO_BLKCIPHER
  193. select CRYPTO_MANAGER
  194. select CRYPTO_GF128MUL
  195. help
  196. XTS: IEEE1619/D16 narrow block cipher use with aes-xts-plain,
  197. key size 256, 384 or 512 bits. This implementation currently
  198. can't handle a sectorsize which is not a multiple of 16 bytes.
  199. comment "Hash modes"
  200. config CRYPTO_HMAC
  201. tristate "HMAC support"
  202. select CRYPTO_HASH
  203. select CRYPTO_MANAGER
  204. help
  205. HMAC: Keyed-Hashing for Message Authentication (RFC2104).
  206. This is required for IPSec.
  207. config CRYPTO_XCBC
  208. tristate "XCBC support"
  209. depends on EXPERIMENTAL
  210. select CRYPTO_HASH
  211. select CRYPTO_MANAGER
  212. help
  213. XCBC: Keyed-Hashing with encryption algorithm
  214. http://www.ietf.org/rfc/rfc3566.txt
  215. http://csrc.nist.gov/encryption/modes/proposedmodes/
  216. xcbc-mac/xcbc-mac-spec.pdf
  217. comment "Digest"
  218. config CRYPTO_CRC32C
  219. tristate "CRC32c CRC algorithm"
  220. select CRYPTO_HASH
  221. help
  222. Castagnoli, et al Cyclic Redundancy-Check Algorithm. Used
  223. by iSCSI for header and data digests and by others.
  224. See Castagnoli93. Module will be crc32c.
  225. config CRYPTO_CRC32C_INTEL
  226. tristate "CRC32c INTEL hardware acceleration"
  227. depends on X86
  228. select CRYPTO_HASH
  229. help
  230. In Intel processor with SSE4.2 supported, the processor will
  231. support CRC32C implementation using hardware accelerated CRC32
  232. instruction. This option will create 'crc32c-intel' module,
  233. which will enable any routine to use the CRC32 instruction to
  234. gain performance compared with software implementation.
  235. Module will be crc32c-intel.
  236. config CRYPTO_MD4
  237. tristate "MD4 digest algorithm"
  238. select CRYPTO_HASH
  239. help
  240. MD4 message digest algorithm (RFC1320).
  241. config CRYPTO_MD5
  242. tristate "MD5 digest algorithm"
  243. select CRYPTO_HASH
  244. help
  245. MD5 message digest algorithm (RFC1321).
  246. config CRYPTO_MICHAEL_MIC
  247. tristate "Michael MIC keyed digest algorithm"
  248. select CRYPTO_HASH
  249. help
  250. Michael MIC is used for message integrity protection in TKIP
  251. (IEEE 802.11i). This algorithm is required for TKIP, but it
  252. should not be used for other purposes because of the weakness
  253. of the algorithm.
  254. config CRYPTO_RMD128
  255. tristate "RIPEMD-128 digest algorithm"
  256. select CRYPTO_HASH
  257. help
  258. RIPEMD-128 (ISO/IEC 10118-3:2004).
  259. RIPEMD-128 is a 128-bit cryptographic hash function. It should only
  260. to be used as a secure replacement for RIPEMD. For other use cases
  261. RIPEMD-160 should be used.
  262. Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
  263. See <http://home.esat.kuleuven.be/~bosselae/ripemd160.html>
  264. config CRYPTO_RMD160
  265. tristate "RIPEMD-160 digest algorithm"
  266. select CRYPTO_HASH
  267. help
  268. RIPEMD-160 (ISO/IEC 10118-3:2004).
  269. RIPEMD-160 is a 160-bit cryptographic hash function. It is intended
  270. to be used as a secure replacement for the 128-bit hash functions
  271. MD4, MD5 and it's predecessor RIPEMD
  272. (not to be confused with RIPEMD-128).
  273. It's speed is comparable to SHA1 and there are no known attacks
  274. against RIPEMD-160.
