2 # Generic algorithms support
8 # async_tx api: hardware offloaded memory transfer/transform support
10 source "crypto/async_tx/Kconfig"
13 # Cryptographic API Configuration
16 tristate "Cryptographic API"
18 This option provides the core Cryptographic API.
22 comment "Crypto core or helper"
25 bool "FIPS 200 compliance"
26 depends on CRYPTO_ANSI_CPRNG && !CRYPTO_MANAGER_DISABLE_TESTS
28 This options enables the fips boot option which is
29 required if you want to system to operate in a FIPS 200
30 certification. You should say no unless you know what
37 This option provides the API for cryptographic algorithms.
51 config CRYPTO_BLKCIPHER
53 select CRYPTO_BLKCIPHER2
56 config CRYPTO_BLKCIPHER2
60 select CRYPTO_WORKQUEUE
90 tristate "Cryptographic algorithm manager"
91 select CRYPTO_MANAGER2
93 Create default cryptographic template instantiations such as
96 config CRYPTO_MANAGER2
97 def_tristate CRYPTO_MANAGER || (CRYPTO_MANAGER!=n && CRYPTO_ALGAPI=y)
100 select CRYPTO_BLKCIPHER2
104 tristate "Userspace cryptographic algorithm configuration"
106 select CRYPTO_MANAGER
108 Userspace configuration for cryptographic instantiations such as
111 config CRYPTO_MANAGER_DISABLE_TESTS
112 bool "Disable run-time self tests"
114 depends on CRYPTO_MANAGER2
116 Disable run-time self tests that normally take place at
117 algorithm registration.
119 config CRYPTO_GF128MUL
120 tristate "GF(2^128) multiplication functions"
122 Efficient table driven implementation of multiplications in the
123 field GF(2^128). This is needed by some cypher modes. This
124 option will be selected automatically if you select such a
125 cipher mode. Only select this option by hand if you expect to load
126 an external module that requires these functions.
129 tristate "Null algorithms"
131 select CRYPTO_BLKCIPHER
134 These are 'Null' algorithms, used by IPsec, which do nothing.
137 tristate "Parallel crypto engine (EXPERIMENTAL)"
138 depends on SMP && EXPERIMENTAL
140 select CRYPTO_MANAGER
143 This converts an arbitrary crypto algorithm into a parallel
144 algorithm that executes in kernel threads.
146 config CRYPTO_WORKQUEUE
150 tristate "Software async crypto daemon"
151 select CRYPTO_BLKCIPHER
153 select CRYPTO_MANAGER
154 select CRYPTO_WORKQUEUE
156 This is a generic software asynchronous crypto daemon that
157 converts an arbitrary synchronous software crypto algorithm
158 into an asynchronous algorithm that executes in a kernel thread.
160 config CRYPTO_AUTHENC
161 tristate "Authenc support"
163 select CRYPTO_BLKCIPHER
164 select CRYPTO_MANAGER
167 Authenc: Combined mode wrapper for IPsec.
168 This is required for IPSec.
171 tristate "Testing module"
173 select CRYPTO_MANAGER
175 Quick & dirty crypto test module.
177 config CRYPTO_ABLK_HELPER_X86
182 config CRYPTO_GLUE_HELPER_X86
187 comment "Authenticated Encryption with Associated Data"
190 tristate "CCM support"
194 Support for Counter with CBC MAC. Required for IPsec.
197 tristate "GCM/GMAC support"
202 Support for Galois/Counter Mode (GCM) and Galois Message
203 Authentication Code (GMAC). Required for IPSec.
206 tristate "Sequence Number IV Generator"
208 select CRYPTO_BLKCIPHER
211 This IV generator generates an IV based on a sequence number by
212 xoring it with a salt. This algorithm is mainly useful for CTR
214 comment "Block modes"
217 tristate "CBC support"
218 select CRYPTO_BLKCIPHER
219 select CRYPTO_MANAGER
221 CBC: Cipher Block Chaining mode
222 This block cipher algorithm is required for IPSec.
225 tristate "CTR support"
226 select CRYPTO_BLKCIPHER
228 select CRYPTO_MANAGER
231 This block cipher algorithm is required for IPSec.
234 tristate "CTS support"
235 select CRYPTO_BLKCIPHER
237 CTS: Cipher Text Stealing
238 This is the Cipher Text Stealing mode as described by
239 Section 8 of rfc2040 and referenced by rfc3962.
240 (rfc3962 includes errata information in its Appendix A)
241 This mode is required for Kerberos gss mechanism support
245 tristate "ECB support"
246 select CRYPTO_BLKCIPHER
247 select CRYPTO_MANAGER
249 ECB: Electronic CodeBook mode
250 This is the simplest block cipher algorithm. It simply encrypts
251 the input block by block.
