2 # Generic algorithms support
8 # async_tx api: hardware offloaded memory transfer/transform support
10 source "crypto/async_tx/Kconfig"
13 # Cryptographic API Configuration
16 tristate "Cryptographic API"
18 This option provides the core Cryptographic API.
22 comment "Crypto core or helper"
25 bool "FIPS 200 compliance"
26 depends on CRYPTO_ANSI_CPRNG && !CRYPTO_MANAGER_DISABLE_TESTS
28 This options enables the fips boot option which is
29 required if you want to system to operate in a FIPS 200
30 certification. You should say no unless you know what
37 This option provides the API for cryptographic algorithms.
51 config CRYPTO_BLKCIPHER
53 select CRYPTO_BLKCIPHER2
56 config CRYPTO_BLKCIPHER2
60 select CRYPTO_WORKQUEUE
90 tristate "Cryptographic algorithm manager"
91 select CRYPTO_MANAGER2
93 Create default cryptographic template instantiations such as
96 config CRYPTO_MANAGER2
97 def_tristate CRYPTO_MANAGER || (CRYPTO_MANAGER!=n && CRYPTO_ALGAPI=y)
100 select CRYPTO_BLKCIPHER2
104 tristate "Userspace cryptographic algorithm configuration"
106 select CRYPTO_MANAGER
108 Userspace configuration for cryptographic instantiations such as
111 config CRYPTO_MANAGER_DISABLE_TESTS
112 bool "Disable run-time self tests"
114 depends on CRYPTO_MANAGER2
116 Disable run-time self tests that normally take place at
117 algorithm registration.
119 config CRYPTO_GF128MUL
120 tristate "GF(2^128) multiplication functions"
122 Efficient table driven implementation of multiplications in the
123 field GF(2^128). This is needed by some cypher modes. This
124 option will be selected automatically if you select such a
125 cipher mode. Only select this option by hand if you expect to load
126 an external module that requires these functions.
129 tristate "Null algorithms"
131 select CRYPTO_BLKCIPHER
134 These are 'Null' algorithms, used by IPsec, which do nothing.
137 tristate "Parallel crypto engine (EXPERIMENTAL)"
138 depends on SMP && EXPERIMENTAL
140 select CRYPTO_MANAGER
143 This converts an arbitrary crypto algorithm into a parallel
144 algorithm that executes in kernel threads.
146 config CRYPTO_WORKQUEUE
150 tristate "Software async crypto daemon"
151 select CRYPTO_BLKCIPHER
153 select CRYPTO_MANAGER
154 select CRYPTO_WORKQUEUE
156 This is a generic software asynchronous crypto daemon that
157 converts an arbitrary synchronous software crypto algorithm
158 into an asynchronous algorithm that executes in a kernel thread.
160 config CRYPTO_AUTHENC
161 tristate "Authenc support"
163 select CRYPTO_BLKCIPHER
164 select CRYPTO_MANAGER
167 Authenc: Combined mode wrapper for IPsec.
168 This is required for IPSec.
171 tristate "Testing module"
173 select CRYPTO_MANAGER
175 Quick & dirty crypto test module.
177 config CRYPTO_ABLK_HELPER_X86
182 config CRYPTO_GLUE_HELPER_X86
187 comment "Authenticated Encryption with Associated Data"
190 tristate "CCM support"
194 Support for Counter with CBC MAC. Required for IPsec.
197 tristate "GCM/GMAC support"
202 Support for Galois/Counter Mode (GCM) and Galois Message
203 Authentication Code (GMAC). Required for IPSec.
206 tristate "Sequence Number IV Generator"
208 select CRYPTO_BLKCIPHER
211 This IV generator generates an IV based on a sequence number by
212 xoring it with a salt. This algorithm is mainly useful for CTR
214 comment "Block modes"
217 tristate "CBC support"
218 select CRYPTO_BLKCIPHER
219 select CRYPTO_MANAGER
221 CBC: Cipher Block Chaining mode
222 This block cipher algorithm is required for IPSec.
225 tristate "CTR support"
226 select CRYPTO_BLKCIPHER
228 select CRYPTO_MANAGER
231 This block cipher algorithm is required for IPSec.
234 tristate "CTS support"
235 select CRYPTO_BLKCIPHER
237 CTS: Cipher Text Stealing
238 This is the Cipher Text Stealing mode as described by
239 Section 8 of rfc2040 and referenced by rfc3962.
240 (rfc3962 includes errata information in its Appendix A)
241 This mode is required for Kerberos gss mechanism support
245 tristate "ECB support"
246 select CRYPTO_BLKCIPHER
247 select CRYPTO_MANAGER
249 ECB: Electronic CodeBook mode
250 This is the simplest block cipher algorithm. It simply encrypts
251 the input block by block.
