2 # Generic algorithms support
8 # async_tx api: hardware offloaded memory transfer/transform support
10 source "crypto/async_tx/Kconfig"
13 # Cryptographic API Configuration
16 tristate "Cryptographic API"
18 This option provides the core Cryptographic API.
22 comment "Crypto core or helper"
25 bool "FIPS 200 compliance"
26 depends on CRYPTO_ANSI_CPRNG && !CRYPTO_MANAGER_DISABLE_TESTS
28 This options enables the fips boot option which is
29 required if you want to system to operate in a FIPS 200
30 certification. You should say no unless you know what
37 This option provides the API for cryptographic algorithms.
51 config CRYPTO_BLKCIPHER
53 select CRYPTO_BLKCIPHER2
56 config CRYPTO_BLKCIPHER2
60 select CRYPTO_WORKQUEUE
90 tristate "Cryptographic algorithm manager"
91 select CRYPTO_MANAGER2
93 Create default cryptographic template instantiations such as
96 config CRYPTO_MANAGER2
97 def_tristate CRYPTO_MANAGER || (CRYPTO_MANAGER!=n && CRYPTO_ALGAPI=y)
100 select CRYPTO_BLKCIPHER2
104 tristate "Userspace cryptographic algorithm configuration"
106 select CRYPTO_MANAGER
108 Userspace configuration for cryptographic instantiations such as
111 config CRYPTO_MANAGER_DISABLE_TESTS
112 bool "Disable run-time self tests"
114 depends on CRYPTO_MANAGER2
116 Disable run-time self tests that normally take place at
117 algorithm registration.
119 config CRYPTO_GF128MUL
120 tristate "GF(2^128) multiplication functions"
122 Efficient table driven implementation of multiplications in the
123 field GF(2^128). This is needed by some cypher modes. This
124 option will be selected automatically if you select such a
125 cipher mode. Only select this option by hand if you expect to load
126 an external module that requires these functions.
129 tristate "Null algorithms"
131 select CRYPTO_BLKCIPHER
134 These are 'Null' algorithms, used by IPsec, which do nothing.
137 tristate "Parallel crypto engine (EXPERIMENTAL)"
138 depends on SMP && EXPERIMENTAL
140 select CRYPTO_MANAGER
143 This converts an arbitrary crypto algorithm into a parallel
144 algorithm that executes in kernel threads.
146 config CRYPTO_WORKQUEUE
150 tristate "Software async crypto daemon"
151 select CRYPTO_BLKCIPHER
153 select CRYPTO_MANAGER
154 select CRYPTO_WORKQUEUE
156 This is a generic software asynchronous crypto daemon that
157 converts an arbitrary synchronous software crypto algorithm
158 into an asynchronous algorithm that executes in a kernel thread.
160 config CRYPTO_AUTHENC
161 tristate "Authenc support"
163 select CRYPTO_BLKCIPHER
164 select CRYPTO_MANAGER
167 Authenc: Combined mode wrapper for IPsec.
168 This is required for IPSec.
171 tristate "Testing module"
173 select CRYPTO_MANAGER
175 Quick & dirty crypto test module.
177 config CRYPTO_ABLK_HELPER_X86
182 config CRYPTO_GLUE_HELPER_X86
187 comment "Authenticated Encryption with Associated Data"
190 tristate "CCM support"
194 Support for Counter with CBC MAC. Required for IPsec.
197 tristate "GCM/GMAC support"
202 Support for Galois/Counter Mode (GCM) and Galois Message
203 Authentication Code (GMAC). Required for IPSec.
206 tristate "Sequence Number IV Generator"
208 select CRYPTO_BLKCIPHER
211 This IV generator generates an IV based on a sequence number by
212 xoring it with a salt. This algorithm is mainly useful for CTR
214 comment "Block modes"
217 tristate "CBC support"
218 select CRYPTO_BLKCIPHER
219 select CRYPTO_MANAGER
221 CBC: Cipher Block Chaining mode
222 This block cipher algorithm is required for IPSec.
225 tristate "CTR support"
226 select CRYPTO_BLKCIPHER
228 select CRYPTO_MANAGER
231 This block cipher algorithm is required for IPSec.
234 tristate "CTS support"
235 select CRYPTO_BLKCIPHER
237 CTS: Cipher Text Stealing
238 This is the Cipher Text Stealing mode as described by
239 Section 8 of rfc2040 and referenced by rfc3962.
240 (rfc3962 includes errata information in its Appendix A)
241 This mode is required for Kerberos gss mechanism support
245 tristate "ECB support"
246 select CRYPTO_BLKCIPHER
247 select CRYPTO_MANAGER
249 ECB: Electronic CodeBook mode
250 This is the simplest block cipher algorithm. It simply encrypts
251 the input block by block.
