2 # Generic algorithms support
8 # async_tx api: hardware offloaded memory transfer/transform support
10 source "crypto/async_tx/Kconfig"
13 # Cryptographic API Configuration
16 tristate "Cryptographic API"
18 This option provides the core Cryptographic API.
22 comment "Crypto core or helper"
25 bool "FIPS 200 compliance"
26 depends on CRYPTO_ANSI_CPRNG && !CRYPTO_MANAGER_DISABLE_TESTS
28 This options enables the fips boot option which is
29 required if you want to system to operate in a FIPS 200
30 certification. You should say no unless you know what
37 This option provides the API for cryptographic algorithms.
51 config CRYPTO_BLKCIPHER
53 select CRYPTO_BLKCIPHER2
56 config CRYPTO_BLKCIPHER2
60 select CRYPTO_WORKQUEUE
90 tristate "Cryptographic algorithm manager"
91 select CRYPTO_MANAGER2
93 Create default cryptographic template instantiations such as
96 config CRYPTO_MANAGER2
97 def_tristate CRYPTO_MANAGER || (CRYPTO_MANAGER!=n && CRYPTO_ALGAPI=y)
100 select CRYPTO_BLKCIPHER2
104 tristate "Userspace cryptographic algorithm configuration"
106 select CRYPTO_MANAGER
108 Userspace configuration for cryptographic instantiations such as
111 config CRYPTO_MANAGER_DISABLE_TESTS
112 bool "Disable run-time self tests"
114 depends on CRYPTO_MANAGER2
116 Disable run-time self tests that normally take place at
117 algorithm registration.
119 config CRYPTO_GF128MUL
120 tristate "GF(2^128) multiplication functions"
122 Efficient table driven implementation of multiplications in the
123 field GF(2^128). This is needed by some cypher modes. This
124 option will be selected automatically if you select such a
125 cipher mode. Only select this option by hand if you expect to load
126 an external module that requires these functions.
129 tristate "Null algorithms"
131 select CRYPTO_BLKCIPHER
134 These are 'Null' algorithms, used by IPsec, which do nothing.
137 tristate "Parallel crypto engine (EXPERIMENTAL)"
138 depends on SMP && EXPERIMENTAL
140 select CRYPTO_MANAGER
143 This converts an arbitrary crypto algorithm into a parallel
144 algorithm that executes in kernel threads.
146 config CRYPTO_WORKQUEUE
150 tristate "Software async crypto daemon"
151 select CRYPTO_BLKCIPHER
153 select CRYPTO_MANAGER
154 select CRYPTO_WORKQUEUE
156 This is a generic software asynchronous crypto daemon that
157 converts an arbitrary synchronous software crypto algorithm
158 into an asynchronous algorithm that executes in a kernel thread.
160 config CRYPTO_AUTHENC
161 tristate "Authenc support"
163 select CRYPTO_BLKCIPHER
164 select CRYPTO_MANAGER
167 Authenc: Combined mode wrapper for IPsec.
168 This is required for IPSec.
171 tristate "Testing module"
173 select CRYPTO_MANAGER
175 Quick & dirty crypto test module.
177 config CRYPTO_ABLK_HELPER_X86
182 config CRYPTO_GLUE_HELPER_X86
187 comment "Authenticated Encryption with Associated Data"
190 tristate "CCM support"
194 Support for Counter with CBC MAC. Required for IPsec.
197 tristate "GCM/GMAC support"
202 Support for Galois/Counter Mode (GCM) and Galois Message
203 Authentication Code (GMAC). Required for IPSec.
206 tristate "Sequence Number IV Generator"
208 select CRYPTO_BLKCIPHER
211 This IV generator generates an IV based on a sequence number by
212 xoring it with a salt. This algorithm is mainly useful for CTR
214 comment "Block modes"
217 tristate "CBC support"
218 select CRYPTO_BLKCIPHER
219 select CRYPTO_MANAGER
221 CBC: Cipher Block Chaining mode
222 This block cipher algorithm is required for IPSec.
225 tristate "CTR support"
226 select CRYPTO_BLKCIPHER
228 select CRYPTO_MANAGER
231 This block cipher algorithm is required for IPSec.
234 tristate "CTS support"
235 select CRYPTO_BLKCIPHER
237 CTS: Cipher Text Stealing
238 This is the Cipher Text Stealing mode as described by
239 Section 8 of rfc2040 and referenced by rfc3962.
240 (rfc3962 includes errata information in its Appendix A)
241 This mode is required for Kerberos gss mechanism support
245 tristate "ECB support"
246 select CRYPTO_BLKCIPHER
247 select CRYPTO_MANAGER
249 ECB: Electronic CodeBook mode
250 This is the simplest block cipher algorithm. It simply encrypts
251 the input block by block.