254 tristate "LRW support"
255 select CRYPTO_BLKCIPHER
256 select CRYPTO_MANAGER
257 select CRYPTO_GF128MUL
259 LRW: Liskov Rivest Wagner, a tweakable, non malleable, non movable
260 narrow block cipher mode for dm-crypt. Use it with cipher
261 specification string aes-lrw-benbi, the key must be 256, 320 or 384.
262 The first 128, 192 or 256 bits in the key are used for AES and the
263 rest is used to tie each cipher block to its logical position.
266 tristate "PCBC support"
267 select CRYPTO_BLKCIPHER
268 select CRYPTO_MANAGER
270 PCBC: Propagating Cipher Block Chaining mode
271 This block cipher algorithm is required for RxRPC.
274 tristate "XTS support"
275 select CRYPTO_BLKCIPHER
276 select CRYPTO_MANAGER
277 select CRYPTO_GF128MUL
279 XTS: IEEE1619/D16 narrow block cipher use with aes-xts-plain,
280 key size 256, 384 or 512 bits. This implementation currently
281 can't handle a sectorsize which is not a multiple of 16 bytes.
286 tristate "HMAC support"
288 select CRYPTO_MANAGER
290 HMAC: Keyed-Hashing for Message Authentication (RFC2104).
291 This is required for IPSec.
294 tristate "XCBC support"
295 depends on EXPERIMENTAL
297 select CRYPTO_MANAGER
299 XCBC: Keyed-Hashing with encryption algorithm
300 http://www.ietf.org/rfc/rfc3566.txt
301 http://csrc.nist.gov/encryption/modes/proposedmodes/
302 xcbc-mac/xcbc-mac-spec.pdf
305 tristate "VMAC support"
306 depends on EXPERIMENTAL
308 select CRYPTO_MANAGER
310 VMAC is a message authentication algorithm designed for
311 very high speed on 64-bit architectures.
314 <http://fastcrypto.org/vmac>
319 tristate "CRC32c CRC algorithm"
323 Castagnoli, et al Cyclic Redundancy-Check Algorithm. Used
324 by iSCSI for header and data digests and by others.
325 See Castagnoli93. Module will be crc32c.
327 config CRYPTO_CRC32C_INTEL
328 tristate "CRC32c INTEL hardware acceleration"
332 In Intel processor with SSE4.2 supported, the processor will
333 support CRC32C implementation using hardware accelerated CRC32
334 instruction. This option will create 'crc32c-intel' module,
335 which will enable any routine to use the CRC32 instruction to
336 gain performance compared with software implementation.
337 Module will be crc32c-intel.
340 tristate "GHASH digest algorithm"
341 select CRYPTO_GF128MUL
343 GHASH is message digest algorithm for GCM (Galois/Counter Mode).
346 tristate "MD4 digest algorithm"
349 MD4 message digest algorithm (RFC1320).
352 tristate "MD5 digest algorithm"
355 MD5 message digest algorithm (RFC1321).
357 config CRYPTO_MICHAEL_MIC
358 tristate "Michael MIC keyed digest algorithm"
361 Michael MIC is used for message integrity protection in TKIP
362 (IEEE 802.11i). This algorithm is required for TKIP, but it
363 should not be used for other purposes because of the weakness
367 tristate "RIPEMD-128 digest algorithm"
370 RIPEMD-128 (ISO/IEC 10118-3:2004).
372 RIPEMD-128 is a 128-bit cryptographic hash function. It should only
373 be used as a secure replacement for RIPEMD. For other use cases,
374 RIPEMD-160 should be used.
376 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
377 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
380 tristate "RIPEMD-160 digest algorithm"
383 RIPEMD-160 (ISO/IEC 10118-3:2004).
385 RIPEMD-160 is a 160-bit cryptographic hash function. It is intended
386 to be used as a secure replacement for the 128-bit hash functions
387 MD4, MD5 and it's predecessor RIPEMD
388 (not to be confused with RIPEMD-128).
