crypto/Kconfig

   1 #
   2 # Generic algorithms support
   3 #
   4 config XOR_BLOCKS
   5         tristate
   6
   7 #
   8 # async_tx api: hardware offloaded memory transfer/transform support
   9 #
  10 source "crypto/async_tx/Kconfig"
  11
  12 #
  13 # Cryptographic API Configuration
  14 #
  15 menuconfig CRYPTO
  16         bool "Cryptographic API"
  17         help
  18           This option provides the core Cryptographic API.
  19
  20 if CRYPTO
  21
  22 config CRYPTO_ALGAPI
  23         tristate
  24         help
  25           This option provides the API for cryptographic algorithms.
  26
  27 config CRYPTO_ABLKCIPHER
  28         tristate
  29         select CRYPTO_BLKCIPHER
  30
  31 config CRYPTO_AEAD
  32         tristate
  33         select CRYPTO_ALGAPI
  34
  35 config CRYPTO_BLKCIPHER
  36         tristate
  37         select CRYPTO_ALGAPI
  38
  39 config CRYPTO_HASH
  40         tristate
  41         select CRYPTO_ALGAPI
  42
  43 config CRYPTO_MANAGER
  44         tristate "Cryptographic algorithm manager"
  45         select CRYPTO_ALGAPI
  46         help
  47           Create default cryptographic template instantiations such as
  48           cbc(aes).
  49
  50 config CRYPTO_HMAC
  51         tristate "HMAC support"
  52         select CRYPTO_HASH
  53         select CRYPTO_MANAGER
  54         help
  55           HMAC: Keyed-Hashing for Message Authentication (RFC2104).
  56           This is required for IPSec.
  57
  58 config CRYPTO_XCBC
  59         tristate "XCBC support"
  60         depends on EXPERIMENTAL
  61         select CRYPTO_HASH
  62         select CRYPTO_MANAGER
  63         help
  64           XCBC: Keyed-Hashing with encryption algorithm
  65                 http://www.ietf.org/rfc/rfc3566.txt
  66                 http://csrc.nist.gov/encryption/modes/proposedmodes/
  67                  xcbc-mac/xcbc-mac-spec.pdf
  68
  69 config CRYPTO_NULL
  70         tristate "Null algorithms"
  71         select CRYPTO_ALGAPI
  72         help
  73           These are 'Null' algorithms, used by IPsec, which do nothing.
  74
  75 config CRYPTO_MD4
  76         tristate "MD4 digest algorithm"
  77         select CRYPTO_ALGAPI
  78         help
  79           MD4 message digest algorithm (RFC1320).
  80
  81 config CRYPTO_MD5
  82         tristate "MD5 digest algorithm"
  83         select CRYPTO_ALGAPI
  84         help
  85           MD5 message digest algorithm (RFC1321).
  86
  87 config CRYPTO_SHA1
  88         tristate "SHA1 digest algorithm"
  89         select CRYPTO_ALGAPI
  90         help
  91           SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2).
  92
  93 config CRYPTO_SHA256
  94         tristate "SHA224 and SHA256 digest algorithm"
  95         select CRYPTO_ALGAPI
  96         help
  97           SHA256 secure hash standard (DFIPS 180-2).
  98
  99           This version of SHA implements a 256 bit hash with 128 bits of
 100           security against collision attacks.
 101
 102           This code also includes SHA-224, a 224 bit hash with 112 bits
 103           of security against collision attacks.
 104
 105 config CRYPTO_SHA512
 106         tristate "SHA384 and SHA512 digest algorithms"
 107         select CRYPTO_ALGAPI
 108         help
 109           SHA512 secure hash standard (DFIPS 180-2).
 110
 111           This version of SHA implements a 512 bit hash with 256 bits of
 112           security against collision attacks.
 113
 114           This code also includes SHA-384, a 384 bit hash with 192 bits
 115           of security against collision attacks.