254 tristate "LRW support"
255 select CRYPTO_BLKCIPHER
256 select CRYPTO_MANAGER
257 select CRYPTO_GF128MUL
259 LRW: Liskov Rivest Wagner, a tweakable, non malleable, non movable
260 narrow block cipher mode for dm-crypt. Use it with cipher
261 specification string aes-lrw-benbi, the key must be 256, 320 or 384.
262 The first 128, 192 or 256 bits in the key are used for AES and the
263 rest is used to tie each cipher block to its logical position.
266 tristate "PCBC support"
267 select CRYPTO_BLKCIPHER
268 select CRYPTO_MANAGER
270 PCBC: Propagating Cipher Block Chaining mode
271 This block cipher algorithm is required for RxRPC.
274 tristate "XTS support"
275 select CRYPTO_BLKCIPHER
276 select CRYPTO_MANAGER
277 select CRYPTO_GF128MUL
279 XTS: IEEE1619/D16 narrow block cipher use with aes-xts-plain,
280 key size 256, 384 or 512 bits. This implementation currently
281 can't handle a sectorsize which is not a multiple of 16 bytes.
286 tristate "HMAC support"
288 select CRYPTO_MANAGER
290 HMAC: Keyed-Hashing for Message Authentication (RFC2104).
291 This is required for IPSec.
294 tristate "XCBC support"
295 depends on EXPERIMENTAL
297 select CRYPTO_MANAGER
299 XCBC: Keyed-Hashing with encryption algorithm
300 http://www.ietf.org/rfc/rfc3566.txt
301 http://csrc.nist.gov/encryption/modes/proposedmodes/
302 xcbc-mac/xcbc-mac-spec.pdf
305 tristate "VMAC support"
306 depends on EXPERIMENTAL
308 select CRYPTO_MANAGER
310 VMAC is a message authentication algorithm designed for
311 very high speed on 64-bit architectures.
314 <http://fastcrypto.org/vmac>
319 tristate "CRC32c CRC algorithm"
323 Castagnoli, et al Cyclic Redundancy-Check Algorithm. Used
324 by iSCSI for header and data digests and by others.
325 See Castagnoli93. Module will be crc32c.
327 config CRYPTO_CRC32C_INTEL
328 tristate "CRC32c INTEL hardware acceleration"
332 In Intel processor with SSE4.2 supported, the processor will
333 support CRC32C implementation using hardware accelerated CRC32
334 instruction. This option will create 'crc32c-intel' module,
335 which will enable any routine to use the CRC32 instruction to
336 gain performance compared with software implementation.
337 Module will be crc32c-intel.
340 tristate "GHASH digest algorithm"
341 select CRYPTO_GF128MUL
343 GHASH is message digest algorithm for GCM (Galois/Counter Mode).
346 tristate "MD4 digest algorithm"
349 MD4 message digest algorithm (RFC1320).
352 tristate "MD5 digest algorithm"
355 MD5 message digest algorithm (RFC1321).
357 config CRYPTO_MD5_SPARC64
358 tristate "MD5 digest algorithm (SPARC64)"
363 MD5 message digest algorithm (RFC1321) implemented
364 using sparc64 crypto instructions, when available.
366 config CRYPTO_MICHAEL_MIC
367 tristate "Michael MIC keyed digest algorithm"
370 Michael MIC is used for message integrity protection in TKIP
371 (IEEE 802.11i). This algorithm is required for TKIP, but it
372 should not be used for other purposes because of the weakness
376 tristate "RIPEMD-128 digest algorithm"
379 RIPEMD-128 (ISO/IEC 10118-3:2004).
381 RIPEMD-128 is a 128-bit cryptographic hash function. It should only
382 be used as a secure replacement for RIPEMD. For other use cases,
383 RIPEMD-160 should be used.
385 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
386 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
389 tristate "RIPEMD-160 digest algorithm"
392 RIPEMD-160 (ISO/IEC 10118-3:2004).
394 RIPEMD-160 is a 160-bit cryptographic hash function. It is intended
395 to be used as a secure replacement for the 128-bit hash functions
396 MD4, MD5 and it's predecessor RIPEMD
397 (not to be confused with RIPEMD-128).
