Commit | Line | Data |
---|---|---|
b511431d JE |
1 | |
2 | menuconfig CRYPTO_HW | |
3 | bool "Hardware crypto devices" | |
4 | default y | |
06bfb7eb JE |
5 | ---help--- |
6 | Say Y here to get to see options for hardware crypto devices and | |
7 | processors. This option alone does not add any kernel code. | |
8 | ||
9 | If you say N, all options in this submenu will be skipped and disabled. | |
b511431d JE |
10 | |
11 | if CRYPTO_HW | |
1da177e4 LT |
12 | |
13 | config CRYPTO_DEV_PADLOCK | |
d158325e | 14 | tristate "Support for VIA PadLock ACE" |
b00296fb | 15 | depends on X86_32 && !UML |
cce9e06d | 16 | select CRYPTO_ALGAPI |
1da177e4 LT |
17 | help |
18 | Some VIA processors come with an integrated crypto engine | |
19 | (so called VIA PadLock ACE, Advanced Cryptography Engine) | |
1191f0a4 ML |
20 | that provides instructions for very fast cryptographic |
21 | operations with supported algorithms. | |
1da177e4 LT |
22 | |
23 | The instructions are used only when the CPU supports them. | |
5644bda5 ML |
24 | Otherwise software encryption is used. |
25 | ||
1da177e4 | 26 | config CRYPTO_DEV_PADLOCK_AES |
1191f0a4 | 27 | tristate "PadLock driver for AES algorithm" |
1da177e4 | 28 | depends on CRYPTO_DEV_PADLOCK |
28ce728a | 29 | select CRYPTO_BLKCIPHER |
7dc748e4 | 30 | select CRYPTO_AES |
1da177e4 LT |
31 | help |
32 | Use VIA PadLock for AES algorithm. | |
33 | ||
1191f0a4 ML |
34 | Available in VIA C3 and newer CPUs. |
35 | ||
36 | If unsure say M. The compiled module will be | |
4737f097 | 37 | called padlock-aes. |
1191f0a4 | 38 | |
6c833275 ML |
39 | config CRYPTO_DEV_PADLOCK_SHA |
40 | tristate "PadLock driver for SHA1 and SHA256 algorithms" | |
41 | depends on CRYPTO_DEV_PADLOCK | |
42 | select CRYPTO_SHA1 | |
43 | select CRYPTO_SHA256 | |
6c833275 ML |
44 | help |
45 | Use VIA PadLock for SHA1/SHA256 algorithms. | |
46 | ||
47 | Available in VIA C7 and newer processors. | |
48 | ||
49 | If unsure say M. The compiled module will be | |
4737f097 | 50 | called padlock-sha. |
6c833275 | 51 | |
9fe757b0 JC |
52 | config CRYPTO_DEV_GEODE |
53 | tristate "Support for the Geode LX AES engine" | |
f6259dea | 54 | depends on X86_32 && PCI |
9fe757b0 JC |
55 | select CRYPTO_ALGAPI |
56 | select CRYPTO_BLKCIPHER | |
9fe757b0 JC |
57 | help |
58 | Say 'Y' here to use the AMD Geode LX processor on-board AES | |
3dde6ad8 | 59 | engine for the CryptoAPI AES algorithm. |
9fe757b0 JC |
60 | |
61 | To compile this driver as a module, choose M here: the module | |
62 | will be called geode-aes. | |
63 | ||
61d48c2c MS |
64 | config ZCRYPT |
65 | tristate "Support for PCI-attached cryptographic adapters" | |
66 | depends on S390 | |
67 | select ZCRYPT_MONOLITHIC if ZCRYPT="y" | |
2f7c8bd6 | 68 | select HW_RANDOM |
61d48c2c MS |
69 | help |
70 | Select this option if you want to use a PCI-attached cryptographic | |
71 | adapter like: | |
72 | + PCI Cryptographic Accelerator (PCICA) | |
73 | + PCI Cryptographic Coprocessor (PCICC) | |
74 | + PCI-X Cryptographic Coprocessor (PCIXCC) | |
75 | + Crypto Express2 Coprocessor (CEX2C) | |
76 | + Crypto Express2 Accelerator (CEX2A) | |
77 | ||
78 | config ZCRYPT_MONOLITHIC | |
79 | bool "Monolithic zcrypt module" | |
80 | depends on ZCRYPT="m" | |
81 | help | |
4737f097 | 82 | Select this option if you want to have a single module z90crypt, |
61d48c2c MS |
83 | that contains all parts of the crypto device driver (ap bus, |
84 | request router and all the card drivers). | |
85 | ||
3f5615e0 JG |
86 | config CRYPTO_SHA1_S390 |
87 | tristate "SHA1 digest algorithm" | |
88 | depends on S390 | |
563f346d | 89 | select CRYPTO_HASH |
3f5615e0 JG |
90 | help |
91 | This is the s390 hardware accelerated implementation of the | |
92 | SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2). | |
93 | ||
94 | config CRYPTO_SHA256_S390 | |
95 | tristate "SHA256 digest algorithm" | |
96 | depends on S390 | |
563f346d | 97 | select CRYPTO_HASH |
3f5615e0 JG |
98 | help |
99 | This is the s390 hardware accelerated implementation of the | |
100 | SHA256 secure hash standard (DFIPS 180-2). | |
101 | ||
102 | This version of SHA implements a 256 bit hash with 128 bits of | |
103 | security against collision attacks. | |
104 | ||
291dc7c0 | 105 | config CRYPTO_SHA512_S390 |
4e2c6d7f | 106 | tristate "SHA384 and SHA512 digest algorithm" |
291dc7c0 | 107 | depends on S390 |
563f346d | 108 | select CRYPTO_HASH |
