2 # Generic algorithms support
8 # async_tx api: hardware offloaded memory transfer/transform support
10 source "crypto/async_tx/Kconfig"
13 # Cryptographic API Configuration
16 tristate "Cryptographic API"
18 This option provides the core Cryptographic API.
22 comment "Crypto core or helper"
25 bool "FIPS 200 compliance"
26 depends on CRYPTO_ANSI_CPRNG && !CRYPTO_MANAGER_DISABLE_TESTS
28 This options enables the fips boot option which is
29 required if you want to system to operate in a FIPS 200
30 certification. You should say no unless you know what
37 This option provides the API for cryptographic algorithms.
51 config CRYPTO_BLKCIPHER
53 select CRYPTO_BLKCIPHER2
56 config CRYPTO_BLKCIPHER2
60 select CRYPTO_WORKQUEUE
90 tristate "Cryptographic algorithm manager"
91 select CRYPTO_MANAGER2
93 Create default cryptographic template instantiations such as
96 config CRYPTO_MANAGER2
97 def_tristate CRYPTO_MANAGER || (CRYPTO_MANAGER!=n && CRYPTO_ALGAPI=y)
100 select CRYPTO_BLKCIPHER2
104 tristate "Userspace cryptographic algorithm configuration"
106 select CRYPTO_MANAGER
108 Userspace configuration for cryptographic instantiations such as
111 config CRYPTO_MANAGER_DISABLE_TESTS
112 bool "Disable run-time self tests"
114 depends on CRYPTO_MANAGER2
116 Disable run-time self tests that normally take place at
117 algorithm registration.
119 config CRYPTO_GF128MUL
120 tristate "GF(2^128) multiplication functions"
122 Efficient table driven implementation of multiplications in the
123 field GF(2^128). This is needed by some cypher modes. This
124 option will be selected automatically if you select such a
125 cipher mode. Only select this option by hand if you expect to load
126 an external module that requires these functions.
129 tristate "Null algorithms"
131 select CRYPTO_BLKCIPHER
134 These are 'Null' algorithms, used by IPsec, which do nothing.
137 tristate "Parallel crypto engine"
140 select CRYPTO_MANAGER
143 This converts an arbitrary crypto algorithm into a parallel
144 algorithm that executes in kernel threads.
146 config CRYPTO_WORKQUEUE
150 tristate "Software async crypto daemon"
151 select CRYPTO_BLKCIPHER
153 select CRYPTO_MANAGER
154 select CRYPTO_WORKQUEUE
156 This is a generic software asynchronous crypto daemon that
157 converts an arbitrary synchronous software crypto algorithm
158 into an asynchronous algorithm that executes in a kernel thread.
160 config CRYPTO_AUTHENC
161 tristate "Authenc support"
163 select CRYPTO_BLKCIPHER
164 select CRYPTO_MANAGER
167 Authenc: Combined mode wrapper for IPsec.
168 This is required for IPSec.
171 tristate "Testing module"
173 select CRYPTO_MANAGER
175 Quick & dirty crypto test module.
177 config CRYPTO_ABLK_HELPER_X86
182 config CRYPTO_GLUE_HELPER_X86
187 comment "Authenticated Encryption with Associated Data"
190 tristate "CCM support"
194 Support for Counter with CBC MAC. Required for IPsec.
197 tristate "GCM/GMAC support"
202 Support for Galois/Counter Mode (GCM) and Galois Message
203 Authentication Code (GMAC). Required for IPSec.
206 tristate "Sequence Number IV Generator"
208 select CRYPTO_BLKCIPHER
211 This IV generator generates an IV based on a sequence number by
212 xoring it with a salt. This algorithm is mainly useful for CTR
214 comment "Block modes"
217 tristate "CBC support"
218 select CRYPTO_BLKCIPHER
219 select CRYPTO_MANAGER
221 CBC: Cipher Block Chaining mode
222 This block cipher algorithm is required for IPSec.
225 tristate "CTR support"
226 select CRYPTO_BLKCIPHER
228 select CRYPTO_MANAGER
231 This block cipher algorithm is required for IPSec.
234 tristate "CTS support"
235 select CRYPTO_BLKCIPHER
237 CTS: Cipher Text Stealing
238 This is the Cipher Text Stealing mode as described by
239 Section 8 of rfc2040 and referenced by rfc3962.
240 (rfc3962 includes errata information in its Appendix A)
241 This mode is required for Kerberos gss mechanism support
245 tristate "ECB support"
246 select CRYPTO_BLKCIPHER
247 select CRYPTO_MANAGER
249 ECB: Electronic CodeBook mode
250 This is the simplest block cipher algorithm. It simply encrypts
251 the input block by block.