254 tristate "LRW support"
255 select CRYPTO_BLKCIPHER
256 select CRYPTO_MANAGER
257 select CRYPTO_GF128MUL
259 LRW: Liskov Rivest Wagner, a tweakable, non malleable, non movable
260 narrow block cipher mode for dm-crypt. Use it with cipher
261 specification string aes-lrw-benbi, the key must be 256, 320 or 384.
262 The first 128, 192 or 256 bits in the key are used for AES and the
263 rest is used to tie each cipher block to its logical position.
266 tristate "PCBC support"
267 select CRYPTO_BLKCIPHER
268 select CRYPTO_MANAGER
270 PCBC: Propagating Cipher Block Chaining mode
271 This block cipher algorithm is required for RxRPC.
274 tristate "XTS support"
275 select CRYPTO_BLKCIPHER
276 select CRYPTO_MANAGER
277 select CRYPTO_GF128MUL
279 XTS: IEEE1619/D16 narrow block cipher use with aes-xts-plain,
280 key size 256, 384 or 512 bits. This implementation currently
281 can't handle a sectorsize which is not a multiple of 16 bytes.
286 tristate "HMAC support"
288 select CRYPTO_MANAGER
290 HMAC: Keyed-Hashing for Message Authentication (RFC2104).
291 This is required for IPSec.
294 tristate "XCBC support"
295 depends on EXPERIMENTAL
297 select CRYPTO_MANAGER
299 XCBC: Keyed-Hashing with encryption algorithm
300 http://www.ietf.org/rfc/rfc3566.txt
301 http://csrc.nist.gov/encryption/modes/proposedmodes/
302 xcbc-mac/xcbc-mac-spec.pdf
305 tristate "VMAC support"
306 depends on EXPERIMENTAL
308 select CRYPTO_MANAGER
310 VMAC is a message authentication algorithm designed for
311 very high speed on 64-bit architectures.
314 <http://fastcrypto.org/vmac>
319 tristate "CRC32c CRC algorithm"
323 Castagnoli, et al Cyclic Redundancy-Check Algorithm. Used
324 by iSCSI for header and data digests and by others.
325 See Castagnoli93. Module will be crc32c.
327 config CRYPTO_CRC32C_INTEL
328 tristate "CRC32c INTEL hardware acceleration"
332 In Intel processor with SSE4.2 supported, the processor will
333 support CRC32C implementation using hardware accelerated CRC32
334 instruction. This option will create 'crc32c-intel' module,
335 which will enable any routine to use the CRC32 instruction to
336 gain performance compared with software implementation.
337 Module will be crc32c-intel.
339 config CRYPTO_CRC32C_SPARC64
340 tristate "CRC32c CRC algorithm (SPARC64)"
345 CRC32c CRC algorithm implemented using sparc64 crypto instructions,
349 tristate "GHASH digest algorithm"
350 select CRYPTO_GF128MUL
352 GHASH is message digest algorithm for GCM (Galois/Counter Mode).
355 tristate "MD4 digest algorithm"
358 MD4 message digest algorithm (RFC1320).
361 tristate "MD5 digest algorithm"
364 MD5 message digest algorithm (RFC1321).
366 config CRYPTO_MD5_SPARC64
367 tristate "MD5 digest algorithm (SPARC64)"
372 MD5 message digest algorithm (RFC1321) implemented
373 using sparc64 crypto instructions, when available.