 116
 117 config CRYPTO_WP512
 118         tristate "Whirlpool digest algorithms"
 119         select CRYPTO_ALGAPI
 120         help
 121           Whirlpool hash algorithm 512, 384 and 256-bit hashes
 122
 123           Whirlpool-512 is part of the NESSIE cryptographic primitives.
 124           Whirlpool will be part of the ISO/IEC 10118-3:2003(E) standard
 125
 126           See also:
 127           <http://planeta.terra.com.br/informatica/paulobarreto/WhirlpoolPage.html>
 128
 129 config CRYPTO_TGR192
 130         tristate "Tiger digest algorithms"
 131         select CRYPTO_ALGAPI
 132         help
 133           Tiger hash algorithm 192, 160 and 128-bit hashes
 134
 135           Tiger is a hash function optimized for 64-bit processors while
 136           still having decent performance on 32-bit processors.
 137           Tiger was developed by Ross Anderson and Eli Biham.
 138
 139           See also:
 140           <http://www.cs.technion.ac.il/~biham/Reports/Tiger/>.
 141
 142 config CRYPTO_GF128MUL
 143         tristate "GF(2^128) multiplication functions (EXPERIMENTAL)"
 144         depends on EXPERIMENTAL
 145         help
 146           Efficient table driven implementation of multiplications in the
 147           field GF(2^128).  This is needed by some cypher modes. This
 148           option will be selected automatically if you select such a
 149           cipher mode.  Only select this option by hand if you expect to load
 150           an external module that requires these functions.
 151
 152 config CRYPTO_ECB
 153         tristate "ECB support"
 154         select CRYPTO_BLKCIPHER
 155         select CRYPTO_MANAGER
 156         help
 157           ECB: Electronic CodeBook mode
 158           This is the simplest block cipher algorithm.  It simply encrypts
 159           the input block by block.
 160
 161 config CRYPTO_CBC
 162         tristate "CBC support"
 163         select CRYPTO_BLKCIPHER
 164         select CRYPTO_MANAGER
 165         help
 166           CBC: Cipher Block Chaining mode
 167           This block cipher algorithm is required for IPSec.
 168
 169 config CRYPTO_PCBC
 170         tristate "PCBC support"
 171         select CRYPTO_BLKCIPHER
 172         select CRYPTO_MANAGER
 173         help
 174           PCBC: Propagating Cipher Block Chaining mode
 175           This block cipher algorithm is required for RxRPC.
 176
 177 config CRYPTO_LRW
 178         tristate "LRW support (EXPERIMENTAL)"
 179         depends on EXPERIMENTAL
 180         select CRYPTO_BLKCIPHER
 181         select CRYPTO_MANAGER
 182         select CRYPTO_GF128MUL
 183         help
 184           LRW: Liskov Rivest Wagner, a tweakable, non malleable, non movable
 185           narrow block cipher mode for dm-crypt.  Use it with cipher
 186           specification string aes-lrw-benbi, the key must be 256, 320 or 384.
 187           The first 128, 192 or 256 bits in the key are used for AES and the
 188           rest is used to tie each cipher block to its logical position.
 189
 190 config CRYPTO_XTS
 191         tristate "XTS support (EXPERIMENTAL)"
 192         depends on EXPERIMENTAL
 193         select CRYPTO_BLKCIPHER
 194         select CRYPTO_MANAGER
 195         select CRYPTO_GF128MUL
 196         help
 197           XTS: IEEE1619/D16 narrow block cipher use with aes-xts-plain,
 198           key size 256, 384 or 512 bits. This implementation currently
 199           can't handle a sectorsize which is not a multiple of 16 bytes.
 200
 201 config CRYPTO_CTR
 202         tristate "CTR support"
 203         select CRYPTO_BLKCIPHER
 204         select CRYPTO_MANAGER
 205         help
 206           CTR: Counter mode
 207           This block cipher algorithm is required for IPSec.
 208
 209 config CRYPTO_CRYPTD
 210         tristate "Software async crypto daemon"
 211         select CRYPTO_ABLKCIPHER
 212         select CRYPTO_MANAGER
 213         help
 214           This is a generic software asynchronous crypto daemon that
 215           converts an arbitrary synchronous software crypto algorithm
 216           into an asynchronous algorithm that executes in a kernel thread.
