Kconfig 13 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438
  1. #
  2. # Cryptographic API Configuration
  3. #
  4. menu "Cryptographic options"
  5. config CRYPTO
  6. bool "Cryptographic API"
  7. help
  8. This option provides the core Cryptographic API.
  9. if CRYPTO
  10. config CRYPTO_ALGAPI
  11. tristate
  12. help
  13. This option provides the API for cryptographic algorithms.
  14. config CRYPTO_BLKCIPHER
  15. tristate
  16. select CRYPTO_ALGAPI
  17. config CRYPTO_HASH
  18. tristate
  19. select CRYPTO_ALGAPI
  20. config CRYPTO_MANAGER
  21. tristate "Cryptographic algorithm manager"
  22. select CRYPTO_ALGAPI
  23. help
  24. Create default cryptographic template instantiations such as
  25. cbc(aes).
  26. config CRYPTO_HMAC
  27. tristate "HMAC support"
  28. select CRYPTO_HASH
  29. select CRYPTO_MANAGER
  30. help
  31. HMAC: Keyed-Hashing for Message Authentication (RFC2104).
  32. This is required for IPSec.
  33. config CRYPTO_NULL
  34. tristate "Null algorithms"
  35. select CRYPTO_ALGAPI
  36. help
  37. These are 'Null' algorithms, used by IPsec, which do nothing.
  38. config CRYPTO_MD4
  39. tristate "MD4 digest algorithm"
  40. select CRYPTO_ALGAPI
  41. help
  42. MD4 message digest algorithm (RFC1320).
  43. config CRYPTO_MD5
  44. tristate "MD5 digest algorithm"
  45. select CRYPTO_ALGAPI
  46. help
  47. MD5 message digest algorithm (RFC1321).
  48. config CRYPTO_SHA1
  49. tristate "SHA1 digest algorithm"
  50. select CRYPTO_ALGAPI
  51. help
  52. SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2).
  53. config CRYPTO_SHA1_S390
  54. tristate "SHA1 digest algorithm (s390)"
  55. depends on S390
  56. select CRYPTO_ALGAPI
  57. help
  58. This is the s390 hardware accelerated implementation of the
  59. SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2).
  60. config CRYPTO_SHA256
  61. tristate "SHA256 digest algorithm"
  62. select CRYPTO_ALGAPI
  63. help
  64. SHA256 secure hash standard (DFIPS 180-2).
  65. This version of SHA implements a 256 bit hash with 128 bits of
  66. security against collision attacks.
  67. config CRYPTO_SHA256_S390
  68. tristate "SHA256 digest algorithm (s390)"
  69. depends on S390
  70. select CRYPTO_ALGAPI
  71. help
  72. This is the s390 hardware accelerated implementation of the
  73. SHA256 secure hash standard (DFIPS 180-2).
  74. This version of SHA implements a 256 bit hash with 128 bits of
  75. security against collision attacks.
  76. config CRYPTO_SHA512
  77. tristate "SHA384 and SHA512 digest algorithms"
  78. select CRYPTO_ALGAPI
  79. help
  80. SHA512 secure hash standard (DFIPS 180-2).
  81. This version of SHA implements a 512 bit hash with 256 bits of
  82. security against collision attacks.
  83. This code also includes SHA-384, a 384 bit hash with 192 bits
  84. of security against collision attacks.
  85. config CRYPTO_WP512
  86. tristate "Whirlpool digest algorithms"
  87. select CRYPTO_ALGAPI
  88. help
  89. Whirlpool hash algorithm 512, 384 and 256-bit hashes
  90. Whirlpool-512 is part of the NESSIE cryptographic primitives.
  91. Whirlpool will be part of the ISO/IEC 10118-3:2003(E) standard
  92. See also:
  93. <http://planeta.terra.com.br/informatica/paulobarreto/WhirlpoolPage.html>
  94. config CRYPTO_TGR192
  95. tristate "Tiger digest algorithms"
  96. select CRYPTO_ALGAPI
  97. help
  98. Tiger hash algorithm 192, 160 and 128-bit hashes
  99. Tiger is a hash function optimized for 64-bit processors while
  100. still having decent performance on 32-bit processors.