254 tristate "LRW support"
255 select CRYPTO_BLKCIPHER
256 select CRYPTO_MANAGER
257 select CRYPTO_GF128MUL
259 LRW: Liskov Rivest Wagner, a tweakable, non malleable, non movable
260 narrow block cipher mode for dm-crypt. Use it with cipher
261 specification string aes-lrw-benbi, the key must be 256, 320 or 384.
262 The first 128, 192 or 256 bits in the key are used for AES and the
263 rest is used to tie each cipher block to its logical position.
266 tristate "PCBC support"
267 select CRYPTO_BLKCIPHER
268 select CRYPTO_MANAGER
270 PCBC: Propagating Cipher Block Chaining mode
271 This block cipher algorithm is required for RxRPC.
274 tristate "XTS support"
275 select CRYPTO_BLKCIPHER
276 select CRYPTO_MANAGER
277 select CRYPTO_GF128MUL
279 XTS: IEEE1619/D16 narrow block cipher use with aes-xts-plain,
280 key size 256, 384 or 512 bits. This implementation currently
281 can't handle a sectorsize which is not a multiple of 16 bytes.
286 tristate "HMAC support"
288 select CRYPTO_MANAGER
290 HMAC: Keyed-Hashing for Message Authentication (RFC2104).
291 This is required for IPSec.
294 tristate "XCBC support"
296 select CRYPTO_MANAGER
298 XCBC: Keyed-Hashing with encryption algorithm
299 http://www.ietf.org/rfc/rfc3566.txt
300 http://csrc.nist.gov/encryption/modes/proposedmodes/
301 xcbc-mac/xcbc-mac-spec.pdf
304 tristate "VMAC support"
306 select CRYPTO_MANAGER
308 VMAC is a message authentication algorithm designed for
309 very high speed on 64-bit architectures.
312 <http://fastcrypto.org/vmac>
317 tristate "CRC32c CRC algorithm"
321 Castagnoli, et al Cyclic Redundancy-Check Algorithm. Used
322 by iSCSI for header and data digests and by others.
323 See Castagnoli93. Module will be crc32c.
325 config CRYPTO_CRC32C_X86_64
327 depends on X86 && 64BIT
330 In Intel processor with SSE4.2 supported, the processor will
331 support CRC32C calculation using hardware accelerated CRC32
332 instruction optimized with PCLMULQDQ instruction when available.
334 config CRYPTO_CRC32C_INTEL
335 tristate "CRC32c INTEL hardware acceleration"
337 select CRYPTO_CRC32C_X86_64 if 64BIT
340 In Intel processor with SSE4.2 supported, the processor will
341 support CRC32C implementation using hardware accelerated CRC32
342 instruction. This option will create 'crc32c-intel' module,
343 which will enable any routine to use the CRC32 instruction to
344 gain performance compared with software implementation.
345 Module will be crc32c-intel.
347 config CRYPTO_CRC32C_SPARC64
348 tristate "CRC32c CRC algorithm (SPARC64)"
353 CRC32c CRC algorithm implemented using sparc64 crypto instructions,
357 tristate "GHASH digest algorithm"
358 select CRYPTO_GF128MUL
360 GHASH is message digest algorithm for GCM (Galois/Counter Mode).
363 tristate "MD4 digest algorithm"
366 MD4 message digest algorithm (RFC1320).
369 tristate "MD5 digest algorithm"
372 MD5 message digest algorithm (RFC1321).
374 config CRYPTO_MD5_SPARC64
375 tristate "MD5 digest algorithm (SPARC64)"
380 MD5 message digest algorithm (RFC1321) implemented
381 using sparc64 crypto instructions, when available.
