crypto/Kconfig

   1 #
   2 # Generic algorithms support
   3 #
   4 config XOR_BLOCKS
   5         tristate
   6
   7 #
   8 # async_tx api: hardware offloaded memory transfer/transform support
   9 #
  10 source "crypto/async_tx/Kconfig"
  11
  12 #
  13 # Cryptographic API Configuration
  14 #
  15 menuconfig CRYPTO
  16         bool "Cryptographic API"
  17         help
  18           This option provides the core Cryptographic API.
  19
  20 if CRYPTO
  21
  22 config CRYPTO_ALGAPI
  23         tristate
  24         help
  25           This option provides the API for cryptographic algorithms.
  26
  27 config CRYPTO_ABLKCIPHER
  28         tristate
  29         select CRYPTO_BLKCIPHER
  30
  31 config CRYPTO_AEAD
  32         tristate
  33         select CRYPTO_ALGAPI
  34
  35 config CRYPTO_BLKCIPHER
  36         tristate
  37         select CRYPTO_ALGAPI
  38
  39 config CRYPTO_HASH
  40         tristate
  41         select CRYPTO_ALGAPI
  42
  43 config CRYPTO_MANAGER
  44         tristate "Cryptographic algorithm manager"
  45         select CRYPTO_ALGAPI
  46         help
  47           Create default cryptographic template instantiations such as
  48           cbc(aes).
  49
  50 config CRYPTO_HMAC
  51         tristate "HMAC support"
  52         select CRYPTO_HASH
  53         select CRYPTO_MANAGER
  54         help
  55           HMAC: Keyed-Hashing for Message Authentication (RFC2104).
  56           This is required for IPSec.
  57
  58 config CRYPTO_XCBC
  59         tristate "XCBC support"
  60         depends on EXPERIMENTAL
  61         select CRYPTO_HASH
  62         select CRYPTO_MANAGER
  63         help
  64           XCBC: Keyed-Hashing with encryption algorithm
  65                 http://www.ietf.org/rfc/rfc3566.txt
  66                 http://csrc.nist.gov/encryption/modes/proposedmodes/
  67                  xcbc-mac/xcbc-mac-spec.pdf
  68
  69 config CRYPTO_NULL
  70         tristate "Null algorithms"
  71         select CRYPTO_ALGAPI
  72         help
  73           These are 'Null' algorithms, used by IPsec, which do nothing.
  74
  75 config CRYPTO_MD4
  76         tristate "MD4 digest algorithm"
  77         select CRYPTO_ALGAPI
  78         help
  79           MD4 message digest algorithm (RFC1320).
  80
  81 config CRYPTO_MD5
  82         tristate "MD5 digest algorithm"
  83         select CRYPTO_ALGAPI
  84         help
  85           MD5 message digest algorithm (RFC1321).
  86
  87 config CRYPTO_SHA1
  88         tristate "SHA1 digest algorithm"
  89         select CRYPTO_ALGAPI
  90         help
  91           SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2).
  92
  93 config CRYPTO_SHA256
  94         tristate "SHA256 digest algorithm"
  95         select CRYPTO_ALGAPI
  96         help
  97           SHA256 secure hash standard (DFIPS 180-2).
  98
  99           This version of SHA implements a 256 bit hash with 128 bits of
 100           security against collision attacks.
 101
 102 config CRYPTO_SHA512
 103         tristate "SHA384 and SHA512 digest algorithms"
 104         select CRYPTO_ALGAPI
 105         help
 106           SHA512 secure hash standard (DFIPS 180-2).
 107
 108           This version of SHA implements a 512 bit hash with 256 bits of
 109           security against collision attacks.
 110
 111           This code also includes SHA-384, a 384 bit hash with 192 bits
 112           of security against collision attacks.
 113
 114 config CRYPTO_WP512
 115         tristate "Whirlpool digest algorithms"
 116         select CRYPTO_ALGAPI
 117         help
 118           Whirlpool hash algorithm 512, 384 and 256-bit hashes
 119
 120           Whirlpool-512 is part of the NESSIE cryptographic primitives.
 121           Whirlpool will be part of the ISO/IEC 10118-3:2003(E) standard
 122
 123           See also:
 124           <http://planeta.terra.com.br/informatica/paulobarreto/WhirlpoolPage.html>
 125
 126 config CRYPTO_TGR192
 127         tristate "Tiger digest algorithms"
 128         select CRYPTO_ALGAPI
 129         help
 130           Tiger hash algorithm 192, 160 and 128-bit hashes
 131
 132           Tiger is a hash function optimized for 64-bit processors while
 133           still having decent performance on 32-bit processors.
 134           Tiger was developed by Ross Anderson and Eli Biham.
 135
 136           See also:
 137           <http://www.cs.technion.ac.il/~biham/Reports/Tiger/>.