  101. Tiger was developed by Ross Anderson and Eli Biham.
  102. See also:
  103. <http://www.cs.technion.ac.il/~biham/Reports/Tiger/>.
  104. config CRYPTO_ECB
  105. tristate "ECB support"
  106. select CRYPTO_BLKCIPHER
  107. select CRYPTO_MANAGER
  108. default m
  109. help
  110. ECB: Electronic CodeBook mode
  111. This is the simplest block cipher algorithm. It simply encrypts
  112. the input block by block.
  113. config CRYPTO_CBC
  114. tristate "CBC support"
  115. select CRYPTO_BLKCIPHER
  116. select CRYPTO_MANAGER
  117. default m
  118. help
  119. CBC: Cipher Block Chaining mode
  120. This block cipher algorithm is required for IPSec.
  121. config CRYPTO_DES
  122. tristate "DES and Triple DES EDE cipher algorithms"
  123. select CRYPTO_ALGAPI
  124. help
  125. DES cipher algorithm (FIPS 46-2), and Triple DES EDE (FIPS 46-3).
  126. config CRYPTO_DES_S390
  127. tristate "DES and Triple DES cipher algorithms (s390)"
  128. depends on S390
  129. select CRYPTO_ALGAPI
  130. select CRYPTO_BLKCIPHER
  131. help
  132. DES cipher algorithm (FIPS 46-2), and Triple DES EDE (FIPS 46-3).
  133. config CRYPTO_BLOWFISH
  134. tristate "Blowfish cipher algorithm"
  135. select CRYPTO_ALGAPI
  136. help
  137. Blowfish cipher algorithm, by Bruce Schneier.
  138. This is a variable key length cipher which can use keys from 32
  139. bits to 448 bits in length. It's fast, simple and specifically
  140. designed for use on "large microprocessors".
  141. See also:
  142. <http://www.schneier.com/blowfish.html>
  143. config CRYPTO_TWOFISH
  144. tristate "Twofish cipher algorithm"
  145. select CRYPTO_ALGAPI
  146. select CRYPTO_TWOFISH_COMMON
  147. help
  148. Twofish cipher algorithm.
  149. Twofish was submitted as an AES (Advanced Encryption Standard)
  150. candidate cipher by researchers at CounterPane Systems. It is a
  151. 16 round block cipher supporting key sizes of 128, 192, and 256
  152. bits.
  153. See also:
  154. <http://www.schneier.com/twofish.html>
  155. config CRYPTO_TWOFISH_COMMON
  156. tristate
  157. help
  158. Common parts of the Twofish cipher algorithm shared by the
  159. generic c and the assembler implementations.
  160. config CRYPTO_TWOFISH_586
  161. tristate "Twofish cipher algorithms (i586)"
  162. depends on (X86 || UML_X86) && !64BIT
  163. select CRYPTO_ALGAPI
  164. select CRYPTO_TWOFISH_COMMON
  165. help
  166. Twofish cipher algorithm.
  167. Twofish was submitted as an AES (Advanced Encryption Standard)
  168. candidate cipher by researchers at CounterPane Systems. It is a
  169. 16 round block cipher supporting key sizes of 128, 192, and 256
  170. bits.
  171. See also:
  172. <http://www.schneier.com/twofish.html>
  173. config CRYPTO_TWOFISH_X86_64
  174. tristate "Twofish cipher algorithm (x86_64)"
  175. depends on (X86 || UML_X86) && 64BIT
  176. select CRYPTO_ALGAPI
  177. select CRYPTO_TWOFISH_COMMON
  178. help
  179. Twofish cipher algorithm (x86_64).
  180. Twofish was submitted as an AES (Advanced Encryption Standard)
  181. candidate cipher by researchers at CounterPane Systems. It is a
  182. 16 round block cipher supporting key sizes of 128, 192, and 256
  183. bits.