383 config CRYPTO_MICHAEL_MIC
384 tristate "Michael MIC keyed digest algorithm"
387 Michael MIC is used for message integrity protection in TKIP
388 (IEEE 802.11i). This algorithm is required for TKIP, but it
389 should not be used for other purposes because of the weakness
393 tristate "RIPEMD-128 digest algorithm"
396 RIPEMD-128 (ISO/IEC 10118-3:2004).
398 RIPEMD-128 is a 128-bit cryptographic hash function. It should only
399 be used as a secure replacement for RIPEMD. For other use cases,
400 RIPEMD-160 should be used.
402 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
403 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
406 tristate "RIPEMD-160 digest algorithm"
409 RIPEMD-160 (ISO/IEC 10118-3:2004).
411 RIPEMD-160 is a 160-bit cryptographic hash function. It is intended
412 to be used as a secure replacement for the 128-bit hash functions
413 MD4, MD5 and it's predecessor RIPEMD
414 (not to be confused with RIPEMD-128).
416 It's speed is comparable to SHA1 and there are no known attacks
419 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
420 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
423 tristate "RIPEMD-256 digest algorithm"
426 RIPEMD-256 is an optional extension of RIPEMD-128 with a
427 256 bit hash. It is intended for applications that require
428 longer hash-results, without needing a larger security level
431 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
432 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
435 tristate "RIPEMD-320 digest algorithm"
438 RIPEMD-320 is an optional extension of RIPEMD-160 with a
439 320 bit hash. It is intended for applications that require
440 longer hash-results, without needing a larger security level
443 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
444 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
447 tristate "SHA1 digest algorithm"
450 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2).
452 config CRYPTO_SHA1_SSSE3
453 tristate "SHA1 digest algorithm (SSSE3/AVX)"
454 depends on X86 && 64BIT
458 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented
459 using Supplemental SSE3 (SSSE3) instructions or Advanced Vector
460 Extensions (AVX), when available.
462 config CRYPTO_SHA1_SPARC64
463 tristate "SHA1 digest algorithm (SPARC64)"
468 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented
469 using sparc64 crypto instructions, when available.
471 config CRYPTO_SHA1_ARM
472 tristate "SHA1 digest algorithm (ARM-asm)"
477 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented
478 using optimized ARM assembler.
480 config CRYPTO_SHA1_PPC
481 tristate "SHA1 digest algorithm (powerpc)"
484 This is the powerpc hardware accelerated implementation of the
485 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2).
488 tristate "SHA224 and SHA256 digest algorithm"
491 SHA256 secure hash standard (DFIPS 180-2).
493 This version of SHA implements a 256 bit hash with 128 bits of
494 security against collision attacks.
496 This code also includes SHA-224, a 224 bit hash with 112 bits
497 of security against collision attacks.
499 config CRYPTO_SHA256_SPARC64
500 tristate "SHA224 and SHA256 digest algorithm (SPARC64)"
505 SHA-256 secure hash standard (DFIPS 180-2) implemented
506 using sparc64 crypto instructions, when available.
509 tristate "SHA384 and SHA512 digest algorithms"
512 SHA512 secure hash standard (DFIPS 180-2).
514 This version of SHA implements a 512 bit hash with 256 bits of
515 security against collision attacks.
517 This code also includes SHA-384, a 384 bit hash with 192 bits
518 of security against collision attacks.
520 config CRYPTO_SHA512_SPARC64
521 tristate "SHA384 and SHA512 digest algorithm (SPARC64)"
526 SHA-512 secure hash standard (DFIPS 180-2) implemented
527 using sparc64 crypto instructions, when available.
530 tristate "Tiger digest algorithms"
533 Tiger hash algorithm 192, 160 and 128-bit hashes
535 Tiger is a hash function optimized for 64-bit processors while
536 still having decent performance on 32-bit processors.
537 Tiger was developed by Ross Anderson and Eli Biham.
540 <http://www.cs.technion.ac.il/~biham/Reports/Tiger/>.
543 tristate "Whirlpool digest algorithms"
546 Whirlpool hash algorithm 512, 384 and 256-bit hashes
548 Whirlpool-512 is part of the NESSIE cryptographic primitives.
549 Whirlpool will be part of the ISO/IEC 10118-3:2003(E) standard
552 <http://www.larc.usp.br/~pbarreto/WhirlpoolPage.html>
554 config CRYPTO_GHASH_CLMUL_NI_INTEL
555 tristate "GHASH digest algorithm (CLMUL-NI accelerated)"
556 depends on X86 && 64BIT
559 GHASH is message digest algorithm for GCM (Galois/Counter Mode).
560 The implementation is accelerated by CLMUL-NI of Intel.
565 tristate "AES cipher algorithms"
568 AES cipher algorithms (FIPS-197). AES uses the Rijndael
571 Rijndael appears to be consistently a very good performer in
572 both hardware and software across a wide range of computing
573 environments regardless of its use in feedback or non-feedback
574 modes. Its key setup time is excellent, and its key agility is
575 good. Rijndael's very low memory requirements make it very well
576 suited for restricted-space environments, in which it also
577 demonstrates excellent performance. Rijndael's operations are
578 among the easiest to defend against power and timing attacks.