390 It's speed is comparable to SHA1 and there are no known attacks
393 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
394 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
397 tristate "RIPEMD-256 digest algorithm"
400 RIPEMD-256 is an optional extension of RIPEMD-128 with a
401 256 bit hash. It is intended for applications that require
402 longer hash-results, without needing a larger security level
405 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
406 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
409 tristate "RIPEMD-320 digest algorithm"
412 RIPEMD-320 is an optional extension of RIPEMD-160 with a
413 320 bit hash. It is intended for applications that require
414 longer hash-results, without needing a larger security level
417 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
418 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
421 tristate "SHA1 digest algorithm"
424 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2).
426 config CRYPTO_SHA1_SSSE3
427 tristate "SHA1 digest algorithm (SSSE3/AVX)"
428 depends on X86 && 64BIT
432 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented
433 using Supplemental SSE3 (SSSE3) instructions or Advanced Vector
434 Extensions (AVX), when available.
436 config CRYPTO_SHA1_ARM
437 tristate "SHA1 digest algorithm (ARM-asm)"
442 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented
443 using optimized ARM assembler.
446 tristate "SHA224 and SHA256 digest algorithm"
449 SHA256 secure hash standard (DFIPS 180-2).
451 This version of SHA implements a 256 bit hash with 128 bits of
452 security against collision attacks.
454 This code also includes SHA-224, a 224 bit hash with 112 bits
455 of security against collision attacks.
458 tristate "SHA384 and SHA512 digest algorithms"
461 SHA512 secure hash standard (DFIPS 180-2).
463 This version of SHA implements a 512 bit hash with 256 bits of
464 security against collision attacks.
466 This code also includes SHA-384, a 384 bit hash with 192 bits
467 of security against collision attacks.
470 tristate "Tiger digest algorithms"
473 Tiger hash algorithm 192, 160 and 128-bit hashes
475 Tiger is a hash function optimized for 64-bit processors while
476 still having decent performance on 32-bit processors.
477 Tiger was developed by Ross Anderson and Eli Biham.
480 <http://www.cs.technion.ac.il/~biham/Reports/Tiger/>.
483 tristate "Whirlpool digest algorithms"
486 Whirlpool hash algorithm 512, 384 and 256-bit hashes
488 Whirlpool-512 is part of the NESSIE cryptographic primitives.
489 Whirlpool will be part of the ISO/IEC 10118-3:2003(E) standard
492 <http://www.larc.usp.br/~pbarreto/WhirlpoolPage.html>
494 config CRYPTO_GHASH_CLMUL_NI_INTEL
495 tristate "GHASH digest algorithm (CLMUL-NI accelerated)"
496 depends on X86 && 64BIT
499 GHASH is message digest algorithm for GCM (Galois/Counter Mode).
500 The implementation is accelerated by CLMUL-NI of Intel.
505 tristate "AES cipher algorithms"
508 AES cipher algorithms (FIPS-197). AES uses the Rijndael
511 Rijndael appears to be consistently a very good performer in
512 both hardware and software across a wide range of computing
513 environments regardless of its use in feedback or non-feedback
514 modes. Its key setup time is excellent, and its key agility is
515 good. Rijndael's very low memory requirements make it very well
516 suited for restricted-space environments, in which it also
517 demonstrates excellent performance. Rijndael's operations are
518 among the easiest to defend against power and timing attacks.
520 The AES specifies three key sizes: 128, 192 and 256 bits
522 See <http://csrc.nist.gov/CryptoToolkit/aes/> for more information.
524 config CRYPTO_AES_586
525 tristate "AES cipher algorithms (i586)"
526 depends on (X86 || UML_X86) && !64BIT
530 AES cipher algorithms (FIPS-197). AES uses the Rijndael
533 Rijndael appears to be consistently a very good performer in
534 both hardware and software across a wide range of computing
535 environments regardless of its use in feedback or non-feedback
536 modes. Its key setup time is excellent, and its key agility is
537 good. Rijndael's very low memory requirements make it very well
538 suited for restricted-space environments, in which it also
539 demonstrates excellent performance. Rijndael's operations are
540 among the easiest to defend against power and timing attacks.
