2 # Generic algorithms support
8 # async_tx api: hardware offloaded memory transfer/transform support
10 source "crypto/async_tx/Kconfig"
13 # Cryptographic API Configuration
16 tristate "Cryptographic API"
18 This option provides the core Cryptographic API.
22 comment "Crypto core or helper"
25 bool "FIPS 200 compliance"
26 depends on CRYPTO_ANSI_CPRNG && !CRYPTO_MANAGER_DISABLE_TESTS
28 This options enables the fips boot option which is
29 required if you want to system to operate in a FIPS 200
30 certification. You should say no unless you know what
37 This option provides the API for cryptographic algorithms.
51 config CRYPTO_BLKCIPHER
53 select CRYPTO_BLKCIPHER2
56 config CRYPTO_BLKCIPHER2
60 select CRYPTO_WORKQUEUE
90 tristate "Cryptographic algorithm manager"
91 select CRYPTO_MANAGER2
93 Create default cryptographic template instantiations such as
96 config CRYPTO_MANAGER2
97 def_tristate CRYPTO_MANAGER || (CRYPTO_MANAGER!=n && CRYPTO_ALGAPI=y)
100 select CRYPTO_BLKCIPHER2
104 tristate "Userspace cryptographic algorithm configuration"
106 select CRYPTO_MANAGER
108 Userspace configuration for cryptographic instantiations such as
111 config CRYPTO_MANAGER_DISABLE_TESTS
112 bool "Disable run-time self tests"
114 depends on CRYPTO_MANAGER2
116 Disable run-time self tests that normally take place at
117 algorithm registration.
119 config CRYPTO_GF128MUL
120 tristate "GF(2^128) multiplication functions"
122 Efficient table driven implementation of multiplications in the
123 field GF(2^128). This is needed by some cypher modes. This
124 option will be selected automatically if you select such a
125 cipher mode. Only select this option by hand if you expect to load
126 an external module that requires these functions.
129 tristate "Null algorithms"
131 select CRYPTO_BLKCIPHER
134 These are 'Null' algorithms, used by IPsec, which do nothing.
137 tristate "Parallel crypto engine"
140 select CRYPTO_MANAGER
143 This converts an arbitrary crypto algorithm into a parallel
144 algorithm that executes in kernel threads.
146 config CRYPTO_WORKQUEUE
150 tristate "Software async crypto daemon"
151 select CRYPTO_BLKCIPHER
153 select CRYPTO_MANAGER
154 select CRYPTO_WORKQUEUE
156 This is a generic software asynchronous crypto daemon that
157 converts an arbitrary synchronous software crypto algorithm
158 into an asynchronous algorithm that executes in a kernel thread.
160 config CRYPTO_AUTHENC
161 tristate "Authenc support"
163 select CRYPTO_BLKCIPHER
164 select CRYPTO_MANAGER
167 Authenc: Combined mode wrapper for IPsec.
168 This is required for IPSec.
171 tristate "Testing module"
173 select CRYPTO_MANAGER
175 Quick & dirty crypto test module.
177 config CRYPTO_ABLK_HELPER_X86
182 config CRYPTO_GLUE_HELPER_X86
187 comment "Authenticated Encryption with Associated Data"
190 tristate "CCM support"
194 Support for Counter with CBC MAC. Required for IPsec.
197 tristate "GCM/GMAC support"
203 Support for Galois/Counter Mode (GCM) and Galois Message
204 Authentication Code (GMAC). Required for IPSec.
207 tristate "Sequence Number IV Generator"
209 select CRYPTO_BLKCIPHER
212 This IV generator generates an IV based on a sequence number by
213 xoring it with a salt. This algorithm is mainly useful for CTR
215 comment "Block modes"
218 tristate "CBC support"
219 select CRYPTO_BLKCIPHER
220 select CRYPTO_MANAGER
222 CBC: Cipher Block Chaining mode
223 This block cipher algorithm is required for IPSec.
226 tristate "CTR support"
227 select CRYPTO_BLKCIPHER
229 select CRYPTO_MANAGER
232 This block cipher algorithm is required for IPSec.
235 tristate "CTS support"
236 select CRYPTO_BLKCIPHER
238 CTS: Cipher Text Stealing
239 This is the Cipher Text Stealing mode as described by
240 Section 8 of rfc2040 and referenced by rfc3962.
241 (rfc3962 includes errata information in its Appendix A)
242 This mode is required for Kerberos gss mechanism support
246 tristate "ECB support"
247 select CRYPTO_BLKCIPHER
248 select CRYPTO_MANAGER
250 ECB: Electronic CodeBook mode
251 This is the simplest block cipher algorithm. It simply encrypts
252 the input block by block.