  275. Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
  276. See <http://home.esat.kuleuven.be/~bosselae/ripemd160.html>
  277. config CRYPTO_RMD256
  278. tristate "RIPEMD-256 digest algorithm"
  279. select CRYPTO_HASH
  280. help
  281. RIPEMD-256 is an optional extension of RIPEMD-128 with a
  282. 256 bit hash. It is intended for applications that require
  283. longer hash-results, without needing a larger security level
  284. (than RIPEMD-128).
  285. Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
  286. See <http://home.esat.kuleuven.be/~bosselae/ripemd160.html>
  287. config CRYPTO_RMD320
  288. tristate "RIPEMD-320 digest algorithm"
  289. select CRYPTO_HASH
  290. help
  291. RIPEMD-320 is an optional extension of RIPEMD-160 with a
  292. 320 bit hash. It is intended for applications that require
  293. longer hash-results, without needing a larger security level
  294. (than RIPEMD-160).
  295. Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
  296. See <http://home.esat.kuleuven.be/~bosselae/ripemd160.html>
  297. config CRYPTO_SHA1
  298. tristate "SHA1 digest algorithm"
  299. select CRYPTO_HASH
  300. help
  301. SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2).
  302. config CRYPTO_SHA256
  303. tristate "SHA224 and SHA256 digest algorithm"
  304. select CRYPTO_HASH
  305. help
  306. SHA256 secure hash standard (DFIPS 180-2).
  307. This version of SHA implements a 256 bit hash with 128 bits of
  308. security against collision attacks.
  309. This code also includes SHA-224, a 224 bit hash with 112 bits
  310. of security against collision attacks.
  311. config CRYPTO_SHA512
  312. tristate "SHA384 and SHA512 digest algorithms"
  313. select CRYPTO_HASH
  314. help
  315. SHA512 secure hash standard (DFIPS 180-2).
  316. This version of SHA implements a 512 bit hash with 256 bits of
  317. security against collision attacks.
  318. This code also includes SHA-384, a 384 bit hash with 192 bits
  319. of security against collision attacks.
  320. config CRYPTO_TGR192
  321. tristate "Tiger digest algorithms"
  322. select CRYPTO_HASH
  323. help
  324. Tiger hash algorithm 192, 160 and 128-bit hashes
  325. Tiger is a hash function optimized for 64-bit processors while
  326. still having decent performance on 32-bit processors.
  327. Tiger was developed by Ross Anderson and Eli Biham.
  328. See also:
  329. <http://www.cs.technion.ac.il/~biham/Reports/Tiger/>.
  330. config CRYPTO_WP512
  331. tristate "Whirlpool digest algorithms"
  332. select CRYPTO_HASH
  333. help
  334. Whirlpool hash algorithm 512, 384 and 256-bit hashes
  335. Whirlpool-512 is part of the NESSIE cryptographic primitives.
  336. Whirlpool will be part of the ISO/IEC 10118-3:2003(E) standard
  337. See also:
  338. <http://planeta.terra.com.br/informatica/paulobarreto/WhirlpoolPage.html>
  339. comment "Ciphers"
  340. config CRYPTO_AES
  341. tristate "AES cipher algorithms"
  342. select CRYPTO_ALGAPI
  343. help
  344. AES cipher algorithms (FIPS-197). AES uses the Rijndael
  345. algorithm.
  346. Rijndael appears to be consistently a very good performer in
  347. both hardware and software across a wide range of computing
  348. environments regardless of its use in feedback or non-feedback
  349. modes. Its key setup time is excellent, and its key agility is
  350. good. Rijndael's very low memory requirements make it very well
  351. suited for restricted-space environments, in which it also
  352. demonstrates excellent performance. Rijndael's operations are
  353. among the easiest to defend against power and timing attacks.