254 tristate "LRW support"
255 select CRYPTO_BLKCIPHER
256 select CRYPTO_MANAGER
257 select CRYPTO_GF128MUL
259 LRW: Liskov Rivest Wagner, a tweakable, non malleable, non movable
260 narrow block cipher mode for dm-crypt. Use it with cipher
261 specification string aes-lrw-benbi, the key must be 256, 320 or 384.
262 The first 128, 192 or 256 bits in the key are used for AES and the
263 rest is used to tie each cipher block to its logical position.
266 tristate "PCBC support"
267 select CRYPTO_BLKCIPHER
268 select CRYPTO_MANAGER
270 PCBC: Propagating Cipher Block Chaining mode
271 This block cipher algorithm is required for RxRPC.
274 tristate "XTS support"
275 select CRYPTO_BLKCIPHER
276 select CRYPTO_MANAGER
277 select CRYPTO_GF128MUL
279 XTS: IEEE1619/D16 narrow block cipher use with aes-xts-plain,
280 key size 256, 384 or 512 bits. This implementation currently
281 can't handle a sectorsize which is not a multiple of 16 bytes.
286 tristate "HMAC support"
288 select CRYPTO_MANAGER
290 HMAC: Keyed-Hashing for Message Authentication (RFC2104).
291 This is required for IPSec.
294 tristate "XCBC support"
295 depends on EXPERIMENTAL
297 select CRYPTO_MANAGER
299 XCBC: Keyed-Hashing with encryption algorithm
300 http://www.ietf.org/rfc/rfc3566.txt
301 http://csrc.nist.gov/encryption/modes/proposedmodes/
302 xcbc-mac/xcbc-mac-spec.pdf
305 tristate "VMAC support"
306 depends on EXPERIMENTAL
308 select CRYPTO_MANAGER
310 VMAC is a message authentication algorithm designed for
311 very high speed on 64-bit architectures.
314 <http://fastcrypto.org/vmac>
319 tristate "CRC32c CRC algorithm"
323 Castagnoli, et al Cyclic Redundancy-Check Algorithm. Used
324 by iSCSI for header and data digests and by others.
325 See Castagnoli93. Module will be crc32c.
327 config CRYPTO_CRC32C_INTEL
328 tristate "CRC32c INTEL hardware acceleration"
332 In Intel processor with SSE4.2 supported, the processor will
333 support CRC32C implementation using hardware accelerated CRC32
334 instruction. This option will create 'crc32c-intel' module,
335 which will enable any routine to use the CRC32 instruction to
336 gain performance compared with software implementation.
337 Module will be crc32c-intel.
339 config CRYPTO_CRC32C_SPARC64
340 tristate "CRC32c CRC algorithm (SPARC64)"
345 CRC32c CRC algorithm implemented using sparc64 crypto instructions,
349 tristate "GHASH digest algorithm"
350 select CRYPTO_GF128MUL
352 GHASH is message digest algorithm for GCM (Galois/Counter Mode).
355 tristate "MD4 digest algorithm"
358 MD4 message digest algorithm (RFC1320).
361 tristate "MD5 digest algorithm"
364 MD5 message digest algorithm (RFC1321).
366 config CRYPTO_MD5_SPARC64
367 tristate "MD5 digest algorithm (SPARC64)"
372 MD5 message digest algorithm (RFC1321) implemented
373 using sparc64 crypto instructions, when available.
375 config CRYPTO_MICHAEL_MIC
376 tristate "Michael MIC keyed digest algorithm"
379 Michael MIC is used for message integrity protection in TKIP
380 (IEEE 802.11i). This algorithm is required for TKIP, but it
381 should not be used for other purposes because of the weakness
385 tristate "RIPEMD-128 digest algorithm"
388 RIPEMD-128 (ISO/IEC 10118-3:2004).
390 RIPEMD-128 is a 128-bit cryptographic hash function. It should only
391 be used as a secure replacement for RIPEMD. For other use cases,
392 RIPEMD-160 should be used.
394 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
395 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
398 tristate "RIPEMD-160 digest algorithm"
401 RIPEMD-160 (ISO/IEC 10118-3:2004).
403 RIPEMD-160 is a 160-bit cryptographic hash function. It is intended
404 to be used as a secure replacement for the 128-bit hash functions
405 MD4, MD5 and it's predecessor RIPEMD
406 (not to be confused with RIPEMD-128).