  184. See also:
  185. <http://www.schneier.com/twofish.html>
  186. config CRYPTO_SERPENT
  187. tristate "Serpent cipher algorithm"
  188. select CRYPTO_ALGAPI
  189. help
  190. Serpent cipher algorithm, by Anderson, Biham & Knudsen.
  191. Keys are allowed to be from 0 to 256 bits in length, in steps
  192. of 8 bits. Also includes the 'Tnepres' algorithm, a reversed
  193. variant of Serpent for compatibility with old kerneli code.
  194. See also:
  195. <http://www.cl.cam.ac.uk/~rja14/serpent.html>
  196. config CRYPTO_AES
  197. tristate "AES cipher algorithms"
  198. select CRYPTO_ALGAPI
  199. help
  200. AES cipher algorithms (FIPS-197). AES uses the Rijndael
  201. algorithm.
  202. Rijndael appears to be consistently a very good performer in
  203. both hardware and software across a wide range of computing
  204. environments regardless of its use in feedback or non-feedback
  205. modes. Its key setup time is excellent, and its key agility is
  206. good. Rijndael's very low memory requirements make it very well
  207. suited for restricted-space environments, in which it also
  208. demonstrates excellent performance. Rijndael's operations are
  209. among the easiest to defend against power and timing attacks.
  210. The AES specifies three key sizes: 128, 192 and 256 bits
  211. See <http://csrc.nist.gov/CryptoToolkit/aes/> for more information.
  212. config CRYPTO_AES_586
  213. tristate "AES cipher algorithms (i586)"
  214. depends on (X86 || UML_X86) && !64BIT
  215. select CRYPTO_ALGAPI
  216. help
  217. AES cipher algorithms (FIPS-197). AES uses the Rijndael
  218. algorithm.
  219. Rijndael appears to be consistently a very good performer in
  220. both hardware and software across a wide range of computing
  221. environments regardless of its use in feedback or non-feedback
  222. modes. Its key setup time is excellent, and its key agility is
  223. good. Rijndael's very low memory requirements make it very well
  224. suited for restricted-space environments, in which it also
  225. demonstrates excellent performance. Rijndael's operations are
  226. among the easiest to defend against power and timing attacks.
  227. The AES specifies three key sizes: 128, 192 and 256 bits
  228. See <http://csrc.nist.gov/encryption/aes/> for more information.
  229. config CRYPTO_AES_X86_64
  230. tristate "AES cipher algorithms (x86_64)"
  231. depends on (X86 || UML_X86) && 64BIT
  232. select CRYPTO_ALGAPI
  233. help
  234. AES cipher algorithms (FIPS-197). AES uses the Rijndael
  235. algorithm.
  236. Rijndael appears to be consistently a very good performer in
  237. both hardware and software across a wide range of computing
  238. environments regardless of its use in feedback or non-feedback
  239. modes. Its key setup time is excellent, and its key agility is
  240. good. Rijndael's very low memory requirements make it very well
  241. suited for restricted-space environments, in which it also
  242. demonstrates excellent performance. Rijndael's operations are
  243. among the easiest to defend against power and timing attacks.
  244. The AES specifies three key sizes: 128, 192 and 256 bits
  245. See <http://csrc.nist.gov/encryption/aes/> for more information.
  246. config CRYPTO_AES_S390
  247. tristate "AES cipher algorithms (s390)"
  248. depends on S390
  249. select CRYPTO_ALGAPI
  250. select CRYPTO_BLKCIPHER
  251. help
  252. This is the s390 hardware accelerated implementation of the
  253. AES cipher algorithms (FIPS-197). AES uses the Rijndael
  254. algorithm.
  255. Rijndael appears to be consistently a very good performer in
  256. both hardware and software across a wide range of computing
  257. environments regardless of its use in feedback or non-feedback
  258. modes. Its key setup time is excellent, and its key agility is
  259. good. Rijndael's very low memory requirements make it very well
  260. suited for restricted-space environments, in which it also
  261. demonstrates excellent performance. Rijndael's operations are
  262. among the easiest to defend against power and timing attacks.
  263. On s390 the System z9-109 currently only supports the key size
  264. of 128 bit.
