Commit | Line | Data |
---|---|---|
b511431d JE |
1 | |
2 | menuconfig CRYPTO_HW | |
3 | bool "Hardware crypto devices" | |
4 | default y | |
06bfb7eb JE |
5 | ---help--- |
6 | Say Y here to get to see options for hardware crypto devices and | |
7 | processors. This option alone does not add any kernel code. | |
8 | ||
9 | If you say N, all options in this submenu will be skipped and disabled. | |
b511431d JE |
10 | |
11 | if CRYPTO_HW | |
1da177e4 LT |
12 | |
13 | config CRYPTO_DEV_PADLOCK | |
d158325e | 14 | tristate "Support for VIA PadLock ACE" |
b00296fb | 15 | depends on X86_32 && !UML |
cce9e06d | 16 | select CRYPTO_ALGAPI |
1da177e4 LT |
17 | help |
18 | Some VIA processors come with an integrated crypto engine | |
19 | (so called VIA PadLock ACE, Advanced Cryptography Engine) | |
1191f0a4 ML |
20 | that provides instructions for very fast cryptographic |
21 | operations with supported algorithms. | |
1da177e4 LT |
22 | |
23 | The instructions are used only when the CPU supports them. | |
5644bda5 ML |
24 | Otherwise software encryption is used. |
25 | ||
1da177e4 | 26 | config CRYPTO_DEV_PADLOCK_AES |
1191f0a4 | 27 | tristate "PadLock driver for AES algorithm" |
1da177e4 | 28 | depends on CRYPTO_DEV_PADLOCK |
28ce728a | 29 | select CRYPTO_BLKCIPHER |
1da177e4 LT |
30 | help |
31 | Use VIA PadLock for AES algorithm. | |
32 | ||
1191f0a4 ML |
33 | Available in VIA C3 and newer CPUs. |
34 | ||
35 | If unsure say M. The compiled module will be | |
36 | called padlock-aes.ko | |
37 | ||
6c833275 ML |
38 | config CRYPTO_DEV_PADLOCK_SHA |
39 | tristate "PadLock driver for SHA1 and SHA256 algorithms" | |
40 | depends on CRYPTO_DEV_PADLOCK | |
41 | select CRYPTO_SHA1 | |
42 | select CRYPTO_SHA256 | |
6c833275 ML |
43 | help |
44 | Use VIA PadLock for SHA1/SHA256 algorithms. | |
45 | ||
46 | Available in VIA C7 and newer processors. | |
47 | ||
48 | If unsure say M. The compiled module will be | |
49 | called padlock-sha.ko | |
50 | ||
9fe757b0 JC |
51 | config CRYPTO_DEV_GEODE |
52 | tristate "Support for the Geode LX AES engine" | |
f6259dea | 53 | depends on X86_32 && PCI |
9fe757b0 JC |
54 | select CRYPTO_ALGAPI |
55 | select CRYPTO_BLKCIPHER | |
9fe757b0 JC |
56 | help |
57 | Say 'Y' here to use the AMD Geode LX processor on-board AES | |
3dde6ad8 | 58 | engine for the CryptoAPI AES algorithm. |
9fe757b0 JC |
59 | |
60 | To compile this driver as a module, choose M here: the module | |
61 | will be called geode-aes. | |
62 | ||
61d48c2c MS |
63 | config ZCRYPT |
64 | tristate "Support for PCI-attached cryptographic adapters" | |
65 | depends on S390 | |
66 | select ZCRYPT_MONOLITHIC if ZCRYPT="y" | |
2f7c8bd6 | 67 | select HW_RANDOM |
61d48c2c MS |
68 | help |
69 | Select this option if you want to use a PCI-attached cryptographic | |
70 | adapter like: | |
71 | + PCI Cryptographic Accelerator (PCICA) | |
72 | + PCI Cryptographic Coprocessor (PCICC) | |
73 | + PCI-X Cryptographic Coprocessor (PCIXCC) | |
74 | + Crypto Express2 Coprocessor (CEX2C) | |
75 | + Crypto Express2 Accelerator (CEX2A) | |
76 | ||
77 | config ZCRYPT_MONOLITHIC | |
78 | bool "Monolithic zcrypt module" | |
79 | depends on ZCRYPT="m" | |
80 | help | |
81 | Select this option if you want to have a single module z90crypt.ko | |
82 | that contains all parts of the crypto device driver (ap bus, | |
83 | request router and all the card drivers). | |
84 | ||
3f5615e0 JG |
85 | config CRYPTO_SHA1_S390 |
86 | tristate "SHA1 digest algorithm" | |
87 | depends on S390 | |
88 | select CRYPTO_ALGAPI | |
89 | help | |
90 | This is the s390 hardware accelerated implementation of the | |
