xref: /linux/crypto/Kconfig (revision 604682551aa511e00e57706ad5d9fcf955ee0323)
11da177e4SLinus Torvalds#
2685784aaSDan Williams# Generic algorithms support
3685784aaSDan Williams#
4685784aaSDan Williamsconfig XOR_BLOCKS
5685784aaSDan Williams	tristate
6685784aaSDan Williams
7685784aaSDan Williams#
89bc89cd8SDan Williams# async_tx api: hardware offloaded memory transfer/transform support
99bc89cd8SDan Williams#
109bc89cd8SDan Williamssource "crypto/async_tx/Kconfig"
119bc89cd8SDan Williams
129bc89cd8SDan Williams#
131da177e4SLinus Torvalds# Cryptographic API Configuration
141da177e4SLinus Torvalds#
152e290f43SJan Engelhardtmenuconfig CRYPTO
16c3715cb9SSebastian Siewior	tristate "Cryptographic API"
171da177e4SLinus Torvalds	help
181da177e4SLinus Torvalds	  This option provides the core Cryptographic API.
191da177e4SLinus Torvalds
20cce9e06dSHerbert Xuif CRYPTO
21cce9e06dSHerbert Xu
22584fffc8SSebastian Siewiorcomment "Crypto core or helper"
23584fffc8SSebastian Siewior
24ccb778e1SNeil Hormanconfig CRYPTO_FIPS
25ccb778e1SNeil Horman	bool "FIPS 200 compliance"
26e84c5480SChuck Ebbert	depends on CRYPTO_ANSI_CPRNG && !CRYPTO_MANAGER_DISABLE_TESTS
27ccb778e1SNeil Horman	help
28ccb778e1SNeil Horman	  This options enables the fips boot option which is
29ccb778e1SNeil Horman	  required if you want to system to operate in a FIPS 200
30ccb778e1SNeil Horman	  certification.  You should say no unless you know what
31e84c5480SChuck Ebbert	  this is.
32ccb778e1SNeil Horman
33cce9e06dSHerbert Xuconfig CRYPTO_ALGAPI
34cce9e06dSHerbert Xu	tristate
356a0fcbb4SHerbert Xu	select CRYPTO_ALGAPI2
36cce9e06dSHerbert Xu	help
37cce9e06dSHerbert Xu	  This option provides the API for cryptographic algorithms.
38cce9e06dSHerbert Xu
396a0fcbb4SHerbert Xuconfig CRYPTO_ALGAPI2
406a0fcbb4SHerbert Xu	tristate
416a0fcbb4SHerbert Xu
421ae97820SHerbert Xuconfig CRYPTO_AEAD
431ae97820SHerbert Xu	tristate
446a0fcbb4SHerbert Xu	select CRYPTO_AEAD2
451ae97820SHerbert Xu	select CRYPTO_ALGAPI
461ae97820SHerbert Xu
476a0fcbb4SHerbert Xuconfig CRYPTO_AEAD2
486a0fcbb4SHerbert Xu	tristate
496a0fcbb4SHerbert Xu	select CRYPTO_ALGAPI2
506a0fcbb4SHerbert Xu
515cde0af2SHerbert Xuconfig CRYPTO_BLKCIPHER
525cde0af2SHerbert Xu	tristate
536a0fcbb4SHerbert Xu	select CRYPTO_BLKCIPHER2
545cde0af2SHerbert Xu	select CRYPTO_ALGAPI
556a0fcbb4SHerbert Xu
566a0fcbb4SHerbert Xuconfig CRYPTO_BLKCIPHER2
576a0fcbb4SHerbert Xu	tristate
586a0fcbb4SHerbert Xu	select CRYPTO_ALGAPI2
596a0fcbb4SHerbert Xu	select CRYPTO_RNG2
600a2e821dSHuang Ying	select CRYPTO_WORKQUEUE
615cde0af2SHerbert Xu
62055bcee3SHerbert Xuconfig CRYPTO_HASH
63055bcee3SHerbert Xu	tristate
646a0fcbb4SHerbert Xu	select CRYPTO_HASH2
65055bcee3SHerbert Xu	select CRYPTO_ALGAPI
66055bcee3SHerbert Xu
676a0fcbb4SHerbert Xuconfig CRYPTO_HASH2
686a0fcbb4SHerbert Xu	tristate
696a0fcbb4SHerbert Xu	select CRYPTO_ALGAPI2
706a0fcbb4SHerbert Xu
7117f0f4a4SNeil Hormanconfig CRYPTO_RNG
7217f0f4a4SNeil Horman	tristate
736a0fcbb4SHerbert Xu	select CRYPTO_RNG2
7417f0f4a4SNeil Horman	select CRYPTO_ALGAPI
7517f0f4a4SNeil Horman
766a0fcbb4SHerbert Xuconfig CRYPTO_RNG2
776a0fcbb4SHerbert Xu	tristate
786a0fcbb4SHerbert Xu	select CRYPTO_ALGAPI2
796a0fcbb4SHerbert Xu
80a1d2f095SGeert Uytterhoevenconfig CRYPTO_PCOMP
81a1d2f095SGeert Uytterhoeven	tristate
82bc94e596SHerbert Xu	select CRYPTO_PCOMP2
83bc94e596SHerbert Xu	select CRYPTO_ALGAPI
84bc94e596SHerbert Xu
85bc94e596SHerbert Xuconfig CRYPTO_PCOMP2
86bc94e596SHerbert Xu	tristate
87a1d2f095SGeert Uytterhoeven	select CRYPTO_ALGAPI2
88a1d2f095SGeert Uytterhoeven
892b8c19dbSHerbert Xuconfig CRYPTO_MANAGER
902b8c19dbSHerbert Xu	tristate "Cryptographic algorithm manager"
916a0fcbb4SHerbert Xu	select CRYPTO_MANAGER2
922b8c19dbSHerbert Xu	help
932b8c19dbSHerbert Xu	  Create default cryptographic template instantiations such as
942b8c19dbSHerbert Xu	  cbc(aes).
952b8c19dbSHerbert Xu
966a0fcbb4SHerbert Xuconfig CRYPTO_MANAGER2
976a0fcbb4SHerbert Xu	def_tristate CRYPTO_MANAGER || (CRYPTO_MANAGER!=n && CRYPTO_ALGAPI=y)
986a0fcbb4SHerbert Xu	select CRYPTO_AEAD2
996a0fcbb4SHerbert Xu	select CRYPTO_HASH2
1006a0fcbb4SHerbert Xu	select CRYPTO_BLKCIPHER2
101bc94e596SHerbert Xu	select CRYPTO_PCOMP2
1026a0fcbb4SHerbert Xu
103a38f7907SSteffen Klassertconfig CRYPTO_USER
104a38f7907SSteffen Klassert	tristate "Userspace cryptographic algorithm configuration"
1055db017aaSHerbert Xu	depends on NET
106a38f7907SSteffen Klassert	select CRYPTO_MANAGER
107a38f7907SSteffen Klassert	help
108d19978f5SValdis.Kletnieks@vt.edu	  Userspace configuration for cryptographic instantiations such as
109a38f7907SSteffen Klassert	  cbc(aes).
110a38f7907SSteffen Klassert
111326a6346SHerbert Xuconfig CRYPTO_MANAGER_DISABLE_TESTS
112326a6346SHerbert Xu	bool "Disable run-time self tests"
11300ca28a5SHerbert Xu	default y
11400ca28a5SHerbert Xu	depends on CRYPTO_MANAGER2
1150b767f96SAlexander Shishkin	help
116326a6346SHerbert Xu	  Disable run-time self tests that normally take place at
117326a6346SHerbert Xu	  algorithm registration.
1180b767f96SAlexander Shishkin
119584fffc8SSebastian Siewiorconfig CRYPTO_GF128MUL
12008c70fc3SJussi Kivilinna	tristate "GF(2^128) multiplication functions"
121584fffc8SSebastian Siewior	help
122584fffc8SSebastian Siewior	  Efficient table driven implementation of multiplications in the
123584fffc8SSebastian Siewior	  field GF(2^128).  This is needed by some cypher modes. This
124584fffc8SSebastian Siewior	  option will be selected automatically if you select such a
125584fffc8SSebastian Siewior	  cipher mode.  Only select this option by hand if you expect to load
126584fffc8SSebastian Siewior	  an external module that requires these functions.
127584fffc8SSebastian Siewior
128584fffc8SSebastian Siewiorconfig CRYPTO_NULL
129584fffc8SSebastian Siewior	tristate "Null algorithms"
130584fffc8SSebastian Siewior	select CRYPTO_ALGAPI
131584fffc8SSebastian Siewior	select CRYPTO_BLKCIPHER
132d35d2454SHerbert Xu	select CRYPTO_HASH
133584fffc8SSebastian Siewior	help
134584fffc8SSebastian Siewior	  These are 'Null' algorithms, used by IPsec, which do nothing.
135584fffc8SSebastian Siewior
1365068c7a8SSteffen Klassertconfig CRYPTO_PCRYPT
1373b4afaf2SKees Cook	tristate "Parallel crypto engine"
1383b4afaf2SKees Cook	depends on SMP
1395068c7a8SSteffen Klassert	select PADATA
1405068c7a8SSteffen Klassert	select CRYPTO_MANAGER
1415068c7a8SSteffen Klassert	select CRYPTO_AEAD
1425068c7a8SSteffen Klassert	help
1435068c7a8SSteffen Klassert	  This converts an arbitrary crypto algorithm into a parallel
1445068c7a8SSteffen Klassert	  algorithm that executes in kernel threads.
1455068c7a8SSteffen Klassert
14625c38d3fSHuang Yingconfig CRYPTO_WORKQUEUE
14725c38d3fSHuang Ying       tristate
14825c38d3fSHuang Ying
149584fffc8SSebastian Siewiorconfig CRYPTO_CRYPTD
150584fffc8SSebastian Siewior	tristate "Software async crypto daemon"
151584fffc8SSebastian Siewior	select CRYPTO_BLKCIPHER
152b8a28251SLoc Ho	select CRYPTO_HASH
153584fffc8SSebastian Siewior	select CRYPTO_MANAGER
154254eff77SHuang Ying	select CRYPTO_WORKQUEUE
155584fffc8SSebastian Siewior	help
156584fffc8SSebastian Siewior	  This is a generic software asynchronous crypto daemon that
157584fffc8SSebastian Siewior	  converts an arbitrary synchronous software crypto algorithm
158584fffc8SSebastian Siewior	  into an asynchronous algorithm that executes in a kernel thread.
159584fffc8SSebastian Siewior
160584fffc8SSebastian Siewiorconfig CRYPTO_AUTHENC
161584fffc8SSebastian Siewior	tristate "Authenc support"
162584fffc8SSebastian Siewior	select CRYPTO_AEAD
163584fffc8SSebastian Siewior	select CRYPTO_BLKCIPHER
164584fffc8SSebastian Siewior	select CRYPTO_MANAGER
165584fffc8SSebastian Siewior	select CRYPTO_HASH
166584fffc8SSebastian Siewior	help
167584fffc8SSebastian Siewior	  Authenc: Combined mode wrapper for IPsec.
168584fffc8SSebastian Siewior	  This is required for IPSec.
169584fffc8SSebastian Siewior
170584fffc8SSebastian Siewiorconfig CRYPTO_TEST
171584fffc8SSebastian Siewior	tristate "Testing module"
172584fffc8SSebastian Siewior	depends on m
173da7f033dSHerbert Xu	select CRYPTO_MANAGER
174584fffc8SSebastian Siewior	help
175584fffc8SSebastian Siewior	  Quick & dirty crypto test module.
176584fffc8SSebastian Siewior
177a62b01cdSArd Biesheuvelconfig CRYPTO_ABLK_HELPER
178ffaf9156SJussi Kivilinna	tristate
179ffaf9156SJussi Kivilinna	select CRYPTO_CRYPTD
180ffaf9156SJussi Kivilinna
181596d8750SJussi Kivilinnaconfig CRYPTO_GLUE_HELPER_X86
182596d8750SJussi Kivilinna	tristate
183596d8750SJussi Kivilinna	depends on X86
184596d8750SJussi Kivilinna	select CRYPTO_ALGAPI
185596d8750SJussi Kivilinna
186584fffc8SSebastian Siewiorcomment "Authenticated Encryption with Associated Data"
187584fffc8SSebastian Siewior
188584fffc8SSebastian Siewiorconfig CRYPTO_CCM
189584fffc8SSebastian Siewior	tristate "CCM support"
190584fffc8SSebastian Siewior	select CRYPTO_CTR
191584fffc8SSebastian Siewior	select CRYPTO_AEAD
192584fffc8SSebastian Siewior	help
193584fffc8SSebastian Siewior	  Support for Counter with CBC MAC. Required for IPsec.