 217
 218 config CRYPTO_DES
 219         tristate "DES and Triple DES EDE cipher algorithms"
 220         select CRYPTO_ALGAPI
 221         help
 222           DES cipher algorithm (FIPS 46-2), and Triple DES EDE (FIPS 46-3).
 223
 224 config CRYPTO_FCRYPT
 225         tristate "FCrypt cipher algorithm"
 226         select CRYPTO_ALGAPI
 227         select CRYPTO_BLKCIPHER
 228         help
 229           FCrypt algorithm used by RxRPC.
 230
 231 config CRYPTO_BLOWFISH
 232         tristate "Blowfish cipher algorithm"
 233         select CRYPTO_ALGAPI
 234         help
 235           Blowfish cipher algorithm, by Bruce Schneier.
 236
 237           This is a variable key length cipher which can use keys from 32
 238           bits to 448 bits in length.  It's fast, simple and specifically
 239           designed for use on "large microprocessors".
 240
 241           See also:
 242           <http://www.schneier.com/blowfish.html>
 243
 244 config CRYPTO_TWOFISH
 245         tristate "Twofish cipher algorithm"
 246         select CRYPTO_ALGAPI
 247         select CRYPTO_TWOFISH_COMMON
 248         help
 249           Twofish cipher algorithm.
 250
 251           Twofish was submitted as an AES (Advanced Encryption Standard)
 252           candidate cipher by researchers at CounterPane Systems.  It is a
 253           16 round block cipher supporting key sizes of 128, 192, and 256
 254           bits.
 255
 256           See also:
 257           <http://www.schneier.com/twofish.html>
 258
 259 config CRYPTO_TWOFISH_COMMON
 260         tristate
 261         help
 262           Common parts of the Twofish cipher algorithm shared by the
 263           generic c and the assembler implementations.
 264
 265 config CRYPTO_TWOFISH_586
 266         tristate "Twofish cipher algorithms (i586)"
 267         depends on (X86 || UML_X86) && !64BIT
 268         select CRYPTO_ALGAPI
 269         select CRYPTO_TWOFISH_COMMON
 270         help
 271           Twofish cipher algorithm.
 272
 273           Twofish was submitted as an AES (Advanced Encryption Standard)
 274           candidate cipher by researchers at CounterPane Systems.  It is a
 275           16 round block cipher supporting key sizes of 128, 192, and 256
 276           bits.
 277
 278           See also:
 279           <http://www.schneier.com/twofish.html>
 280
 281 config CRYPTO_TWOFISH_X86_64
 282         tristate "Twofish cipher algorithm (x86_64)"
 283         depends on (X86 || UML_X86) && 64BIT
 284         select CRYPTO_ALGAPI
 285         select CRYPTO_TWOFISH_COMMON
 286         help
 287           Twofish cipher algorithm (x86_64).
 288
 289           Twofish was submitted as an AES (Advanced Encryption Standard)
 290           candidate cipher by researchers at CounterPane Systems.  It is a
 291           16 round block cipher supporting key sizes of 128, 192, and 256
 292           bits.
 293
 294           See also:
 295           <http://www.schneier.com/twofish.html>
 296
 297 config CRYPTO_SERPENT
 298         tristate "Serpent cipher algorithm"
 299         select CRYPTO_ALGAPI
 300         help
 301           Serpent cipher algorithm, by Anderson, Biham & Knudsen.
 302
 303           Keys are allowed to be from 0 to 256 bits in length, in steps
 304           of 8 bits.  Also includes the 'Tnepres' algorithm, a reversed
 305           variant of Serpent for compatibility with old kerneli.org code.
 306
 307           See also:
 308           <http://www.cl.cam.ac.uk/~rja14/serpent.html>
 309
 310 config CRYPTO_AES
 311         tristate "AES cipher algorithms"
 312         select CRYPTO_ALGAPI
 313         help
 314           AES cipher algorithms (FIPS-197). AES uses the Rijndael
 315           algorithm.
 316
 317           Rijndael appears to be consistently a very good performer in
 318           both hardware and software across a wide range of computing
 319           environments regardless of its use in feedback or non-feedback
 320           modes. Its key setup time is excellent, and its key agility is
 321           good. Rijndael's very low memory requirements make it very well
 322           suited for restricted-space environments, in which it also
 323           demonstrates excellent performance. Rijndael's operations are
 324           among the easiest to defend against power and timing attacks.