399 It's speed is comparable to SHA1 and there are no known attacks
402 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
403 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
406 tristate "RIPEMD-256 digest algorithm"
409 RIPEMD-256 is an optional extension of RIPEMD-128 with a
410 256 bit hash. It is intended for applications that require
411 longer hash-results, without needing a larger security level
414 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
415 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
418 tristate "RIPEMD-320 digest algorithm"
421 RIPEMD-320 is an optional extension of RIPEMD-160 with a
422 320 bit hash. It is intended for applications that require
423 longer hash-results, without needing a larger security level
426 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
427 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
430 tristate "SHA1 digest algorithm"
433 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2).
435 config CRYPTO_SHA1_SSSE3
436 tristate "SHA1 digest algorithm (SSSE3/AVX)"
437 depends on X86 && 64BIT
441 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented
442 using Supplemental SSE3 (SSSE3) instructions or Advanced Vector
443 Extensions (AVX), when available.
445 config CRYPTO_SHA1_SPARC64
446 tristate "SHA1 digest algorithm (SPARC64)"
451 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented
452 using sparc64 crypto instructions, when available.
455 tristate "SHA224 and SHA256 digest algorithm"
458 SHA256 secure hash standard (DFIPS 180-2).
460 This version of SHA implements a 256 bit hash with 128 bits of
461 security against collision attacks.
463 This code also includes SHA-224, a 224 bit hash with 112 bits
464 of security against collision attacks.
466 config CRYPTO_SHA256_SPARC64
467 tristate "SHA224 and SHA256 digest algorithm (SPARC64)"
472 SHA-256 secure hash standard (DFIPS 180-2) implemented
473 using sparc64 crypto instructions, when available.
476 tristate "SHA384 and SHA512 digest algorithms"
479 SHA512 secure hash standard (DFIPS 180-2).
481 This version of SHA implements a 512 bit hash with 256 bits of
482 security against collision attacks.
484 This code also includes SHA-384, a 384 bit hash with 192 bits
485 of security against collision attacks.
487 config CRYPTO_SHA512_SPARC64
488 tristate "SHA384 and SHA512 digest algorithm (SPARC64)"
493 SHA-512 secure hash standard (DFIPS 180-2) implemented
494 using sparc64 crypto instructions, when available.
497 tristate "Tiger digest algorithms"
500 Tiger hash algorithm 192, 160 and 128-bit hashes
502 Tiger is a hash function optimized for 64-bit processors while
503 still having decent performance on 32-bit processors.
504 Tiger was developed by Ross Anderson and Eli Biham.
507 <http://www.cs.technion.ac.il/~biham/Reports/Tiger/>.
510 tristate "Whirlpool digest algorithms"
513 Whirlpool hash algorithm 512, 384 and 256-bit hashes
515 Whirlpool-512 is part of the NESSIE cryptographic primitives.
516 Whirlpool will be part of the ISO/IEC 10118-3:2003(E) standard
519 <http://www.larc.usp.br/~pbarreto/WhirlpoolPage.html>
521 config CRYPTO_GHASH_CLMUL_NI_INTEL
522 tristate "GHASH digest algorithm (CLMUL-NI accelerated)"
523 depends on X86 && 64BIT
526 GHASH is message digest algorithm for GCM (Galois/Counter Mode).
527 The implementation is accelerated by CLMUL-NI of Intel.
532 tristate "AES cipher algorithms"
535 AES cipher algorithms (FIPS-197). AES uses the Rijndael
538 Rijndael appears to be consistently a very good performer in
539 both hardware and software across a wide range of computing
540 environments regardless of its use in feedback or non-feedback
541 modes. Its key setup time is excellent, and its key agility is
542 good. Rijndael's very low memory requirements make it very well
543 suited for restricted-space environments, in which it also
544 demonstrates excellent performance. Rijndael's operations are
545 among the easiest to defend against power and timing attacks.