194584fffc8SSebastian Siewior
195584fffc8SSebastian Siewiorconfig CRYPTO_GCM
196584fffc8SSebastian Siewior	tristate "GCM/GMAC support"
197584fffc8SSebastian Siewior	select CRYPTO_CTR
198584fffc8SSebastian Siewior	select CRYPTO_AEAD
1999382d97aSHuang Ying	select CRYPTO_GHASH
2009489667dSJussi Kivilinna	select CRYPTO_NULL
201584fffc8SSebastian Siewior	help
202584fffc8SSebastian Siewior	  Support for Galois/Counter Mode (GCM) and Galois Message
203584fffc8SSebastian Siewior	  Authentication Code (GMAC). Required for IPSec.
204584fffc8SSebastian Siewior
205584fffc8SSebastian Siewiorconfig CRYPTO_SEQIV
206584fffc8SSebastian Siewior	tristate "Sequence Number IV Generator"
207584fffc8SSebastian Siewior	select CRYPTO_AEAD
208584fffc8SSebastian Siewior	select CRYPTO_BLKCIPHER
209a0f000ecSHerbert Xu	select CRYPTO_RNG
210584fffc8SSebastian Siewior	help
211584fffc8SSebastian Siewior	  This IV generator generates an IV based on a sequence number by
212584fffc8SSebastian Siewior	  xoring it with a salt.  This algorithm is mainly useful for CTR
213584fffc8SSebastian Siewior
214584fffc8SSebastian Siewiorcomment "Block modes"
215584fffc8SSebastian Siewior
216584fffc8SSebastian Siewiorconfig CRYPTO_CBC
217584fffc8SSebastian Siewior	tristate "CBC support"
218584fffc8SSebastian Siewior	select CRYPTO_BLKCIPHER
219584fffc8SSebastian Siewior	select CRYPTO_MANAGER
220584fffc8SSebastian Siewior	help
221584fffc8SSebastian Siewior	  CBC: Cipher Block Chaining mode
222584fffc8SSebastian Siewior	  This block cipher algorithm is required for IPSec.
223584fffc8SSebastian Siewior
224584fffc8SSebastian Siewiorconfig CRYPTO_CTR
225584fffc8SSebastian Siewior	tristate "CTR support"
226584fffc8SSebastian Siewior	select CRYPTO_BLKCIPHER
227584fffc8SSebastian Siewior	select CRYPTO_SEQIV
228584fffc8SSebastian Siewior	select CRYPTO_MANAGER
229584fffc8SSebastian Siewior	help
230584fffc8SSebastian Siewior	  CTR: Counter mode
231584fffc8SSebastian Siewior	  This block cipher algorithm is required for IPSec.
232584fffc8SSebastian Siewior
233584fffc8SSebastian Siewiorconfig CRYPTO_CTS
234584fffc8SSebastian Siewior	tristate "CTS support"
235584fffc8SSebastian Siewior	select CRYPTO_BLKCIPHER
236584fffc8SSebastian Siewior	help
237584fffc8SSebastian Siewior	  CTS: Cipher Text Stealing
238584fffc8SSebastian Siewior	  This is the Cipher Text Stealing mode as described by
239584fffc8SSebastian Siewior	  Section 8 of rfc2040 and referenced by rfc3962.
240584fffc8SSebastian Siewior	  (rfc3962 includes errata information in its Appendix A)
241584fffc8SSebastian Siewior	  This mode is required for Kerberos gss mechanism support
242584fffc8SSebastian Siewior	  for AES encryption.
243584fffc8SSebastian Siewior
244584fffc8SSebastian Siewiorconfig CRYPTO_ECB
245584fffc8SSebastian Siewior	tristate "ECB support"
246584fffc8SSebastian Siewior	select CRYPTO_BLKCIPHER
247584fffc8SSebastian Siewior	select CRYPTO_MANAGER
248584fffc8SSebastian Siewior	help
249584fffc8SSebastian Siewior	  ECB: Electronic CodeBook mode
250584fffc8SSebastian Siewior	  This is the simplest block cipher algorithm.  It simply encrypts
251584fffc8SSebastian Siewior	  the input block by block.
252584fffc8SSebastian Siewior
253584fffc8SSebastian Siewiorconfig CRYPTO_LRW
2542470a2b2SJussi Kivilinna	tristate "LRW support"
255584fffc8SSebastian Siewior	select CRYPTO_BLKCIPHER
256584fffc8SSebastian Siewior	select CRYPTO_MANAGER
257584fffc8SSebastian Siewior	select CRYPTO_GF128MUL
258584fffc8SSebastian Siewior	help
259584fffc8SSebastian Siewior	  LRW: Liskov Rivest Wagner, a tweakable, non malleable, non movable
260584fffc8SSebastian Siewior	  narrow block cipher mode for dm-crypt.  Use it with cipher
261584fffc8SSebastian Siewior	  specification string aes-lrw-benbi, the key must be 256, 320 or 384.
262584fffc8SSebastian Siewior	  The first 128, 192 or 256 bits in the key are used for AES and the
263584fffc8SSebastian Siewior	  rest is used to tie each cipher block to its logical position.
264584fffc8SSebastian Siewior
265584fffc8SSebastian Siewiorconfig CRYPTO_PCBC
266584fffc8SSebastian Siewior	tristate "PCBC support"
267584fffc8SSebastian Siewior	select CRYPTO_BLKCIPHER
268584fffc8SSebastian Siewior	select CRYPTO_MANAGER
269584fffc8SSebastian Siewior	help
270584fffc8SSebastian Siewior	  PCBC: Propagating Cipher Block Chaining mode
271584fffc8SSebastian Siewior	  This block cipher algorithm is required for RxRPC.
272584fffc8SSebastian Siewior
273584fffc8SSebastian Siewiorconfig CRYPTO_XTS
2745bcf8e6dSJussi Kivilinna	tristate "XTS support"
275584fffc8SSebastian Siewior	select CRYPTO_BLKCIPHER
276584fffc8SSebastian Siewior	select CRYPTO_MANAGER
277584fffc8SSebastian Siewior	select CRYPTO_GF128MUL
278584fffc8SSebastian Siewior	help
279584fffc8SSebastian Siewior	  XTS: IEEE1619/D16 narrow block cipher use with aes-xts-plain,
280584fffc8SSebastian Siewior	  key size 256, 384 or 512 bits. This implementation currently
281584fffc8SSebastian Siewior	  can't handle a sectorsize which is not a multiple of 16 bytes.
282584fffc8SSebastian Siewior
283584fffc8SSebastian Siewiorcomment "Hash modes"
284584fffc8SSebastian Siewior
28593b5e86aSJussi Kivilinnaconfig CRYPTO_CMAC
28693b5e86aSJussi Kivilinna	tristate "CMAC support"
28793b5e86aSJussi Kivilinna	select CRYPTO_HASH
28893b5e86aSJussi Kivilinna	select CRYPTO_MANAGER
28993b5e86aSJussi Kivilinna	help
29093b5e86aSJussi Kivilinna	  Cipher-based Message Authentication Code (CMAC) specified by
29193b5e86aSJussi Kivilinna	  The National Institute of Standards and Technology (NIST).
29293b5e86aSJussi Kivilinna
29393b5e86aSJussi Kivilinna	  https://tools.ietf.org/html/rfc4493
29493b5e86aSJussi Kivilinna	  http://csrc.nist.gov/publications/nistpubs/800-38B/SP_800-38B.pdf
29593b5e86aSJussi Kivilinna
2961da177e4SLinus Torvaldsconfig CRYPTO_HMAC
2978425165dSHerbert Xu	tristate "HMAC support"
2980796ae06SHerbert Xu	select CRYPTO_HASH
29943518407SHerbert Xu	select CRYPTO_MANAGER
3001da177e4SLinus Torvalds	help
3011da177e4SLinus Torvalds	  HMAC: Keyed-Hashing for Message Authentication (RFC2104).
3021da177e4SLinus Torvalds	  This is required for IPSec.
3031da177e4SLinus Torvalds
304333b0d7eSKazunori MIYAZAWAconfig CRYPTO_XCBC
305333b0d7eSKazunori MIYAZAWA	tristate "XCBC support"
306333b0d7eSKazunori MIYAZAWA	select CRYPTO_HASH
307333b0d7eSKazunori MIYAZAWA	select CRYPTO_MANAGER
308333b0d7eSKazunori MIYAZAWA	help
309333b0d7eSKazunori MIYAZAWA	  XCBC: Keyed-Hashing with encryption algorithm
310333b0d7eSKazunori MIYAZAWA		http://www.ietf.org/rfc/rfc3566.txt
311333b0d7eSKazunori MIYAZAWA		http://csrc.nist.gov/encryption/modes/proposedmodes/
312333b0d7eSKazunori MIYAZAWA		 xcbc-mac/xcbc-mac-spec.pdf
313333b0d7eSKazunori MIYAZAWA
314f1939f7cSShane Wangconfig CRYPTO_VMAC
315f1939f7cSShane Wang	tristate "VMAC support"
316f1939f7cSShane Wang	select CRYPTO_HASH
317f1939f7cSShane Wang	select CRYPTO_MANAGER
318f1939f7cSShane Wang	help
319f1939f7cSShane Wang	  VMAC is a message authentication algorithm designed for
320f1939f7cSShane Wang	  very high speed on 64-bit architectures.
321f1939f7cSShane Wang
322f1939f7cSShane Wang	  See also:
323f1939f7cSShane Wang	  <http://fastcrypto.org/vmac>
324f1939f7cSShane Wang
325584fffc8SSebastian Siewiorcomment "Digest"
326584fffc8SSebastian Siewior
327584fffc8SSebastian Siewiorconfig CRYPTO_CRC32C
328584fffc8SSebastian Siewior	tristate "CRC32c CRC algorithm"
3295773a3e6SHerbert Xu	select CRYPTO_HASH
3306a0962b2SDarrick J. Wong	select CRC32
3311da177e4SLinus Torvalds	help
332584fffc8SSebastian Siewior	  Castagnoli, et al Cyclic Redundancy-Check Algorithm.  Used
333584fffc8SSebastian Siewior	  by iSCSI for header and data digests and by others.
33469c35efcSHerbert Xu	  See Castagnoli93.  Module will be crc32c.
3351da177e4SLinus Torvalds
3368cb51ba8SAustin Zhangconfig CRYPTO_CRC32C_INTEL
3378cb51ba8SAustin Zhang	tristate "CRC32c INTEL hardware acceleration"
3388cb51ba8SAustin Zhang	depends on X86
3398cb51ba8SAustin Zhang	select CRYPTO_HASH
3408cb51ba8SAustin Zhang	help
3418cb51ba8SAustin Zhang	  In Intel processor with SSE4.2 supported, the processor will
3428cb51ba8SAustin Zhang	  support CRC32C implementation using hardware accelerated CRC32
3438cb51ba8SAustin Zhang	  instruction. This option will create 'crc32c-intel' module,
3448cb51ba8SAustin Zhang	  which will enable any routine to use the CRC32 instruction to
3458cb51ba8SAustin Zhang	  gain performance compared with software implementation.
3468cb51ba8SAustin Zhang	  Module will be crc32c-intel.
3478cb51ba8SAustin Zhang
348442a7c40SDavid S. Millerconfig CRYPTO_CRC32C_SPARC64
349442a7c40SDavid S. Miller	tristate "CRC32c CRC algorithm (SPARC64)"
350442a7c40SDavid S. Miller	depends on SPARC64
351442a7c40SDavid S. Miller	select CRYPTO_HASH
352442a7c40SDavid S. Miller	select CRC32
353442a7c40SDavid S. Miller	help
354442a7c40SDavid S. Miller	  CRC32c CRC algorithm implemented using sparc64 crypto instructions,
355442a7c40SDavid S. Miller	  when available.
356442a7c40SDavid S. Miller
35778c37d19SAlexander Boykoconfig CRYPTO_CRC32
35878c37d19SAlexander Boyko	tristate "CRC32 CRC algorithm"
35978c37d19SAlexander Boyko	select CRYPTO_HASH
36078c37d19SAlexander Boyko	select CRC32
36178c37d19SAlexander Boyko	help
36278c37d19SAlexander Boyko	  CRC-32-IEEE 802.3 cyclic redundancy-check algorithm.
36378c37d19SAlexander Boyko	  Shash crypto api wrappers to crc32_le function.
36478c37d19SAlexander Boyko
36578c37d19SAlexander Boykoconfig CRYPTO_CRC32_PCLMUL
36678c37d19SAlexander Boyko	tristate "CRC32 PCLMULQDQ hardware acceleration"
36778c37d19SAlexander Boyko	depends on X86
36878c37d19SAlexander Boyko	select CRYPTO_HASH
36978c37d19SAlexander Boyko	select CRC32
37078c37d19SAlexander Boyko	help
37178c37d19SAlexander Boyko	  From Intel Westmere and AMD Bulldozer processor with SSE4.2
37278c37d19SAlexander Boyko	  and PCLMULQDQ supported, the processor will support
37378c37d19SAlexander Boyko	  CRC32 PCLMULQDQ implementation using hardware accelerated PCLMULQDQ
37478c37d19SAlexander Boyko	  instruction. This option will create 'crc32-plcmul' module,
37578c37d19SAlexander Boyko	  which will enable any routine to use the CRC-32-IEEE 802.3 checksum
37678c37d19SAlexander Boyko	  and gain better performance as compared with the table implementation.