 325
 326           The AES specifies three key sizes: 128, 192 and 256 bits
 327
 328           See <http://csrc.nist.gov/CryptoToolkit/aes/> for more information.
 329
 330 config CRYPTO_AES_586
 331         tristate "AES cipher algorithms (i586)"
 332         depends on (X86 || UML_X86) && !64BIT
 333         select CRYPTO_ALGAPI
 334         select CRYPTO_AES
 335         help
 336           AES cipher algorithms (FIPS-197). AES uses the Rijndael
 337           algorithm.
 338
 339           Rijndael appears to be consistently a very good performer in
 340           both hardware and software across a wide range of computing
 341           environments regardless of its use in feedback or non-feedback
 342           modes. Its key setup time is excellent, and its key agility is
 343           good. Rijndael's very low memory requirements make it very well
 344           suited for restricted-space environments, in which it also
 345           demonstrates excellent performance. Rijndael's operations are
 346           among the easiest to defend against power and timing attacks.
 347
 348           The AES specifies three key sizes: 128, 192 and 256 bits
 349
 350           See <http://csrc.nist.gov/encryption/aes/> for more information.
 351
 352 config CRYPTO_AES_X86_64
 353         tristate "AES cipher algorithms (x86_64)"
 354         depends on (X86 || UML_X86) && 64BIT
 355         select CRYPTO_ALGAPI
 356         select CRYPTO_AES
 357         help
 358           AES cipher algorithms (FIPS-197). AES uses the Rijndael
 359           algorithm.
 360
 361           Rijndael appears to be consistently a very good performer in
 362           both hardware and software across a wide range of computing
 363           environments regardless of its use in feedback or non-feedback
 364           modes. Its key setup time is excellent, and its key agility is
 365           good. Rijndael's very low memory requirements make it very well
 366           suited for restricted-space environments, in which it also
 367           demonstrates excellent performance. Rijndael's operations are
 368           among the easiest to defend against power and timing attacks.
 369
 370           The AES specifies three key sizes: 128, 192 and 256 bits
 371
 372           See <http://csrc.nist.gov/encryption/aes/> for more information.
 373
 374 config CRYPTO_CAST5
 375         tristate "CAST5 (CAST-128) cipher algorithm"
 376         select CRYPTO_ALGAPI
 377         help
 378           The CAST5 encryption algorithm (synonymous with CAST-128) is
 379           described in RFC2144.
 380
 381 config CRYPTO_CAST6
 382         tristate "CAST6 (CAST-256) cipher algorithm"
 383         select CRYPTO_ALGAPI
 384         help
 385           The CAST6 encryption algorithm (synonymous with CAST-256) is
 386           described in RFC2612.
 387
 388 config CRYPTO_TEA
 389         tristate "TEA, XTEA and XETA cipher algorithms"
 390         select CRYPTO_ALGAPI
 391         help
 392           TEA cipher algorithm.
 393
 394           Tiny Encryption Algorithm is a simple cipher that uses
 395           many rounds for security.  It is very fast and uses
 396           little memory.
 397
 398           Xtendend Tiny Encryption Algorithm is a modification to
 399           the TEA algorithm to address a potential key weakness
 400           in the TEA algorithm.
 401
 402           Xtendend Encryption Tiny Algorithm is a mis-implementation
 403           of the XTEA algorithm for compatibility purposes.
 404
 405 config CRYPTO_ARC4
 406         tristate "ARC4 cipher algorithm"
 407         select CRYPTO_ALGAPI
 408         help
 409           ARC4 cipher algorithm.
 410
 411           ARC4 is a stream cipher using keys ranging from 8 bits to 2048
 412           bits in length.  This algorithm is required for driver-based
 413           WEP, but it should not be for other purposes because of the
 414           weakness of the algorithm.
 415
 416 config CRYPTO_KHAZAD
 417         tristate "Khazad cipher algorithm"
 418         select CRYPTO_ALGAPI
 419         help
 420           Khazad cipher algorithm.
 421
 422           Khazad was a finalist in the initial NESSIE competition.  It is
 423           an algorithm optimized for 64-bit processors with good performance
 424           on 32-bit processors.  Khazad uses an 128 bit key size.