255 tristate "LRW support"
256 select CRYPTO_BLKCIPHER
257 select CRYPTO_MANAGER
258 select CRYPTO_GF128MUL
260 LRW: Liskov Rivest Wagner, a tweakable, non malleable, non movable
261 narrow block cipher mode for dm-crypt. Use it with cipher
262 specification string aes-lrw-benbi, the key must be 256, 320 or 384.
263 The first 128, 192 or 256 bits in the key are used for AES and the
264 rest is used to tie each cipher block to its logical position.
267 tristate "PCBC support"
268 select CRYPTO_BLKCIPHER
269 select CRYPTO_MANAGER
271 PCBC: Propagating Cipher Block Chaining mode
272 This block cipher algorithm is required for RxRPC.
275 tristate "XTS support"
276 select CRYPTO_BLKCIPHER
277 select CRYPTO_MANAGER
278 select CRYPTO_GF128MUL
280 XTS: IEEE1619/D16 narrow block cipher use with aes-xts-plain,
281 key size 256, 384 or 512 bits. This implementation currently
282 can't handle a sectorsize which is not a multiple of 16 bytes.
287 tristate "CMAC support"
289 select CRYPTO_MANAGER
291 Cipher-based Message Authentication Code (CMAC) specified by
292 The National Institute of Standards and Technology (NIST).
294 https://tools.ietf.org/html/rfc4493
295 http://csrc.nist.gov/publications/nistpubs/800-38B/SP_800-38B.pdf
298 tristate "HMAC support"
300 select CRYPTO_MANAGER
302 HMAC: Keyed-Hashing for Message Authentication (RFC2104).
303 This is required for IPSec.
306 tristate "XCBC support"
308 select CRYPTO_MANAGER
310 XCBC: Keyed-Hashing with encryption algorithm
311 http://www.ietf.org/rfc/rfc3566.txt
312 http://csrc.nist.gov/encryption/modes/proposedmodes/
313 xcbc-mac/xcbc-mac-spec.pdf
316 tristate "VMAC support"
318 select CRYPTO_MANAGER
320 VMAC is a message authentication algorithm designed for
321 very high speed on 64-bit architectures.
324 <http://fastcrypto.org/vmac>
329 tristate "CRC32c CRC algorithm"
333 Castagnoli, et al Cyclic Redundancy-Check Algorithm. Used
334 by iSCSI for header and data digests and by others.
335 See Castagnoli93. Module will be crc32c.
337 config CRYPTO_CRC32C_INTEL
338 tristate "CRC32c INTEL hardware acceleration"
342 In Intel processor with SSE4.2 supported, the processor will
343 support CRC32C implementation using hardware accelerated CRC32
344 instruction. This option will create 'crc32c-intel' module,
345 which will enable any routine to use the CRC32 instruction to
346 gain performance compared with software implementation.
347 Module will be crc32c-intel.
349 config CRYPTO_CRC32C_SPARC64
350 tristate "CRC32c CRC algorithm (SPARC64)"
355 CRC32c CRC algorithm implemented using sparc64 crypto instructions,
359 tristate "CRC32 CRC algorithm"
363 CRC-32-IEEE 802.3 cyclic redundancy-check algorithm.
364 Shash crypto api wrappers to crc32_le function.
366 config CRYPTO_CRC32_PCLMUL
367 tristate "CRC32 PCLMULQDQ hardware acceleration"
372 From Intel Westmere and AMD Bulldozer processor with SSE4.2
373 and PCLMULQDQ supported, the processor will support
374 CRC32 PCLMULQDQ implementation using hardware accelerated PCLMULQDQ
375 instruction. This option will create 'crc32-plcmul' module,
376 which will enable any routine to use the CRC-32-IEEE 802.3 checksum
377 and gain better performance as compared with the table implementation.
380 tristate "GHASH digest algorithm"
381 select CRYPTO_GF128MUL
383 GHASH is message digest algorithm for GCM (Galois/Counter Mode).
386 tristate "MD4 digest algorithm"
389 MD4 message digest algorithm (RFC1320).
392 tristate "MD5 digest algorithm"
395 MD5 message digest algorithm (RFC1321).
397 config CRYPTO_MD5_SPARC64
398 tristate "MD5 digest algorithm (SPARC64)"
403 MD5 message digest algorithm (RFC1321) implemented
404 using sparc64 crypto instructions, when available.
406 config CRYPTO_MICHAEL_MIC
407 tristate "Michael MIC keyed digest algorithm"
410 Michael MIC is used for message integrity protection in TKIP
411 (IEEE 802.11i). This algorithm is required for TKIP, but it
412 should not be used for other purposes because of the weakness
416 tristate "RIPEMD-128 digest algorithm"
419 RIPEMD-128 (ISO/IEC 10118-3:2004).
421 RIPEMD-128 is a 128-bit cryptographic hash function. It should only
422 be used as a secure replacement for RIPEMD. For other use cases,
423 RIPEMD-160 should be used.
425 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
426 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
429 tristate "RIPEMD-160 digest algorithm"
432 RIPEMD-160 (ISO/IEC 10118-3:2004).
434 RIPEMD-160 is a 160-bit cryptographic hash function. It is intended
435 to be used as a secure replacement for the 128-bit hash functions
436 MD4, MD5 and it's predecessor RIPEMD
437 (not to be confused with RIPEMD-128).