408 It's speed is comparable to SHA1 and there are no known attacks
411 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
412 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
415 tristate "RIPEMD-256 digest algorithm"
418 RIPEMD-256 is an optional extension of RIPEMD-128 with a
419 256 bit hash. It is intended for applications that require
420 longer hash-results, without needing a larger security level
423 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
424 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
427 tristate "RIPEMD-320 digest algorithm"
430 RIPEMD-320 is an optional extension of RIPEMD-160 with a
431 320 bit hash. It is intended for applications that require
432 longer hash-results, without needing a larger security level
435 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
436 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
439 tristate "SHA1 digest algorithm"
442 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2).
444 config CRYPTO_SHA1_SSSE3
445 tristate "SHA1 digest algorithm (SSSE3/AVX)"
446 depends on X86 && 64BIT
450 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented
451 using Supplemental SSE3 (SSSE3) instructions or Advanced Vector
452 Extensions (AVX), when available.
454 config CRYPTO_SHA1_SPARC64
455 tristate "SHA1 digest algorithm (SPARC64)"
460 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented
461 using sparc64 crypto instructions, when available.
464 tristate "SHA224 and SHA256 digest algorithm"
467 SHA256 secure hash standard (DFIPS 180-2).
469 This version of SHA implements a 256 bit hash with 128 bits of
470 security against collision attacks.
472 This code also includes SHA-224, a 224 bit hash with 112 bits
473 of security against collision attacks.
475 config CRYPTO_SHA256_SPARC64
476 tristate "SHA224 and SHA256 digest algorithm (SPARC64)"
481 SHA-256 secure hash standard (DFIPS 180-2) implemented
482 using sparc64 crypto instructions, when available.
485 tristate "SHA384 and SHA512 digest algorithms"
488 SHA512 secure hash standard (DFIPS 180-2).
490 This version of SHA implements a 512 bit hash with 256 bits of
491 security against collision attacks.
493 This code also includes SHA-384, a 384 bit hash with 192 bits
494 of security against collision attacks.
496 config CRYPTO_SHA512_SPARC64
497 tristate "SHA384 and SHA512 digest algorithm (SPARC64)"
502 SHA-512 secure hash standard (DFIPS 180-2) implemented
503 using sparc64 crypto instructions, when available.
506 tristate "Tiger digest algorithms"
509 Tiger hash algorithm 192, 160 and 128-bit hashes
511 Tiger is a hash function optimized for 64-bit processors while
512 still having decent performance on 32-bit processors.
513 Tiger was developed by Ross Anderson and Eli Biham.
516 <http://www.cs.technion.ac.il/~biham/Reports/Tiger/>.
519 tristate "Whirlpool digest algorithms"
522 Whirlpool hash algorithm 512, 384 and 256-bit hashes
524 Whirlpool-512 is part of the NESSIE cryptographic primitives.
525 Whirlpool will be part of the ISO/IEC 10118-3:2003(E) standard
528 <http://www.larc.usp.br/~pbarreto/WhirlpoolPage.html>
530 config CRYPTO_GHASH_CLMUL_NI_INTEL
531 tristate "GHASH digest algorithm (CLMUL-NI accelerated)"
532 depends on X86 && 64BIT
535 GHASH is message digest algorithm for GCM (Galois/Counter Mode).
536 The implementation is accelerated by CLMUL-NI of Intel.
541 tristate "AES cipher algorithms"
544 AES cipher algorithms (FIPS-197). AES uses the Rijndael
547 Rijndael appears to be consistently a very good performer in
548 both hardware and software across a wide range of computing
549 environments regardless of its use in feedback or non-feedback
550 modes. Its key setup time is excellent, and its key agility is
551 good. Rijndael's very low memory requirements make it very well
552 suited for restricted-space environments, in which it also
553 demonstrates excellent performance. Rijndael's operations are
554 among the easiest to defend against power and timing attacks.