580 The AES specifies three key sizes: 128, 192 and 256 bits
582 See <http://csrc.nist.gov/CryptoToolkit/aes/> for more information.
584 config CRYPTO_AES_586
585 tristate "AES cipher algorithms (i586)"
586 depends on (X86 || UML_X86) && !64BIT
590 AES cipher algorithms (FIPS-197). AES uses the Rijndael
593 Rijndael appears to be consistently a very good performer in
594 both hardware and software across a wide range of computing
595 environments regardless of its use in feedback or non-feedback
596 modes. Its key setup time is excellent, and its key agility is
597 good. Rijndael's very low memory requirements make it very well
598 suited for restricted-space environments, in which it also
599 demonstrates excellent performance. Rijndael's operations are
600 among the easiest to defend against power and timing attacks.
602 The AES specifies three key sizes: 128, 192 and 256 bits
604 See <http://csrc.nist.gov/encryption/aes/> for more information.
606 config CRYPTO_AES_X86_64
607 tristate "AES cipher algorithms (x86_64)"
608 depends on (X86 || UML_X86) && 64BIT
612 AES cipher algorithms (FIPS-197). AES uses the Rijndael
615 Rijndael appears to be consistently a very good performer in
616 both hardware and software across a wide range of computing
617 environments regardless of its use in feedback or non-feedback
618 modes. Its key setup time is excellent, and its key agility is
619 good. Rijndael's very low memory requirements make it very well
620 suited for restricted-space environments, in which it also
621 demonstrates excellent performance. Rijndael's operations are
622 among the easiest to defend against power and timing attacks.
624 The AES specifies three key sizes: 128, 192 and 256 bits
626 See <http://csrc.nist.gov/encryption/aes/> for more information.
628 config CRYPTO_AES_NI_INTEL
629 tristate "AES cipher algorithms (AES-NI)"
631 select CRYPTO_AES_X86_64 if 64BIT
632 select CRYPTO_AES_586 if !64BIT
634 select CRYPTO_ABLK_HELPER_X86
639 Use Intel AES-NI instructions for AES algorithm.
641 AES cipher algorithms (FIPS-197). AES uses the Rijndael
644 Rijndael appears to be consistently a very good performer in
645 both hardware and software across a wide range of computing
646 environments regardless of its use in feedback or non-feedback
647 modes. Its key setup time is excellent, and its key agility is
648 good. Rijndael's very low memory requirements make it very well
649 suited for restricted-space environments, in which it also
650 demonstrates excellent performance. Rijndael's operations are
651 among the easiest to defend against power and timing attacks.
653 The AES specifies three key sizes: 128, 192 and 256 bits
655 See <http://csrc.nist.gov/encryption/aes/> for more information.
657 In addition to AES cipher algorithm support, the acceleration
658 for some popular block cipher mode is supported too, including
659 ECB, CBC, LRW, PCBC, XTS. The 64 bit version has additional
660 acceleration for CTR.
662 config CRYPTO_AES_SPARC64
663 tristate "AES cipher algorithms (SPARC64)"
668 Use SPARC64 crypto opcodes for AES algorithm.
670 AES cipher algorithms (FIPS-197). AES uses the Rijndael
673 Rijndael appears to be consistently a very good performer in
674 both hardware and software across a wide range of computing
675 environments regardless of its use in feedback or non-feedback
676 modes. Its key setup time is excellent, and its key agility is
677 good. Rijndael's very low memory requirements make it very well
678 suited for restricted-space environments, in which it also
679 demonstrates excellent performance. Rijndael's operations are
680 among the easiest to defend against power and timing attacks.