  354. The AES specifies three key sizes: 128, 192 and 256 bits
  355. See <http://csrc.nist.gov/CryptoToolkit/aes/> for more information.
  356. config CRYPTO_AES_586
  357. tristate "AES cipher algorithms (i586)"
  358. depends on (X86 || UML_X86) && !64BIT
  359. select CRYPTO_ALGAPI
  360. select CRYPTO_AES
  361. help
  362. AES cipher algorithms (FIPS-197). AES uses the Rijndael
  363. algorithm.
  364. Rijndael appears to be consistently a very good performer in
  365. both hardware and software across a wide range of computing
  366. environments regardless of its use in feedback or non-feedback
  367. modes. Its key setup time is excellent, and its key agility is
  368. good. Rijndael's very low memory requirements make it very well
  369. suited for restricted-space environments, in which it also
  370. demonstrates excellent performance. Rijndael's operations are
  371. among the easiest to defend against power and timing attacks.
  372. The AES specifies three key sizes: 128, 192 and 256 bits
  373. See <http://csrc.nist.gov/encryption/aes/> for more information.
  374. config CRYPTO_AES_X86_64
  375. tristate "AES cipher algorithms (x86_64)"
  376. depends on (X86 || UML_X86) && 64BIT
  377. select CRYPTO_ALGAPI
  378. select CRYPTO_AES
  379. help
  380. AES cipher algorithms (FIPS-197). AES uses the Rijndael
  381. algorithm.
  382. Rijndael appears to be consistently a very good performer in
  383. both hardware and software across a wide range of computing
  384. environments regardless of its use in feedback or non-feedback
  385. modes. Its key setup time is excellent, and its key agility is
  386. good. Rijndael's very low memory requirements make it very well
  387. suited for restricted-space environments, in which it also
  388. demonstrates excellent performance. Rijndael's operations are
  389. among the easiest to defend against power and timing attacks.
  390. The AES specifies three key sizes: 128, 192 and 256 bits
  391. See <http://csrc.nist.gov/encryption/aes/> for more information.
  392. config CRYPTO_ANUBIS
  393. tristate "Anubis cipher algorithm"
  394. select CRYPTO_ALGAPI
  395. help
  396. Anubis cipher algorithm.
  397. Anubis is a variable key length cipher which can use keys from
  398. 128 bits to 320 bits in length. It was evaluated as a entrant
  399. in the NESSIE competition.
  400. See also:
  401. <https://www.cosic.esat.kuleuven.ac.be/nessie/reports/>
  402. <http://planeta.terra.com.br/informatica/paulobarreto/AnubisPage.html>
  403. config CRYPTO_ARC4
  404. tristate "ARC4 cipher algorithm"
  405. select CRYPTO_ALGAPI
  406. help
  407. ARC4 cipher algorithm.
  408. ARC4 is a stream cipher using keys ranging from 8 bits to 2048
  409. bits in length. This algorithm is required for driver-based
  410. WEP, but it should not be for other purposes because of the
  411. weakness of the algorithm.
  412. config CRYPTO_BLOWFISH
  413. tristate "Blowfish cipher algorithm"
  414. select CRYPTO_ALGAPI
  415. help
  416. Blowfish cipher algorithm, by Bruce Schneier.
  417. This is a variable key length cipher which can use keys from 32
  418. bits to 448 bits in length. It's fast, simple and specifically
  419. designed for use on "large microprocessors".
  420. See also:
  421. <http://www.schneier.com/blowfish.html>
  422. config CRYPTO_CAMELLIA
  423. tristate "Camellia cipher algorithms"
  424. depends on CRYPTO
  425. select CRYPTO_ALGAPI
  426. help
  427. Camellia cipher algorithms module.
  428. Camellia is a symmetric key block cipher developed jointly
  429. at NTT and Mitsubishi Electric Corporation.
  430. The Camellia specifies three key sizes: 128, 192 and 256 bits.
  431. See also:
  432. <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
  433. config CRYPTO_CAST5
  434. tristate "CAST5 (CAST-128) cipher algorithm"
  435. select CRYPTO_ALGAPI
  436. help
  437. The CAST5 encryption algorithm (synonymous with CAST-128) is
  438. described in RFC2144.