37778c37d19SAlexander Boyko
37868411521SHerbert Xuconfig CRYPTO_CRCT10DIF
37968411521SHerbert Xu	tristate "CRCT10DIF algorithm"
38068411521SHerbert Xu	select CRYPTO_HASH
38168411521SHerbert Xu	help
38268411521SHerbert Xu	  CRC T10 Data Integrity Field computation is being cast as
38368411521SHerbert Xu	  a crypto transform.  This allows for faster crc t10 diff
38468411521SHerbert Xu	  transforms to be used if they are available.
38568411521SHerbert Xu
38668411521SHerbert Xuconfig CRYPTO_CRCT10DIF_PCLMUL
38768411521SHerbert Xu	tristate "CRCT10DIF PCLMULQDQ hardware acceleration"
38868411521SHerbert Xu	depends on X86 && 64BIT && CRC_T10DIF
38968411521SHerbert Xu	select CRYPTO_HASH
39068411521SHerbert Xu	help
39168411521SHerbert Xu	  For x86_64 processors with SSE4.2 and PCLMULQDQ supported,
39268411521SHerbert Xu	  CRC T10 DIF PCLMULQDQ computation can be hardware
39368411521SHerbert Xu	  accelerated PCLMULQDQ instruction. This option will create
39468411521SHerbert Xu	  'crct10dif-plcmul' module, which is faster when computing the
39568411521SHerbert Xu	  crct10dif checksum as compared with the generic table implementation.
39668411521SHerbert Xu
3972cdc6899SHuang Yingconfig CRYPTO_GHASH
3982cdc6899SHuang Ying	tristate "GHASH digest algorithm"
3992cdc6899SHuang Ying	select CRYPTO_GF128MUL
4002cdc6899SHuang Ying	help
4012cdc6899SHuang Ying	  GHASH is message digest algorithm for GCM (Galois/Counter Mode).
4022cdc6899SHuang Ying
4031da177e4SLinus Torvaldsconfig CRYPTO_MD4
4041da177e4SLinus Torvalds	tristate "MD4 digest algorithm"
405808a1763SAdrian-Ken Rueegsegger	select CRYPTO_HASH
4061da177e4SLinus Torvalds	help
4071da177e4SLinus Torvalds	  MD4 message digest algorithm (RFC1320).
4081da177e4SLinus Torvalds
4091da177e4SLinus Torvaldsconfig CRYPTO_MD5
4101da177e4SLinus Torvalds	tristate "MD5 digest algorithm"
41114b75ba7SAdrian-Ken Rueegsegger	select CRYPTO_HASH
4121da177e4SLinus Torvalds	help
4131da177e4SLinus Torvalds	  MD5 message digest algorithm (RFC1321).
4141da177e4SLinus Torvalds
415fa4dfedcSDavid S. Millerconfig CRYPTO_MD5_SPARC64
416fa4dfedcSDavid S. Miller	tristate "MD5 digest algorithm (SPARC64)"
417fa4dfedcSDavid S. Miller	depends on SPARC64
418fa4dfedcSDavid S. Miller	select CRYPTO_MD5
419fa4dfedcSDavid S. Miller	select CRYPTO_HASH
420fa4dfedcSDavid S. Miller	help
421fa4dfedcSDavid S. Miller	  MD5 message digest algorithm (RFC1321) implemented
422fa4dfedcSDavid S. Miller	  using sparc64 crypto instructions, when available.
423fa4dfedcSDavid S. Miller
424584fffc8SSebastian Siewiorconfig CRYPTO_MICHAEL_MIC
425584fffc8SSebastian Siewior	tristate "Michael MIC keyed digest algorithm"
42619e2bf14SAdrian-Ken Rueegsegger	select CRYPTO_HASH
427584fffc8SSebastian Siewior	help
428584fffc8SSebastian Siewior	  Michael MIC is used for message integrity protection in TKIP
429584fffc8SSebastian Siewior	  (IEEE 802.11i). This algorithm is required for TKIP, but it
430584fffc8SSebastian Siewior	  should not be used for other purposes because of the weakness
431584fffc8SSebastian Siewior	  of the algorithm.
432584fffc8SSebastian Siewior
43382798f90SAdrian-Ken Rueegseggerconfig CRYPTO_RMD128
43482798f90SAdrian-Ken Rueegsegger	tristate "RIPEMD-128 digest algorithm"
4357c4468bcSHerbert Xu	select CRYPTO_HASH
43682798f90SAdrian-Ken Rueegsegger	help
43782798f90SAdrian-Ken Rueegsegger	  RIPEMD-128 (ISO/IEC 10118-3:2004).
43882798f90SAdrian-Ken Rueegsegger
43982798f90SAdrian-Ken Rueegsegger	  RIPEMD-128 is a 128-bit cryptographic hash function. It should only
44035ed4b35SMichael Witten	  be used as a secure replacement for RIPEMD. For other use cases,
44182798f90SAdrian-Ken Rueegsegger	  RIPEMD-160 should be used.
44282798f90SAdrian-Ken Rueegsegger
44382798f90SAdrian-Ken Rueegsegger	  Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
4446d8de74cSJustin P. Mattock	  See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
44582798f90SAdrian-Ken Rueegsegger
44682798f90SAdrian-Ken Rueegseggerconfig CRYPTO_RMD160
44782798f90SAdrian-Ken Rueegsegger	tristate "RIPEMD-160 digest algorithm"
448e5835fbaSHerbert Xu	select CRYPTO_HASH
44982798f90SAdrian-Ken Rueegsegger	help
45082798f90SAdrian-Ken Rueegsegger	  RIPEMD-160 (ISO/IEC 10118-3:2004).
45182798f90SAdrian-Ken Rueegsegger
45282798f90SAdrian-Ken Rueegsegger	  RIPEMD-160 is a 160-bit cryptographic hash function. It is intended
45382798f90SAdrian-Ken Rueegsegger	  to be used as a secure replacement for the 128-bit hash functions
454b6d44341SAdrian Bunk	  MD4, MD5 and it's predecessor RIPEMD
455b6d44341SAdrian Bunk	  (not to be confused with RIPEMD-128).
45682798f90SAdrian-Ken Rueegsegger
457b6d44341SAdrian Bunk	  It's speed is comparable to SHA1 and there are no known attacks
458b6d44341SAdrian Bunk	  against RIPEMD-160.
459534fe2c1SAdrian-Ken Rueegsegger
460534fe2c1SAdrian-Ken Rueegsegger	  Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
4616d8de74cSJustin P. Mattock	  See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
462534fe2c1SAdrian-Ken Rueegsegger
463534fe2c1SAdrian-Ken Rueegseggerconfig CRYPTO_RMD256
464534fe2c1SAdrian-Ken Rueegsegger	tristate "RIPEMD-256 digest algorithm"
465d8a5e2e9SHerbert Xu	select CRYPTO_HASH
466534fe2c1SAdrian-Ken Rueegsegger	help
467b6d44341SAdrian Bunk	  RIPEMD-256 is an optional extension of RIPEMD-128 with a
468b6d44341SAdrian Bunk	  256 bit hash. It is intended for applications that require
469b6d44341SAdrian Bunk	  longer hash-results, without needing a larger security level
470b6d44341SAdrian Bunk	  (than RIPEMD-128).
471534fe2c1SAdrian-Ken Rueegsegger
472534fe2c1SAdrian-Ken Rueegsegger	  Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
4736d8de74cSJustin P. Mattock	  See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
474534fe2c1SAdrian-Ken Rueegsegger
475534fe2c1SAdrian-Ken Rueegseggerconfig CRYPTO_RMD320
476534fe2c1SAdrian-Ken Rueegsegger	tristate "RIPEMD-320 digest algorithm"
4773b8efb4cSHerbert Xu	select CRYPTO_HASH
478534fe2c1SAdrian-Ken Rueegsegger	help
479b6d44341SAdrian Bunk	  RIPEMD-320 is an optional extension of RIPEMD-160 with a
480b6d44341SAdrian Bunk	  320 bit hash. It is intended for applications that require
481b6d44341SAdrian Bunk	  longer hash-results, without needing a larger security level
482b6d44341SAdrian Bunk	  (than RIPEMD-160).
483534fe2c1SAdrian-Ken Rueegsegger
48482798f90SAdrian-Ken Rueegsegger	  Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
4856d8de74cSJustin P. Mattock	  See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
48682798f90SAdrian-Ken Rueegsegger
4871da177e4SLinus Torvaldsconfig CRYPTO_SHA1
4881da177e4SLinus Torvalds	tristate "SHA1 digest algorithm"
48954ccb367SAdrian-Ken Rueegsegger	select CRYPTO_HASH
4901da177e4SLinus Torvalds	help
4911da177e4SLinus Torvalds	  SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2).
4921da177e4SLinus Torvalds
49366be8951SMathias Krauseconfig CRYPTO_SHA1_SSSE3
4947c1da8d0Schandramouli narayanan	tristate "SHA1 digest algorithm (SSSE3/AVX/AVX2)"
49566be8951SMathias Krause	depends on X86 && 64BIT
49666be8951SMathias Krause	select CRYPTO_SHA1
49766be8951SMathias Krause	select CRYPTO_HASH
49866be8951SMathias Krause	help
49966be8951SMathias Krause	  SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented
50066be8951SMathias Krause	  using Supplemental SSE3 (SSSE3) instructions or Advanced Vector
5017c1da8d0Schandramouli narayanan	  Extensions (AVX/AVX2), when available.
50266be8951SMathias Krause
5038275d1aaSTim Chenconfig CRYPTO_SHA256_SSSE3
5048275d1aaSTim Chen	tristate "SHA256 digest algorithm (SSSE3/AVX/AVX2)"
5058275d1aaSTim Chen	depends on X86 && 64BIT
5068275d1aaSTim Chen	select CRYPTO_SHA256
5078275d1aaSTim Chen	select CRYPTO_HASH
5088275d1aaSTim Chen	help
5098275d1aaSTim Chen	  SHA-256 secure hash standard (DFIPS 180-2) implemented
5108275d1aaSTim Chen	  using Supplemental SSE3 (SSSE3) instructions, or Advanced Vector
5118275d1aaSTim Chen	  Extensions version 1 (AVX1), or Advanced Vector Extensions
5128275d1aaSTim Chen	  version 2 (AVX2) instructions, when available.
5138275d1aaSTim Chen
51487de4579STim Chenconfig CRYPTO_SHA512_SSSE3
51587de4579STim Chen	tristate "SHA512 digest algorithm (SSSE3/AVX/AVX2)"
51687de4579STim Chen	depends on X86 && 64BIT
51787de4579STim Chen	select CRYPTO_SHA512
51887de4579STim Chen	select CRYPTO_HASH
51987de4579STim Chen	help
52087de4579STim Chen	  SHA-512 secure hash standard (DFIPS 180-2) implemented
52187de4579STim Chen	  using Supplemental SSE3 (SSSE3) instructions, or Advanced Vector
52287de4579STim Chen	  Extensions version 1 (AVX1), or Advanced Vector Extensions
52387de4579STim Chen	  version 2 (AVX2) instructions, when available.
52487de4579STim Chen
5254ff28d4cSDavid S. Millerconfig CRYPTO_SHA1_SPARC64
5264ff28d4cSDavid S. Miller	tristate "SHA1 digest algorithm (SPARC64)"
5274ff28d4cSDavid S. Miller	depends on SPARC64
5284ff28d4cSDavid S. Miller	select CRYPTO_SHA1
5294ff28d4cSDavid S. Miller	select CRYPTO_HASH
5304ff28d4cSDavid S. Miller	help
5314ff28d4cSDavid S. Miller	  SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented
5324ff28d4cSDavid S. Miller	  using sparc64 crypto instructions, when available.
5334ff28d4cSDavid S. Miller
534f0be44f4SDavid McCulloughconfig CRYPTO_SHA1_ARM
535f0be44f4SDavid McCullough	tristate "SHA1 digest algorithm (ARM-asm)"
536f0be44f4SDavid McCullough	depends on ARM
537f0be44f4SDavid McCullough	select CRYPTO_SHA1
538f0be44f4SDavid McCullough	select CRYPTO_HASH
539f0be44f4SDavid McCullough	help
540f0be44f4SDavid McCullough	  SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented
541f0be44f4SDavid McCullough	  using optimized ARM assembler.
542f0be44f4SDavid McCullough
543*60468255SJussi Kivilinnaconfig CRYPTO_SHA1_ARM_NEON
544*60468255SJussi Kivilinna	tristate "SHA1 digest algorithm (ARM NEON)"
545*60468255SJussi Kivilinna	depends on ARM && KERNEL_MODE_NEON && !CPU_BIG_ENDIAN
546*60468255SJussi Kivilinna	select CRYPTO_SHA1_ARM
547*60468255SJussi Kivilinna	select CRYPTO_SHA1
548*60468255SJussi Kivilinna	select CRYPTO_HASH
549*60468255SJussi Kivilinna	help
550*60468255SJussi Kivilinna	  SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented
551*60468255SJussi Kivilinna	  using optimized ARM NEON assembly, when NEON instructions are
552*60468255SJussi Kivilinna	  available.