682 The AES specifies three key sizes: 128, 192 and 256 bits
684 See <http://csrc.nist.gov/encryption/aes/> for more information.
686 In addition to AES cipher algorithm support, the acceleration
687 for some popular block cipher mode is supported too, including
690 config CRYPTO_AES_ARM
691 tristate "AES cipher algorithms (ARM-asm)"
696 Use optimized AES assembler routines for ARM platforms.
698 AES cipher algorithms (FIPS-197). AES uses the Rijndael
701 Rijndael appears to be consistently a very good performer in
702 both hardware and software across a wide range of computing
703 environments regardless of its use in feedback or non-feedback
704 modes. Its key setup time is excellent, and its key agility is
705 good. Rijndael's very low memory requirements make it very well
706 suited for restricted-space environments, in which it also
707 demonstrates excellent performance. Rijndael's operations are
708 among the easiest to defend against power and timing attacks.
710 The AES specifies three key sizes: 128, 192 and 256 bits
712 See <http://csrc.nist.gov/encryption/aes/> for more information.
715 tristate "Anubis cipher algorithm"
718 Anubis cipher algorithm.
720 Anubis is a variable key length cipher which can use keys from
721 128 bits to 320 bits in length. It was evaluated as a entrant
722 in the NESSIE competition.
725 <https://www.cosic.esat.kuleuven.be/nessie/reports/>
726 <http://www.larc.usp.br/~pbarreto/AnubisPage.html>
729 tristate "ARC4 cipher algorithm"
730 select CRYPTO_BLKCIPHER
732 ARC4 cipher algorithm.
734 ARC4 is a stream cipher using keys ranging from 8 bits to 2048
735 bits in length. This algorithm is required for driver-based
736 WEP, but it should not be for other purposes because of the
737 weakness of the algorithm.
739 config CRYPTO_BLOWFISH
740 tristate "Blowfish cipher algorithm"
742 select CRYPTO_BLOWFISH_COMMON
744 Blowfish cipher algorithm, by Bruce Schneier.
746 This is a variable key length cipher which can use keys from 32
747 bits to 448 bits in length. It's fast, simple and specifically
748 designed for use on "large microprocessors".
751 <http://www.schneier.com/blowfish.html>
753 config CRYPTO_BLOWFISH_COMMON
756 Common parts of the Blowfish cipher algorithm shared by the
757 generic c and the assembler implementations.
760 <http://www.schneier.com/blowfish.html>
762 config CRYPTO_BLOWFISH_X86_64
763 tristate "Blowfish cipher algorithm (x86_64)"
764 depends on X86 && 64BIT
766 select CRYPTO_BLOWFISH_COMMON
768 Blowfish cipher algorithm (x86_64), by Bruce Schneier.
770 This is a variable key length cipher which can use keys from 32
771 bits to 448 bits in length. It's fast, simple and specifically
772 designed for use on "large microprocessors".
775 <http://www.schneier.com/blowfish.html>
777 config CRYPTO_CAMELLIA
778 tristate "Camellia cipher algorithms"
782 Camellia cipher algorithms module.
784 Camellia is a symmetric key block cipher developed jointly
785 at NTT and Mitsubishi Electric Corporation.
787 The Camellia specifies three key sizes: 128, 192 and 256 bits.
790 <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
792 config CRYPTO_CAMELLIA_X86_64
793 tristate "Camellia cipher algorithm (x86_64)"
794 depends on X86 && 64BIT
797 select CRYPTO_GLUE_HELPER_X86
801 Camellia cipher algorithm module (x86_64).
803 Camellia is a symmetric key block cipher developed jointly
804 at NTT and Mitsubishi Electric Corporation.
806 The Camellia specifies three key sizes: 128, 192 and 256 bits.
809 <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
811 config CRYPTO_CAMELLIA_AESNI_AVX_X86_64
812 tristate "Camellia cipher algorithm (x86_64/AES-NI/AVX)"
813 depends on X86 && 64BIT
817 select CRYPTO_ABLK_HELPER_X86
818 select CRYPTO_GLUE_HELPER_X86
819 select CRYPTO_CAMELLIA_X86_64
823 Camellia cipher algorithm module (x86_64/AES-NI/AVX).
825 Camellia is a symmetric key block cipher developed jointly
826 at NTT and Mitsubishi Electric Corporation.