547 The AES specifies three key sizes: 128, 192 and 256 bits
549 See <http://csrc.nist.gov/CryptoToolkit/aes/> for more information.
551 config CRYPTO_AES_586
552 tristate "AES cipher algorithms (i586)"
553 depends on (X86 || UML_X86) && !64BIT
557 AES cipher algorithms (FIPS-197). AES uses the Rijndael
560 Rijndael appears to be consistently a very good performer in
561 both hardware and software across a wide range of computing
562 environments regardless of its use in feedback or non-feedback
563 modes. Its key setup time is excellent, and its key agility is
564 good. Rijndael's very low memory requirements make it very well
565 suited for restricted-space environments, in which it also
566 demonstrates excellent performance. Rijndael's operations are
567 among the easiest to defend against power and timing attacks.
569 The AES specifies three key sizes: 128, 192 and 256 bits
571 See <http://csrc.nist.gov/encryption/aes/> for more information.
573 config CRYPTO_AES_X86_64
574 tristate "AES cipher algorithms (x86_64)"
575 depends on (X86 || UML_X86) && 64BIT
579 AES cipher algorithms (FIPS-197). AES uses the Rijndael
582 Rijndael appears to be consistently a very good performer in
583 both hardware and software across a wide range of computing
584 environments regardless of its use in feedback or non-feedback
585 modes. Its key setup time is excellent, and its key agility is
586 good. Rijndael's very low memory requirements make it very well
587 suited for restricted-space environments, in which it also
588 demonstrates excellent performance. Rijndael's operations are
589 among the easiest to defend against power and timing attacks.
591 The AES specifies three key sizes: 128, 192 and 256 bits
593 See <http://csrc.nist.gov/encryption/aes/> for more information.
595 config CRYPTO_AES_NI_INTEL
596 tristate "AES cipher algorithms (AES-NI)"
598 select CRYPTO_AES_X86_64 if 64BIT
599 select CRYPTO_AES_586 if !64BIT
601 select CRYPTO_ABLK_HELPER_X86
604 Use Intel AES-NI instructions for AES algorithm.
606 AES cipher algorithms (FIPS-197). AES uses the Rijndael
609 Rijndael appears to be consistently a very good performer in
610 both hardware and software across a wide range of computing
611 environments regardless of its use in feedback or non-feedback
612 modes. Its key setup time is excellent, and its key agility is
613 good. Rijndael's very low memory requirements make it very well
614 suited for restricted-space environments, in which it also
615 demonstrates excellent performance. Rijndael's operations are
616 among the easiest to defend against power and timing attacks.
618 The AES specifies three key sizes: 128, 192 and 256 bits
620 See <http://csrc.nist.gov/encryption/aes/> for more information.
622 In addition to AES cipher algorithm support, the acceleration
623 for some popular block cipher mode is supported too, including
624 ECB, CBC, LRW, PCBC, XTS. The 64 bit version has additional
625 acceleration for CTR.
627 config CRYPTO_AES_SPARC64
628 tristate "AES cipher algorithms (SPARC64)"
633 Use SPARC64 crypto opcodes for AES algorithm.
635 AES cipher algorithms (FIPS-197). AES uses the Rijndael
638 Rijndael appears to be consistently a very good performer in
639 both hardware and software across a wide range of computing
640 environments regardless of its use in feedback or non-feedback
641 modes. Its key setup time is excellent, and its key agility is
642 good. Rijndael's very low memory requirements make it very well
643 suited for restricted-space environments, in which it also
644 demonstrates excellent performance. Rijndael's operations are
645 among the easiest to defend against power and timing attacks.
647 The AES specifies three key sizes: 128, 192 and 256 bits
649 See <http://csrc.nist.gov/encryption/aes/> for more information.
651 In addition to AES cipher algorithm support, the acceleration
652 for some popular block cipher mode is supported too, including
656 tristate "Anubis cipher algorithm"
659 Anubis cipher algorithm.
661 Anubis is a variable key length cipher which can use keys from
662 128 bits to 320 bits in length. It was evaluated as a entrant
663 in the NESSIE competition.