553*60468255SJussi Kivilinna
554323a6bf1SMichael Ellermanconfig CRYPTO_SHA1_PPC
555323a6bf1SMichael Ellerman	tristate "SHA1 digest algorithm (powerpc)"
556323a6bf1SMichael Ellerman	depends on PPC
557323a6bf1SMichael Ellerman	help
558323a6bf1SMichael Ellerman	  This is the powerpc hardware accelerated implementation of the
559323a6bf1SMichael Ellerman	  SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2).
560323a6bf1SMichael Ellerman
5611da177e4SLinus Torvaldsconfig CRYPTO_SHA256
562cd12fb90SJonathan Lynch	tristate "SHA224 and SHA256 digest algorithm"
56350e109b5SAdrian-Ken Rueegsegger	select CRYPTO_HASH
5641da177e4SLinus Torvalds	help
5651da177e4SLinus Torvalds	  SHA256 secure hash standard (DFIPS 180-2).
5661da177e4SLinus Torvalds
5671da177e4SLinus Torvalds	  This version of SHA implements a 256 bit hash with 128 bits of
5681da177e4SLinus Torvalds	  security against collision attacks.
5691da177e4SLinus Torvalds
570cd12fb90SJonathan Lynch	  This code also includes SHA-224, a 224 bit hash with 112 bits
571cd12fb90SJonathan Lynch	  of security against collision attacks.
572cd12fb90SJonathan Lynch
57386c93b24SDavid S. Millerconfig CRYPTO_SHA256_SPARC64
57486c93b24SDavid S. Miller	tristate "SHA224 and SHA256 digest algorithm (SPARC64)"
57586c93b24SDavid S. Miller	depends on SPARC64
57686c93b24SDavid S. Miller	select CRYPTO_SHA256
57786c93b24SDavid S. Miller	select CRYPTO_HASH
57886c93b24SDavid S. Miller	help
57986c93b24SDavid S. Miller	  SHA-256 secure hash standard (DFIPS 180-2) implemented
58086c93b24SDavid S. Miller	  using sparc64 crypto instructions, when available.
58186c93b24SDavid S. Miller
5821da177e4SLinus Torvaldsconfig CRYPTO_SHA512
5831da177e4SLinus Torvalds	tristate "SHA384 and SHA512 digest algorithms"
584bd9d20dbSAdrian-Ken Rueegsegger	select CRYPTO_HASH
5851da177e4SLinus Torvalds	help
5861da177e4SLinus Torvalds	  SHA512 secure hash standard (DFIPS 180-2).
5871da177e4SLinus Torvalds
5881da177e4SLinus Torvalds	  This version of SHA implements a 512 bit hash with 256 bits of
5891da177e4SLinus Torvalds	  security against collision attacks.
5901da177e4SLinus Torvalds
5911da177e4SLinus Torvalds	  This code also includes SHA-384, a 384 bit hash with 192 bits
5921da177e4SLinus Torvalds	  of security against collision attacks.
5931da177e4SLinus Torvalds
594775e0c69SDavid S. Millerconfig CRYPTO_SHA512_SPARC64
595775e0c69SDavid S. Miller	tristate "SHA384 and SHA512 digest algorithm (SPARC64)"
596775e0c69SDavid S. Miller	depends on SPARC64
597775e0c69SDavid S. Miller	select CRYPTO_SHA512
598775e0c69SDavid S. Miller	select CRYPTO_HASH
599775e0c69SDavid S. Miller	help
600775e0c69SDavid S. Miller	  SHA-512 secure hash standard (DFIPS 180-2) implemented
601775e0c69SDavid S. Miller	  using sparc64 crypto instructions, when available.
602775e0c69SDavid S. Miller
6031da177e4SLinus Torvaldsconfig CRYPTO_TGR192
6041da177e4SLinus Torvalds	tristate "Tiger digest algorithms"
605f63fbd3dSAdrian-Ken Rueegsegger	select CRYPTO_HASH
6061da177e4SLinus Torvalds	help
6071da177e4SLinus Torvalds	  Tiger hash algorithm 192, 160 and 128-bit hashes
6081da177e4SLinus Torvalds
6091da177e4SLinus Torvalds	  Tiger is a hash function optimized for 64-bit processors while
6101da177e4SLinus Torvalds	  still having decent performance on 32-bit processors.
6111da177e4SLinus Torvalds	  Tiger was developed by Ross Anderson and Eli Biham.
6121da177e4SLinus Torvalds
6131da177e4SLinus Torvalds	  See also:
6141da177e4SLinus Torvalds	  <http://www.cs.technion.ac.il/~biham/Reports/Tiger/>.
6151da177e4SLinus Torvalds
616584fffc8SSebastian Siewiorconfig CRYPTO_WP512
617584fffc8SSebastian Siewior	tristate "Whirlpool digest algorithms"
6184946510bSAdrian-Ken Rueegsegger	select CRYPTO_HASH
6191da177e4SLinus Torvalds	help
620584fffc8SSebastian Siewior	  Whirlpool hash algorithm 512, 384 and 256-bit hashes
6211da177e4SLinus Torvalds
622584fffc8SSebastian Siewior	  Whirlpool-512 is part of the NESSIE cryptographic primitives.
623584fffc8SSebastian Siewior	  Whirlpool will be part of the ISO/IEC 10118-3:2003(E) standard
6241da177e4SLinus Torvalds
6251da177e4SLinus Torvalds	  See also:
6266d8de74cSJustin P. Mattock	  <http://www.larc.usp.br/~pbarreto/WhirlpoolPage.html>
6271da177e4SLinus Torvalds
6280e1227d3SHuang Yingconfig CRYPTO_GHASH_CLMUL_NI_INTEL
6290e1227d3SHuang Ying	tristate "GHASH digest algorithm (CLMUL-NI accelerated)"
6308af00860SRichard Weinberger	depends on X86 && 64BIT
6310e1227d3SHuang Ying	select CRYPTO_CRYPTD
6320e1227d3SHuang Ying	help
6330e1227d3SHuang Ying	  GHASH is message digest algorithm for GCM (Galois/Counter Mode).
6340e1227d3SHuang Ying	  The implementation is accelerated by CLMUL-NI of Intel.
6350e1227d3SHuang Ying
636584fffc8SSebastian Siewiorcomment "Ciphers"
6371da177e4SLinus Torvalds
6381da177e4SLinus Torvaldsconfig CRYPTO_AES
6391da177e4SLinus Torvalds	tristate "AES cipher algorithms"
640cce9e06dSHerbert Xu	select CRYPTO_ALGAPI
6411da177e4SLinus Torvalds	help
6421da177e4SLinus Torvalds	  AES cipher algorithms (FIPS-197). AES uses the Rijndael
6431da177e4SLinus Torvalds	  algorithm.
6441da177e4SLinus Torvalds
6451da177e4SLinus Torvalds	  Rijndael appears to be consistently a very good performer in
6461da177e4SLinus Torvalds	  both hardware and software across a wide range of computing
6471da177e4SLinus Torvalds	  environments regardless of its use in feedback or non-feedback
6481da177e4SLinus Torvalds	  modes. Its key setup time is excellent, and its key agility is
6491da177e4SLinus Torvalds	  good. Rijndael's very low memory requirements make it very well
6501da177e4SLinus Torvalds	  suited for restricted-space environments, in which it also
6511da177e4SLinus Torvalds	  demonstrates excellent performance. Rijndael's operations are
6521da177e4SLinus Torvalds	  among the easiest to defend against power and timing attacks.
6531da177e4SLinus Torvalds
6541da177e4SLinus Torvalds	  The AES specifies three key sizes: 128, 192 and 256 bits
6551da177e4SLinus Torvalds
6561da177e4SLinus Torvalds	  See <http://csrc.nist.gov/CryptoToolkit/aes/> for more information.
6571da177e4SLinus Torvalds
6581da177e4SLinus Torvaldsconfig CRYPTO_AES_586
6591da177e4SLinus Torvalds	tristate "AES cipher algorithms (i586)"
660cce9e06dSHerbert Xu	depends on (X86 || UML_X86) && !64BIT
661cce9e06dSHerbert Xu	select CRYPTO_ALGAPI
6625157dea8SSebastian Siewior	select CRYPTO_AES
6631da177e4SLinus Torvalds	help
6641da177e4SLinus Torvalds	  AES cipher algorithms (FIPS-197). AES uses the Rijndael
6651da177e4SLinus Torvalds	  algorithm.
6661da177e4SLinus Torvalds
6671da177e4SLinus Torvalds	  Rijndael appears to be consistently a very good performer in
6681da177e4SLinus Torvalds	  both hardware and software across a wide range of computing
6691da177e4SLinus Torvalds	  environments regardless of its use in feedback or non-feedback
6701da177e4SLinus Torvalds	  modes. Its key setup time is excellent, and its key agility is
6711da177e4SLinus Torvalds	  good. Rijndael's very low memory requirements make it very well
6721da177e4SLinus Torvalds	  suited for restricted-space environments, in which it also
6731da177e4SLinus Torvalds	  demonstrates excellent performance. Rijndael's operations are
6741da177e4SLinus Torvalds	  among the easiest to defend against power and timing attacks.
6751da177e4SLinus Torvalds
6761da177e4SLinus Torvalds	  The AES specifies three key sizes: 128, 192 and 256 bits
6771da177e4SLinus Torvalds
6781da177e4SLinus Torvalds	  See <http://csrc.nist.gov/encryption/aes/> for more information.
6791da177e4SLinus Torvalds
680a2a892a2SAndreas Steinmetzconfig CRYPTO_AES_X86_64
681a2a892a2SAndreas Steinmetz	tristate "AES cipher algorithms (x86_64)"
682cce9e06dSHerbert Xu	depends on (X86 || UML_X86) && 64BIT
683cce9e06dSHerbert Xu	select CRYPTO_ALGAPI
68481190b32SSebastian Siewior	select CRYPTO_AES
685a2a892a2SAndreas Steinmetz	help
686a2a892a2SAndreas Steinmetz	  AES cipher algorithms (FIPS-197). AES uses the Rijndael
687a2a892a2SAndreas Steinmetz	  algorithm.
688a2a892a2SAndreas Steinmetz
689a2a892a2SAndreas Steinmetz	  Rijndael appears to be consistently a very good performer in
690a2a892a2SAndreas Steinmetz	  both hardware and software across a wide range of computing
691a2a892a2SAndreas Steinmetz	  environments regardless of its use in feedback or non-feedback
692a2a892a2SAndreas Steinmetz	  modes. Its key setup time is excellent, and its key agility is
693a2a892a2SAndreas Steinmetz	  good. Rijndael's very low memory requirements make it very well
694a2a892a2SAndreas Steinmetz	  suited for restricted-space environments, in which it also
695a2a892a2SAndreas Steinmetz	  demonstrates excellent performance. Rijndael's operations are
696a2a892a2SAndreas Steinmetz	  among the easiest to defend against power and timing attacks.
697a2a892a2SAndreas Steinmetz
698a2a892a2SAndreas Steinmetz	  The AES specifies three key sizes: 128, 192 and 256 bits
699a2a892a2SAndreas Steinmetz
700a2a892a2SAndreas Steinmetz	  See <http://csrc.nist.gov/encryption/aes/> for more information.
701a2a892a2SAndreas Steinmetz
70254b6a1bdSHuang Yingconfig CRYPTO_AES_NI_INTEL
70354b6a1bdSHuang Ying	tristate "AES cipher algorithms (AES-NI)"
7048af00860SRichard Weinberger	depends on X86
7050d258efbSMathias Krause	select CRYPTO_AES_X86_64 if 64BIT
7060d258efbSMathias Krause	select CRYPTO_AES_586 if !64BIT
70754b6a1bdSHuang Ying	select CRYPTO_CRYPTD
708801201aaSArd Biesheuvel	select CRYPTO_ABLK_HELPER
70954b6a1bdSHuang Ying	select CRYPTO_ALGAPI
7107643a11aSJussi Kivilinna	select CRYPTO_GLUE_HELPER_X86 if 64BIT
711023af608SJussi Kivilinna	select CRYPTO_LRW
712023af608SJussi Kivilinna	select CRYPTO_XTS
71354b6a1bdSHuang Ying	help
71454b6a1bdSHuang Ying	  Use Intel AES-NI instructions for AES algorithm.
71554b6a1bdSHuang Ying
71654b6a1bdSHuang Ying	  AES cipher algorithms (FIPS-197). AES uses the Rijndael
71754b6a1bdSHuang Ying	  algorithm.
71854b6a1bdSHuang Ying
71954b6a1bdSHuang Ying	  Rijndael appears to be consistently a very good performer in
72054b6a1bdSHuang Ying	  both hardware and software across a wide range of computing
72154b6a1bdSHuang Ying	  environments regardless of its use in feedback or non-feedback
72254b6a1bdSHuang Ying	  modes. Its key setup time is excellent, and its key agility is
72354b6a1bdSHuang Ying	  good. Rijndael's very low memory requirements make it very well
72454b6a1bdSHuang Ying	  suited for restricted-space environments, in which it also
72554b6a1bdSHuang Ying	  demonstrates excellent performance. Rijndael's operations are
72654b6a1bdSHuang Ying	  among the easiest to defend against power and timing attacks.