828 The Camellia specifies three key sizes: 128, 192 and 256 bits.
831 <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
833 config CRYPTO_CAMELLIA_SPARC64
834 tristate "Camellia cipher algorithm (SPARC64)"
839 Camellia cipher algorithm module (SPARC64).
841 Camellia is a symmetric key block cipher developed jointly
842 at NTT and Mitsubishi Electric Corporation.
844 The Camellia specifies three key sizes: 128, 192 and 256 bits.
847 <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
849 config CRYPTO_CAST_COMMON
852 Common parts of the CAST cipher algorithms shared by the
853 generic c and the assembler implementations.
856 tristate "CAST5 (CAST-128) cipher algorithm"
858 select CRYPTO_CAST_COMMON
860 The CAST5 encryption algorithm (synonymous with CAST-128) is
861 described in RFC2144.
863 config CRYPTO_CAST5_AVX_X86_64
864 tristate "CAST5 (CAST-128) cipher algorithm (x86_64/AVX)"
865 depends on X86 && 64BIT
868 select CRYPTO_ABLK_HELPER_X86
869 select CRYPTO_CAST_COMMON
872 The CAST5 encryption algorithm (synonymous with CAST-128) is
873 described in RFC2144.
875 This module provides the Cast5 cipher algorithm that processes
876 sixteen blocks parallel using the AVX instruction set.
879 tristate "CAST6 (CAST-256) cipher algorithm"
881 select CRYPTO_CAST_COMMON
883 The CAST6 encryption algorithm (synonymous with CAST-256) is
884 described in RFC2612.
886 config CRYPTO_CAST6_AVX_X86_64
887 tristate "CAST6 (CAST-256) cipher algorithm (x86_64/AVX)"
888 depends on X86 && 64BIT
891 select CRYPTO_ABLK_HELPER_X86
892 select CRYPTO_GLUE_HELPER_X86
893 select CRYPTO_CAST_COMMON
898 The CAST6 encryption algorithm (synonymous with CAST-256) is
899 described in RFC2612.
901 This module provides the Cast6 cipher algorithm that processes
902 eight blocks parallel using the AVX instruction set.
905 tristate "DES and Triple DES EDE cipher algorithms"
908 DES cipher algorithm (FIPS 46-2), and Triple DES EDE (FIPS 46-3).
910 config CRYPTO_DES_SPARC64
911 tristate "DES and Triple DES EDE cipher algorithms (SPARC64)"
916 DES cipher algorithm (FIPS 46-2), and Triple DES EDE (FIPS 46-3),
917 optimized using SPARC64 crypto opcodes.
920 tristate "FCrypt cipher algorithm"
922 select CRYPTO_BLKCIPHER
924 FCrypt algorithm used by RxRPC.
927 tristate "Khazad cipher algorithm"
930 Khazad cipher algorithm.
932 Khazad was a finalist in the initial NESSIE competition. It is
933 an algorithm optimized for 64-bit processors with good performance
934 on 32-bit processors. Khazad uses an 128 bit key size.
937 <http://www.larc.usp.br/~pbarreto/KhazadPage.html>
939 config CRYPTO_SALSA20
940 tristate "Salsa20 stream cipher algorithm"
941 select CRYPTO_BLKCIPHER
943 Salsa20 stream cipher algorithm.
945 Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
946 Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
948 The Salsa20 stream cipher algorithm is designed by Daniel J.
949 Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
951 config CRYPTO_SALSA20_586
952 tristate "Salsa20 stream cipher algorithm (i586)"
953 depends on (X86 || UML_X86) && !64BIT
954 select CRYPTO_BLKCIPHER
956 Salsa20 stream cipher algorithm.
958 Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
959 Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
961 The Salsa20 stream cipher algorithm is designed by Daniel J.
962 Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
964 config CRYPTO_SALSA20_X86_64
965 tristate "Salsa20 stream cipher algorithm (x86_64)"
966 depends on (X86 || UML_X86) && 64BIT
967 select CRYPTO_BLKCIPHER
969 Salsa20 stream cipher algorithm.
971 Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
972 Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
974 The Salsa20 stream cipher algorithm is designed by Daniel J.
975 Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
978 tristate "SEED cipher algorithm"
981 SEED cipher algorithm (RFC4269).
983 SEED is a 128-bit symmetric key block cipher that has been
984 developed by KISA (Korea Information Security Agency) as a
985 national standard encryption algorithm of the Republic of Korea.