666 <https://www.cosic.esat.kuleuven.be/nessie/reports/>
667 <http://www.larc.usp.br/~pbarreto/AnubisPage.html>
670 tristate "ARC4 cipher algorithm"
671 select CRYPTO_BLKCIPHER
673 ARC4 cipher algorithm.
675 ARC4 is a stream cipher using keys ranging from 8 bits to 2048
676 bits in length. This algorithm is required for driver-based
677 WEP, but it should not be for other purposes because of the
678 weakness of the algorithm.
680 config CRYPTO_BLOWFISH
681 tristate "Blowfish cipher algorithm"
683 select CRYPTO_BLOWFISH_COMMON
685 Blowfish cipher algorithm, by Bruce Schneier.
687 This is a variable key length cipher which can use keys from 32
688 bits to 448 bits in length. It's fast, simple and specifically
689 designed for use on "large microprocessors".
692 <http://www.schneier.com/blowfish.html>
694 config CRYPTO_BLOWFISH_COMMON
697 Common parts of the Blowfish cipher algorithm shared by the
698 generic c and the assembler implementations.
701 <http://www.schneier.com/blowfish.html>
703 config CRYPTO_BLOWFISH_X86_64
704 tristate "Blowfish cipher algorithm (x86_64)"
705 depends on X86 && 64BIT
707 select CRYPTO_BLOWFISH_COMMON
709 Blowfish cipher algorithm (x86_64), by Bruce Schneier.
711 This is a variable key length cipher which can use keys from 32
712 bits to 448 bits in length. It's fast, simple and specifically
713 designed for use on "large microprocessors".
716 <http://www.schneier.com/blowfish.html>
718 config CRYPTO_CAMELLIA
719 tristate "Camellia cipher algorithms"
723 Camellia cipher algorithms module.
725 Camellia is a symmetric key block cipher developed jointly
726 at NTT and Mitsubishi Electric Corporation.
728 The Camellia specifies three key sizes: 128, 192 and 256 bits.
731 <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
733 config CRYPTO_CAMELLIA_X86_64
734 tristate "Camellia cipher algorithm (x86_64)"
735 depends on X86 && 64BIT
738 select CRYPTO_GLUE_HELPER_X86
742 Camellia cipher algorithm module (x86_64).
744 Camellia is a symmetric key block cipher developed jointly
745 at NTT and Mitsubishi Electric Corporation.
747 The Camellia specifies three key sizes: 128, 192 and 256 bits.
750 <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
753 tristate "CAST5 (CAST-128) cipher algorithm"
756 The CAST5 encryption algorithm (synonymous with CAST-128) is
757 described in RFC2144.
760 tristate "CAST6 (CAST-256) cipher algorithm"
763 The CAST6 encryption algorithm (synonymous with CAST-256) is
764 described in RFC2612.
767 tristate "DES and Triple DES EDE cipher algorithms"
770 DES cipher algorithm (FIPS 46-2), and Triple DES EDE (FIPS 46-3).
773 tristate "FCrypt cipher algorithm"
775 select CRYPTO_BLKCIPHER
777 FCrypt algorithm used by RxRPC.
780 tristate "Khazad cipher algorithm"
783 Khazad cipher algorithm.
785 Khazad was a finalist in the initial NESSIE competition. It is
786 an algorithm optimized for 64-bit processors with good performance
787 on 32-bit processors. Khazad uses an 128 bit key size.
790 <http://www.larc.usp.br/~pbarreto/KhazadPage.html>
792 config CRYPTO_SALSA20
793 tristate "Salsa20 stream cipher algorithm (EXPERIMENTAL)"
794 depends on EXPERIMENTAL
795 select CRYPTO_BLKCIPHER
797 Salsa20 stream cipher algorithm.
799 Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
800 Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
802 The Salsa20 stream cipher algorithm is designed by Daniel J.
803 Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
805 config CRYPTO_SALSA20_586
806 tristate "Salsa20 stream cipher algorithm (i586) (EXPERIMENTAL)"