439 It's speed is comparable to SHA1 and there are no known attacks
442 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
443 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
446 tristate "RIPEMD-256 digest algorithm"
449 RIPEMD-256 is an optional extension of RIPEMD-128 with a
450 256 bit hash. It is intended for applications that require
451 longer hash-results, without needing a larger security level
454 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
455 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
458 tristate "RIPEMD-320 digest algorithm"
461 RIPEMD-320 is an optional extension of RIPEMD-160 with a
462 320 bit hash. It is intended for applications that require
463 longer hash-results, without needing a larger security level
466 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
467 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
470 tristate "SHA1 digest algorithm"
473 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2).
475 config CRYPTO_SHA1_SSSE3
476 tristate "SHA1 digest algorithm (SSSE3/AVX)"
477 depends on X86 && 64BIT
481 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented
482 using Supplemental SSE3 (SSSE3) instructions or Advanced Vector
483 Extensions (AVX), when available.
485 config CRYPTO_SHA256_SSSE3
486 tristate "SHA256 digest algorithm (SSSE3/AVX/AVX2)"
487 depends on X86 && 64BIT
491 SHA-256 secure hash standard (DFIPS 180-2) implemented
492 using Supplemental SSE3 (SSSE3) instructions, or Advanced Vector
493 Extensions version 1 (AVX1), or Advanced Vector Extensions
494 version 2 (AVX2) instructions, when available.
496 config CRYPTO_SHA512_SSSE3
497 tristate "SHA512 digest algorithm (SSSE3/AVX/AVX2)"
498 depends on X86 && 64BIT
502 SHA-512 secure hash standard (DFIPS 180-2) implemented
503 using Supplemental SSE3 (SSSE3) instructions, or Advanced Vector
504 Extensions version 1 (AVX1), or Advanced Vector Extensions
505 version 2 (AVX2) instructions, when available.
507 config CRYPTO_SHA1_SPARC64
508 tristate "SHA1 digest algorithm (SPARC64)"
513 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented
514 using sparc64 crypto instructions, when available.
516 config CRYPTO_SHA1_ARM
517 tristate "SHA1 digest algorithm (ARM-asm)"
522 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented
523 using optimized ARM assembler.
525 config CRYPTO_SHA1_PPC
526 tristate "SHA1 digest algorithm (powerpc)"
529 This is the powerpc hardware accelerated implementation of the
530 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2).
533 tristate "SHA224 and SHA256 digest algorithm"
536 SHA256 secure hash standard (DFIPS 180-2).
538 This version of SHA implements a 256 bit hash with 128 bits of
539 security against collision attacks.
541 This code also includes SHA-224, a 224 bit hash with 112 bits
542 of security against collision attacks.
544 config CRYPTO_SHA256_SPARC64
545 tristate "SHA224 and SHA256 digest algorithm (SPARC64)"
550 SHA-256 secure hash standard (DFIPS 180-2) implemented
551 using sparc64 crypto instructions, when available.
554 tristate "SHA384 and SHA512 digest algorithms"
557 SHA512 secure hash standard (DFIPS 180-2).
559 This version of SHA implements a 512 bit hash with 256 bits of
560 security against collision attacks.
562 This code also includes SHA-384, a 384 bit hash with 192 bits
563 of security against collision attacks.
565 config CRYPTO_SHA512_SPARC64
566 tristate "SHA384 and SHA512 digest algorithm (SPARC64)"
571 SHA-512 secure hash standard (DFIPS 180-2) implemented
572 using sparc64 crypto instructions, when available.
575 tristate "Tiger digest algorithms"
578 Tiger hash algorithm 192, 160 and 128-bit hashes
580 Tiger is a hash function optimized for 64-bit processors while
581 still having decent performance on 32-bit processors.
582 Tiger was developed by Ross Anderson and Eli Biham.
585 <http://www.cs.technion.ac.il/~biham/Reports/Tiger/>.