  439. config CRYPTO_CAST6
  440. tristate "CAST6 (CAST-256) cipher algorithm"
  441. select CRYPTO_ALGAPI
  442. help
  443. The CAST6 encryption algorithm (synonymous with CAST-256) is
  444. described in RFC2612.
  445. config CRYPTO_DES
  446. tristate "DES and Triple DES EDE cipher algorithms"
  447. select CRYPTO_ALGAPI
  448. help
  449. DES cipher algorithm (FIPS 46-2), and Triple DES EDE (FIPS 46-3).
  450. config CRYPTO_FCRYPT
  451. tristate "FCrypt cipher algorithm"
  452. select CRYPTO_ALGAPI
  453. select CRYPTO_BLKCIPHER
  454. help
  455. FCrypt algorithm used by RxRPC.
  456. config CRYPTO_KHAZAD
  457. tristate "Khazad cipher algorithm"
  458. select CRYPTO_ALGAPI
  459. help
  460. Khazad cipher algorithm.
  461. Khazad was a finalist in the initial NESSIE competition. It is
  462. an algorithm optimized for 64-bit processors with good performance
  463. on 32-bit processors. Khazad uses an 128 bit key size.
  464. See also:
  465. <http://planeta.terra.com.br/informatica/paulobarreto/KhazadPage.html>
  466. config CRYPTO_SALSA20
  467. tristate "Salsa20 stream cipher algorithm (EXPERIMENTAL)"
  468. depends on EXPERIMENTAL
  469. select CRYPTO_BLKCIPHER
  470. help
  471. Salsa20 stream cipher algorithm.
  472. Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
  473. Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
  474. The Salsa20 stream cipher algorithm is designed by Daniel J.
  475. Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
  476. config CRYPTO_SALSA20_586
  477. tristate "Salsa20 stream cipher algorithm (i586) (EXPERIMENTAL)"
  478. depends on (X86 || UML_X86) && !64BIT
  479. depends on EXPERIMENTAL
  480. select CRYPTO_BLKCIPHER
  481. help
  482. Salsa20 stream cipher algorithm.
  483. Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
  484. Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
  485. The Salsa20 stream cipher algorithm is designed by Daniel J.
  486. Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
  487. config CRYPTO_SALSA20_X86_64
  488. tristate "Salsa20 stream cipher algorithm (x86_64) (EXPERIMENTAL)"
  489. depends on (X86 || UML_X86) && 64BIT
  490. depends on EXPERIMENTAL
  491. select CRYPTO_BLKCIPHER
  492. help
  493. Salsa20 stream cipher algorithm.
  494. Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
  495. Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
  496. The Salsa20 stream cipher algorithm is designed by Daniel J.
  497. Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
  498. config CRYPTO_SEED
  499. tristate "SEED cipher algorithm"
  500. select CRYPTO_ALGAPI
  501. help
  502. SEED cipher algorithm (RFC4269).
  503. SEED is a 128-bit symmetric key block cipher that has been
  504. developed by KISA (Korea Information Security Agency) as a
  505. national standard encryption algorithm of the Republic of Korea.
  506. It is a 16 round block cipher with the key size of 128 bit.
  507. See also:
  508. <http://www.kisa.or.kr/kisa/seed/jsp/seed_eng.jsp>
  509. config CRYPTO_SERPENT
  510. tristate "Serpent cipher algorithm"
  511. select CRYPTO_ALGAPI
  512. help
  513. Serpent cipher algorithm, by Anderson, Biham & Knudsen.
  514. Keys are allowed to be from 0 to 256 bits in length, in steps
  515. of 8 bits. Also includes the 'Tnepres' algorithm, a reversed
  516. variant of Serpent for compatibility with old kerneli.org code.