291dc7c0 JG |
109 | help |
110 | This is the s390 hardware accelerated implementation of the | |
111 | SHA512 secure hash standard. | |
112 | ||
113 | This version of SHA implements a 512 bit hash with 256 bits of | |
4e2c6d7f JG |
114 | security against collision attacks. The code also includes SHA-384, |
115 | a 384 bit hash with 192 bits of security against collision attacks. | |
116 | ||
291dc7c0 | 117 | |
3f5615e0 JG |
118 | config CRYPTO_DES_S390 |
119 | tristate "DES and Triple DES cipher algorithms" | |
120 | depends on S390 | |
121 | select CRYPTO_ALGAPI | |
122 | select CRYPTO_BLKCIPHER | |
123 | help | |
124 | This us the s390 hardware accelerated implementation of the | |
125 | DES cipher algorithm (FIPS 46-2), and Triple DES EDE (FIPS 46-3). | |
126 | ||
127 | config CRYPTO_AES_S390 | |
128 | tristate "AES cipher algorithms" | |
129 | depends on S390 | |
130 | select CRYPTO_ALGAPI | |
131 | select CRYPTO_BLKCIPHER | |
132 | help | |
133 | This is the s390 hardware accelerated implementation of the | |
134 | AES cipher algorithms (FIPS-197). AES uses the Rijndael | |
135 | algorithm. | |
136 | ||
137 | Rijndael appears to be consistently a very good performer in | |
138 | both hardware and software across a wide range of computing | |
139 | environments regardless of its use in feedback or non-feedback | |
140 | modes. Its key setup time is excellent, and its key agility is | |
141 | good. Rijndael's very low memory requirements make it very well | |
142 | suited for restricted-space environments, in which it also | |
143 | demonstrates excellent performance. Rijndael's operations are | |
144 | among the easiest to defend against power and timing attacks. | |
145 | ||
146 | On s390 the System z9-109 currently only supports the key size | |
147 | of 128 bit. | |
148 | ||
149 | config S390_PRNG | |
150 | tristate "Pseudo random number generator device driver" | |
151 | depends on S390 | |
152 | default "m" | |
153 | help | |
154 | Select this option if you want to use the s390 pseudo random number | |
155 | generator. The PRNG is part of the cryptographic processor functions | |
156 | and uses triple-DES to generate secure random numbers like the | |
157 | ANSI X9.17 standard. The PRNG is usable via the char device | |
158 | /dev/prandom. | |
159 | ||
f7d0561e EP |
160 | config CRYPTO_DEV_HIFN_795X |
161 | tristate "Driver HIFN 795x crypto accelerator chips" | |
c3041f9c | 162 | select CRYPTO_DES |
f7d0561e | 163 | select CRYPTO_ALGAPI |
653ebd9c | 164 | select CRYPTO_BLKCIPHER |
946fef4e | 165 | select HW_RANDOM if CRYPTO_DEV_HIFN_795X_RNG |
2707b937 | 166 | depends on PCI |
f7d0561e EP |
167 | help |
168 | This option allows you to have support for HIFN 795x crypto adapters. | |
169 | ||
946fef4e HX |
170 | config CRYPTO_DEV_HIFN_795X_RNG |
171 | bool "HIFN 795x random number generator" | |
172 | depends on CRYPTO_DEV_HIFN_795X | |
173 | help | |
174 | Select this option if you want to enable the random number generator | |
175 | on the HIFN 795x crypto adapters. | |
f7d0561e | 176 | |
9c4a7965 KP |
177 | config CRYPTO_DEV_TALITOS |
178 | tristate "Talitos Freescale Security Engine (SEC)" | |
179 | select CRYPTO_ALGAPI | |
180 | select CRYPTO_AUTHENC | |
181 | select HW_RANDOM | |
182 | depends on FSL_SOC | |
183 | help | |
184 | Say 'Y' here to use the Freescale Security Engine (SEC) | |
185 | to offload cryptographic algorithm computation. | |
186 | ||
187 | The Freescale SEC is present on PowerQUICC 'E' processors, such | |
188 | as the MPC8349E and MPC8548E. | |
189 | ||
190 | To compile this driver as a module, choose M here: the module | |
191 | will be called talitos. | |
192 | ||
81bef015 CH |
193 | config CRYPTO_DEV_IXP4XX |
194 | tristate "Driver for IXP4xx crypto hardware acceleration" | |
195 | depends on ARCH_IXP4XX | |
196 | select CRYPTO_DES | |
197 | select CRYPTO_ALGAPI | |
090657e4 | 198 | select CRYPTO_AUTHENC |
81bef015 CH |
199 | select CRYPTO_BLKCIPHER |
200 | help | |
201 | Driver for the IXP4xx NPE crypto engine. | |
202 | ||
049359d6 JH |
203 | config CRYPTO_DEV_PPC4XX |
204 | tristate "Driver AMCC PPC4xx crypto accelerator" | |
205 | depends on PPC && 4xx | |
206 | select CRYPTO_HASH | |
207 | select CRYPTO_ALGAPI | |
208 | select CRYPTO_BLKCIPHER | |
209 | help | |
210 | This option allows you to have support for AMCC crypto acceleration. | |
211 | ||
b511431d | 212 | endif # CRYPTO_HW |