588 tristate "Whirlpool digest algorithms"
591 Whirlpool hash algorithm 512, 384 and 256-bit hashes
593 Whirlpool-512 is part of the NESSIE cryptographic primitives.
594 Whirlpool will be part of the ISO/IEC 10118-3:2003(E) standard
597 <http://www.larc.usp.br/~pbarreto/WhirlpoolPage.html>
599 config CRYPTO_GHASH_CLMUL_NI_INTEL
600 tristate "GHASH digest algorithm (CLMUL-NI accelerated)"
601 depends on X86 && 64BIT
604 GHASH is message digest algorithm for GCM (Galois/Counter Mode).
605 The implementation is accelerated by CLMUL-NI of Intel.
610 tristate "AES cipher algorithms"
613 AES cipher algorithms (FIPS-197). AES uses the Rijndael
616 Rijndael appears to be consistently a very good performer in
617 both hardware and software across a wide range of computing
618 environments regardless of its use in feedback or non-feedback
619 modes. Its key setup time is excellent, and its key agility is
620 good. Rijndael's very low memory requirements make it very well
621 suited for restricted-space environments, in which it also
622 demonstrates excellent performance. Rijndael's operations are
623 among the easiest to defend against power and timing attacks.
625 The AES specifies three key sizes: 128, 192 and 256 bits
627 See <http://csrc.nist.gov/CryptoToolkit/aes/> for more information.
629 config CRYPTO_AES_586
630 tristate "AES cipher algorithms (i586)"
631 depends on (X86 || UML_X86) && !64BIT
635 AES cipher algorithms (FIPS-197). AES uses the Rijndael
638 Rijndael appears to be consistently a very good performer in
639 both hardware and software across a wide range of computing
640 environments regardless of its use in feedback or non-feedback
641 modes. Its key setup time is excellent, and its key agility is
642 good. Rijndael's very low memory requirements make it very well
643 suited for restricted-space environments, in which it also
644 demonstrates excellent performance. Rijndael's operations are
645 among the easiest to defend against power and timing attacks.
647 The AES specifies three key sizes: 128, 192 and 256 bits
649 See <http://csrc.nist.gov/encryption/aes/> for more information.
651 config CRYPTO_AES_X86_64
652 tristate "AES cipher algorithms (x86_64)"
653 depends on (X86 || UML_X86) && 64BIT
657 AES cipher algorithms (FIPS-197). AES uses the Rijndael
660 Rijndael appears to be consistently a very good performer in
661 both hardware and software across a wide range of computing
662 environments regardless of its use in feedback or non-feedback
663 modes. Its key setup time is excellent, and its key agility is
664 good. Rijndael's very low memory requirements make it very well
665 suited for restricted-space environments, in which it also
666 demonstrates excellent performance. Rijndael's operations are
667 among the easiest to defend against power and timing attacks.
669 The AES specifies three key sizes: 128, 192 and 256 bits
671 See <http://csrc.nist.gov/encryption/aes/> for more information.
673 config CRYPTO_AES_NI_INTEL
674 tristate "AES cipher algorithms (AES-NI)"
676 select CRYPTO_AES_X86_64 if 64BIT
677 select CRYPTO_AES_586 if !64BIT
679 select CRYPTO_ABLK_HELPER_X86
681 select CRYPTO_GLUE_HELPER_X86 if 64BIT
685 Use Intel AES-NI instructions for AES algorithm.
687 AES cipher algorithms (FIPS-197). AES uses the Rijndael
690 Rijndael appears to be consistently a very good performer in
691 both hardware and software across a wide range of computing
692 environments regardless of its use in feedback or non-feedback
693 modes. Its key setup time is excellent, and its key agility is
694 good. Rijndael's very low memory requirements make it very well
695 suited for restricted-space environments, in which it also
696 demonstrates excellent performance. Rijndael's operations are
697 among the easiest to defend against power and timing attacks.
699 The AES specifies three key sizes: 128, 192 and 256 bits
701 See <http://csrc.nist.gov/encryption/aes/> for more information.
703 In addition to AES cipher algorithm support, the acceleration
704 for some popular block cipher mode is supported too, including
705 ECB, CBC, LRW, PCBC, XTS. The 64 bit version has additional
706 acceleration for CTR.
708 config CRYPTO_AES_SPARC64
709 tristate "AES cipher algorithms (SPARC64)"
714 Use SPARC64 crypto opcodes for AES algorithm.
716 AES cipher algorithms (FIPS-197). AES uses the Rijndael
719 Rijndael appears to be consistently a very good performer in
720 both hardware and software across a wide range of computing
721 environments regardless of its use in feedback or non-feedback
722 modes. Its key setup time is excellent, and its key agility is
723 good. Rijndael's very low memory requirements make it very well
724 suited for restricted-space environments, in which it also
725 demonstrates excellent performance. Rijndael's operations are
726 among the easiest to defend against power and timing attacks.
728 The AES specifies three key sizes: 128, 192 and 256 bits
730 See <http://csrc.nist.gov/encryption/aes/> for more information.
732 In addition to AES cipher algorithm support, the acceleration
733 for some popular block cipher mode is supported too, including
736 config CRYPTO_AES_ARM
737 tristate "AES cipher algorithms (ARM-asm)"
742 Use optimized AES assembler routines for ARM platforms.
744 AES cipher algorithms (FIPS-197). AES uses the Rijndael
747 Rijndael appears to be consistently a very good performer in
748 both hardware and software across a wide range of computing
749 environments regardless of its use in feedback or non-feedback
750 modes. Its key setup time is excellent, and its key agility is
751 good. Rijndael's very low memory requirements make it very well
752 suited for restricted-space environments, in which it also
753 demonstrates excellent performance. Rijndael's operations are
754 among the easiest to defend against power and timing attacks.