  517. See also:
  518. <http://www.cl.cam.ac.uk/~rja14/serpent.html>
  519. config CRYPTO_TEA
  520. tristate "TEA, XTEA and XETA cipher algorithms"
  521. select CRYPTO_ALGAPI
  522. help
  523. TEA cipher algorithm.
  524. Tiny Encryption Algorithm is a simple cipher that uses
  525. many rounds for security. It is very fast and uses
  526. little memory.
  527. Xtendend Tiny Encryption Algorithm is a modification to
  528. the TEA algorithm to address a potential key weakness
  529. in the TEA algorithm.
  530. Xtendend Encryption Tiny Algorithm is a mis-implementation
  531. of the XTEA algorithm for compatibility purposes.
  532. config CRYPTO_TWOFISH
  533. tristate "Twofish cipher algorithm"
  534. select CRYPTO_ALGAPI
  535. select CRYPTO_TWOFISH_COMMON
  536. help
  537. Twofish cipher algorithm.
  538. Twofish was submitted as an AES (Advanced Encryption Standard)
  539. candidate cipher by researchers at CounterPane Systems. It is a
  540. 16 round block cipher supporting key sizes of 128, 192, and 256
  541. bits.
  542. See also:
  543. <http://www.schneier.com/twofish.html>
  544. config CRYPTO_TWOFISH_COMMON
  545. tristate
  546. help
  547. Common parts of the Twofish cipher algorithm shared by the
  548. generic c and the assembler implementations.
  549. config CRYPTO_TWOFISH_586
  550. tristate "Twofish cipher algorithms (i586)"
  551. depends on (X86 || UML_X86) && !64BIT
  552. select CRYPTO_ALGAPI
  553. select CRYPTO_TWOFISH_COMMON
  554. help
  555. Twofish cipher algorithm.
  556. Twofish was submitted as an AES (Advanced Encryption Standard)
  557. candidate cipher by researchers at CounterPane Systems. It is a
  558. 16 round block cipher supporting key sizes of 128, 192, and 256
  559. bits.
  560. See also:
  561. <http://www.schneier.com/twofish.html>
  562. config CRYPTO_TWOFISH_X86_64
  563. tristate "Twofish cipher algorithm (x86_64)"
  564. depends on (X86 || UML_X86) && 64BIT
  565. select CRYPTO_ALGAPI
  566. select CRYPTO_TWOFISH_COMMON
  567. help
  568. Twofish cipher algorithm (x86_64).
  569. Twofish was submitted as an AES (Advanced Encryption Standard)
  570. candidate cipher by researchers at CounterPane Systems. It is a
  571. 16 round block cipher supporting key sizes of 128, 192, and 256
  572. bits.
  573. See also:
  574. <http://www.schneier.com/twofish.html>
  575. comment "Compression"
  576. config CRYPTO_DEFLATE
  577. tristate "Deflate compression algorithm"
  578. select CRYPTO_ALGAPI
  579. select ZLIB_INFLATE
  580. select ZLIB_DEFLATE
  581. help
  582. This is the Deflate algorithm (RFC1951), specified for use in
  583. IPSec with the IPCOMP protocol (RFC3173, RFC2394).
  584. You will most probably want this if using IPSec.
  585. config CRYPTO_LZO
  586. tristate "LZO compression algorithm"
  587. select CRYPTO_ALGAPI
  588. select LZO_COMPRESS
  589. select LZO_DECOMPRESS
  590. help
  591. This is the LZO algorithm.
  592. comment "Random Number Generation"
  593. config CRYPTO_ANSI_CPRNG
  594. tristate "Pseudo Random Number Generation for Cryptographic modules"
  595. select CRYPTO_AES
  596. select CRYPTO_RNG
  597. select CRYPTO_FIPS
  598. help
  599. This option enables the generic pseudo random number generator
  600. for cryptographic modules. Uses the Algorithm specified in
  601. ANSI X9.31 A.2.4
  602. source "drivers/crypto/Kconfig"
  603. endif # if CRYPTO