72754b6a1bdSHuang Ying
72854b6a1bdSHuang Ying	  The AES specifies three key sizes: 128, 192 and 256 bits
72954b6a1bdSHuang Ying
73054b6a1bdSHuang Ying	  See <http://csrc.nist.gov/encryption/aes/> for more information.
73154b6a1bdSHuang Ying
7320d258efbSMathias Krause	  In addition to AES cipher algorithm support, the acceleration
7330d258efbSMathias Krause	  for some popular block cipher mode is supported too, including
7340d258efbSMathias Krause	  ECB, CBC, LRW, PCBC, XTS. The 64 bit version has additional
7350d258efbSMathias Krause	  acceleration for CTR.
7362cf4ac8bSHuang Ying
7379bf4852dSDavid S. Millerconfig CRYPTO_AES_SPARC64
7389bf4852dSDavid S. Miller	tristate "AES cipher algorithms (SPARC64)"
7399bf4852dSDavid S. Miller	depends on SPARC64
7409bf4852dSDavid S. Miller	select CRYPTO_CRYPTD
7419bf4852dSDavid S. Miller	select CRYPTO_ALGAPI
7429bf4852dSDavid S. Miller	help
7439bf4852dSDavid S. Miller	  Use SPARC64 crypto opcodes for AES algorithm.
7449bf4852dSDavid S. Miller
7459bf4852dSDavid S. Miller	  AES cipher algorithms (FIPS-197). AES uses the Rijndael
7469bf4852dSDavid S. Miller	  algorithm.
7479bf4852dSDavid S. Miller
7489bf4852dSDavid S. Miller	  Rijndael appears to be consistently a very good performer in
7499bf4852dSDavid S. Miller	  both hardware and software across a wide range of computing
7509bf4852dSDavid S. Miller	  environments regardless of its use in feedback or non-feedback
7519bf4852dSDavid S. Miller	  modes. Its key setup time is excellent, and its key agility is
7529bf4852dSDavid S. Miller	  good. Rijndael's very low memory requirements make it very well
7539bf4852dSDavid S. Miller	  suited for restricted-space environments, in which it also
7549bf4852dSDavid S. Miller	  demonstrates excellent performance. Rijndael's operations are
7559bf4852dSDavid S. Miller	  among the easiest to defend against power and timing attacks.
7569bf4852dSDavid S. Miller
7579bf4852dSDavid S. Miller	  The AES specifies three key sizes: 128, 192 and 256 bits
7589bf4852dSDavid S. Miller
7599bf4852dSDavid S. Miller	  See <http://csrc.nist.gov/encryption/aes/> for more information.
7609bf4852dSDavid S. Miller
7619bf4852dSDavid S. Miller	  In addition to AES cipher algorithm support, the acceleration
7629bf4852dSDavid S. Miller	  for some popular block cipher mode is supported too, including
7639bf4852dSDavid S. Miller	  ECB and CBC.
7649bf4852dSDavid S. Miller
765f0be44f4SDavid McCulloughconfig CRYPTO_AES_ARM
766f0be44f4SDavid McCullough	tristate "AES cipher algorithms (ARM-asm)"
767f0be44f4SDavid McCullough	depends on ARM
768f0be44f4SDavid McCullough	select CRYPTO_ALGAPI
769f0be44f4SDavid McCullough	select CRYPTO_AES
770f0be44f4SDavid McCullough	help
771f0be44f4SDavid McCullough	  Use optimized AES assembler routines for ARM platforms.
772f0be44f4SDavid McCullough
773f0be44f4SDavid McCullough	  AES cipher algorithms (FIPS-197). AES uses the Rijndael
774f0be44f4SDavid McCullough	  algorithm.
775f0be44f4SDavid McCullough
776f0be44f4SDavid McCullough	  Rijndael appears to be consistently a very good performer in
777f0be44f4SDavid McCullough	  both hardware and software across a wide range of computing
778f0be44f4SDavid McCullough	  environments regardless of its use in feedback or non-feedback
779f0be44f4SDavid McCullough	  modes. Its key setup time is excellent, and its key agility is
780f0be44f4SDavid McCullough	  good. Rijndael's very low memory requirements make it very well
781f0be44f4SDavid McCullough	  suited for restricted-space environments, in which it also
782f0be44f4SDavid McCullough	  demonstrates excellent performance. Rijndael's operations are
783f0be44f4SDavid McCullough	  among the easiest to defend against power and timing attacks.
784f0be44f4SDavid McCullough
785f0be44f4SDavid McCullough	  The AES specifies three key sizes: 128, 192 and 256 bits
786f0be44f4SDavid McCullough
787f0be44f4SDavid McCullough	  See <http://csrc.nist.gov/encryption/aes/> for more information.
788f0be44f4SDavid McCullough
789e4e7f10bSArd Biesheuvelconfig CRYPTO_AES_ARM_BS
790e4e7f10bSArd Biesheuvel	tristate "Bit sliced AES using NEON instructions"
791e4e7f10bSArd Biesheuvel	depends on ARM && KERNEL_MODE_NEON
792e4e7f10bSArd Biesheuvel	select CRYPTO_ALGAPI
793e4e7f10bSArd Biesheuvel	select CRYPTO_AES_ARM
794e4e7f10bSArd Biesheuvel	select CRYPTO_ABLK_HELPER
795e4e7f10bSArd Biesheuvel	help
796e4e7f10bSArd Biesheuvel	  Use a faster and more secure NEON based implementation of AES in CBC,
797e4e7f10bSArd Biesheuvel	  CTR and XTS modes
798e4e7f10bSArd Biesheuvel
799e4e7f10bSArd Biesheuvel	  Bit sliced AES gives around 45% speedup on Cortex-A15 for CTR mode
800e4e7f10bSArd Biesheuvel	  and for XTS mode encryption, CBC and XTS mode decryption speedup is
801e4e7f10bSArd Biesheuvel	  around 25%. (CBC encryption speed is not affected by this driver.)
802e4e7f10bSArd Biesheuvel	  This implementation does not rely on any lookup tables so it is
803e4e7f10bSArd Biesheuvel	  believed to be invulnerable to cache timing attacks.
804e4e7f10bSArd Biesheuvel
8051da177e4SLinus Torvaldsconfig CRYPTO_ANUBIS
8061da177e4SLinus Torvalds	tristate "Anubis cipher algorithm"
807cce9e06dSHerbert Xu	select CRYPTO_ALGAPI
8081da177e4SLinus Torvalds	help
8091da177e4SLinus Torvalds	  Anubis cipher algorithm.
8101da177e4SLinus Torvalds
8111da177e4SLinus Torvalds	  Anubis is a variable key length cipher which can use keys from
8121da177e4SLinus Torvalds	  128 bits to 320 bits in length.  It was evaluated as a entrant
8131da177e4SLinus Torvalds	  in the NESSIE competition.
8141da177e4SLinus Torvalds
8151da177e4SLinus Torvalds	  See also:
8166d8de74cSJustin P. Mattock	  <https://www.cosic.esat.kuleuven.be/nessie/reports/>
8176d8de74cSJustin P. Mattock	  <http://www.larc.usp.br/~pbarreto/AnubisPage.html>
8181da177e4SLinus Torvalds
819584fffc8SSebastian Siewiorconfig CRYPTO_ARC4
820584fffc8SSebastian Siewior	tristate "ARC4 cipher algorithm"
821b9b0f080SSebastian Andrzej Siewior	select CRYPTO_BLKCIPHER
822e2ee95b8SHye-Shik Chang	help
823584fffc8SSebastian Siewior	  ARC4 cipher algorithm.
824e2ee95b8SHye-Shik Chang
825584fffc8SSebastian Siewior	  ARC4 is a stream cipher using keys ranging from 8 bits to 2048
826584fffc8SSebastian Siewior	  bits in length.  This algorithm is required for driver-based
827584fffc8SSebastian Siewior	  WEP, but it should not be for other purposes because of the
828584fffc8SSebastian Siewior	  weakness of the algorithm.
829584fffc8SSebastian Siewior
830584fffc8SSebastian Siewiorconfig CRYPTO_BLOWFISH
831584fffc8SSebastian Siewior	tristate "Blowfish cipher algorithm"
832584fffc8SSebastian Siewior	select CRYPTO_ALGAPI
83352ba867cSJussi Kivilinna	select CRYPTO_BLOWFISH_COMMON
834584fffc8SSebastian Siewior	help
835584fffc8SSebastian Siewior	  Blowfish cipher algorithm, by Bruce Schneier.
836584fffc8SSebastian Siewior
837584fffc8SSebastian Siewior	  This is a variable key length cipher which can use keys from 32
838584fffc8SSebastian Siewior	  bits to 448 bits in length.  It's fast, simple and specifically
839584fffc8SSebastian Siewior	  designed for use on "large microprocessors".
840e2ee95b8SHye-Shik Chang
841e2ee95b8SHye-Shik Chang	  See also:
842584fffc8SSebastian Siewior	  <http://www.schneier.com/blowfish.html>
843584fffc8SSebastian Siewior
84452ba867cSJussi Kivilinnaconfig CRYPTO_BLOWFISH_COMMON
84552ba867cSJussi Kivilinna	tristate
84652ba867cSJussi Kivilinna	help
84752ba867cSJussi Kivilinna	  Common parts of the Blowfish cipher algorithm shared by the
84852ba867cSJussi Kivilinna	  generic c and the assembler implementations.
84952ba867cSJussi Kivilinna
85052ba867cSJussi Kivilinna	  See also:
85152ba867cSJussi Kivilinna	  <http://www.schneier.com/blowfish.html>
85252ba867cSJussi Kivilinna
85364b94ceaSJussi Kivilinnaconfig CRYPTO_BLOWFISH_X86_64
85464b94ceaSJussi Kivilinna	tristate "Blowfish cipher algorithm (x86_64)"
855f21a7c19SAl Viro	depends on X86 && 64BIT
85664b94ceaSJussi Kivilinna	select CRYPTO_ALGAPI
85764b94ceaSJussi Kivilinna	select CRYPTO_BLOWFISH_COMMON
85864b94ceaSJussi Kivilinna	help
85964b94ceaSJussi Kivilinna	  Blowfish cipher algorithm (x86_64), by Bruce Schneier.
86064b94ceaSJussi Kivilinna
86164b94ceaSJussi Kivilinna	  This is a variable key length cipher which can use keys from 32
86264b94ceaSJussi Kivilinna	  bits to 448 bits in length.  It's fast, simple and specifically
86364b94ceaSJussi Kivilinna	  designed for use on "large microprocessors".
86464b94ceaSJussi Kivilinna
86564b94ceaSJussi Kivilinna	  See also:
86664b94ceaSJussi Kivilinna	  <http://www.schneier.com/blowfish.html>
86764b94ceaSJussi Kivilinna
868584fffc8SSebastian Siewiorconfig CRYPTO_CAMELLIA
869584fffc8SSebastian Siewior	tristate "Camellia cipher algorithms"
870584fffc8SSebastian Siewior	depends on CRYPTO
871584fffc8SSebastian Siewior	select CRYPTO_ALGAPI
872584fffc8SSebastian Siewior	help
873584fffc8SSebastian Siewior	  Camellia cipher algorithms module.
874584fffc8SSebastian Siewior
875584fffc8SSebastian Siewior	  Camellia is a symmetric key block cipher developed jointly
876584fffc8SSebastian Siewior	  at NTT and Mitsubishi Electric Corporation.
877584fffc8SSebastian Siewior
878584fffc8SSebastian Siewior	  The Camellia specifies three key sizes: 128, 192 and 256 bits.
879584fffc8SSebastian Siewior
880584fffc8SSebastian Siewior	  See also:
881584fffc8SSebastian Siewior	  <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
882584fffc8SSebastian Siewior
8830b95ec56SJussi Kivilinnaconfig CRYPTO_CAMELLIA_X86_64
8840b95ec56SJussi Kivilinna	tristate "Camellia cipher algorithm (x86_64)"
885f21a7c19SAl Viro	depends on X86 && 64BIT
8860b95ec56SJussi Kivilinna	depends on CRYPTO
8870b95ec56SJussi Kivilinna	select CRYPTO_ALGAPI
888964263afSJussi Kivilinna	select CRYPTO_GLUE_HELPER_X86
8890b95ec56SJussi Kivilinna	select CRYPTO_LRW
8900b95ec56SJussi Kivilinna	select CRYPTO_XTS
8910b95ec56SJussi Kivilinna	help
8920b95ec56SJussi Kivilinna	  Camellia cipher algorithm module (x86_64).
8930b95ec56SJussi Kivilinna
8940b95ec56SJussi Kivilinna	  Camellia is a symmetric key block cipher developed jointly
8950b95ec56SJussi Kivilinna	  at NTT and Mitsubishi Electric Corporation.
8960b95ec56SJussi Kivilinna
8970b95ec56SJussi Kivilinna	  The Camellia specifies three key sizes: 128, 192 and 256 bits.