756 The AES specifies three key sizes: 128, 192 and 256 bits
758 See <http://csrc.nist.gov/encryption/aes/> for more information.
761 tristate "Anubis cipher algorithm"
764 Anubis cipher algorithm.
766 Anubis is a variable key length cipher which can use keys from
767 128 bits to 320 bits in length. It was evaluated as a entrant
768 in the NESSIE competition.
771 <https://www.cosic.esat.kuleuven.be/nessie/reports/>
772 <http://www.larc.usp.br/~pbarreto/AnubisPage.html>
775 tristate "ARC4 cipher algorithm"
776 select CRYPTO_BLKCIPHER
778 ARC4 cipher algorithm.
780 ARC4 is a stream cipher using keys ranging from 8 bits to 2048
781 bits in length. This algorithm is required for driver-based
782 WEP, but it should not be for other purposes because of the
783 weakness of the algorithm.
785 config CRYPTO_BLOWFISH
786 tristate "Blowfish cipher algorithm"
788 select CRYPTO_BLOWFISH_COMMON
790 Blowfish cipher algorithm, by Bruce Schneier.
792 This is a variable key length cipher which can use keys from 32
793 bits to 448 bits in length. It's fast, simple and specifically
794 designed for use on "large microprocessors".
797 <http://www.schneier.com/blowfish.html>
799 config CRYPTO_BLOWFISH_COMMON
802 Common parts of the Blowfish cipher algorithm shared by the
803 generic c and the assembler implementations.
806 <http://www.schneier.com/blowfish.html>
808 config CRYPTO_BLOWFISH_X86_64
809 tristate "Blowfish cipher algorithm (x86_64)"
810 depends on X86 && 64BIT
812 select CRYPTO_BLOWFISH_COMMON
814 Blowfish cipher algorithm (x86_64), by Bruce Schneier.
816 This is a variable key length cipher which can use keys from 32
817 bits to 448 bits in length. It's fast, simple and specifically
818 designed for use on "large microprocessors".
821 <http://www.schneier.com/blowfish.html>
823 config CRYPTO_BLOWFISH_AVX2_X86_64
824 tristate "Blowfish cipher algorithm (x86_64/AVX2)"
825 depends on X86 && 64BIT
828 select CRYPTO_ABLK_HELPER_X86
829 select CRYPTO_BLOWFISH_COMMON
830 select CRYPTO_BLOWFISH_X86_64
832 Blowfish cipher algorithm (x86_64/AVX2), by Bruce Schneier.
834 This is a variable key length cipher which can use keys from 32
835 bits to 448 bits in length. It's fast, simple and specifically
836 designed for use on "large microprocessors".
839 <http://www.schneier.com/blowfish.html>
841 config CRYPTO_CAMELLIA
842 tristate "Camellia cipher algorithms"
846 Camellia cipher algorithms module.
848 Camellia is a symmetric key block cipher developed jointly
849 at NTT and Mitsubishi Electric Corporation.
851 The Camellia specifies three key sizes: 128, 192 and 256 bits.
854 <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
856 config CRYPTO_CAMELLIA_X86_64
857 tristate "Camellia cipher algorithm (x86_64)"
858 depends on X86 && 64BIT
861 select CRYPTO_GLUE_HELPER_X86
865 Camellia cipher algorithm module (x86_64).
867 Camellia is a symmetric key block cipher developed jointly
868 at NTT and Mitsubishi Electric Corporation.
870 The Camellia specifies three key sizes: 128, 192 and 256 bits.
873 <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
875 config CRYPTO_CAMELLIA_AESNI_AVX_X86_64
876 tristate "Camellia cipher algorithm (x86_64/AES-NI/AVX)"
877 depends on X86 && 64BIT
881 select CRYPTO_ABLK_HELPER_X86
882 select CRYPTO_GLUE_HELPER_X86
883 select CRYPTO_CAMELLIA_X86_64
887 Camellia cipher algorithm module (x86_64/AES-NI/AVX).
889 Camellia is a symmetric key block cipher developed jointly
890 at NTT and Mitsubishi Electric Corporation.
892 The Camellia specifies three key sizes: 128, 192 and 256 bits.
895 <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
897 config CRYPTO_CAMELLIA_SPARC64
898 tristate "Camellia cipher algorithm (SPARC64)"
903 Camellia cipher algorithm module (SPARC64).
905 Camellia is a symmetric key block cipher developed jointly
906 at NTT and Mitsubishi Electric Corporation.