556 The AES specifies three key sizes: 128, 192 and 256 bits
558 See <http://csrc.nist.gov/CryptoToolkit/aes/> for more information.
560 config CRYPTO_AES_586
561 tristate "AES cipher algorithms (i586)"
562 depends on (X86 || UML_X86) && !64BIT
566 AES cipher algorithms (FIPS-197). AES uses the Rijndael
569 Rijndael appears to be consistently a very good performer in
570 both hardware and software across a wide range of computing
571 environments regardless of its use in feedback or non-feedback
572 modes. Its key setup time is excellent, and its key agility is
573 good. Rijndael's very low memory requirements make it very well
574 suited for restricted-space environments, in which it also
575 demonstrates excellent performance. Rijndael's operations are
576 among the easiest to defend against power and timing attacks.
578 The AES specifies three key sizes: 128, 192 and 256 bits
580 See <http://csrc.nist.gov/encryption/aes/> for more information.
582 config CRYPTO_AES_X86_64
583 tristate "AES cipher algorithms (x86_64)"
584 depends on (X86 || UML_X86) && 64BIT
588 AES cipher algorithms (FIPS-197). AES uses the Rijndael
591 Rijndael appears to be consistently a very good performer in
592 both hardware and software across a wide range of computing
593 environments regardless of its use in feedback or non-feedback
594 modes. Its key setup time is excellent, and its key agility is
595 good. Rijndael's very low memory requirements make it very well
596 suited for restricted-space environments, in which it also
597 demonstrates excellent performance. Rijndael's operations are
598 among the easiest to defend against power and timing attacks.
600 The AES specifies three key sizes: 128, 192 and 256 bits
602 See <http://csrc.nist.gov/encryption/aes/> for more information.
604 config CRYPTO_AES_NI_INTEL
605 tristate "AES cipher algorithms (AES-NI)"
607 select CRYPTO_AES_X86_64 if 64BIT
608 select CRYPTO_AES_586 if !64BIT
610 select CRYPTO_ABLK_HELPER_X86
613 Use Intel AES-NI instructions for AES algorithm.
615 AES cipher algorithms (FIPS-197). AES uses the Rijndael
618 Rijndael appears to be consistently a very good performer in
619 both hardware and software across a wide range of computing
620 environments regardless of its use in feedback or non-feedback
621 modes. Its key setup time is excellent, and its key agility is
622 good. Rijndael's very low memory requirements make it very well
623 suited for restricted-space environments, in which it also
624 demonstrates excellent performance. Rijndael's operations are
625 among the easiest to defend against power and timing attacks.
627 The AES specifies three key sizes: 128, 192 and 256 bits
629 See <http://csrc.nist.gov/encryption/aes/> for more information.
631 In addition to AES cipher algorithm support, the acceleration
632 for some popular block cipher mode is supported too, including
633 ECB, CBC, LRW, PCBC, XTS. The 64 bit version has additional
634 acceleration for CTR.
636 config CRYPTO_AES_SPARC64
637 tristate "AES cipher algorithms (SPARC64)"
642 Use SPARC64 crypto opcodes for AES algorithm.
644 AES cipher algorithms (FIPS-197). AES uses the Rijndael
647 Rijndael appears to be consistently a very good performer in
648 both hardware and software across a wide range of computing
649 environments regardless of its use in feedback or non-feedback
650 modes. Its key setup time is excellent, and its key agility is
651 good. Rijndael's very low memory requirements make it very well
652 suited for restricted-space environments, in which it also
653 demonstrates excellent performance. Rijndael's operations are
654 among the easiest to defend against power and timing attacks.
656 The AES specifies three key sizes: 128, 192 and 256 bits
658 See <http://csrc.nist.gov/encryption/aes/> for more information.
660 In addition to AES cipher algorithm support, the acceleration
661 for some popular block cipher mode is supported too, including
665 tristate "Anubis cipher algorithm"
668 Anubis cipher algorithm.
670 Anubis is a variable key length cipher which can use keys from
671 128 bits to 320 bits in length. It was evaluated as a entrant
672 in the NESSIE competition.
675 <https://www.cosic.esat.kuleuven.be/nessie/reports/>
676 <http://www.larc.usp.br/~pbarreto/AnubisPage.html>
679 tristate "ARC4 cipher algorithm"
680 select CRYPTO_BLKCIPHER
682 ARC4 cipher algorithm.
684 ARC4 is a stream cipher using keys ranging from 8 bits to 2048
685 bits in length. This algorithm is required for driver-based
686 WEP, but it should not be for other purposes because of the
687 weakness of the algorithm.