8980b95ec56SJussi Kivilinna
8990b95ec56SJussi Kivilinna	  See also:
9000b95ec56SJussi Kivilinna	  <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
9010b95ec56SJussi Kivilinna
902d9b1d2e7SJussi Kivilinnaconfig CRYPTO_CAMELLIA_AESNI_AVX_X86_64
903d9b1d2e7SJussi Kivilinna	tristate "Camellia cipher algorithm (x86_64/AES-NI/AVX)"
904d9b1d2e7SJussi Kivilinna	depends on X86 && 64BIT
905d9b1d2e7SJussi Kivilinna	depends on CRYPTO
906d9b1d2e7SJussi Kivilinna	select CRYPTO_ALGAPI
907d9b1d2e7SJussi Kivilinna	select CRYPTO_CRYPTD
908801201aaSArd Biesheuvel	select CRYPTO_ABLK_HELPER
909d9b1d2e7SJussi Kivilinna	select CRYPTO_GLUE_HELPER_X86
910d9b1d2e7SJussi Kivilinna	select CRYPTO_CAMELLIA_X86_64
911d9b1d2e7SJussi Kivilinna	select CRYPTO_LRW
912d9b1d2e7SJussi Kivilinna	select CRYPTO_XTS
913d9b1d2e7SJussi Kivilinna	help
914d9b1d2e7SJussi Kivilinna	  Camellia cipher algorithm module (x86_64/AES-NI/AVX).
915d9b1d2e7SJussi Kivilinna
916d9b1d2e7SJussi Kivilinna	  Camellia is a symmetric key block cipher developed jointly
917d9b1d2e7SJussi Kivilinna	  at NTT and Mitsubishi Electric Corporation.
918d9b1d2e7SJussi Kivilinna
919d9b1d2e7SJussi Kivilinna	  The Camellia specifies three key sizes: 128, 192 and 256 bits.
920d9b1d2e7SJussi Kivilinna
921d9b1d2e7SJussi Kivilinna	  See also:
922d9b1d2e7SJussi Kivilinna	  <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
923d9b1d2e7SJussi Kivilinna
924f3f935a7SJussi Kivilinnaconfig CRYPTO_CAMELLIA_AESNI_AVX2_X86_64
925f3f935a7SJussi Kivilinna	tristate "Camellia cipher algorithm (x86_64/AES-NI/AVX2)"
926f3f935a7SJussi Kivilinna	depends on X86 && 64BIT
927f3f935a7SJussi Kivilinna	depends on CRYPTO
928f3f935a7SJussi Kivilinna	select CRYPTO_ALGAPI
929f3f935a7SJussi Kivilinna	select CRYPTO_CRYPTD
930801201aaSArd Biesheuvel	select CRYPTO_ABLK_HELPER
931f3f935a7SJussi Kivilinna	select CRYPTO_GLUE_HELPER_X86
932f3f935a7SJussi Kivilinna	select CRYPTO_CAMELLIA_X86_64
933f3f935a7SJussi Kivilinna	select CRYPTO_CAMELLIA_AESNI_AVX_X86_64
934f3f935a7SJussi Kivilinna	select CRYPTO_LRW
935f3f935a7SJussi Kivilinna	select CRYPTO_XTS
936f3f935a7SJussi Kivilinna	help
937f3f935a7SJussi Kivilinna	  Camellia cipher algorithm module (x86_64/AES-NI/AVX2).
938f3f935a7SJussi Kivilinna
939f3f935a7SJussi Kivilinna	  Camellia is a symmetric key block cipher developed jointly
940f3f935a7SJussi Kivilinna	  at NTT and Mitsubishi Electric Corporation.
941f3f935a7SJussi Kivilinna
942f3f935a7SJussi Kivilinna	  The Camellia specifies three key sizes: 128, 192 and 256 bits.
943f3f935a7SJussi Kivilinna
944f3f935a7SJussi Kivilinna	  See also:
945f3f935a7SJussi Kivilinna	  <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
946f3f935a7SJussi Kivilinna
94781658ad0SDavid S. Millerconfig CRYPTO_CAMELLIA_SPARC64
94881658ad0SDavid S. Miller	tristate "Camellia cipher algorithm (SPARC64)"
94981658ad0SDavid S. Miller	depends on SPARC64
95081658ad0SDavid S. Miller	depends on CRYPTO
95181658ad0SDavid S. Miller	select CRYPTO_ALGAPI
95281658ad0SDavid S. Miller	help
95381658ad0SDavid S. Miller	  Camellia cipher algorithm module (SPARC64).
95481658ad0SDavid S. Miller
95581658ad0SDavid S. Miller	  Camellia is a symmetric key block cipher developed jointly
95681658ad0SDavid S. Miller	  at NTT and Mitsubishi Electric Corporation.
95781658ad0SDavid S. Miller
95881658ad0SDavid S. Miller	  The Camellia specifies three key sizes: 128, 192 and 256 bits.
95981658ad0SDavid S. Miller
96081658ad0SDavid S. Miller	  See also:
96181658ad0SDavid S. Miller	  <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
96281658ad0SDavid S. Miller
963044ab525SJussi Kivilinnaconfig CRYPTO_CAST_COMMON
964044ab525SJussi Kivilinna	tristate
965044ab525SJussi Kivilinna	help
966044ab525SJussi Kivilinna	  Common parts of the CAST cipher algorithms shared by the
967044ab525SJussi Kivilinna	  generic c and the assembler implementations.
968044ab525SJussi Kivilinna
969584fffc8SSebastian Siewiorconfig CRYPTO_CAST5
970584fffc8SSebastian Siewior	tristate "CAST5 (CAST-128) cipher algorithm"
971584fffc8SSebastian Siewior	select CRYPTO_ALGAPI
972044ab525SJussi Kivilinna	select CRYPTO_CAST_COMMON
973584fffc8SSebastian Siewior	help
974584fffc8SSebastian Siewior	  The CAST5 encryption algorithm (synonymous with CAST-128) is
975584fffc8SSebastian Siewior	  described in RFC2144.
976584fffc8SSebastian Siewior
9774d6d6a2cSJohannes Goetzfriedconfig CRYPTO_CAST5_AVX_X86_64
9784d6d6a2cSJohannes Goetzfried	tristate "CAST5 (CAST-128) cipher algorithm (x86_64/AVX)"
9794d6d6a2cSJohannes Goetzfried	depends on X86 && 64BIT
9804d6d6a2cSJohannes Goetzfried	select CRYPTO_ALGAPI
9814d6d6a2cSJohannes Goetzfried	select CRYPTO_CRYPTD
982801201aaSArd Biesheuvel	select CRYPTO_ABLK_HELPER
983044ab525SJussi Kivilinna	select CRYPTO_CAST_COMMON
9844d6d6a2cSJohannes Goetzfried	select CRYPTO_CAST5
9854d6d6a2cSJohannes Goetzfried	help
9864d6d6a2cSJohannes Goetzfried	  The CAST5 encryption algorithm (synonymous with CAST-128) is
9874d6d6a2cSJohannes Goetzfried	  described in RFC2144.
9884d6d6a2cSJohannes Goetzfried
9894d6d6a2cSJohannes Goetzfried	  This module provides the Cast5 cipher algorithm that processes
9904d6d6a2cSJohannes Goetzfried	  sixteen blocks parallel using the AVX instruction set.
9914d6d6a2cSJohannes Goetzfried
992584fffc8SSebastian Siewiorconfig CRYPTO_CAST6
993584fffc8SSebastian Siewior	tristate "CAST6 (CAST-256) cipher algorithm"
994584fffc8SSebastian Siewior	select CRYPTO_ALGAPI
995044ab525SJussi Kivilinna	select CRYPTO_CAST_COMMON
996584fffc8SSebastian Siewior	help
997584fffc8SSebastian Siewior	  The CAST6 encryption algorithm (synonymous with CAST-256) is
998584fffc8SSebastian Siewior	  described in RFC2612.
999584fffc8SSebastian Siewior
10004ea1277dSJohannes Goetzfriedconfig CRYPTO_CAST6_AVX_X86_64
10014ea1277dSJohannes Goetzfried	tristate "CAST6 (CAST-256) cipher algorithm (x86_64/AVX)"
10024ea1277dSJohannes Goetzfried	depends on X86 && 64BIT
10034ea1277dSJohannes Goetzfried	select CRYPTO_ALGAPI
10044ea1277dSJohannes Goetzfried	select CRYPTO_CRYPTD
1005801201aaSArd Biesheuvel	select CRYPTO_ABLK_HELPER
10064ea1277dSJohannes Goetzfried	select CRYPTO_GLUE_HELPER_X86
1007044ab525SJussi Kivilinna	select CRYPTO_CAST_COMMON
10084ea1277dSJohannes Goetzfried	select CRYPTO_CAST6
10094ea1277dSJohannes Goetzfried	select CRYPTO_LRW
10104ea1277dSJohannes Goetzfried	select CRYPTO_XTS
10114ea1277dSJohannes Goetzfried	help
10124ea1277dSJohannes Goetzfried	  The CAST6 encryption algorithm (synonymous with CAST-256) is
10134ea1277dSJohannes Goetzfried	  described in RFC2612.
10144ea1277dSJohannes Goetzfried
10154ea1277dSJohannes Goetzfried	  This module provides the Cast6 cipher algorithm that processes
10164ea1277dSJohannes Goetzfried	  eight blocks parallel using the AVX instruction set.
10174ea1277dSJohannes Goetzfried
1018584fffc8SSebastian Siewiorconfig CRYPTO_DES
1019584fffc8SSebastian Siewior	tristate "DES and Triple DES EDE cipher algorithms"
1020584fffc8SSebastian Siewior	select CRYPTO_ALGAPI
1021584fffc8SSebastian Siewior	help
1022584fffc8SSebastian Siewior	  DES cipher algorithm (FIPS 46-2), and Triple DES EDE (FIPS 46-3).
1023584fffc8SSebastian Siewior
1024c5aac2dfSDavid S. Millerconfig CRYPTO_DES_SPARC64
1025c5aac2dfSDavid S. Miller	tristate "DES and Triple DES EDE cipher algorithms (SPARC64)"
102697da37b3SDave Jones	depends on SPARC64
1027c5aac2dfSDavid S. Miller	select CRYPTO_ALGAPI
1028c5aac2dfSDavid S. Miller	select CRYPTO_DES
1029c5aac2dfSDavid S. Miller	help
1030c5aac2dfSDavid S. Miller	  DES cipher algorithm (FIPS 46-2), and Triple DES EDE (FIPS 46-3),
1031c5aac2dfSDavid S. Miller	  optimized using SPARC64 crypto opcodes.
1032c5aac2dfSDavid S. Miller
1033584fffc8SSebastian Siewiorconfig CRYPTO_FCRYPT
1034584fffc8SSebastian Siewior	tristate "FCrypt cipher algorithm"
1035584fffc8SSebastian Siewior	select CRYPTO_ALGAPI
1036584fffc8SSebastian Siewior	select CRYPTO_BLKCIPHER
1037584fffc8SSebastian Siewior	help
1038584fffc8SSebastian Siewior	  FCrypt algorithm used by RxRPC.
1039584fffc8SSebastian Siewior
1040584fffc8SSebastian Siewiorconfig CRYPTO_KHAZAD
1041584fffc8SSebastian Siewior	tristate "Khazad cipher algorithm"
1042584fffc8SSebastian Siewior	select CRYPTO_ALGAPI
1043584fffc8SSebastian Siewior	help
1044584fffc8SSebastian Siewior	  Khazad cipher algorithm.
1045584fffc8SSebastian Siewior
1046584fffc8SSebastian Siewior	  Khazad was a finalist in the initial NESSIE competition.  It is
1047584fffc8SSebastian Siewior	  an algorithm optimized for 64-bit processors with good performance
1048584fffc8SSebastian Siewior	  on 32-bit processors.  Khazad uses an 128 bit key size.
1049584fffc8SSebastian Siewior
1050584fffc8SSebastian Siewior	  See also:
10516d8de74cSJustin P. Mattock	  <http://www.larc.usp.br/~pbarreto/KhazadPage.html>
1052e2ee95b8SHye-Shik Chang
10532407d608STan Swee Hengconfig CRYPTO_SALSA20
10543b4afaf2SKees Cook	tristate "Salsa20 stream cipher algorithm"
10552407d608STan Swee Heng	select CRYPTO_BLKCIPHER
10562407d608STan Swee Heng	help
10572407d608STan Swee Heng	  Salsa20 stream cipher algorithm.
10582407d608STan Swee Heng
10592407d608STan Swee Heng	  Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
10602407d608STan Swee Heng	  Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
10612407d608STan Swee Heng
10622407d608STan Swee Heng	  The Salsa20 stream cipher algorithm is designed by Daniel J.
10632407d608STan Swee Heng	  Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
10641da177e4SLinus Torvalds
1065974e4b75STan Swee Hengconfig CRYPTO_SALSA20_586
10663b4afaf2SKees Cook	tristate "Salsa20 stream cipher algorithm (i586)"
1067974e4b75STan Swee Heng	depends on (X86 || UML_X86) && !64BIT
1068974e4b75STan Swee Heng	select CRYPTO_BLKCIPHER
1069974e4b75STan Swee Heng	help
1070974e4b75STan Swee Heng	  Salsa20 stream cipher algorithm.