908 The Camellia specifies three key sizes: 128, 192 and 256 bits.
911 <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
913 config CRYPTO_CAST_COMMON
916 Common parts of the CAST cipher algorithms shared by the
917 generic c and the assembler implementations.
920 tristate "CAST5 (CAST-128) cipher algorithm"
922 select CRYPTO_CAST_COMMON
924 The CAST5 encryption algorithm (synonymous with CAST-128) is
925 described in RFC2144.
927 config CRYPTO_CAST5_AVX_X86_64
928 tristate "CAST5 (CAST-128) cipher algorithm (x86_64/AVX)"
929 depends on X86 && 64BIT
932 select CRYPTO_ABLK_HELPER_X86
933 select CRYPTO_CAST_COMMON
936 The CAST5 encryption algorithm (synonymous with CAST-128) is
937 described in RFC2144.
939 This module provides the Cast5 cipher algorithm that processes
940 sixteen blocks parallel using the AVX instruction set.
943 tristate "CAST6 (CAST-256) cipher algorithm"
945 select CRYPTO_CAST_COMMON
947 The CAST6 encryption algorithm (synonymous with CAST-256) is
948 described in RFC2612.
950 config CRYPTO_CAST6_AVX_X86_64
951 tristate "CAST6 (CAST-256) cipher algorithm (x86_64/AVX)"
952 depends on X86 && 64BIT
955 select CRYPTO_ABLK_HELPER_X86
956 select CRYPTO_GLUE_HELPER_X86
957 select CRYPTO_CAST_COMMON
962 The CAST6 encryption algorithm (synonymous with CAST-256) is
963 described in RFC2612.
965 This module provides the Cast6 cipher algorithm that processes
966 eight blocks parallel using the AVX instruction set.
969 tristate "DES and Triple DES EDE cipher algorithms"
972 DES cipher algorithm (FIPS 46-2), and Triple DES EDE (FIPS 46-3).
974 config CRYPTO_DES_SPARC64
975 tristate "DES and Triple DES EDE cipher algorithms (SPARC64)"
980 DES cipher algorithm (FIPS 46-2), and Triple DES EDE (FIPS 46-3),
981 optimized using SPARC64 crypto opcodes.
984 tristate "FCrypt cipher algorithm"
986 select CRYPTO_BLKCIPHER
988 FCrypt algorithm used by RxRPC.
991 tristate "Khazad cipher algorithm"
994 Khazad cipher algorithm.
996 Khazad was a finalist in the initial NESSIE competition. It is
997 an algorithm optimized for 64-bit processors with good performance
998 on 32-bit processors. Khazad uses an 128 bit key size.
1001 <http://www.larc.usp.br/~pbarreto/KhazadPage.html>
1003 config CRYPTO_SALSA20
1004 tristate "Salsa20 stream cipher algorithm"
1005 select CRYPTO_BLKCIPHER
1007 Salsa20 stream cipher algorithm.
1009 Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
1010 Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
1012 The Salsa20 stream cipher algorithm is designed by Daniel J.
1013 Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
1015 config CRYPTO_SALSA20_586
1016 tristate "Salsa20 stream cipher algorithm (i586)"
1017 depends on (X86 || UML_X86) && !64BIT
1018 select CRYPTO_BLKCIPHER
1020 Salsa20 stream cipher algorithm.
1022 Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
1023 Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
1025 The Salsa20 stream cipher algorithm is designed by Daniel J.
1026 Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
1028 config CRYPTO_SALSA20_X86_64
1029 tristate "Salsa20 stream cipher algorithm (x86_64)"
1030 depends on (X86 || UML_X86) && 64BIT
1031 select CRYPTO_BLKCIPHER
1033 Salsa20 stream cipher algorithm.
1035 Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
1036 Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
1038 The Salsa20 stream cipher algorithm is designed by Daniel J.
1039 Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
1042 tristate "SEED cipher algorithm"
1043 select CRYPTO_ALGAPI
1045 SEED cipher algorithm (RFC4269).
1047 SEED is a 128-bit symmetric key block cipher that has been
1048 developed by KISA (Korea Information Security Agency) as a
1049 national standard encryption algorithm of the Republic of Korea.
1050 It is a 16 round block cipher with the key size of 128 bit.
1053 <http://www.kisa.or.kr/kisa/seed/jsp/seed_eng.jsp>
1055 config CRYPTO_SERPENT
1056 tristate "Serpent cipher algorithm"
1057 select CRYPTO_ALGAPI
1059 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
1061 Keys are allowed to be from 0 to 256 bits in length, in steps
1062 of 8 bits. Also includes the 'Tnepres' algorithm, a reversed
1063 variant of Serpent for compatibility with old kerneli.org code.