689 config CRYPTO_BLOWFISH
690 tristate "Blowfish cipher algorithm"
692 select CRYPTO_BLOWFISH_COMMON
694 Blowfish cipher algorithm, by Bruce Schneier.
696 This is a variable key length cipher which can use keys from 32
697 bits to 448 bits in length. It's fast, simple and specifically
698 designed for use on "large microprocessors".
701 <http://www.schneier.com/blowfish.html>
703 config CRYPTO_BLOWFISH_COMMON
706 Common parts of the Blowfish cipher algorithm shared by the
707 generic c and the assembler implementations.
710 <http://www.schneier.com/blowfish.html>
712 config CRYPTO_BLOWFISH_X86_64
713 tristate "Blowfish cipher algorithm (x86_64)"
714 depends on X86 && 64BIT
716 select CRYPTO_BLOWFISH_COMMON
718 Blowfish cipher algorithm (x86_64), by Bruce Schneier.
720 This is a variable key length cipher which can use keys from 32
721 bits to 448 bits in length. It's fast, simple and specifically
722 designed for use on "large microprocessors".
725 <http://www.schneier.com/blowfish.html>
727 config CRYPTO_CAMELLIA
728 tristate "Camellia cipher algorithms"
732 Camellia cipher algorithms module.
734 Camellia is a symmetric key block cipher developed jointly
735 at NTT and Mitsubishi Electric Corporation.
737 The Camellia specifies three key sizes: 128, 192 and 256 bits.
740 <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
742 config CRYPTO_CAMELLIA_X86_64
743 tristate "Camellia cipher algorithm (x86_64)"
744 depends on X86 && 64BIT
747 select CRYPTO_GLUE_HELPER_X86
751 Camellia cipher algorithm module (x86_64).
753 Camellia is a symmetric key block cipher developed jointly
754 at NTT and Mitsubishi Electric Corporation.
756 The Camellia specifies three key sizes: 128, 192 and 256 bits.
759 <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
761 config CRYPTO_CAMELLIA_SPARC64
762 tristate "Camellia cipher algorithm (SPARC64)"
767 Camellia cipher algorithm module (SPARC64).
769 Camellia is a symmetric key block cipher developed jointly
770 at NTT and Mitsubishi Electric Corporation.
772 The Camellia specifies three key sizes: 128, 192 and 256 bits.
775 <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
778 tristate "CAST5 (CAST-128) cipher algorithm"
781 The CAST5 encryption algorithm (synonymous with CAST-128) is
782 described in RFC2144.
785 tristate "CAST6 (CAST-256) cipher algorithm"
788 The CAST6 encryption algorithm (synonymous with CAST-256) is
789 described in RFC2612.
792 tristate "DES and Triple DES EDE cipher algorithms"
795 DES cipher algorithm (FIPS 46-2), and Triple DES EDE (FIPS 46-3).
797 config CRYPTO_DES_SPARC64
798 tristate "DES and Triple DES EDE cipher algorithms (SPARC64)"
803 DES cipher algorithm (FIPS 46-2), and Triple DES EDE (FIPS 46-3),
804 optimized using SPARC64 crypto opcodes.
807 tristate "FCrypt cipher algorithm"
809 select CRYPTO_BLKCIPHER
811 FCrypt algorithm used by RxRPC.
814 tristate "Khazad cipher algorithm"
817 Khazad cipher algorithm.
819 Khazad was a finalist in the initial NESSIE competition. It is
820 an algorithm optimized for 64-bit processors with good performance
821 on 32-bit processors. Khazad uses an 128 bit key size.
824 <http://www.larc.usp.br/~pbarreto/KhazadPage.html>
826 config CRYPTO_SALSA20
827 tristate "Salsa20 stream cipher algorithm (EXPERIMENTAL)"
828 depends on EXPERIMENTAL
829 select CRYPTO_BLKCIPHER
831 Salsa20 stream cipher algorithm.
833 Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
834 Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
836 The Salsa20 stream cipher algorithm is designed by Daniel J.
837 Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
839 config CRYPTO_SALSA20_586
840 tristate "Salsa20 stream cipher algorithm (i586) (EXPERIMENTAL)"