 138
 139 config CRYPTO_GF128MUL
 140         tristate "GF(2^128) multiplication functions (EXPERIMENTAL)"
 141         depends on EXPERIMENTAL
 142         help
 143           Efficient table driven implementation of multiplications in the
 144           field GF(2^128).  This is needed by some cypher modes. This
 145           option will be selected automatically if you select such a
 146           cipher mode.  Only select this option by hand if you expect to load
 147           an external module that requires these functions.
 148
 149 config CRYPTO_ECB
 150         tristate "ECB support"
 151         select CRYPTO_BLKCIPHER
 152         select CRYPTO_MANAGER
 153         help
 154           ECB: Electronic CodeBook mode
 155           This is the simplest block cipher algorithm.  It simply encrypts
 156           the input block by block.
 157
 158 config CRYPTO_CBC
 159         tristate "CBC support"
 160         select CRYPTO_BLKCIPHER
 161         select CRYPTO_MANAGER
 162         help
 163           CBC: Cipher Block Chaining mode
 164           This block cipher algorithm is required for IPSec.
 165
 166 config CRYPTO_PCBC
 167         tristate "PCBC support"
 168         select CRYPTO_BLKCIPHER
 169         select CRYPTO_MANAGER
 170         help
 171           PCBC: Propagating Cipher Block Chaining mode
 172           This block cipher algorithm is required for RxRPC.
 173
 174 config CRYPTO_LRW
 175         tristate "LRW support (EXPERIMENTAL)"
 176         depends on EXPERIMENTAL
 177         select CRYPTO_BLKCIPHER
 178         select CRYPTO_MANAGER
 179         select CRYPTO_GF128MUL
 180         help
 181           LRW: Liskov Rivest Wagner, a tweakable, non malleable, non movable
 182           narrow block cipher mode for dm-crypt.  Use it with cipher
 183           specification string aes-lrw-benbi, the key must be 256, 320 or 384.
 184           The first 128, 192 or 256 bits in the key are used for AES and the
 185           rest is used to tie each cipher block to its logical position.
 186
 187 config CRYPTO_CRYPTD
 188         tristate "Software async crypto daemon"
 189         select CRYPTO_ABLKCIPHER
 190         select CRYPTO_MANAGER
 191         help
 192           This is a generic software asynchronous crypto daemon that
 193           converts an arbitrary synchronous software crypto algorithm
 194           into an asynchronous algorithm that executes in a kernel thread.
 195
 196 config CRYPTO_DES
 197         tristate "DES and Triple DES EDE cipher algorithms"
 198         select CRYPTO_ALGAPI
 199         help
 200           DES cipher algorithm (FIPS 46-2), and Triple DES EDE (FIPS 46-3).
 201
 202 config CRYPTO_FCRYPT
 203         tristate "FCrypt cipher algorithm"
 204         select CRYPTO_ALGAPI
 205         select CRYPTO_BLKCIPHER
 206         help
 207           FCrypt algorithm used by RxRPC.
 208
 209 config CRYPTO_BLOWFISH
 210         tristate "Blowfish cipher algorithm"
 211         select CRYPTO_ALGAPI
 212         help
 213           Blowfish cipher algorithm, by Bruce Schneier.
 214
 215           This is a variable key length cipher which can use keys from 32
 216           bits to 448 bits in length.  It's fast, simple and specifically
 217           designed for use on "large microprocessors".
 218
 219           See also:
 220           <http://www.schneier.com/blowfish.html>
 221
 222 config CRYPTO_TWOFISH
 223         tristate "Twofish cipher algorithm"
 224         select CRYPTO_ALGAPI
 225         select CRYPTO_TWOFISH_COMMON
 226         help
 227           Twofish cipher algorithm.
 228
 229           Twofish was submitted as an AES (Advanced Encryption Standard)
 230           candidate cipher by researchers at CounterPane Systems.  It is a
 231           16 round block cipher supporting key sizes of 128, 192, and 256
 232           bits.
 233
 234           See also:
 235           <http://www.schneier.com/twofish.html>
 236
 237 config CRYPTO_TWOFISH_COMMON
 238         tristate
 239         help
 240           Common parts of the Twofish cipher algorithm shared by the
 241           generic c and the assembler implementations.
 242
 243 config CRYPTO_TWOFISH_586
 244         tristate "Twofish cipher algorithms (i586)"
 245         depends on (X86 || UML_X86) && !64BIT
 246         select CRYPTO_ALGAPI
 247         select CRYPTO_TWOFISH_COMMON
 248         help
 249           Twofish cipher algorithm.
 250
 251           Twofish was submitted as an AES (Advanced Encryption Standard)
 252           candidate cipher by researchers at CounterPane Systems.  It is a
 253           16 round block cipher supporting key sizes of 128, 192, and 256
 254           bits.