1066 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
1068 config CRYPTO_SERPENT_SSE2_X86_64
1069 tristate "Serpent cipher algorithm (x86_64/SSE2)"
1070 depends on X86 && 64BIT
1071 select CRYPTO_ALGAPI
1072 select CRYPTO_CRYPTD
1073 select CRYPTO_ABLK_HELPER_X86
1074 select CRYPTO_GLUE_HELPER_X86
1075 select CRYPTO_SERPENT
1079 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
1081 Keys are allowed to be from 0 to 256 bits in length, in steps
1084 This module provides Serpent cipher algorithm that processes eigth
1085 blocks parallel using SSE2 instruction set.
1088 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
1090 config CRYPTO_SERPENT_SSE2_586
1091 tristate "Serpent cipher algorithm (i586/SSE2)"
1092 depends on X86 && !64BIT
1093 select CRYPTO_ALGAPI
1094 select CRYPTO_CRYPTD
1095 select CRYPTO_ABLK_HELPER_X86
1096 select CRYPTO_GLUE_HELPER_X86
1097 select CRYPTO_SERPENT
1101 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
1103 Keys are allowed to be from 0 to 256 bits in length, in steps
1106 This module provides Serpent cipher algorithm that processes four
1107 blocks parallel using SSE2 instruction set.
1110 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
1112 config CRYPTO_SERPENT_AVX_X86_64
1113 tristate "Serpent cipher algorithm (x86_64/AVX)"
1114 depends on X86 && 64BIT
1115 select CRYPTO_ALGAPI
1116 select CRYPTO_CRYPTD
1117 select CRYPTO_ABLK_HELPER_X86
1118 select CRYPTO_GLUE_HELPER_X86
1119 select CRYPTO_SERPENT
1123 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
1125 Keys are allowed to be from 0 to 256 bits in length, in steps
1128 This module provides the Serpent cipher algorithm that processes
1129 eight blocks parallel using the AVX instruction set.
1132 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
1134 config CRYPTO_SERPENT_AVX2_X86_64
1135 tristate "Serpent cipher algorithm (x86_64/AVX2)"
1136 depends on X86 && 64BIT
1137 select CRYPTO_ALGAPI
1138 select CRYPTO_CRYPTD
1139 select CRYPTO_ABLK_HELPER_X86
1140 select CRYPTO_GLUE_HELPER_X86
1141 select CRYPTO_SERPENT
1142 select CRYPTO_SERPENT_AVX_X86_64
1146 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
1148 Keys are allowed to be from 0 to 256 bits in length, in steps
1151 This module provides Serpent cipher algorithm that processes 16
1152 blocks parallel using AVX2 instruction set.
1155 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
1158 tristate "TEA, XTEA and XETA cipher algorithms"
1159 select CRYPTO_ALGAPI
1161 TEA cipher algorithm.
1163 Tiny Encryption Algorithm is a simple cipher that uses
1164 many rounds for security. It is very fast and uses
1167 Xtendend Tiny Encryption Algorithm is a modification to
1168 the TEA algorithm to address a potential key weakness
1169 in the TEA algorithm.
1171 Xtendend Encryption Tiny Algorithm is a mis-implementation
1172 of the XTEA algorithm for compatibility purposes.
1174 config CRYPTO_TWOFISH
1175 tristate "Twofish cipher algorithm"
1176 select CRYPTO_ALGAPI
1177 select CRYPTO_TWOFISH_COMMON
1179 Twofish cipher algorithm.
1181 Twofish was submitted as an AES (Advanced Encryption Standard)
1182 candidate cipher by researchers at CounterPane Systems. It is a
1183 16 round block cipher supporting key sizes of 128, 192, and 256
1187 <http://www.schneier.com/twofish.html>
1189 config CRYPTO_TWOFISH_COMMON
1192 Common parts of the Twofish cipher algorithm shared by the
1193 generic c and the assembler implementations.
1195 config CRYPTO_TWOFISH_586
1196 tristate "Twofish cipher algorithms (i586)"
1197 depends on (X86 || UML_X86) && !64BIT
1198 select CRYPTO_ALGAPI
1199 select CRYPTO_TWOFISH_COMMON
1201 Twofish cipher algorithm.
1203 Twofish was submitted as an AES (Advanced Encryption Standard)
1204 candidate cipher by researchers at CounterPane Systems. It is a
1205 16 round block cipher supporting key sizes of 128, 192, and 256
1209 <http://www.schneier.com/twofish.html>
1211 config CRYPTO_TWOFISH_X86_64
1212 tristate "Twofish cipher algorithm (x86_64)"