91 | SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2). | |
92 | ||
93 | config CRYPTO_SHA256_S390 | |
94 | tristate "SHA256 digest algorithm" | |
95 | depends on S390 | |
96 | select CRYPTO_ALGAPI | |
97 | help | |
98 | This is the s390 hardware accelerated implementation of the | |
99 | SHA256 secure hash standard (DFIPS 180-2). | |
100 | ||
101 | This version of SHA implements a 256 bit hash with 128 bits of | |
102 | security against collision attacks. | |
103 | ||
291dc7c0 JG |
104 | config CRYPTO_SHA512_S390 |
105 | tristate "SHA512 digest algorithm" | |
106 | depends on S390 | |
107 | select CRYPTO_ALGAPI | |
108 | help | |
109 | This is the s390 hardware accelerated implementation of the | |
110 | SHA512 secure hash standard. | |
111 | ||
112 | This version of SHA implements a 512 bit hash with 256 bits of | |
113 | security against collision attacks. | |
114 | ||
3f5615e0 JG |
115 | config CRYPTO_DES_S390 |
116 | tristate "DES and Triple DES cipher algorithms" | |
117 | depends on S390 | |
118 | select CRYPTO_ALGAPI | |
119 | select CRYPTO_BLKCIPHER | |
120 | help | |
121 | This us the s390 hardware accelerated implementation of the | |
122 | DES cipher algorithm (FIPS 46-2), and Triple DES EDE (FIPS 46-3). | |
123 | ||
124 | config CRYPTO_AES_S390 | |
125 | tristate "AES cipher algorithms" | |
126 | depends on S390 | |
127 | select CRYPTO_ALGAPI | |
128 | select CRYPTO_BLKCIPHER | |
129 | help | |
130 | This is the s390 hardware accelerated implementation of the | |
131 | AES cipher algorithms (FIPS-197). AES uses the Rijndael | |
132 | algorithm. | |
133 | ||
134 | Rijndael appears to be consistently a very good performer in | |
135 | both hardware and software across a wide range of computing | |
136 | environments regardless of its use in feedback or non-feedback | |
137 | modes. Its key setup time is excellent, and its key agility is | |
138 | good. Rijndael's very low memory requirements make it very well | |
139 | suited for restricted-space environments, in which it also | |
140 | demonstrates excellent performance. Rijndael's operations are | |
141 | among the easiest to defend against power and timing attacks. | |
142 | ||
143 | On s390 the System z9-109 currently only supports the key size | |
144 | of 128 bit. | |
145 | ||
146 | config S390_PRNG | |
147 | tristate "Pseudo random number generator device driver" | |
148 | depends on S390 | |
149 | default "m" | |
150 | help | |
151 | Select this option if you want to use the s390 pseudo random number | |
152 | generator. The PRNG is part of the cryptographic processor functions | |
153 | and uses triple-DES to generate secure random numbers like the | |
154 | ANSI X9.17 standard. The PRNG is usable via the char device | |
155 | /dev/prandom. | |
156 | ||
f7d0561e EP |
157 | config CRYPTO_DEV_HIFN_795X |
158 | tristate "Driver HIFN 795x crypto accelerator chips" | |
c3041f9c | 159 | select CRYPTO_DES |
f7d0561e | 160 | select CRYPTO_ALGAPI |
653ebd9c | 161 | select CRYPTO_BLKCIPHER |
946fef4e | 162 | select HW_RANDOM if CRYPTO_DEV_HIFN_795X_RNG |
2707b937 | 163 | depends on PCI |
f7d0561e EP |
164 | help |
165 | This option allows you to have support for HIFN 795x crypto adapters. | |
166 | ||
946fef4e HX |
167 | config CRYPTO_DEV_HIFN_795X_RNG |
168 | bool "HIFN 795x random number generator" | |
169 | depends on CRYPTO_DEV_HIFN_795X | |
170 | help | |
171 | Select this option if you want to enable the random number generator | |
172 | on the HIFN 795x crypto adapters. | |
f7d0561e | 173 | |
b511431d | 174 | endif # CRYPTO_HW |