986 It is a 16 round block cipher with the key size of 128 bit.
989 <http://www.kisa.or.kr/kisa/seed/jsp/seed_eng.jsp>
991 config CRYPTO_SERPENT
992 tristate "Serpent cipher algorithm"
995 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
997 Keys are allowed to be from 0 to 256 bits in length, in steps
998 of 8 bits. Also includes the 'Tnepres' algorithm, a reversed
999 variant of Serpent for compatibility with old kerneli.org code.
1002 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
1004 config CRYPTO_SERPENT_SSE2_X86_64
1005 tristate "Serpent cipher algorithm (x86_64/SSE2)"
1006 depends on X86 && 64BIT
1007 select CRYPTO_ALGAPI
1008 select CRYPTO_CRYPTD
1009 select CRYPTO_ABLK_HELPER_X86
1010 select CRYPTO_GLUE_HELPER_X86
1011 select CRYPTO_SERPENT
1015 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
1017 Keys are allowed to be from 0 to 256 bits in length, in steps
1020 This module provides Serpent cipher algorithm that processes eigth
1021 blocks parallel using SSE2 instruction set.
1024 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
1026 config CRYPTO_SERPENT_SSE2_586
1027 tristate "Serpent cipher algorithm (i586/SSE2)"
1028 depends on X86 && !64BIT
1029 select CRYPTO_ALGAPI
1030 select CRYPTO_CRYPTD
1031 select CRYPTO_ABLK_HELPER_X86
1032 select CRYPTO_GLUE_HELPER_X86
1033 select CRYPTO_SERPENT
1037 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
1039 Keys are allowed to be from 0 to 256 bits in length, in steps
1042 This module provides Serpent cipher algorithm that processes four
1043 blocks parallel using SSE2 instruction set.
1046 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
1048 config CRYPTO_SERPENT_AVX_X86_64
1049 tristate "Serpent cipher algorithm (x86_64/AVX)"
1050 depends on X86 && 64BIT
1051 select CRYPTO_ALGAPI
1052 select CRYPTO_CRYPTD
1053 select CRYPTO_ABLK_HELPER_X86
1054 select CRYPTO_GLUE_HELPER_X86
1055 select CRYPTO_SERPENT
1059 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
1061 Keys are allowed to be from 0 to 256 bits in length, in steps
1064 This module provides the Serpent cipher algorithm that processes
1065 eight blocks parallel using the AVX instruction set.
1068 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
1071 tristate "TEA, XTEA and XETA cipher algorithms"
1072 select CRYPTO_ALGAPI
1074 TEA cipher algorithm.
1076 Tiny Encryption Algorithm is a simple cipher that uses
1077 many rounds for security. It is very fast and uses
1080 Xtendend Tiny Encryption Algorithm is a modification to
1081 the TEA algorithm to address a potential key weakness
1082 in the TEA algorithm.
1084 Xtendend Encryption Tiny Algorithm is a mis-implementation
1085 of the XTEA algorithm for compatibility purposes.
1087 config CRYPTO_TWOFISH
1088 tristate "Twofish cipher algorithm"
1089 select CRYPTO_ALGAPI
1090 select CRYPTO_TWOFISH_COMMON
1092 Twofish cipher algorithm.
1094 Twofish was submitted as an AES (Advanced Encryption Standard)
1095 candidate cipher by researchers at CounterPane Systems. It is a
1096 16 round block cipher supporting key sizes of 128, 192, and 256
1100 <http://www.schneier.com/twofish.html>
1102 config CRYPTO_TWOFISH_COMMON
1105 Common parts of the Twofish cipher algorithm shared by the
1106 generic c and the assembler implementations.
1108 config CRYPTO_TWOFISH_586
1109 tristate "Twofish cipher algorithms (i586)"
1110 depends on (X86 || UML_X86) && !64BIT
1111 select CRYPTO_ALGAPI
1112 select CRYPTO_TWOFISH_COMMON
1114 Twofish cipher algorithm.
1116 Twofish was submitted as an AES (Advanced Encryption Standard)
1117 candidate cipher by researchers at CounterPane Systems. It is a
1118 16 round block cipher supporting key sizes of 128, 192, and 256
1122 <http://www.schneier.com/twofish.html>
1124 config CRYPTO_TWOFISH_X86_64
1125 tristate "Twofish cipher algorithm (x86_64)"