1071974e4b75STan Swee Heng
1072974e4b75STan Swee Heng	  Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
1073974e4b75STan Swee Heng	  Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
1074974e4b75STan Swee Heng
1075974e4b75STan Swee Heng	  The Salsa20 stream cipher algorithm is designed by Daniel J.
1076974e4b75STan Swee Heng	  Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
1077974e4b75STan Swee Heng
10789a7dafbbSTan Swee Hengconfig CRYPTO_SALSA20_X86_64
10793b4afaf2SKees Cook	tristate "Salsa20 stream cipher algorithm (x86_64)"
10809a7dafbbSTan Swee Heng	depends on (X86 || UML_X86) && 64BIT
10819a7dafbbSTan Swee Heng	select CRYPTO_BLKCIPHER
10829a7dafbbSTan Swee Heng	help
10839a7dafbbSTan Swee Heng	  Salsa20 stream cipher algorithm.
10849a7dafbbSTan Swee Heng
10859a7dafbbSTan Swee Heng	  Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
10869a7dafbbSTan Swee Heng	  Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
10879a7dafbbSTan Swee Heng
10889a7dafbbSTan Swee Heng	  The Salsa20 stream cipher algorithm is designed by Daniel J.
10899a7dafbbSTan Swee Heng	  Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
10909a7dafbbSTan Swee Heng
1091584fffc8SSebastian Siewiorconfig CRYPTO_SEED
1092584fffc8SSebastian Siewior	tristate "SEED cipher algorithm"
1093584fffc8SSebastian Siewior	select CRYPTO_ALGAPI
1094584fffc8SSebastian Siewior	help
1095584fffc8SSebastian Siewior	  SEED cipher algorithm (RFC4269).
1096584fffc8SSebastian Siewior
1097584fffc8SSebastian Siewior	  SEED is a 128-bit symmetric key block cipher that has been
1098584fffc8SSebastian Siewior	  developed by KISA (Korea Information Security Agency) as a
1099584fffc8SSebastian Siewior	  national standard encryption algorithm of the Republic of Korea.
1100584fffc8SSebastian Siewior	  It is a 16 round block cipher with the key size of 128 bit.
1101584fffc8SSebastian Siewior
1102584fffc8SSebastian Siewior	  See also:
1103584fffc8SSebastian Siewior	  <http://www.kisa.or.kr/kisa/seed/jsp/seed_eng.jsp>
1104584fffc8SSebastian Siewior
1105584fffc8SSebastian Siewiorconfig CRYPTO_SERPENT
1106584fffc8SSebastian Siewior	tristate "Serpent cipher algorithm"
1107584fffc8SSebastian Siewior	select CRYPTO_ALGAPI
1108584fffc8SSebastian Siewior	help
1109584fffc8SSebastian Siewior	  Serpent cipher algorithm, by Anderson, Biham & Knudsen.
1110584fffc8SSebastian Siewior
1111584fffc8SSebastian Siewior	  Keys are allowed to be from 0 to 256 bits in length, in steps
1112584fffc8SSebastian Siewior	  of 8 bits.  Also includes the 'Tnepres' algorithm, a reversed
1113584fffc8SSebastian Siewior	  variant of Serpent for compatibility with old kerneli.org code.
1114584fffc8SSebastian Siewior
1115584fffc8SSebastian Siewior	  See also:
1116584fffc8SSebastian Siewior	  <http://www.cl.cam.ac.uk/~rja14/serpent.html>
1117584fffc8SSebastian Siewior
1118937c30d7SJussi Kivilinnaconfig CRYPTO_SERPENT_SSE2_X86_64
1119937c30d7SJussi Kivilinna	tristate "Serpent cipher algorithm (x86_64/SSE2)"
1120937c30d7SJussi Kivilinna	depends on X86 && 64BIT
1121937c30d7SJussi Kivilinna	select CRYPTO_ALGAPI
1122341975bfSJussi Kivilinna	select CRYPTO_CRYPTD
1123801201aaSArd Biesheuvel	select CRYPTO_ABLK_HELPER
1124596d8750SJussi Kivilinna	select CRYPTO_GLUE_HELPER_X86
1125937c30d7SJussi Kivilinna	select CRYPTO_SERPENT
1126feaf0cfcSJussi Kivilinna	select CRYPTO_LRW
1127feaf0cfcSJussi Kivilinna	select CRYPTO_XTS
1128937c30d7SJussi Kivilinna	help
1129937c30d7SJussi Kivilinna	  Serpent cipher algorithm, by Anderson, Biham & Knudsen.
1130937c30d7SJussi Kivilinna
1131937c30d7SJussi Kivilinna	  Keys are allowed to be from 0 to 256 bits in length, in steps
1132937c30d7SJussi Kivilinna	  of 8 bits.
1133937c30d7SJussi Kivilinna
1134937c30d7SJussi Kivilinna	  This module provides Serpent cipher algorithm that processes eigth
1135937c30d7SJussi Kivilinna	  blocks parallel using SSE2 instruction set.
1136937c30d7SJussi Kivilinna
1137937c30d7SJussi Kivilinna	  See also:
1138937c30d7SJussi Kivilinna	  <http://www.cl.cam.ac.uk/~rja14/serpent.html>
1139937c30d7SJussi Kivilinna
1140251496dbSJussi Kivilinnaconfig CRYPTO_SERPENT_SSE2_586
1141251496dbSJussi Kivilinna	tristate "Serpent cipher algorithm (i586/SSE2)"
1142251496dbSJussi Kivilinna	depends on X86 && !64BIT
1143251496dbSJussi Kivilinna	select CRYPTO_ALGAPI
1144341975bfSJussi Kivilinna	select CRYPTO_CRYPTD
1145801201aaSArd Biesheuvel	select CRYPTO_ABLK_HELPER
1146596d8750SJussi Kivilinna	select CRYPTO_GLUE_HELPER_X86
1147251496dbSJussi Kivilinna	select CRYPTO_SERPENT
1148feaf0cfcSJussi Kivilinna	select CRYPTO_LRW
1149feaf0cfcSJussi Kivilinna	select CRYPTO_XTS
1150251496dbSJussi Kivilinna	help
1151251496dbSJussi Kivilinna	  Serpent cipher algorithm, by Anderson, Biham & Knudsen.
1152251496dbSJussi Kivilinna
1153251496dbSJussi Kivilinna	  Keys are allowed to be from 0 to 256 bits in length, in steps
1154251496dbSJussi Kivilinna	  of 8 bits.
1155251496dbSJussi Kivilinna
1156251496dbSJussi Kivilinna	  This module provides Serpent cipher algorithm that processes four
1157251496dbSJussi Kivilinna	  blocks parallel using SSE2 instruction set.
1158251496dbSJussi Kivilinna
1159251496dbSJussi Kivilinna	  See also:
1160251496dbSJussi Kivilinna	  <http://www.cl.cam.ac.uk/~rja14/serpent.html>
1161251496dbSJussi Kivilinna
11627efe4076SJohannes Goetzfriedconfig CRYPTO_SERPENT_AVX_X86_64
11637efe4076SJohannes Goetzfried	tristate "Serpent cipher algorithm (x86_64/AVX)"
11647efe4076SJohannes Goetzfried	depends on X86 && 64BIT
11657efe4076SJohannes Goetzfried	select CRYPTO_ALGAPI
11667efe4076SJohannes Goetzfried	select CRYPTO_CRYPTD
1167801201aaSArd Biesheuvel	select CRYPTO_ABLK_HELPER
11681d0debbdSJussi Kivilinna	select CRYPTO_GLUE_HELPER_X86
11697efe4076SJohannes Goetzfried	select CRYPTO_SERPENT
11707efe4076SJohannes Goetzfried	select CRYPTO_LRW
11717efe4076SJohannes Goetzfried	select CRYPTO_XTS
11727efe4076SJohannes Goetzfried	help
11737efe4076SJohannes Goetzfried	  Serpent cipher algorithm, by Anderson, Biham & Knudsen.
11747efe4076SJohannes Goetzfried
11757efe4076SJohannes Goetzfried	  Keys are allowed to be from 0 to 256 bits in length, in steps
11767efe4076SJohannes Goetzfried	  of 8 bits.
11777efe4076SJohannes Goetzfried
11787efe4076SJohannes Goetzfried	  This module provides the Serpent cipher algorithm that processes
11797efe4076SJohannes Goetzfried	  eight blocks parallel using the AVX instruction set.
11807efe4076SJohannes Goetzfried
11817efe4076SJohannes Goetzfried	  See also:
11827efe4076SJohannes Goetzfried	  <http://www.cl.cam.ac.uk/~rja14/serpent.html>
11837efe4076SJohannes Goetzfried
118456d76c96SJussi Kivilinnaconfig CRYPTO_SERPENT_AVX2_X86_64
118556d76c96SJussi Kivilinna	tristate "Serpent cipher algorithm (x86_64/AVX2)"
118656d76c96SJussi Kivilinna	depends on X86 && 64BIT
118756d76c96SJussi Kivilinna	select CRYPTO_ALGAPI
118856d76c96SJussi Kivilinna	select CRYPTO_CRYPTD
1189801201aaSArd Biesheuvel	select CRYPTO_ABLK_HELPER
119056d76c96SJussi Kivilinna	select CRYPTO_GLUE_HELPER_X86
119156d76c96SJussi Kivilinna	select CRYPTO_SERPENT
119256d76c96SJussi Kivilinna	select CRYPTO_SERPENT_AVX_X86_64
119356d76c96SJussi Kivilinna	select CRYPTO_LRW
119456d76c96SJussi Kivilinna	select CRYPTO_XTS
119556d76c96SJussi Kivilinna	help
119656d76c96SJussi Kivilinna	  Serpent cipher algorithm, by Anderson, Biham & Knudsen.
119756d76c96SJussi Kivilinna
119856d76c96SJussi Kivilinna	  Keys are allowed to be from 0 to 256 bits in length, in steps
119956d76c96SJussi Kivilinna	  of 8 bits.
120056d76c96SJussi Kivilinna
120156d76c96SJussi Kivilinna	  This module provides Serpent cipher algorithm that processes 16
120256d76c96SJussi Kivilinna	  blocks parallel using AVX2 instruction set.
120356d76c96SJussi Kivilinna
120456d76c96SJussi Kivilinna	  See also:
120556d76c96SJussi Kivilinna	  <http://www.cl.cam.ac.uk/~rja14/serpent.html>
120656d76c96SJussi Kivilinna
1207584fffc8SSebastian Siewiorconfig CRYPTO_TEA
1208584fffc8SSebastian Siewior	tristate "TEA, XTEA and XETA cipher algorithms"
1209584fffc8SSebastian Siewior	select CRYPTO_ALGAPI
1210584fffc8SSebastian Siewior	help
1211584fffc8SSebastian Siewior	  TEA cipher algorithm.
1212584fffc8SSebastian Siewior
1213584fffc8SSebastian Siewior	  Tiny Encryption Algorithm is a simple cipher that uses
1214584fffc8SSebastian Siewior	  many rounds for security.  It is very fast and uses
1215584fffc8SSebastian Siewior	  little memory.
1216584fffc8SSebastian Siewior
1217584fffc8SSebastian Siewior	  Xtendend Tiny Encryption Algorithm is a modification to
1218584fffc8SSebastian Siewior	  the TEA algorithm to address a potential key weakness
1219584fffc8SSebastian Siewior	  in the TEA algorithm.
1220584fffc8SSebastian Siewior
1221584fffc8SSebastian Siewior	  Xtendend Encryption Tiny Algorithm is a mis-implementation
1222584fffc8SSebastian Siewior	  of the XTEA algorithm for compatibility purposes.
1223584fffc8SSebastian Siewior
1224584fffc8SSebastian Siewiorconfig CRYPTO_TWOFISH
1225584fffc8SSebastian Siewior	tristate "Twofish cipher algorithm"
1226584fffc8SSebastian Siewior	select CRYPTO_ALGAPI
1227584fffc8SSebastian Siewior	select CRYPTO_TWOFISH_COMMON
1228584fffc8SSebastian Siewior	help
1229584fffc8SSebastian Siewior	  Twofish cipher algorithm.
1230584fffc8SSebastian Siewior
1231584fffc8SSebastian Siewior	  Twofish was submitted as an AES (Advanced Encryption Standard)
1232584fffc8SSebastian Siewior	  candidate cipher by researchers at CounterPane Systems.  It is a
1233584fffc8SSebastian Siewior	  16 round block cipher supporting key sizes of 128, 192, and 256
1234584fffc8SSebastian Siewior	  bits.
1235584fffc8SSebastian Siewior
1236584fffc8SSebastian Siewior	  See also:
1237584fffc8SSebastian Siewior	  <http://www.schneier.com/twofish.html>
1238584fffc8SSebastian Siewior
1239584fffc8SSebastian Siewiorconfig CRYPTO_TWOFISH_COMMON
1240584fffc8SSebastian Siewior	tristate
1241584fffc8SSebastian Siewior	help
1242584fffc8SSebastian Siewior	  Common parts of the Twofish cipher algorithm shared by the
1243584fffc8SSebastian Siewior	  generic c and the assembler implementations.