375 config CRYPTO_MICHAEL_MIC
376 tristate "Michael MIC keyed digest algorithm"
379 Michael MIC is used for message integrity protection in TKIP
380 (IEEE 802.11i). This algorithm is required for TKIP, but it
381 should not be used for other purposes because of the weakness
385 tristate "RIPEMD-128 digest algorithm"
388 RIPEMD-128 (ISO/IEC 10118-3:2004).
390 RIPEMD-128 is a 128-bit cryptographic hash function. It should only
391 be used as a secure replacement for RIPEMD. For other use cases,
392 RIPEMD-160 should be used.
394 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
395 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
398 tristate "RIPEMD-160 digest algorithm"
401 RIPEMD-160 (ISO/IEC 10118-3:2004).
403 RIPEMD-160 is a 160-bit cryptographic hash function. It is intended
404 to be used as a secure replacement for the 128-bit hash functions
405 MD4, MD5 and it's predecessor RIPEMD
406 (not to be confused with RIPEMD-128).
408 It's speed is comparable to SHA1 and there are no known attacks
411 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
412 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
415 tristate "RIPEMD-256 digest algorithm"
418 RIPEMD-256 is an optional extension of RIPEMD-128 with a
419 256 bit hash. It is intended for applications that require
420 longer hash-results, without needing a larger security level
423 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
424 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
427 tristate "RIPEMD-320 digest algorithm"
430 RIPEMD-320 is an optional extension of RIPEMD-160 with a
431 320 bit hash. It is intended for applications that require
432 longer hash-results, without needing a larger security level
435 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
436 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
439 tristate "SHA1 digest algorithm"
442 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2).
444 config CRYPTO_SHA1_SSSE3
445 tristate "SHA1 digest algorithm (SSSE3/AVX)"
446 depends on X86 && 64BIT
450 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented
451 using Supplemental SSE3 (SSSE3) instructions or Advanced Vector
452 Extensions (AVX), when available.
454 config CRYPTO_SHA1_SPARC64
455 tristate "SHA1 digest algorithm (SPARC64)"
460 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented
461 using sparc64 crypto instructions, when available.
464 tristate "SHA224 and SHA256 digest algorithm"
467 SHA256 secure hash standard (DFIPS 180-2).
469 This version of SHA implements a 256 bit hash with 128 bits of
470 security against collision attacks.
472 This code also includes SHA-224, a 224 bit hash with 112 bits
473 of security against collision attacks.
475 config CRYPTO_SHA256_SPARC64
476 tristate "SHA224 and SHA256 digest algorithm (SPARC64)"
481 SHA-256 secure hash standard (DFIPS 180-2) implemented
482 using sparc64 crypto instructions, when available.
485 tristate "SHA384 and SHA512 digest algorithms"
488 SHA512 secure hash standard (DFIPS 180-2).
490 This version of SHA implements a 512 bit hash with 256 bits of
491 security against collision attacks.
493 This code also includes SHA-384, a 384 bit hash with 192 bits
494 of security against collision attacks.
496 config CRYPTO_SHA512_SPARC64
497 tristate "SHA384 and SHA512 digest algorithm (SPARC64)"
502 SHA-512 secure hash standard (DFIPS 180-2) implemented
503 using sparc64 crypto instructions, when available.
506 tristate "Tiger digest algorithms"
509 Tiger hash algorithm 192, 160 and 128-bit hashes
511 Tiger is a hash function optimized for 64-bit processors while
512 still having decent performance on 32-bit processors.
513 Tiger was developed by Ross Anderson and Eli Biham.
516 <http://www.cs.technion.ac.il/~biham/Reports/Tiger/>.
519 tristate "Whirlpool digest algorithms"
522 Whirlpool hash algorithm 512, 384 and 256-bit hashes
524 Whirlpool-512 is part of the NESSIE cryptographic primitives.
525 Whirlpool will be part of the ISO/IEC 10118-3:2003(E) standard
528 <http://www.larc.usp.br/~pbarreto/WhirlpoolPage.html>
530 config CRYPTO_GHASH_CLMUL_NI_INTEL
531 tristate "GHASH digest algorithm (CLMUL-NI accelerated)"
532 depends on X86 && 64BIT
535 GHASH is message digest algorithm for GCM (Galois/Counter Mode).
536 The implementation is accelerated by CLMUL-NI of Intel.
541 tristate "AES cipher algorithms"
544 AES cipher algorithms (FIPS-197). AES uses the Rijndael
547 Rijndael appears to be consistently a very good performer in
548 both hardware and software across a wide range of computing
549 environments regardless of its use in feedback or non-feedback
550 modes. Its key setup time is excellent, and its key agility is
551 good. Rijndael's very low memory requirements make it very well
552 suited for restricted-space environments, in which it also
553 demonstrates excellent performance. Rijndael's operations are
554 among the easiest to defend against power and timing attacks.