807 depends on (X86 || UML_X86) && !64BIT
808 depends on EXPERIMENTAL
809 select CRYPTO_BLKCIPHER
811 Salsa20 stream cipher algorithm.
813 Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
814 Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
816 The Salsa20 stream cipher algorithm is designed by Daniel J.
817 Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
819 config CRYPTO_SALSA20_X86_64
820 tristate "Salsa20 stream cipher algorithm (x86_64) (EXPERIMENTAL)"
821 depends on (X86 || UML_X86) && 64BIT
822 depends on EXPERIMENTAL
823 select CRYPTO_BLKCIPHER
825 Salsa20 stream cipher algorithm.
827 Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
828 Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
830 The Salsa20 stream cipher algorithm is designed by Daniel J.
831 Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
834 tristate "SEED cipher algorithm"
837 SEED cipher algorithm (RFC4269).
839 SEED is a 128-bit symmetric key block cipher that has been
840 developed by KISA (Korea Information Security Agency) as a
841 national standard encryption algorithm of the Republic of Korea.
842 It is a 16 round block cipher with the key size of 128 bit.
845 <http://www.kisa.or.kr/kisa/seed/jsp/seed_eng.jsp>
847 config CRYPTO_SERPENT
848 tristate "Serpent cipher algorithm"
851 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
853 Keys are allowed to be from 0 to 256 bits in length, in steps
854 of 8 bits. Also includes the 'Tnepres' algorithm, a reversed
855 variant of Serpent for compatibility with old kerneli.org code.
858 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
860 config CRYPTO_SERPENT_SSE2_X86_64
861 tristate "Serpent cipher algorithm (x86_64/SSE2)"
862 depends on X86 && 64BIT
865 select CRYPTO_ABLK_HELPER_X86
866 select CRYPTO_GLUE_HELPER_X86
867 select CRYPTO_SERPENT
871 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
873 Keys are allowed to be from 0 to 256 bits in length, in steps
876 This module provides Serpent cipher algorithm that processes eigth
877 blocks parallel using SSE2 instruction set.
880 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
882 config CRYPTO_SERPENT_SSE2_586
883 tristate "Serpent cipher algorithm (i586/SSE2)"
884 depends on X86 && !64BIT
887 select CRYPTO_ABLK_HELPER_X86
888 select CRYPTO_GLUE_HELPER_X86
889 select CRYPTO_SERPENT
893 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
895 Keys are allowed to be from 0 to 256 bits in length, in steps
898 This module provides Serpent cipher algorithm that processes four
899 blocks parallel using SSE2 instruction set.
902 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
904 config CRYPTO_SERPENT_AVX_X86_64
905 tristate "Serpent cipher algorithm (x86_64/AVX)"
906 depends on X86 && 64BIT
909 select CRYPTO_ABLK_HELPER_X86
910 select CRYPTO_GLUE_HELPER_X86
911 select CRYPTO_SERPENT
915 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
917 Keys are allowed to be from 0 to 256 bits in length, in steps
920 This module provides the Serpent cipher algorithm that processes
921 eight blocks parallel using the AVX instruction set.
924 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
927 tristate "TEA, XTEA and XETA cipher algorithms"
930 TEA cipher algorithm.
932 Tiny Encryption Algorithm is a simple cipher that uses
933 many rounds for security. It is very fast and uses
936 Xtendend Tiny Encryption Algorithm is a modification to
937 the TEA algorithm to address a potential key weakness
938 in the TEA algorithm.
940 Xtendend Encryption Tiny Algorithm is a mis-implementation
941 of the XTEA algorithm for compatibility purposes.
943 config CRYPTO_TWOFISH
944 tristate "Twofish cipher algorithm"
946 select CRYPTO_TWOFISH_COMMON
948 Twofish cipher algorithm.
950 Twofish was submitted as an AES (Advanced Encryption Standard)
951 candidate cipher by researchers at CounterPane Systems. It is a
952 16 round block cipher supporting key sizes of 128, 192, and 256
956 <http://www.schneier.com/twofish.html>
958 config CRYPTO_TWOFISH_COMMON
961 Common parts of the Twofish cipher algorithm shared by the
962 generic c and the assembler implementations.