 255
 256           See also:
 257           <http://www.schneier.com/twofish.html>
 258
 259 config CRYPTO_TWOFISH_X86_64
 260         tristate "Twofish cipher algorithm (x86_64)"
 261         depends on (X86 || UML_X86) && 64BIT
 262         select CRYPTO_ALGAPI
 263         select CRYPTO_TWOFISH_COMMON
 264         help
 265           Twofish cipher algorithm (x86_64).
 266
 267           Twofish was submitted as an AES (Advanced Encryption Standard)
 268           candidate cipher by researchers at CounterPane Systems.  It is a
 269           16 round block cipher supporting key sizes of 128, 192, and 256
 270           bits.
 271
 272           See also:
 273           <http://www.schneier.com/twofish.html>
 274
 275 config CRYPTO_SERPENT
 276         tristate "Serpent cipher algorithm"
 277         select CRYPTO_ALGAPI
 278         help
 279           Serpent cipher algorithm, by Anderson, Biham & Knudsen.
 280
 281           Keys are allowed to be from 0 to 256 bits in length, in steps
 282           of 8 bits.  Also includes the 'Tnepres' algorithm, a reversed
 283           variant of Serpent for compatibility with old kerneli.org code.
 284
 285           See also:
 286           <http://www.cl.cam.ac.uk/~rja14/serpent.html>
 287
 288 config CRYPTO_AES
 289         tristate "AES cipher algorithms"
 290         select CRYPTO_ALGAPI
 291         help
 292           AES cipher algorithms (FIPS-197). AES uses the Rijndael
 293           algorithm.
 294
 295           Rijndael appears to be consistently a very good performer in
 296           both hardware and software across a wide range of computing
 297           environments regardless of its use in feedback or non-feedback
 298           modes. Its key setup time is excellent, and its key agility is
 299           good. Rijndael's very low memory requirements make it very well
 300           suited for restricted-space environments, in which it also
 301           demonstrates excellent performance. Rijndael's operations are
 302           among the easiest to defend against power and timing attacks.
 303
 304           The AES specifies three key sizes: 128, 192 and 256 bits
 305
 306           See <http://csrc.nist.gov/CryptoToolkit/aes/> for more information.
 307
 308 config CRYPTO_AES_586
 309         tristate "AES cipher algorithms (i586)"
 310         depends on (X86 || UML_X86) && !64BIT
 311         select CRYPTO_ALGAPI
 312         help
 313           AES cipher algorithms (FIPS-197). AES uses the Rijndael
 314           algorithm.
 315
 316           Rijndael appears to be consistently a very good performer in
 317           both hardware and software across a wide range of computing
 318           environments regardless of its use in feedback or non-feedback
 319           modes. Its key setup time is excellent, and its key agility is
 320           good. Rijndael's very low memory requirements make it very well
 321           suited for restricted-space environments, in which it also
 322           demonstrates excellent performance. Rijndael's operations are
 323           among the easiest to defend against power and timing attacks.
 324
 325           The AES specifies three key sizes: 128, 192 and 256 bits
 326
 327           See <http://csrc.nist.gov/encryption/aes/> for more information.
 328
 329 config CRYPTO_AES_X86_64
 330         tristate "AES cipher algorithms (x86_64)"
 331         depends on (X86 || UML_X86) && 64BIT
 332         select CRYPTO_ALGAPI
 333         help
 334           AES cipher algorithms (FIPS-197). AES uses the Rijndael
 335           algorithm.
 336
 337           Rijndael appears to be consistently a very good performer in
 338           both hardware and software across a wide range of computing
 339           environments regardless of its use in feedback or non-feedback
 340           modes. Its key setup time is excellent, and its key agility is
 341           good. Rijndael's very low memory requirements make it very well
 342           suited for restricted-space environments, in which it also
 343           demonstrates excellent performance. Rijndael's operations are
 344           among the easiest to defend against power and timing attacks.
 345
 346           The AES specifies three key sizes: 128, 192 and 256 bits
 347
 348           See <http://csrc.nist.gov/encryption/aes/> for more information.
 349
 350 config CRYPTO_CAST5
 351         tristate "CAST5 (CAST-128) cipher algorithm"
 352         select CRYPTO_ALGAPI
 353         help
 354           The CAST5 encryption algorithm (synonymous with CAST-128) is
 355           described in RFC2144.
 356
 357 config CRYPTO_CAST6
 358         tristate "CAST6 (CAST-256) cipher algorithm"
 359         select CRYPTO_ALGAPI
 360         help
 361           The CAST6 encryption algorithm (synonymous with CAST-256) is
 362           described in RFC2612.
