1652ccae5SArd Biesheuvel 2652ccae5SArd Biesheuvelmenuconfig ARM_CRYPTO 3652ccae5SArd Biesheuvel bool "ARM Accelerated Cryptographic Algorithms" 4652ccae5SArd Biesheuvel depends on ARM 5652ccae5SArd Biesheuvel help 6652ccae5SArd Biesheuvel Say Y here to choose from a selection of cryptographic algorithms 7652ccae5SArd Biesheuvel implemented using ARM specific CPU features or instructions. 8652ccae5SArd Biesheuvel 9652ccae5SArd Biesheuvelif ARM_CRYPTO 10652ccae5SArd Biesheuvel 11652ccae5SArd Biesheuvelconfig CRYPTO_SHA1_ARM 12652ccae5SArd Biesheuvel tristate "SHA1 digest algorithm (ARM-asm)" 13652ccae5SArd Biesheuvel select CRYPTO_SHA1 14652ccae5SArd Biesheuvel select CRYPTO_HASH 15652ccae5SArd Biesheuvel help 16652ccae5SArd Biesheuvel SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented 17652ccae5SArd Biesheuvel using optimized ARM assembler. 18652ccae5SArd Biesheuvel 19652ccae5SArd Biesheuvelconfig CRYPTO_SHA1_ARM_NEON 20652ccae5SArd Biesheuvel tristate "SHA1 digest algorithm (ARM NEON)" 21652ccae5SArd Biesheuvel depends on KERNEL_MODE_NEON 22652ccae5SArd Biesheuvel select CRYPTO_SHA1_ARM 23652ccae5SArd Biesheuvel select CRYPTO_SHA1 24652ccae5SArd Biesheuvel select CRYPTO_HASH 25652ccae5SArd Biesheuvel help 26652ccae5SArd Biesheuvel SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented 27652ccae5SArd Biesheuvel using optimized ARM NEON assembly, when NEON instructions are 28652ccae5SArd Biesheuvel available. 29652ccae5SArd Biesheuvel 30864cbeedSArd Biesheuvelconfig CRYPTO_SHA1_ARM_CE 31864cbeedSArd Biesheuvel tristate "SHA1 digest algorithm (ARM v8 Crypto Extensions)" 32864cbeedSArd Biesheuvel depends on KERNEL_MODE_NEON 33864cbeedSArd Biesheuvel select CRYPTO_SHA1_ARM 34864cbeedSArd Biesheuvel select CRYPTO_HASH 35864cbeedSArd Biesheuvel help 36864cbeedSArd Biesheuvel SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented 37864cbeedSArd Biesheuvel using special ARMv8 Crypto Extensions. 38864cbeedSArd Biesheuvel 39006d0624SArd Biesheuvelconfig CRYPTO_SHA2_ARM_CE 40006d0624SArd Biesheuvel tristate "SHA-224/256 digest algorithm (ARM v8 Crypto Extensions)" 41006d0624SArd Biesheuvel depends on KERNEL_MODE_NEON 429205b949SArd Biesheuvel select CRYPTO_SHA256_ARM 43006d0624SArd Biesheuvel select CRYPTO_HASH 44006d0624SArd Biesheuvel help 45006d0624SArd Biesheuvel SHA-256 secure hash standard (DFIPS 180-2) implemented 46006d0624SArd Biesheuvel using special ARMv8 Crypto Extensions. 47006d0624SArd Biesheuvel 48f2f770d7SSami Tolvanenconfig CRYPTO_SHA256_ARM 49f2f770d7SSami Tolvanen tristate "SHA-224/256 digest algorithm (ARM-asm and NEON)" 50f2f770d7SSami Tolvanen select CRYPTO_HASH 51b48321deSArnd Bergmann depends on !CPU_V7M 52f2f770d7SSami Tolvanen help 53f2f770d7SSami Tolvanen SHA-256 secure hash standard (DFIPS 180-2) implemented 54f2f770d7SSami Tolvanen using optimized ARM assembler and NEON, when available. 55f2f770d7SSami Tolvanen 56c80ae7caSArd Biesheuvelconfig CRYPTO_SHA512_ARM 57c80ae7caSArd Biesheuvel tristate "SHA-384/512 digest algorithm (ARM-asm and NEON)" 58652ccae5SArd Biesheuvel select CRYPTO_HASH 59c80ae7caSArd Biesheuvel depends on !CPU_V7M 60652ccae5SArd Biesheuvel help 61652ccae5SArd Biesheuvel SHA-512 secure hash standard (DFIPS 180-2) implemented 62c80ae7caSArd Biesheuvel using optimized ARM assembler and NEON, when available. 63652ccae5SArd Biesheuvel 64652ccae5SArd Biesheuvelconfig CRYPTO_AES_ARM 65652ccae5SArd Biesheuvel tristate "AES cipher algorithms (ARM-asm)" 66652ccae5SArd Biesheuvel depends on ARM 67652ccae5SArd Biesheuvel select CRYPTO_ALGAPI 68652ccae5SArd Biesheuvel select CRYPTO_AES 69652ccae5SArd Biesheuvel help 70652ccae5SArd Biesheuvel Use optimized AES assembler routines for ARM platforms. 