542 The AES specifies three key sizes: 128, 192 and 256 bits
544 See <http://csrc.nist.gov/encryption/aes/> for more information.
546 config CRYPTO_AES_X86_64
547 tristate "AES cipher algorithms (x86_64)"
548 depends on (X86 || UML_X86) && 64BIT
552 AES cipher algorithms (FIPS-197). AES uses the Rijndael
555 Rijndael appears to be consistently a very good performer in
556 both hardware and software across a wide range of computing
557 environments regardless of its use in feedback or non-feedback
558 modes. Its key setup time is excellent, and its key agility is
559 good. Rijndael's very low memory requirements make it very well
560 suited for restricted-space environments, in which it also
561 demonstrates excellent performance. Rijndael's operations are
562 among the easiest to defend against power and timing attacks.
564 The AES specifies three key sizes: 128, 192 and 256 bits
566 See <http://csrc.nist.gov/encryption/aes/> for more information.
568 config CRYPTO_AES_NI_INTEL
569 tristate "AES cipher algorithms (AES-NI)"
571 select CRYPTO_AES_X86_64 if 64BIT
572 select CRYPTO_AES_586 if !64BIT
574 select CRYPTO_ABLK_HELPER_X86
579 Use Intel AES-NI instructions for AES algorithm.
581 AES cipher algorithms (FIPS-197). AES uses the Rijndael
584 Rijndael appears to be consistently a very good performer in
585 both hardware and software across a wide range of computing
586 environments regardless of its use in feedback or non-feedback
587 modes. Its key setup time is excellent, and its key agility is
588 good. Rijndael's very low memory requirements make it very well
589 suited for restricted-space environments, in which it also
590 demonstrates excellent performance. Rijndael's operations are
591 among the easiest to defend against power and timing attacks.
593 The AES specifies three key sizes: 128, 192 and 256 bits
595 See <http://csrc.nist.gov/encryption/aes/> for more information.
597 In addition to AES cipher algorithm support, the acceleration
598 for some popular block cipher mode is supported too, including
599 ECB, CBC, LRW, PCBC, XTS. The 64 bit version has additional
600 acceleration for CTR.
602 config CRYPTO_AES_ARM
603 tristate "AES cipher algorithms (ARM-asm)"
608 Use optimized AES assembler routines for ARM platforms.
610 AES cipher algorithms (FIPS-197). AES uses the Rijndael
613 Rijndael appears to be consistently a very good performer in
614 both hardware and software across a wide range of computing
615 environments regardless of its use in feedback or non-feedback
616 modes. Its key setup time is excellent, and its key agility is
617 good. Rijndael's very low memory requirements make it very well
618 suited for restricted-space environments, in which it also
619 demonstrates excellent performance. Rijndael's operations are
620 among the easiest to defend against power and timing attacks.
622 The AES specifies three key sizes: 128, 192 and 256 bits
624 See <http://csrc.nist.gov/encryption/aes/> for more information.
627 tristate "Anubis cipher algorithm"
630 Anubis cipher algorithm.
632 Anubis is a variable key length cipher which can use keys from
633 128 bits to 320 bits in length. It was evaluated as a entrant
634 in the NESSIE competition.
637 <https://www.cosic.esat.kuleuven.be/nessie/reports/>
638 <http://www.larc.usp.br/~pbarreto/AnubisPage.html>
641 tristate "ARC4 cipher algorithm"
642 select CRYPTO_BLKCIPHER
644 ARC4 cipher algorithm.
646 ARC4 is a stream cipher using keys ranging from 8 bits to 2048
647 bits in length. This algorithm is required for driver-based
648 WEP, but it should not be for other purposes because of the
649 weakness of the algorithm.
651 config CRYPTO_BLOWFISH
652 tristate "Blowfish cipher algorithm"
654 select CRYPTO_BLOWFISH_COMMON
656 Blowfish cipher algorithm, by Bruce Schneier.
658 This is a variable key length cipher which can use keys from 32
659 bits to 448 bits in length. It's fast, simple and specifically
660 designed for use on "large microprocessors".
663 <http://www.schneier.com/blowfish.html>
665 config CRYPTO_BLOWFISH_COMMON
668 Common parts of the Blowfish cipher algorithm shared by the
669 generic c and the assembler implementations.