964 config CRYPTO_TWOFISH_586
965 tristate "Twofish cipher algorithms (i586)"
966 depends on (X86 || UML_X86) && !64BIT
968 select CRYPTO_TWOFISH_COMMON
970 Twofish cipher algorithm.
972 Twofish was submitted as an AES (Advanced Encryption Standard)
973 candidate cipher by researchers at CounterPane Systems. It is a
974 16 round block cipher supporting key sizes of 128, 192, and 256
978 <http://www.schneier.com/twofish.html>
980 config CRYPTO_TWOFISH_X86_64
981 tristate "Twofish cipher algorithm (x86_64)"
982 depends on (X86 || UML_X86) && 64BIT
984 select CRYPTO_TWOFISH_COMMON
986 Twofish cipher algorithm (x86_64).
988 Twofish was submitted as an AES (Advanced Encryption Standard)
989 candidate cipher by researchers at CounterPane Systems. It is a
990 16 round block cipher supporting key sizes of 128, 192, and 256
994 <http://www.schneier.com/twofish.html>
996 config CRYPTO_TWOFISH_X86_64_3WAY
997 tristate "Twofish cipher algorithm (x86_64, 3-way parallel)"
998 depends on X86 && 64BIT
1000 select CRYPTO_TWOFISH_COMMON
1001 select CRYPTO_TWOFISH_X86_64
1002 select CRYPTO_GLUE_HELPER_X86
1006 Twofish cipher algorithm (x86_64, 3-way parallel).
1008 Twofish was submitted as an AES (Advanced Encryption Standard)
1009 candidate cipher by researchers at CounterPane Systems. It is a
1010 16 round block cipher supporting key sizes of 128, 192, and 256
1013 This module provides Twofish cipher algorithm that processes three
1014 blocks parallel, utilizing resources of out-of-order CPUs better.
1017 <http://www.schneier.com/twofish.html>
1019 config CRYPTO_TWOFISH_AVX_X86_64
1020 tristate "Twofish cipher algorithm (x86_64/AVX)"
1021 depends on X86 && 64BIT
1022 select CRYPTO_ALGAPI
1023 select CRYPTO_CRYPTD
1024 select CRYPTO_ABLK_HELPER_X86
1025 select CRYPTO_GLUE_HELPER_X86
1026 select CRYPTO_TWOFISH_COMMON
1027 select CRYPTO_TWOFISH_X86_64
1028 select CRYPTO_TWOFISH_X86_64_3WAY
1032 Twofish cipher algorithm (x86_64/AVX).
1034 Twofish was submitted as an AES (Advanced Encryption Standard)
1035 candidate cipher by researchers at CounterPane Systems. It is a
1036 16 round block cipher supporting key sizes of 128, 192, and 256
1039 This module provides the Twofish cipher algorithm that processes
1040 eight blocks parallel using the AVX Instruction Set.
1043 <http://www.schneier.com/twofish.html>
1045 comment "Compression"
1047 config CRYPTO_DEFLATE
1048 tristate "Deflate compression algorithm"
1049 select CRYPTO_ALGAPI
1053 This is the Deflate algorithm (RFC1951), specified for use in
1054 IPSec with the IPCOMP protocol (RFC3173, RFC2394).
1056 You will most probably want this if using IPSec.
1059 tristate "Zlib compression algorithm"
1065 This is the zlib algorithm.
1068 tristate "LZO compression algorithm"
1069 select CRYPTO_ALGAPI
1071 select LZO_DECOMPRESS
1073 This is the LZO algorithm.
1075 comment "Random Number Generation"
1077 config CRYPTO_ANSI_CPRNG
1078 tristate "Pseudo Random Number Generation for Cryptographic modules"
1083 This option enables the generic pseudo random number generator
1084 for cryptographic modules. Uses the Algorithm specified in
1085 ANSI X9.31 A.2.4. Note that this option must be enabled if
1086 CRYPTO_FIPS is selected
1088 config CRYPTO_USER_API
1091 config CRYPTO_USER_API_HASH
1092 tristate "User-space interface for hash algorithms"
1095 select CRYPTO_USER_API
1097 This option enables the user-spaces interface for hash
1100 config CRYPTO_USER_API_SKCIPHER
1101 tristate "User-space interface for symmetric key cipher algorithms"
1103 select CRYPTO_BLKCIPHER
1104 select CRYPTO_USER_API
1106 This option enables the user-spaces interface for symmetric
1107 key cipher algorithms.
1109 source "drivers/crypto/Kconfig"