1126 depends on (X86 || UML_X86) && 64BIT
1127 select CRYPTO_ALGAPI
1128 select CRYPTO_TWOFISH_COMMON
1130 Twofish cipher algorithm (x86_64).
1132 Twofish was submitted as an AES (Advanced Encryption Standard)
1133 candidate cipher by researchers at CounterPane Systems. It is a
1134 16 round block cipher supporting key sizes of 128, 192, and 256
1138 <http://www.schneier.com/twofish.html>
1140 config CRYPTO_TWOFISH_X86_64_3WAY
1141 tristate "Twofish cipher algorithm (x86_64, 3-way parallel)"
1142 depends on X86 && 64BIT
1143 select CRYPTO_ALGAPI
1144 select CRYPTO_TWOFISH_COMMON
1145 select CRYPTO_TWOFISH_X86_64
1146 select CRYPTO_GLUE_HELPER_X86
1150 Twofish cipher algorithm (x86_64, 3-way parallel).
1152 Twofish was submitted as an AES (Advanced Encryption Standard)
1153 candidate cipher by researchers at CounterPane Systems. It is a
1154 16 round block cipher supporting key sizes of 128, 192, and 256
1157 This module provides Twofish cipher algorithm that processes three
1158 blocks parallel, utilizing resources of out-of-order CPUs better.
1161 <http://www.schneier.com/twofish.html>
1163 config CRYPTO_TWOFISH_AVX_X86_64
1164 tristate "Twofish cipher algorithm (x86_64/AVX)"
1165 depends on X86 && 64BIT
1166 select CRYPTO_ALGAPI
1167 select CRYPTO_CRYPTD
1168 select CRYPTO_ABLK_HELPER_X86
1169 select CRYPTO_GLUE_HELPER_X86
1170 select CRYPTO_TWOFISH_COMMON
1171 select CRYPTO_TWOFISH_X86_64
1172 select CRYPTO_TWOFISH_X86_64_3WAY
1176 Twofish cipher algorithm (x86_64/AVX).
1178 Twofish was submitted as an AES (Advanced Encryption Standard)
1179 candidate cipher by researchers at CounterPane Systems. It is a
1180 16 round block cipher supporting key sizes of 128, 192, and 256
1183 This module provides the Twofish cipher algorithm that processes
1184 eight blocks parallel using the AVX Instruction Set.
1187 <http://www.schneier.com/twofish.html>
1189 comment "Compression"
1191 config CRYPTO_DEFLATE
1192 tristate "Deflate compression algorithm"
1193 select CRYPTO_ALGAPI
1197 This is the Deflate algorithm (RFC1951), specified for use in
1198 IPSec with the IPCOMP protocol (RFC3173, RFC2394).
1200 You will most probably want this if using IPSec.
1203 tristate "Zlib compression algorithm"
1209 This is the zlib algorithm.
1212 tristate "LZO compression algorithm"
1213 select CRYPTO_ALGAPI
1215 select LZO_DECOMPRESS
1217 This is the LZO algorithm.
1220 tristate "842 compression algorithm"
1221 depends on CRYPTO_DEV_NX_COMPRESS
1222 # 842 uses lzo if the hardware becomes unavailable
1224 select LZO_DECOMPRESS
1226 This is the 842 algorithm.
1228 comment "Random Number Generation"
1230 config CRYPTO_ANSI_CPRNG
1231 tristate "Pseudo Random Number Generation for Cryptographic modules"
1236 This option enables the generic pseudo random number generator
1237 for cryptographic modules. Uses the Algorithm specified in
1238 ANSI X9.31 A.2.4. Note that this option must be enabled if
1239 CRYPTO_FIPS is selected
1241 config CRYPTO_USER_API
1244 config CRYPTO_USER_API_HASH
1245 tristate "User-space interface for hash algorithms"
1248 select CRYPTO_USER_API
1250 This option enables the user-spaces interface for hash
1253 config CRYPTO_USER_API_SKCIPHER
1254 tristate "User-space interface for symmetric key cipher algorithms"
1256 select CRYPTO_BLKCIPHER
1257 select CRYPTO_USER_API
1259 This option enables the user-spaces interface for symmetric
1260 key cipher algorithms.
1262 source "drivers/crypto/Kconfig"
1263 source crypto/asymmetric_keys/Kconfig