71652ccae5SArd Biesheuvel 72652ccae5SArd Biesheuvel AES cipher algorithms (FIPS-197). AES uses the Rijndael 73652ccae5SArd Biesheuvel algorithm. 74652ccae5SArd Biesheuvel 75652ccae5SArd Biesheuvel Rijndael appears to be consistently a very good performer in 76652ccae5SArd Biesheuvel both hardware and software across a wide range of computing 77652ccae5SArd Biesheuvel environments regardless of its use in feedback or non-feedback 78652ccae5SArd Biesheuvel modes. Its key setup time is excellent, and its key agility is 79652ccae5SArd Biesheuvel good. Rijndael's very low memory requirements make it very well 80652ccae5SArd Biesheuvel suited for restricted-space environments, in which it also 81652ccae5SArd Biesheuvel demonstrates excellent performance. Rijndael's operations are 82652ccae5SArd Biesheuvel among the easiest to defend against power and timing attacks. 83652ccae5SArd Biesheuvel 84652ccae5SArd Biesheuvel The AES specifies three key sizes: 128, 192 and 256 bits 85652ccae5SArd Biesheuvel 86652ccae5SArd Biesheuvel See <http://csrc.nist.gov/encryption/aes/> for more information. 87652ccae5SArd Biesheuvel 88652ccae5SArd Biesheuvelconfig CRYPTO_AES_ARM_BS 89652ccae5SArd Biesheuvel tristate "Bit sliced AES using NEON instructions" 90652ccae5SArd Biesheuvel depends on KERNEL_MODE_NEON 91652ccae5SArd Biesheuvel select CRYPTO_AES_ARM 926fdf436fSHerbert Xu select CRYPTO_BLKCIPHER 936fdf436fSHerbert Xu select CRYPTO_SIMD 94652ccae5SArd Biesheuvel help 95652ccae5SArd Biesheuvel Use a faster and more secure NEON based implementation of AES in CBC, 96652ccae5SArd Biesheuvel CTR and XTS modes 97652ccae5SArd Biesheuvel 98652ccae5SArd Biesheuvel Bit sliced AES gives around 45% speedup on Cortex-A15 for CTR mode 99652ccae5SArd Biesheuvel and for XTS mode encryption, CBC and XTS mode decryption speedup is 100652ccae5SArd Biesheuvel around 25%. (CBC encryption speed is not affected by this driver.) 101652ccae5SArd Biesheuvel This implementation does not rely on any lookup tables so it is 102652ccae5SArd Biesheuvel believed to be invulnerable to cache timing attacks. 103652ccae5SArd Biesheuvel 10486464859SArd Biesheuvelconfig CRYPTO_AES_ARM_CE 10586464859SArd Biesheuvel tristate "Accelerated AES using ARMv8 Crypto Extensions" 10686464859SArd Biesheuvel depends on KERNEL_MODE_NEON 1076fdf436fSHerbert Xu select CRYPTO_BLKCIPHER 108585b5fa6SHerbert Xu select CRYPTO_SIMD 10986464859SArd Biesheuvel help 11086464859SArd Biesheuvel Use an implementation of AES in CBC, CTR and XTS modes that uses 11186464859SArd Biesheuvel ARMv8 Crypto Extensions 11286464859SArd Biesheuvel 113f1e866b1SArd Biesheuvelconfig CRYPTO_GHASH_ARM_CE 114f1e866b1SArd Biesheuvel tristate "PMULL-accelerated GHASH using ARMv8 Crypto Extensions" 115f1e866b1SArd Biesheuvel depends on KERNEL_MODE_NEON 116f1e866b1SArd Biesheuvel select CRYPTO_HASH 117f1e866b1SArd Biesheuvel select CRYPTO_CRYPTD 118f1e866b1SArd Biesheuvel help 119f1e866b1SArd Biesheuvel Use an implementation of GHASH (used by the GCM AEAD chaining mode) 120f1e866b1SArd Biesheuvel that uses the 64x64 to 128 bit polynomial multiplication (vmull.p64) 121f1e866b1SArd Biesheuvel that is part of the ARMv8 Crypto Extensions 122f1e866b1SArd Biesheuvel 1231d481f1cSArd Biesheuvelconfig CRYPTO_CRCT10DIF_ARM_CE 1241d481f1cSArd Biesheuvel tristate "CRCT10DIF digest algorithm using PMULL instructions" 1251d481f1cSArd Biesheuvel depends on KERNEL_MODE_NEON && CRC_T10DIF 1261d481f1cSArd Biesheuvel select CRYPTO_HASH 1271d481f1cSArd Biesheuvel 128*d0a3431aSArd Biesheuvelconfig CRYPTO_CRC32_ARM_CE 129*d0a3431aSArd Biesheuvel tristate "CRC32(C) digest algorithm using CRC and/or PMULL instructions" 130*d0a3431aSArd Biesheuvel depends on KERNEL_MODE_NEON && CRC32 131*d0a3431aSArd Biesheuvel select CRYPTO_HASH 132*d0a3431aSArd Biesheuvel 133652ccae5SArd Biesheuvelendif 134