556 The AES specifies three key sizes: 128, 192 and 256 bits
558 See <http://csrc.nist.gov/CryptoToolkit/aes/> for more information.
560 config CRYPTO_AES_586
561 tristate "AES cipher algorithms (i586)"
562 depends on (X86 || UML_X86) && !64BIT
566 AES cipher algorithms (FIPS-197). AES uses the Rijndael
569 Rijndael appears to be consistently a very good performer in
570 both hardware and software across a wide range of computing
571 environments regardless of its use in feedback or non-feedback
572 modes. Its key setup time is excellent, and its key agility is
573 good. Rijndael's very low memory requirements make it very well
574 suited for restricted-space environments, in which it also
575 demonstrates excellent performance. Rijndael's operations are
576 among the easiest to defend against power and timing attacks.
578 The AES specifies three key sizes: 128, 192 and 256 bits
580 See <http://csrc.nist.gov/encryption/aes/> for more information.
582 config CRYPTO_AES_X86_64
583 tristate "AES cipher algorithms (x86_64)"
584 depends on (X86 || UML_X86) && 64BIT
588 AES cipher algorithms (FIPS-197). AES uses the Rijndael
591 Rijndael appears to be consistently a very good performer in
592 both hardware and software across a wide range of computing
593 environments regardless of its use in feedback or non-feedback
594 modes. Its key setup time is excellent, and its key agility is
595 good. Rijndael's very low memory requirements make it very well
596 suited for restricted-space environments, in which it also
597 demonstrates excellent performance. Rijndael's operations are
598 among the easiest to defend against power and timing attacks.
600 The AES specifies three key sizes: 128, 192 and 256 bits
602 See <http://csrc.nist.gov/encryption/aes/> for more information.
604 config CRYPTO_AES_NI_INTEL
605 tristate "AES cipher algorithms (AES-NI)"
607 select CRYPTO_AES_X86_64 if 64BIT
608 select CRYPTO_AES_586 if !64BIT
610 select CRYPTO_ABLK_HELPER_X86
613 Use Intel AES-NI instructions for AES algorithm.
615 AES cipher algorithms (FIPS-197). AES uses the Rijndael
618 Rijndael appears to be consistently a very good performer in
619 both hardware and software across a wide range of computing
620 environments regardless of its use in feedback or non-feedback
621 modes. Its key setup time is excellent, and its key agility is
622 good. Rijndael's very low memory requirements make it very well
623 suited for restricted-space environments, in which it also
624 demonstrates excellent performance. Rijndael's operations are
625 among the easiest to defend against power and timing attacks.
627 The AES specifies three key sizes: 128, 192 and 256 bits
629 See <http://csrc.nist.gov/encryption/aes/> for more information.
631 In addition to AES cipher algorithm support, the acceleration
632 for some popular block cipher mode is supported too, including
633 ECB, CBC, LRW, PCBC, XTS. The 64 bit version has additional
634 acceleration for CTR.
636 config CRYPTO_AES_SPARC64
637 tristate "AES cipher algorithms (SPARC64)"
642 Use SPARC64 crypto opcodes for AES algorithm.
644 AES cipher algorithms (FIPS-197). AES uses the Rijndael
647 Rijndael appears to be consistently a very good performer in
648 both hardware and software across a wide range of computing
649 environments regardless of its use in feedback or non-feedback
650 modes. Its key setup time is excellent, and its key agility is
651 good. Rijndael's very low memory requirements make it very well
652 suited for restricted-space environments, in which it also
653 demonstrates excellent performance. Rijndael's operations are
654 among the easiest to defend against power and timing attacks.
656 The AES specifies three key sizes: 128, 192 and 256 bits
658 See <http://csrc.nist.gov/encryption/aes/> for more information.
660 In addition to AES cipher algorithm support, the acceleration
661 for some popular block cipher mode is supported too, including
665 tristate "Anubis cipher algorithm"
668 Anubis cipher algorithm.
670 Anubis is a variable key length cipher which can use keys from
671 128 bits to 320 bits in length. It was evaluated as a entrant
672 in the NESSIE competition.