672 <http://www.schneier.com/blowfish.html>
674 config CRYPTO_BLOWFISH_X86_64
675 tristate "Blowfish cipher algorithm (x86_64)"
676 depends on X86 && 64BIT
678 select CRYPTO_BLOWFISH_COMMON
680 Blowfish cipher algorithm (x86_64), by Bruce Schneier.
682 This is a variable key length cipher which can use keys from 32
683 bits to 448 bits in length. It's fast, simple and specifically
684 designed for use on "large microprocessors".
687 <http://www.schneier.com/blowfish.html>
689 config CRYPTO_CAMELLIA
690 tristate "Camellia cipher algorithms"
694 Camellia cipher algorithms module.
696 Camellia is a symmetric key block cipher developed jointly
697 at NTT and Mitsubishi Electric Corporation.
699 The Camellia specifies three key sizes: 128, 192 and 256 bits.
702 <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
704 config CRYPTO_CAMELLIA_X86_64
705 tristate "Camellia cipher algorithm (x86_64)"
706 depends on X86 && 64BIT
709 select CRYPTO_GLUE_HELPER_X86
713 Camellia cipher algorithm module (x86_64).
715 Camellia is a symmetric key block cipher developed jointly
716 at NTT and Mitsubishi Electric Corporation.
718 The Camellia specifies three key sizes: 128, 192 and 256 bits.
721 <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
724 tristate "CAST5 (CAST-128) cipher algorithm"
727 The CAST5 encryption algorithm (synonymous with CAST-128) is
728 described in RFC2144.
730 config CRYPTO_CAST5_AVX_X86_64
731 tristate "CAST5 (CAST-128) cipher algorithm (x86_64/AVX)"
732 depends on X86 && 64BIT
735 select CRYPTO_ABLK_HELPER_X86
738 The CAST5 encryption algorithm (synonymous with CAST-128) is
739 described in RFC2144.
741 This module provides the Cast5 cipher algorithm that processes
742 sixteen blocks parallel using the AVX instruction set.
745 tristate "CAST6 (CAST-256) cipher algorithm"
748 The CAST6 encryption algorithm (synonymous with CAST-256) is
749 described in RFC2612.
751 config CRYPTO_CAST6_AVX_X86_64
752 tristate "CAST6 (CAST-256) cipher algorithm (x86_64/AVX)"
753 depends on X86 && 64BIT
756 select CRYPTO_ABLK_HELPER_X86
757 select CRYPTO_GLUE_HELPER_X86
762 The CAST6 encryption algorithm (synonymous with CAST-256) is
763 described in RFC2612.
765 This module provides the Cast6 cipher algorithm that processes
766 eight blocks parallel using the AVX instruction set.
769 tristate "DES and Triple DES EDE cipher algorithms"
772 DES cipher algorithm (FIPS 46-2), and Triple DES EDE (FIPS 46-3).
775 tristate "FCrypt cipher algorithm"
777 select CRYPTO_BLKCIPHER
779 FCrypt algorithm used by RxRPC.
782 tristate "Khazad cipher algorithm"
785 Khazad cipher algorithm.
787 Khazad was a finalist in the initial NESSIE competition. It is
788 an algorithm optimized for 64-bit processors with good performance
789 on 32-bit processors. Khazad uses an 128 bit key size.
792 <http://www.larc.usp.br/~pbarreto/KhazadPage.html>
794 config CRYPTO_SALSA20
795 tristate "Salsa20 stream cipher algorithm (EXPERIMENTAL)"
796 depends on EXPERIMENTAL
797 select CRYPTO_BLKCIPHER
799 Salsa20 stream cipher algorithm.
801 Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
802 Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
804 The Salsa20 stream cipher algorithm is designed by Daniel J.
805 Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
807 config CRYPTO_SALSA20_586
808 tristate "Salsa20 stream cipher algorithm (i586) (EXPERIMENTAL)"
809 depends on (X86 || UML_X86) && !64BIT
810 depends on EXPERIMENTAL
811 select CRYPTO_BLKCIPHER
813 Salsa20 stream cipher algorithm.
815 Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
816 Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
818 The Salsa20 stream cipher algorithm is designed by Daniel J.
819 Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
821 config CRYPTO_SALSA20_X86_64
822 tristate "Salsa20 stream cipher algorithm (x86_64) (EXPERIMENTAL)"
823 depends on (X86 || UML_X86) && 64BIT
824 depends on EXPERIMENTAL
825 select CRYPTO_BLKCIPHER
827 Salsa20 stream cipher algorithm.
829 Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
830 Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
832 The Salsa20 stream cipher algorithm is designed by Daniel J.
833 Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
836 tristate "SEED cipher algorithm"
839 SEED cipher algorithm (RFC4269).
841 SEED is a 128-bit symmetric key block cipher that has been
842 developed by KISA (Korea Information Security Agency) as a
843 national standard encryption algorithm of the Republic of Korea.