841 depends on (X86 || UML_X86) && !64BIT
842 depends on EXPERIMENTAL
843 select CRYPTO_BLKCIPHER
845 Salsa20 stream cipher algorithm.
847 Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
848 Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
850 The Salsa20 stream cipher algorithm is designed by Daniel J.
851 Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
853 config CRYPTO_SALSA20_X86_64
854 tristate "Salsa20 stream cipher algorithm (x86_64) (EXPERIMENTAL)"
855 depends on (X86 || UML_X86) && 64BIT
856 depends on EXPERIMENTAL
857 select CRYPTO_BLKCIPHER
859 Salsa20 stream cipher algorithm.
861 Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
862 Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
864 The Salsa20 stream cipher algorithm is designed by Daniel J.
865 Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
868 tristate "SEED cipher algorithm"
871 SEED cipher algorithm (RFC4269).
873 SEED is a 128-bit symmetric key block cipher that has been
874 developed by KISA (Korea Information Security Agency) as a
875 national standard encryption algorithm of the Republic of Korea.
876 It is a 16 round block cipher with the key size of 128 bit.
879 <http://www.kisa.or.kr/kisa/seed/jsp/seed_eng.jsp>
881 config CRYPTO_SERPENT
882 tristate "Serpent cipher algorithm"
885 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
887 Keys are allowed to be from 0 to 256 bits in length, in steps
888 of 8 bits. Also includes the 'Tnepres' algorithm, a reversed
889 variant of Serpent for compatibility with old kerneli.org code.
892 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
894 config CRYPTO_SERPENT_SSE2_X86_64
895 tristate "Serpent cipher algorithm (x86_64/SSE2)"
896 depends on X86 && 64BIT
899 select CRYPTO_ABLK_HELPER_X86
900 select CRYPTO_GLUE_HELPER_X86
901 select CRYPTO_SERPENT
905 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
907 Keys are allowed to be from 0 to 256 bits in length, in steps
910 This module provides Serpent cipher algorithm that processes eigth
911 blocks parallel using SSE2 instruction set.
914 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
916 config CRYPTO_SERPENT_SSE2_586
917 tristate "Serpent cipher algorithm (i586/SSE2)"
918 depends on X86 && !64BIT
921 select CRYPTO_ABLK_HELPER_X86
922 select CRYPTO_GLUE_HELPER_X86
923 select CRYPTO_SERPENT
927 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
929 Keys are allowed to be from 0 to 256 bits in length, in steps
932 This module provides Serpent cipher algorithm that processes four
933 blocks parallel using SSE2 instruction set.
936 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
938 config CRYPTO_SERPENT_AVX_X86_64
939 tristate "Serpent cipher algorithm (x86_64/AVX)"
940 depends on X86 && 64BIT
943 select CRYPTO_ABLK_HELPER_X86
944 select CRYPTO_GLUE_HELPER_X86
945 select CRYPTO_SERPENT
949 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
951 Keys are allowed to be from 0 to 256 bits in length, in steps
954 This module provides the Serpent cipher algorithm that processes
955 eight blocks parallel using the AVX instruction set.
958 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
961 tristate "TEA, XTEA and XETA cipher algorithms"
964 TEA cipher algorithm.
966 Tiny Encryption Algorithm is a simple cipher that uses
967 many rounds for security. It is very fast and uses
970 Xtendend Tiny Encryption Algorithm is a modification to
971 the TEA algorithm to address a potential key weakness
972 in the TEA algorithm.
974 Xtendend Encryption Tiny Algorithm is a mis-implementation
975 of the XTEA algorithm for compatibility purposes.
977 config CRYPTO_TWOFISH
978 tristate "Twofish cipher algorithm"
980 select CRYPTO_TWOFISH_COMMON
982 Twofish cipher algorithm.
984 Twofish was submitted as an AES (Advanced Encryption Standard)
985 candidate cipher by researchers at CounterPane Systems. It is a
986 16 round block cipher supporting key sizes of 128, 192, and 256
990 <http://www.schneier.com/twofish.html>
992 config CRYPTO_TWOFISH_COMMON
995 Common parts of the Twofish cipher algorithm shared by the
996 generic c and the assembler implementations.