675 <https://www.cosic.esat.kuleuven.be/nessie/reports/>
676 <http://www.larc.usp.br/~pbarreto/AnubisPage.html>
679 tristate "ARC4 cipher algorithm"
680 select CRYPTO_BLKCIPHER
682 ARC4 cipher algorithm.
684 ARC4 is a stream cipher using keys ranging from 8 bits to 2048
685 bits in length. This algorithm is required for driver-based
686 WEP, but it should not be for other purposes because of the
687 weakness of the algorithm.
689 config CRYPTO_BLOWFISH
690 tristate "Blowfish cipher algorithm"
692 select CRYPTO_BLOWFISH_COMMON
694 Blowfish cipher algorithm, by Bruce Schneier.
696 This is a variable key length cipher which can use keys from 32
697 bits to 448 bits in length. It's fast, simple and specifically
698 designed for use on "large microprocessors".
701 <http://www.schneier.com/blowfish.html>
703 config CRYPTO_BLOWFISH_COMMON
706 Common parts of the Blowfish cipher algorithm shared by the
707 generic c and the assembler implementations.
710 <http://www.schneier.com/blowfish.html>
712 config CRYPTO_BLOWFISH_X86_64
713 tristate "Blowfish cipher algorithm (x86_64)"
714 depends on X86 && 64BIT
716 select CRYPTO_BLOWFISH_COMMON
718 Blowfish cipher algorithm (x86_64), by Bruce Schneier.
720 This is a variable key length cipher which can use keys from 32
721 bits to 448 bits in length. It's fast, simple and specifically
722 designed for use on "large microprocessors".
725 <http://www.schneier.com/blowfish.html>
727 config CRYPTO_CAMELLIA
728 tristate "Camellia cipher algorithms"
732 Camellia cipher algorithms module.
734 Camellia is a symmetric key block cipher developed jointly
735 at NTT and Mitsubishi Electric Corporation.
737 The Camellia specifies three key sizes: 128, 192 and 256 bits.
740 <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
742 config CRYPTO_CAMELLIA_X86_64
743 tristate "Camellia cipher algorithm (x86_64)"
744 depends on X86 && 64BIT
747 select CRYPTO_GLUE_HELPER_X86
751 Camellia cipher algorithm module (x86_64).
753 Camellia is a symmetric key block cipher developed jointly
754 at NTT and Mitsubishi Electric Corporation.
756 The Camellia specifies three key sizes: 128, 192 and 256 bits.
759 <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
762 tristate "CAST5 (CAST-128) cipher algorithm"
765 The CAST5 encryption algorithm (synonymous with CAST-128) is
766 described in RFC2144.
769 tristate "CAST6 (CAST-256) cipher algorithm"
772 The CAST6 encryption algorithm (synonymous with CAST-256) is
773 described in RFC2612.
776 tristate "DES and Triple DES EDE cipher algorithms"
779 DES cipher algorithm (FIPS 46-2), and Triple DES EDE (FIPS 46-3).
781 config CRYPTO_DES_SPARC64
782 tristate "DES and Triple DES EDE cipher algorithms (SPARC64)"
786 DES cipher algorithm (FIPS 46-2), and Triple DES EDE (FIPS 46-3),
787 optimized using SPARC64 crypto opcodes.
790 tristate "FCrypt cipher algorithm"
792 select CRYPTO_BLKCIPHER
794 FCrypt algorithm used by RxRPC.
797 tristate "Khazad cipher algorithm"
800 Khazad cipher algorithm.
802 Khazad was a finalist in the initial NESSIE competition. It is
803 an algorithm optimized for 64-bit processors with good performance
804 on 32-bit processors. Khazad uses an 128 bit key size.
807 <http://www.larc.usp.br/~pbarreto/KhazadPage.html>
809 config CRYPTO_SALSA20
810 tristate "Salsa20 stream cipher algorithm (EXPERIMENTAL)"
811 depends on EXPERIMENTAL
812 select CRYPTO_BLKCIPHER
814 Salsa20 stream cipher algorithm.
816 Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
817 Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
819 The Salsa20 stream cipher algorithm is designed by Daniel J.
820 Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
822 config CRYPTO_SALSA20_586
823 tristate "Salsa20 stream cipher algorithm (i586) (EXPERIMENTAL)"