 425
 426           See also:
 427           <http://planeta.terra.com.br/informatica/paulobarreto/KhazadPage.html>
 428
 429 config CRYPTO_ANUBIS
 430         tristate "Anubis cipher algorithm"
 431         select CRYPTO_ALGAPI
 432         help
 433           Anubis cipher algorithm.
 434
 435           Anubis is a variable key length cipher which can use keys from
 436           128 bits to 320 bits in length.  It was evaluated as a entrant
 437           in the NESSIE competition.
 438
 439           See also:
 440           <https://www.cosic.esat.kuleuven.ac.be/nessie/reports/>
 441           <http://planeta.terra.com.br/informatica/paulobarreto/AnubisPage.html>
 442
 443 config CRYPTO_SEED
 444         tristate "SEED cipher algorithm"
 445         select CRYPTO_ALGAPI
 446         help
 447           SEED cipher algorithm (RFC4269).
 448
 449           SEED is a 128-bit symmetric key block cipher that has been
 450           developed by KISA (Korea Information Security Agency) as a
 451           national standard encryption algorithm of the Republic of Korea.
 452           It is a 16 round block cipher with the key size of 128 bit.
 453
 454           See also:
 455           <http://www.kisa.or.kr/kisa/seed/jsp/seed_eng.jsp>
 456
 457 config CRYPTO_SALSA20
 458         tristate "Salsa20 stream cipher algorithm (EXPERIMENTAL)"
 459         depends on EXPERIMENTAL
 460         select CRYPTO_BLKCIPHER
 461         help
 462           Salsa20 stream cipher algorithm.
 463
 464           Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
 465           Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
 466
 467           The Salsa20 stream cipher algorithm is designed by Daniel J.
 468           Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
 469
 470 config CRYPTO_DEFLATE
 471         tristate "Deflate compression algorithm"
 472         select CRYPTO_ALGAPI
 473         select ZLIB_INFLATE
 474         select ZLIB_DEFLATE
 475         help
 476           This is the Deflate algorithm (RFC1951), specified for use in
 477           IPSec with the IPCOMP protocol (RFC3173, RFC2394).
 478
 479           You will most probably want this if using IPSec.
 480
 481 config CRYPTO_MICHAEL_MIC
 482         tristate "Michael MIC keyed digest algorithm"
 483         select CRYPTO_ALGAPI
 484         help
 485           Michael MIC is used for message integrity protection in TKIP
 486           (IEEE 802.11i). This algorithm is required for TKIP, but it
 487           should not be used for other purposes because of the weakness
 488           of the algorithm.
 489
 490 config CRYPTO_CRC32C
 491         tristate "CRC32c CRC algorithm"
 492         select CRYPTO_ALGAPI
 493         select LIBCRC32C
 494         help
 495           Castagnoli, et al Cyclic Redundancy-Check Algorithm.  Used
 496           by iSCSI for header and data digests and by others.
 497           See Castagnoli93.  This implementation uses lib/libcrc32c.
 498           Module will be crc32c.
 499
 500 config CRYPTO_CAMELLIA
 501         tristate "Camellia cipher algorithms"
 502         depends on CRYPTO
 503         select CRYPTO_ALGAPI
 504         help
 505           Camellia cipher algorithms module.
 506
 507           Camellia is a symmetric key block cipher developed jointly
 508           at NTT and Mitsubishi Electric Corporation.
 509
 510           The Camellia specifies three key sizes: 128, 192 and 256 bits.
 511
 512           See also:
 513           <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
 514
 515 config CRYPTO_TEST
 516         tristate "Testing module"
 517         depends on m
 518         select CRYPTO_ALGAPI
 519         help
 520           Quick & dirty crypto test module.
 521
 522 config CRYPTO_AUTHENC
 523         tristate "Authenc support"
 524         select CRYPTO_AEAD
 525         select CRYPTO_MANAGER
 526         help
 527           Authenc: Combined mode wrapper for IPsec.
 528           This is required for IPSec.
 529
 530 source "drivers/crypto/Kconfig"
 531
 532 endif   # if CRYPTO