998 config CRYPTO_TWOFISH_586
999 tristate "Twofish cipher algorithms (i586)"
1000 depends on (X86 || UML_X86) && !64BIT
1001 select CRYPTO_ALGAPI
1002 select CRYPTO_TWOFISH_COMMON
1004 Twofish cipher algorithm.
1006 Twofish was submitted as an AES (Advanced Encryption Standard)
1007 candidate cipher by researchers at CounterPane Systems. It is a
1008 16 round block cipher supporting key sizes of 128, 192, and 256
1012 <http://www.schneier.com/twofish.html>
1014 config CRYPTO_TWOFISH_X86_64
1015 tristate "Twofish cipher algorithm (x86_64)"
1016 depends on (X86 || UML_X86) && 64BIT
1017 select CRYPTO_ALGAPI
1018 select CRYPTO_TWOFISH_COMMON
1020 Twofish cipher algorithm (x86_64).
1022 Twofish was submitted as an AES (Advanced Encryption Standard)
1023 candidate cipher by researchers at CounterPane Systems. It is a
1024 16 round block cipher supporting key sizes of 128, 192, and 256
1028 <http://www.schneier.com/twofish.html>
1030 config CRYPTO_TWOFISH_X86_64_3WAY
1031 tristate "Twofish cipher algorithm (x86_64, 3-way parallel)"
1032 depends on X86 && 64BIT
1033 select CRYPTO_ALGAPI
1034 select CRYPTO_TWOFISH_COMMON
1035 select CRYPTO_TWOFISH_X86_64
1036 select CRYPTO_GLUE_HELPER_X86
1040 Twofish cipher algorithm (x86_64, 3-way parallel).
1042 Twofish was submitted as an AES (Advanced Encryption Standard)
1043 candidate cipher by researchers at CounterPane Systems. It is a
1044 16 round block cipher supporting key sizes of 128, 192, and 256
1047 This module provides Twofish cipher algorithm that processes three
1048 blocks parallel, utilizing resources of out-of-order CPUs better.
1051 <http://www.schneier.com/twofish.html>
1053 config CRYPTO_TWOFISH_AVX_X86_64
1054 tristate "Twofish cipher algorithm (x86_64/AVX)"
1055 depends on X86 && 64BIT
1056 select CRYPTO_ALGAPI
1057 select CRYPTO_CRYPTD
1058 select CRYPTO_ABLK_HELPER_X86
1059 select CRYPTO_GLUE_HELPER_X86
1060 select CRYPTO_TWOFISH_COMMON
1061 select CRYPTO_TWOFISH_X86_64
1062 select CRYPTO_TWOFISH_X86_64_3WAY
1066 Twofish cipher algorithm (x86_64/AVX).
1068 Twofish was submitted as an AES (Advanced Encryption Standard)
1069 candidate cipher by researchers at CounterPane Systems. It is a
1070 16 round block cipher supporting key sizes of 128, 192, and 256
1073 This module provides the Twofish cipher algorithm that processes
1074 eight blocks parallel using the AVX Instruction Set.
1077 <http://www.schneier.com/twofish.html>
1079 comment "Compression"
1081 config CRYPTO_DEFLATE
1082 tristate "Deflate compression algorithm"
1083 select CRYPTO_ALGAPI
1087 This is the Deflate algorithm (RFC1951), specified for use in
1088 IPSec with the IPCOMP protocol (RFC3173, RFC2394).
1090 You will most probably want this if using IPSec.
1093 tristate "Zlib compression algorithm"
1099 This is the zlib algorithm.
1102 tristate "LZO compression algorithm"
1103 select CRYPTO_ALGAPI
1105 select LZO_DECOMPRESS
1107 This is the LZO algorithm.
1109 comment "Random Number Generation"
1111 config CRYPTO_ANSI_CPRNG
1112 tristate "Pseudo Random Number Generation for Cryptographic modules"
1117 This option enables the generic pseudo random number generator
1118 for cryptographic modules. Uses the Algorithm specified in
1119 ANSI X9.31 A.2.4. Note that this option must be enabled if
1120 CRYPTO_FIPS is selected
1122 config CRYPTO_USER_API
1125 config CRYPTO_USER_API_HASH
1126 tristate "User-space interface for hash algorithms"
1129 select CRYPTO_USER_API
1131 This option enables the user-spaces interface for hash
1134 config CRYPTO_USER_API_SKCIPHER
1135 tristate "User-space interface for symmetric key cipher algorithms"
1137 select CRYPTO_BLKCIPHER
1138 select CRYPTO_USER_API
1140 This option enables the user-spaces interface for symmetric
1141 key cipher algorithms.
1143 source "drivers/crypto/Kconfig"