824 depends on (X86 || UML_X86) && !64BIT
825 depends on EXPERIMENTAL
826 select CRYPTO_BLKCIPHER
828 Salsa20 stream cipher algorithm.
830 Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
831 Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
833 The Salsa20 stream cipher algorithm is designed by Daniel J.
834 Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
836 config CRYPTO_SALSA20_X86_64
837 tristate "Salsa20 stream cipher algorithm (x86_64) (EXPERIMENTAL)"
838 depends on (X86 || UML_X86) && 64BIT
839 depends on EXPERIMENTAL
840 select CRYPTO_BLKCIPHER
842 Salsa20 stream cipher algorithm.
844 Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
845 Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
847 The Salsa20 stream cipher algorithm is designed by Daniel J.
848 Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
851 tristate "SEED cipher algorithm"
854 SEED cipher algorithm (RFC4269).
856 SEED is a 128-bit symmetric key block cipher that has been
857 developed by KISA (Korea Information Security Agency) as a
858 national standard encryption algorithm of the Republic of Korea.
859 It is a 16 round block cipher with the key size of 128 bit.
862 <http://www.kisa.or.kr/kisa/seed/jsp/seed_eng.jsp>
864 config CRYPTO_SERPENT
865 tristate "Serpent cipher algorithm"
868 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
870 Keys are allowed to be from 0 to 256 bits in length, in steps
871 of 8 bits. Also includes the 'Tnepres' algorithm, a reversed
872 variant of Serpent for compatibility with old kerneli.org code.
875 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
877 config CRYPTO_SERPENT_SSE2_X86_64
878 tristate "Serpent cipher algorithm (x86_64/SSE2)"
879 depends on X86 && 64BIT
882 select CRYPTO_ABLK_HELPER_X86
883 select CRYPTO_GLUE_HELPER_X86
884 select CRYPTO_SERPENT
888 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
890 Keys are allowed to be from 0 to 256 bits in length, in steps
893 This module provides Serpent cipher algorithm that processes eigth
894 blocks parallel using SSE2 instruction set.
897 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
899 config CRYPTO_SERPENT_SSE2_586
900 tristate "Serpent cipher algorithm (i586/SSE2)"
901 depends on X86 && !64BIT
904 select CRYPTO_ABLK_HELPER_X86
905 select CRYPTO_GLUE_HELPER_X86
906 select CRYPTO_SERPENT
910 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
912 Keys are allowed to be from 0 to 256 bits in length, in steps
915 This module provides Serpent cipher algorithm that processes four
916 blocks parallel using SSE2 instruction set.
919 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
921 config CRYPTO_SERPENT_AVX_X86_64
922 tristate "Serpent cipher algorithm (x86_64/AVX)"
923 depends on X86 && 64BIT
926 select CRYPTO_ABLK_HELPER_X86
927 select CRYPTO_GLUE_HELPER_X86
928 select CRYPTO_SERPENT
932 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
934 Keys are allowed to be from 0 to 256 bits in length, in steps
937 This module provides the Serpent cipher algorithm that processes
938 eight blocks parallel using the AVX instruction set.
941 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
944 tristate "TEA, XTEA and XETA cipher algorithms"
947 TEA cipher algorithm.
949 Tiny Encryption Algorithm is a simple cipher that uses
950 many rounds for security. It is very fast and uses
953 Xtendend Tiny Encryption Algorithm is a modification to
954 the TEA algorithm to address a potential key weakness
955 in the TEA algorithm.
957 Xtendend Encryption Tiny Algorithm is a mis-implementation
958 of the XTEA algorithm for compatibility purposes.
960 config CRYPTO_TWOFISH
961 tristate "Twofish cipher algorithm"
963 select CRYPTO_TWOFISH_COMMON
965 Twofish cipher algorithm.
967 Twofish was submitted as an AES (Advanced Encryption Standard)
968 candidate cipher by researchers at CounterPane Systems. It is a
969 16 round block cipher supporting key sizes of 128, 192, and 256
973 <http://www.schneier.com/twofish.html>
975 config CRYPTO_TWOFISH_COMMON
978 Common parts of the Twofish cipher algorithm shared by the
979 generic c and the assembler implementations.