  265. config CRYPTO_CAST5
  266. tristate "CAST5 (CAST-128) cipher algorithm"
  267. select CRYPTO_ALGAPI
  268. help
  269. The CAST5 encryption algorithm (synonymous with CAST-128) is
  270. described in RFC2144.
  271. config CRYPTO_CAST6
  272. tristate "CAST6 (CAST-256) cipher algorithm"
  273. select CRYPTO_ALGAPI
  274. help
  275. The CAST6 encryption algorithm (synonymous with CAST-256) is
  276. described in RFC2612.
  277. config CRYPTO_TEA
  278. tristate "TEA, XTEA and XETA cipher algorithms"
  279. select CRYPTO_ALGAPI
  280. help
  281. TEA cipher algorithm.
  282. Tiny Encryption Algorithm is a simple cipher that uses
  283. many rounds for security. It is very fast and uses
  284. little memory.
  285. Xtendend Tiny Encryption Algorithm is a modification to
  286. the TEA algorithm to address a potential key weakness
  287. in the TEA algorithm.
  288. Xtendend Encryption Tiny Algorithm is a mis-implementation
  289. of the XTEA algorithm for compatibility purposes.
  290. config CRYPTO_ARC4
  291. tristate "ARC4 cipher algorithm"
  292. select CRYPTO_ALGAPI
  293. help
  294. ARC4 cipher algorithm.
  295. ARC4 is a stream cipher using keys ranging from 8 bits to 2048
  296. bits in length. This algorithm is required for driver-based
  297. WEP, but it should not be for other purposes because of the
  298. weakness of the algorithm.
  299. config CRYPTO_KHAZAD
  300. tristate "Khazad cipher algorithm"
  301. select CRYPTO_ALGAPI
  302. help
  303. Khazad cipher algorithm.
  304. Khazad was a finalist in the initial NESSIE competition. It is
  305. an algorithm optimized for 64-bit processors with good performance
  306. on 32-bit processors. Khazad uses an 128 bit key size.
  307. See also:
  308. <http://planeta.terra.com.br/informatica/paulobarreto/KhazadPage.html>
  309. config CRYPTO_ANUBIS
  310. tristate "Anubis cipher algorithm"
  311. select CRYPTO_ALGAPI
  312. help
  313. Anubis cipher algorithm.
  314. Anubis is a variable key length cipher which can use keys from
  315. 128 bits to 320 bits in length. It was evaluated as a entrant
  316. in the NESSIE competition.
  317. See also:
  318. <https://www.cosic.esat.kuleuven.ac.be/nessie/reports/>
  319. <http://planeta.terra.com.br/informatica/paulobarreto/AnubisPage.html>
  320. config CRYPTO_DEFLATE
  321. tristate "Deflate compression algorithm"
  322. select CRYPTO_ALGAPI
  323. select ZLIB_INFLATE
  324. select ZLIB_DEFLATE
  325. help
  326. This is the Deflate algorithm (RFC1951), specified for use in
  327. IPSec with the IPCOMP protocol (RFC3173, RFC2394).
  328. You will most probably want this if using IPSec.
  329. config CRYPTO_MICHAEL_MIC
  330. tristate "Michael MIC keyed digest algorithm"
  331. select CRYPTO_ALGAPI
  332. help
  333. Michael MIC is used for message integrity protection in TKIP
  334. (IEEE 802.11i). This algorithm is required for TKIP, but it
  335. should not be used for other purposes because of the weakness
  336. of the algorithm.
  337. config CRYPTO_CRC32C
  338. tristate "CRC32c CRC algorithm"
  339. select CRYPTO_ALGAPI
  340. select LIBCRC32C
  341. help
  342. Castagnoli, et al Cyclic Redundancy-Check Algorithm. Used
  343. by iSCSI for header and data digests and by others.
  344. See Castagnoli93. This implementation uses lib/libcrc32c.
  345. Module will be crc32c.
  346. config CRYPTO_TEST
  347. tristate "Testing module"
  348. depends on m
  349. select CRYPTO_ALGAPI
  350. help
  351. Quick & dirty crypto test module.
  352. source "drivers/crypto/Kconfig"
  353. endif # if CRYPTO
  354. endmenu