1213 depends on (X86 || UML_X86) && 64BIT
1214 select CRYPTO_ALGAPI
1215 select CRYPTO_TWOFISH_COMMON
1217 Twofish cipher algorithm (x86_64).
1219 Twofish was submitted as an AES (Advanced Encryption Standard)
1220 candidate cipher by researchers at CounterPane Systems. It is a
1221 16 round block cipher supporting key sizes of 128, 192, and 256
1225 <http://www.schneier.com/twofish.html>
1227 config CRYPTO_TWOFISH_X86_64_3WAY
1228 tristate "Twofish cipher algorithm (x86_64, 3-way parallel)"
1229 depends on X86 && 64BIT
1230 select CRYPTO_ALGAPI
1231 select CRYPTO_TWOFISH_COMMON
1232 select CRYPTO_TWOFISH_X86_64
1233 select CRYPTO_GLUE_HELPER_X86
1237 Twofish cipher algorithm (x86_64, 3-way parallel).
1239 Twofish was submitted as an AES (Advanced Encryption Standard)
1240 candidate cipher by researchers at CounterPane Systems. It is a
1241 16 round block cipher supporting key sizes of 128, 192, and 256
1244 This module provides Twofish cipher algorithm that processes three
1245 blocks parallel, utilizing resources of out-of-order CPUs better.
1248 <http://www.schneier.com/twofish.html>
1250 config CRYPTO_TWOFISH_AVX_X86_64
1251 tristate "Twofish cipher algorithm (x86_64/AVX)"
1252 depends on X86 && 64BIT
1253 select CRYPTO_ALGAPI
1254 select CRYPTO_CRYPTD
1255 select CRYPTO_ABLK_HELPER_X86
1256 select CRYPTO_GLUE_HELPER_X86
1257 select CRYPTO_TWOFISH_COMMON
1258 select CRYPTO_TWOFISH_X86_64
1259 select CRYPTO_TWOFISH_X86_64_3WAY
1263 Twofish cipher algorithm (x86_64/AVX).
1265 Twofish was submitted as an AES (Advanced Encryption Standard)
1266 candidate cipher by researchers at CounterPane Systems. It is a
1267 16 round block cipher supporting key sizes of 128, 192, and 256
1270 This module provides the Twofish cipher algorithm that processes
1271 eight blocks parallel using the AVX Instruction Set.
1274 <http://www.schneier.com/twofish.html>
1276 config CRYPTO_TWOFISH_AVX2_X86_64
1277 tristate "Twofish cipher algorithm (x86_64/AVX2)"
1278 depends on X86 && 64BIT
1279 select CRYPTO_ALGAPI
1280 select CRYPTO_CRYPTD
1281 select CRYPTO_ABLK_HELPER_X86
1282 select CRYPTO_GLUE_HELPER_X86
1283 select CRYPTO_TWOFISH_COMMON
1284 select CRYPTO_TWOFISH_X86_64
1285 select CRYPTO_TWOFISH_X86_64_3WAY
1286 select CRYPTO_TWOFISH_AVX_X86_64
1290 Twofish cipher algorithm (x86_64/AVX2).
1292 Twofish was submitted as an AES (Advanced Encryption Standard)
1293 candidate cipher by researchers at CounterPane Systems. It is a
1294 16 round block cipher supporting key sizes of 128, 192, and 256
1298 <http://www.schneier.com/twofish.html>
1300 comment "Compression"
1302 config CRYPTO_DEFLATE
1303 tristate "Deflate compression algorithm"
1304 select CRYPTO_ALGAPI
1308 This is the Deflate algorithm (RFC1951), specified for use in
1309 IPSec with the IPCOMP protocol (RFC3173, RFC2394).
1311 You will most probably want this if using IPSec.
1314 tristate "Zlib compression algorithm"
1320 This is the zlib algorithm.
1323 tristate "LZO compression algorithm"
1324 select CRYPTO_ALGAPI
1326 select LZO_DECOMPRESS
1328 This is the LZO algorithm.
1331 tristate "842 compression algorithm"
1332 depends on CRYPTO_DEV_NX_COMPRESS
1333 # 842 uses lzo if the hardware becomes unavailable
1335 select LZO_DECOMPRESS
1337 This is the 842 algorithm.
1339 comment "Random Number Generation"
1341 config CRYPTO_ANSI_CPRNG
1342 tristate "Pseudo Random Number Generation for Cryptographic modules"
1347 This option enables the generic pseudo random number generator
1348 for cryptographic modules. Uses the Algorithm specified in
1349 ANSI X9.31 A.2.4. Note that this option must be enabled if
1350 CRYPTO_FIPS is selected
1352 config CRYPTO_USER_API
1355 config CRYPTO_USER_API_HASH
1356 tristate "User-space interface for hash algorithms"
1359 select CRYPTO_USER_API
1361 This option enables the user-spaces interface for hash
1364 config CRYPTO_USER_API_SKCIPHER
1365 tristate "User-space interface for symmetric key cipher algorithms"
1367 select CRYPTO_BLKCIPHER
1368 select CRYPTO_USER_API
1370 This option enables the user-spaces interface for symmetric
1371 key cipher algorithms.
1373 source "drivers/crypto/Kconfig"
1374 source crypto/asymmetric_keys/Kconfig