981 config CRYPTO_TWOFISH_586
982 tristate "Twofish cipher algorithms (i586)"
983 depends on (X86 || UML_X86) && !64BIT
985 select CRYPTO_TWOFISH_COMMON
987 Twofish cipher algorithm.
989 Twofish was submitted as an AES (Advanced Encryption Standard)
990 candidate cipher by researchers at CounterPane Systems. It is a
991 16 round block cipher supporting key sizes of 128, 192, and 256
995 <http://www.schneier.com/twofish.html>
997 config CRYPTO_TWOFISH_X86_64
998 tristate "Twofish cipher algorithm (x86_64)"
999 depends on (X86 || UML_X86) && 64BIT
1000 select CRYPTO_ALGAPI
1001 select CRYPTO_TWOFISH_COMMON
1003 Twofish cipher algorithm (x86_64).
1005 Twofish was submitted as an AES (Advanced Encryption Standard)
1006 candidate cipher by researchers at CounterPane Systems. It is a
1007 16 round block cipher supporting key sizes of 128, 192, and 256
1011 <http://www.schneier.com/twofish.html>
1013 config CRYPTO_TWOFISH_X86_64_3WAY
1014 tristate "Twofish cipher algorithm (x86_64, 3-way parallel)"
1015 depends on X86 && 64BIT
1016 select CRYPTO_ALGAPI
1017 select CRYPTO_TWOFISH_COMMON
1018 select CRYPTO_TWOFISH_X86_64
1019 select CRYPTO_GLUE_HELPER_X86
1023 Twofish cipher algorithm (x86_64, 3-way parallel).
1025 Twofish was submitted as an AES (Advanced Encryption Standard)
1026 candidate cipher by researchers at CounterPane Systems. It is a
1027 16 round block cipher supporting key sizes of 128, 192, and 256
1030 This module provides Twofish cipher algorithm that processes three
1031 blocks parallel, utilizing resources of out-of-order CPUs better.
1034 <http://www.schneier.com/twofish.html>
1036 config CRYPTO_TWOFISH_AVX_X86_64
1037 tristate "Twofish cipher algorithm (x86_64/AVX)"
1038 depends on X86 && 64BIT
1039 select CRYPTO_ALGAPI
1040 select CRYPTO_CRYPTD
1041 select CRYPTO_ABLK_HELPER_X86
1042 select CRYPTO_GLUE_HELPER_X86
1043 select CRYPTO_TWOFISH_COMMON
1044 select CRYPTO_TWOFISH_X86_64
1045 select CRYPTO_TWOFISH_X86_64_3WAY
1049 Twofish cipher algorithm (x86_64/AVX).
1051 Twofish was submitted as an AES (Advanced Encryption Standard)
1052 candidate cipher by researchers at CounterPane Systems. It is a
1053 16 round block cipher supporting key sizes of 128, 192, and 256
1056 This module provides the Twofish cipher algorithm that processes
1057 eight blocks parallel using the AVX Instruction Set.
1060 <http://www.schneier.com/twofish.html>
1062 comment "Compression"
1064 config CRYPTO_DEFLATE
1065 tristate "Deflate compression algorithm"
1066 select CRYPTO_ALGAPI
1070 This is the Deflate algorithm (RFC1951), specified for use in
1071 IPSec with the IPCOMP protocol (RFC3173, RFC2394).
1073 You will most probably want this if using IPSec.
1076 tristate "Zlib compression algorithm"
1082 This is the zlib algorithm.
1085 tristate "LZO compression algorithm"
1086 select CRYPTO_ALGAPI
1088 select LZO_DECOMPRESS
1090 This is the LZO algorithm.
1092 comment "Random Number Generation"
1094 config CRYPTO_ANSI_CPRNG
1095 tristate "Pseudo Random Number Generation for Cryptographic modules"
1100 This option enables the generic pseudo random number generator
1101 for cryptographic modules. Uses the Algorithm specified in
1102 ANSI X9.31 A.2.4. Note that this option must be enabled if
1103 CRYPTO_FIPS is selected
1105 config CRYPTO_USER_API
1108 config CRYPTO_USER_API_HASH
1109 tristate "User-space interface for hash algorithms"
1112 select CRYPTO_USER_API
1114 This option enables the user-spaces interface for hash
1117 config CRYPTO_USER_API_SKCIPHER
1118 tristate "User-space interface for symmetric key cipher algorithms"
1120 select CRYPTO_BLKCIPHER
1121 select CRYPTO_USER_API
1123 This option enables the user-spaces interface for symmetric
1124 key cipher algorithms.
1126 source "drivers/crypto/Kconfig"