844 It is a 16 round block cipher with the key size of 128 bit.
847 <http://www.kisa.or.kr/kisa/seed/jsp/seed_eng.jsp>
849 config CRYPTO_SERPENT
850 tristate "Serpent cipher algorithm"
853 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
855 Keys are allowed to be from 0 to 256 bits in length, in steps
856 of 8 bits. Also includes the 'Tnepres' algorithm, a reversed
857 variant of Serpent for compatibility with old kerneli.org code.
860 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
862 config CRYPTO_SERPENT_SSE2_X86_64
863 tristate "Serpent cipher algorithm (x86_64/SSE2)"
864 depends on X86 && 64BIT
867 select CRYPTO_ABLK_HELPER_X86
868 select CRYPTO_GLUE_HELPER_X86
869 select CRYPTO_SERPENT
873 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
875 Keys are allowed to be from 0 to 256 bits in length, in steps
878 This module provides Serpent cipher algorithm that processes eigth
879 blocks parallel using SSE2 instruction set.
882 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
884 config CRYPTO_SERPENT_SSE2_586
885 tristate "Serpent cipher algorithm (i586/SSE2)"
886 depends on X86 && !64BIT
889 select CRYPTO_ABLK_HELPER_X86
890 select CRYPTO_GLUE_HELPER_X86
891 select CRYPTO_SERPENT
895 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
897 Keys are allowed to be from 0 to 256 bits in length, in steps
900 This module provides Serpent cipher algorithm that processes four
901 blocks parallel using SSE2 instruction set.
904 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
906 config CRYPTO_SERPENT_AVX_X86_64
907 tristate "Serpent cipher algorithm (x86_64/AVX)"
908 depends on X86 && 64BIT
911 select CRYPTO_ABLK_HELPER_X86
912 select CRYPTO_GLUE_HELPER_X86
913 select CRYPTO_SERPENT
917 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
919 Keys are allowed to be from 0 to 256 bits in length, in steps
922 This module provides the Serpent cipher algorithm that processes
923 eight blocks parallel using the AVX instruction set.
926 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
929 tristate "TEA, XTEA and XETA cipher algorithms"
932 TEA cipher algorithm.
934 Tiny Encryption Algorithm is a simple cipher that uses
935 many rounds for security. It is very fast and uses
938 Xtendend Tiny Encryption Algorithm is a modification to
939 the TEA algorithm to address a potential key weakness
940 in the TEA algorithm.
942 Xtendend Encryption Tiny Algorithm is a mis-implementation
943 of the XTEA algorithm for compatibility purposes.
945 config CRYPTO_TWOFISH
946 tristate "Twofish cipher algorithm"
948 select CRYPTO_TWOFISH_COMMON
950 Twofish cipher algorithm.
952 Twofish was submitted as an AES (Advanced Encryption Standard)
953 candidate cipher by researchers at CounterPane Systems. It is a
954 16 round block cipher supporting key sizes of 128, 192, and 256
958 <http://www.schneier.com/twofish.html>
960 config CRYPTO_TWOFISH_COMMON
963 Common parts of the Twofish cipher algorithm shared by the
964 generic c and the assembler implementations.