 363
 364 config CRYPTO_TEA
 365         tristate "TEA, XTEA and XETA cipher algorithms"
 366         select CRYPTO_ALGAPI
 367         help
 368           TEA cipher algorithm.
 369
 370           Tiny Encryption Algorithm is a simple cipher that uses
 371           many rounds for security.  It is very fast and uses
 372           little memory.
 373
 374           Xtendend Tiny Encryption Algorithm is a modification to
 375           the TEA algorithm to address a potential key weakness
 376           in the TEA algorithm.
 377
 378           Xtendend Encryption Tiny Algorithm is a mis-implementation
 379           of the XTEA algorithm for compatibility purposes.
 380
 381 config CRYPTO_ARC4
 382         tristate "ARC4 cipher algorithm"
 383         select CRYPTO_ALGAPI
 384         help
 385           ARC4 cipher algorithm.
 386
 387           ARC4 is a stream cipher using keys ranging from 8 bits to 2048
 388           bits in length.  This algorithm is required for driver-based
 389           WEP, but it should not be for other purposes because of the
 390           weakness of the algorithm.
 391
 392 config CRYPTO_KHAZAD
 393         tristate "Khazad cipher algorithm"
 394         select CRYPTO_ALGAPI
 395         help
 396           Khazad cipher algorithm.
 397
 398           Khazad was a finalist in the initial NESSIE competition.  It is
 399           an algorithm optimized for 64-bit processors with good performance
 400           on 32-bit processors.  Khazad uses an 128 bit key size.
 401
 402           See also:
 403           <http://planeta.terra.com.br/informatica/paulobarreto/KhazadPage.html>
 404
 405 config CRYPTO_ANUBIS
 406         tristate "Anubis cipher algorithm"
 407         select CRYPTO_ALGAPI
 408         help
 409           Anubis cipher algorithm.
 410
 411           Anubis is a variable key length cipher which can use keys from
 412           128 bits to 320 bits in length.  It was evaluated as a entrant
 413           in the NESSIE competition.
 414
 415           See also:
 416           <https://www.cosic.esat.kuleuven.ac.be/nessie/reports/>
 417           <http://planeta.terra.com.br/informatica/paulobarreto/AnubisPage.html>
 418
 419 config CRYPTO_SEED
 420         tristate "SEED cipher algorithm"
 421         select CRYPTO_ALGAPI
 422         help
 423           SEED cipher algorithm (RFC4269).
 424
 425           SEED is a 128-bit symmetric key block cipher that has been
 426           developed by KISA (Korea Information Security Agency) as a
 427           national standard encryption algorithm of the Republic of Korea.
 428           It is a 16 round block cipher with the key size of 128 bit.
 429
 430           See also:
 431           <http://www.kisa.or.kr/kisa/seed/jsp/seed_eng.jsp>
 432
 433
 434 config CRYPTO_DEFLATE
 435         tristate "Deflate compression algorithm"
 436         select CRYPTO_ALGAPI
 437         select ZLIB_INFLATE
 438         select ZLIB_DEFLATE
 439         help
 440           This is the Deflate algorithm (RFC1951), specified for use in
 441           IPSec with the IPCOMP protocol (RFC3173, RFC2394).
 442
 443           You will most probably want this if using IPSec.
 444
 445 config CRYPTO_MICHAEL_MIC
 446         tristate "Michael MIC keyed digest algorithm"
 447         select CRYPTO_ALGAPI
 448         help
 449           Michael MIC is used for message integrity protection in TKIP
 450           (IEEE 802.11i). This algorithm is required for TKIP, but it
 451           should not be used for other purposes because of the weakness
 452           of the algorithm.
 453
 454 config CRYPTO_CRC32C
 455         tristate "CRC32c CRC algorithm"
 456         select CRYPTO_ALGAPI
 457         select LIBCRC32C
 458         help
 459           Castagnoli, et al Cyclic Redundancy-Check Algorithm.  Used
 460           by iSCSI for header and data digests and by others.
 461           See Castagnoli93.  This implementation uses lib/libcrc32c.
 462           Module will be crc32c.
 463
 464 config CRYPTO_CAMELLIA
 465         tristate "Camellia cipher algorithms"
 466         depends on CRYPTO
 467         select CRYPTO_ALGAPI
 468         help
 469           Camellia cipher algorithms module.
 470
 471           Camellia is a symmetric key block cipher developed jointly
 472           at NTT and Mitsubishi Electric Corporation.
 473
 474           The Camellia specifies three key sizes: 128, 192 and 256 bits.
 475
 476           See also:
 477           <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
 478
 479 config CRYPTO_TEST
 480         tristate "Testing module"
 481         depends on m
 482         select CRYPTO_ALGAPI
 483         help
 484           Quick & dirty crypto test module.
 485
 486 source "drivers/crypto/Kconfig"
 487
 488 endif   # if CRYPTO