966 config CRYPTO_TWOFISH_586
967 tristate "Twofish cipher algorithms (i586)"
968 depends on (X86 || UML_X86) && !64BIT
970 select CRYPTO_TWOFISH_COMMON
972 Twofish cipher algorithm.
974 Twofish was submitted as an AES (Advanced Encryption Standard)
975 candidate cipher by researchers at CounterPane Systems. It is a
976 16 round block cipher supporting key sizes of 128, 192, and 256
980 <http://www.schneier.com/twofish.html>
982 config CRYPTO_TWOFISH_X86_64
983 tristate "Twofish cipher algorithm (x86_64)"
984 depends on (X86 || UML_X86) && 64BIT
986 select CRYPTO_TWOFISH_COMMON
988 Twofish cipher algorithm (x86_64).
990 Twofish was submitted as an AES (Advanced Encryption Standard)
991 candidate cipher by researchers at CounterPane Systems. It is a
992 16 round block cipher supporting key sizes of 128, 192, and 256
996 <http://www.schneier.com/twofish.html>
998 config CRYPTO_TWOFISH_X86_64_3WAY
999 tristate "Twofish cipher algorithm (x86_64, 3-way parallel)"
1000 depends on X86 && 64BIT
1001 select CRYPTO_ALGAPI
1002 select CRYPTO_TWOFISH_COMMON
1003 select CRYPTO_TWOFISH_X86_64
1004 select CRYPTO_GLUE_HELPER_X86
1008 Twofish cipher algorithm (x86_64, 3-way parallel).
1010 Twofish was submitted as an AES (Advanced Encryption Standard)
1011 candidate cipher by researchers at CounterPane Systems. It is a
1012 16 round block cipher supporting key sizes of 128, 192, and 256
1015 This module provides Twofish cipher algorithm that processes three
1016 blocks parallel, utilizing resources of out-of-order CPUs better.
1019 <http://www.schneier.com/twofish.html>
1021 config CRYPTO_TWOFISH_AVX_X86_64
1022 tristate "Twofish cipher algorithm (x86_64/AVX)"
1023 depends on X86 && 64BIT
1024 select CRYPTO_ALGAPI
1025 select CRYPTO_CRYPTD
1026 select CRYPTO_ABLK_HELPER_X86
1027 select CRYPTO_GLUE_HELPER_X86
1028 select CRYPTO_TWOFISH_COMMON
1029 select CRYPTO_TWOFISH_X86_64
1030 select CRYPTO_TWOFISH_X86_64_3WAY
1034 Twofish cipher algorithm (x86_64/AVX).
1036 Twofish was submitted as an AES (Advanced Encryption Standard)
1037 candidate cipher by researchers at CounterPane Systems. It is a
1038 16 round block cipher supporting key sizes of 128, 192, and 256
1041 This module provides the Twofish cipher algorithm that processes
1042 eight blocks parallel using the AVX Instruction Set.
1045 <http://www.schneier.com/twofish.html>
1047 comment "Compression"
1049 config CRYPTO_DEFLATE
1050 tristate "Deflate compression algorithm"
1051 select CRYPTO_ALGAPI
1055 This is the Deflate algorithm (RFC1951), specified for use in
1056 IPSec with the IPCOMP protocol (RFC3173, RFC2394).
1058 You will most probably want this if using IPSec.
1061 tristate "Zlib compression algorithm"
1067 This is the zlib algorithm.
1070 tristate "LZO compression algorithm"
1071 select CRYPTO_ALGAPI
1073 select LZO_DECOMPRESS
1075 This is the LZO algorithm.
1078 tristate "842 compression algorithm"
1079 depends on CRYPTO_DEV_NX_COMPRESS
1080 # 842 uses lzo if the hardware becomes unavailable
1082 select LZO_DECOMPRESS
1084 This is the 842 algorithm.
1086 comment "Random Number Generation"
1088 config CRYPTO_ANSI_CPRNG
1089 tristate "Pseudo Random Number Generation for Cryptographic modules"
1094 This option enables the generic pseudo random number generator
1095 for cryptographic modules. Uses the Algorithm specified in
1096 ANSI X9.31 A.2.4. Note that this option must be enabled if
1097 CRYPTO_FIPS is selected
1099 config CRYPTO_USER_API
1102 config CRYPTO_USER_API_HASH
1103 tristate "User-space interface for hash algorithms"
1106 select CRYPTO_USER_API
1108 This option enables the user-spaces interface for hash
1111 config CRYPTO_USER_API_SKCIPHER
1112 tristate "User-space interface for symmetric key cipher algorithms"
1114 select CRYPTO_BLKCIPHER
1115 select CRYPTO_USER_API
1117 This option enables the user-spaces interface for symmetric
1118 key cipher algorithms.
1120 source "drivers/crypto/Kconfig"