1244584fffc8SSebastian Siewior
1245584fffc8SSebastian Siewiorconfig CRYPTO_TWOFISH_586
1246584fffc8SSebastian Siewior	tristate "Twofish cipher algorithms (i586)"
1247584fffc8SSebastian Siewior	depends on (X86 || UML_X86) && !64BIT
1248584fffc8SSebastian Siewior	select CRYPTO_ALGAPI
1249584fffc8SSebastian Siewior	select CRYPTO_TWOFISH_COMMON
1250584fffc8SSebastian Siewior	help
1251584fffc8SSebastian Siewior	  Twofish cipher algorithm.
1252584fffc8SSebastian Siewior
1253584fffc8SSebastian Siewior	  Twofish was submitted as an AES (Advanced Encryption Standard)
1254584fffc8SSebastian Siewior	  candidate cipher by researchers at CounterPane Systems.  It is a
1255584fffc8SSebastian Siewior	  16 round block cipher supporting key sizes of 128, 192, and 256
1256584fffc8SSebastian Siewior	  bits.
1257584fffc8SSebastian Siewior
1258584fffc8SSebastian Siewior	  See also:
1259584fffc8SSebastian Siewior	  <http://www.schneier.com/twofish.html>
1260584fffc8SSebastian Siewior
1261584fffc8SSebastian Siewiorconfig CRYPTO_TWOFISH_X86_64
1262584fffc8SSebastian Siewior	tristate "Twofish cipher algorithm (x86_64)"
1263584fffc8SSebastian Siewior	depends on (X86 || UML_X86) && 64BIT
1264584fffc8SSebastian Siewior	select CRYPTO_ALGAPI
1265584fffc8SSebastian Siewior	select CRYPTO_TWOFISH_COMMON
1266584fffc8SSebastian Siewior	help
1267584fffc8SSebastian Siewior	  Twofish cipher algorithm (x86_64).
1268584fffc8SSebastian Siewior
1269584fffc8SSebastian Siewior	  Twofish was submitted as an AES (Advanced Encryption Standard)
1270584fffc8SSebastian Siewior	  candidate cipher by researchers at CounterPane Systems.  It is a
1271584fffc8SSebastian Siewior	  16 round block cipher supporting key sizes of 128, 192, and 256
1272584fffc8SSebastian Siewior	  bits.
1273584fffc8SSebastian Siewior
1274584fffc8SSebastian Siewior	  See also:
1275584fffc8SSebastian Siewior	  <http://www.schneier.com/twofish.html>
1276584fffc8SSebastian Siewior
12778280daadSJussi Kivilinnaconfig CRYPTO_TWOFISH_X86_64_3WAY
12788280daadSJussi Kivilinna	tristate "Twofish cipher algorithm (x86_64, 3-way parallel)"
1279f21a7c19SAl Viro	depends on X86 && 64BIT
12808280daadSJussi Kivilinna	select CRYPTO_ALGAPI
12818280daadSJussi Kivilinna	select CRYPTO_TWOFISH_COMMON
12828280daadSJussi Kivilinna	select CRYPTO_TWOFISH_X86_64
1283414cb5e7SJussi Kivilinna	select CRYPTO_GLUE_HELPER_X86
1284e7cda5d2SJussi Kivilinna	select CRYPTO_LRW
1285e7cda5d2SJussi Kivilinna	select CRYPTO_XTS
12868280daadSJussi Kivilinna	help
12878280daadSJussi Kivilinna	  Twofish cipher algorithm (x86_64, 3-way parallel).
12888280daadSJussi Kivilinna
12898280daadSJussi Kivilinna	  Twofish was submitted as an AES (Advanced Encryption Standard)
12908280daadSJussi Kivilinna	  candidate cipher by researchers at CounterPane Systems.  It is a
12918280daadSJussi Kivilinna	  16 round block cipher supporting key sizes of 128, 192, and 256
12928280daadSJussi Kivilinna	  bits.
12938280daadSJussi Kivilinna
12948280daadSJussi Kivilinna	  This module provides Twofish cipher algorithm that processes three
12958280daadSJussi Kivilinna	  blocks parallel, utilizing resources of out-of-order CPUs better.
12968280daadSJussi Kivilinna
12978280daadSJussi Kivilinna	  See also:
12988280daadSJussi Kivilinna	  <http://www.schneier.com/twofish.html>
12998280daadSJussi Kivilinna
1300107778b5SJohannes Goetzfriedconfig CRYPTO_TWOFISH_AVX_X86_64
1301107778b5SJohannes Goetzfried	tristate "Twofish cipher algorithm (x86_64/AVX)"
1302107778b5SJohannes Goetzfried	depends on X86 && 64BIT
1303107778b5SJohannes Goetzfried	select CRYPTO_ALGAPI
1304107778b5SJohannes Goetzfried	select CRYPTO_CRYPTD
1305801201aaSArd Biesheuvel	select CRYPTO_ABLK_HELPER
1306a7378d4eSJussi Kivilinna	select CRYPTO_GLUE_HELPER_X86
1307107778b5SJohannes Goetzfried	select CRYPTO_TWOFISH_COMMON
1308107778b5SJohannes Goetzfried	select CRYPTO_TWOFISH_X86_64
1309107778b5SJohannes Goetzfried	select CRYPTO_TWOFISH_X86_64_3WAY
1310107778b5SJohannes Goetzfried	select CRYPTO_LRW
1311107778b5SJohannes Goetzfried	select CRYPTO_XTS
1312107778b5SJohannes Goetzfried	help
1313107778b5SJohannes Goetzfried	  Twofish cipher algorithm (x86_64/AVX).
1314107778b5SJohannes Goetzfried
1315107778b5SJohannes Goetzfried	  Twofish was submitted as an AES (Advanced Encryption Standard)
1316107778b5SJohannes Goetzfried	  candidate cipher by researchers at CounterPane Systems.  It is a
1317107778b5SJohannes Goetzfried	  16 round block cipher supporting key sizes of 128, 192, and 256
1318107778b5SJohannes Goetzfried	  bits.
1319107778b5SJohannes Goetzfried
1320107778b5SJohannes Goetzfried	  This module provides the Twofish cipher algorithm that processes
1321107778b5SJohannes Goetzfried	  eight blocks parallel using the AVX Instruction Set.
1322107778b5SJohannes Goetzfried
1323107778b5SJohannes Goetzfried	  See also:
1324107778b5SJohannes Goetzfried	  <http://www.schneier.com/twofish.html>
1325107778b5SJohannes Goetzfried
1326584fffc8SSebastian Siewiorcomment "Compression"
1327584fffc8SSebastian Siewior
13281da177e4SLinus Torvaldsconfig CRYPTO_DEFLATE
13291da177e4SLinus Torvalds	tristate "Deflate compression algorithm"
1330cce9e06dSHerbert Xu	select CRYPTO_ALGAPI
13311da177e4SLinus Torvalds	select ZLIB_INFLATE
13321da177e4SLinus Torvalds	select ZLIB_DEFLATE
13331da177e4SLinus Torvalds	help
13341da177e4SLinus Torvalds	  This is the Deflate algorithm (RFC1951), specified for use in
13351da177e4SLinus Torvalds	  IPSec with the IPCOMP protocol (RFC3173, RFC2394).
13361da177e4SLinus Torvalds
13371da177e4SLinus Torvalds	  You will most probably want this if using IPSec.
13381da177e4SLinus Torvalds
1339bf68e65eSGeert Uytterhoevenconfig CRYPTO_ZLIB
1340bf68e65eSGeert Uytterhoeven	tristate "Zlib compression algorithm"
1341bf68e65eSGeert Uytterhoeven	select CRYPTO_PCOMP
1342bf68e65eSGeert Uytterhoeven	select ZLIB_INFLATE
1343bf68e65eSGeert Uytterhoeven	select ZLIB_DEFLATE
1344bf68e65eSGeert Uytterhoeven	select NLATTR
1345bf68e65eSGeert Uytterhoeven	help
1346bf68e65eSGeert Uytterhoeven	  This is the zlib algorithm.
1347bf68e65eSGeert Uytterhoeven
13480b77abb3SZoltan Sogorconfig CRYPTO_LZO
13490b77abb3SZoltan Sogor	tristate "LZO compression algorithm"
13500b77abb3SZoltan Sogor	select CRYPTO_ALGAPI
13510b77abb3SZoltan Sogor	select LZO_COMPRESS
13520b77abb3SZoltan Sogor	select LZO_DECOMPRESS
13530b77abb3SZoltan Sogor	help
13540b77abb3SZoltan Sogor	  This is the LZO algorithm.
13550b77abb3SZoltan Sogor
135635a1fc18SSeth Jenningsconfig CRYPTO_842
135735a1fc18SSeth Jennings	tristate "842 compression algorithm"
135835a1fc18SSeth Jennings	depends on CRYPTO_DEV_NX_COMPRESS
135935a1fc18SSeth Jennings	# 842 uses lzo if the hardware becomes unavailable
136035a1fc18SSeth Jennings	select LZO_COMPRESS
136135a1fc18SSeth Jennings	select LZO_DECOMPRESS
136235a1fc18SSeth Jennings	help
136335a1fc18SSeth Jennings	  This is the 842 algorithm.
136435a1fc18SSeth Jennings
13650ea8530dSChanho Minconfig CRYPTO_LZ4
13660ea8530dSChanho Min	tristate "LZ4 compression algorithm"
13670ea8530dSChanho Min	select CRYPTO_ALGAPI
13680ea8530dSChanho Min	select LZ4_COMPRESS
13690ea8530dSChanho Min	select LZ4_DECOMPRESS
13700ea8530dSChanho Min	help
13710ea8530dSChanho Min	  This is the LZ4 algorithm.
13720ea8530dSChanho Min
13730ea8530dSChanho Minconfig CRYPTO_LZ4HC
13740ea8530dSChanho Min	tristate "LZ4HC compression algorithm"
13750ea8530dSChanho Min	select CRYPTO_ALGAPI
13760ea8530dSChanho Min	select LZ4HC_COMPRESS
13770ea8530dSChanho Min	select LZ4_DECOMPRESS
13780ea8530dSChanho Min	help
13790ea8530dSChanho Min	  This is the LZ4 high compression mode algorithm.
13800ea8530dSChanho Min
138117f0f4a4SNeil Hormancomment "Random Number Generation"
138217f0f4a4SNeil Horman
138317f0f4a4SNeil Hormanconfig CRYPTO_ANSI_CPRNG
138417f0f4a4SNeil Horman	tristate "Pseudo Random Number Generation for Cryptographic modules"
13854e4ed83bSNeil Horman	default m
138617f0f4a4SNeil Horman	select CRYPTO_AES
138717f0f4a4SNeil Horman	select CRYPTO_RNG
138817f0f4a4SNeil Horman	help
138917f0f4a4SNeil Horman	  This option enables the generic pseudo random number generator
139017f0f4a4SNeil Horman	  for cryptographic modules.  Uses the Algorithm specified in
13917dd607e8SJiri Kosina	  ANSI X9.31 A.2.4. Note that this option must be enabled if
13927dd607e8SJiri Kosina	  CRYPTO_FIPS is selected
139317f0f4a4SNeil Horman
139403c8efc1SHerbert Xuconfig CRYPTO_USER_API
139503c8efc1SHerbert Xu	tristate
139603c8efc1SHerbert Xu
1397fe869cdbSHerbert Xuconfig CRYPTO_USER_API_HASH
1398fe869cdbSHerbert Xu	tristate "User-space interface for hash algorithms"
13997451708fSHerbert Xu	depends on NET
1400fe869cdbSHerbert Xu	select CRYPTO_HASH
1401fe869cdbSHerbert Xu	select CRYPTO_USER_API
1402fe869cdbSHerbert Xu	help
1403fe869cdbSHerbert Xu	  This option enables the user-spaces interface for hash
1404fe869cdbSHerbert Xu	  algorithms.
1405fe869cdbSHerbert Xu
14068ff59090SHerbert Xuconfig CRYPTO_USER_API_SKCIPHER
14078ff59090SHerbert Xu	tristate "User-space interface for symmetric key cipher algorithms"
14087451708fSHerbert Xu	depends on NET
14098ff59090SHerbert Xu	select CRYPTO_BLKCIPHER
14108ff59090SHerbert Xu	select CRYPTO_USER_API
14118ff59090SHerbert Xu	help
14128ff59090SHerbert Xu	  This option enables the user-spaces interface for symmetric
14138ff59090SHerbert Xu	  key cipher algorithms.
14148ff59090SHerbert Xu
1415ee08997fSDmitry Kasatkinconfig CRYPTO_HASH_INFO
1416ee08997fSDmitry Kasatkin	bool
1417ee08997fSDmitry Kasatkin
14181da177e4SLinus Torvaldssource "drivers/crypto/Kconfig"
1419964f3b3bSDavid Howellssource crypto/asymmetric_keys/Kconfig
14201da177e4SLinus Torvalds
1421cce9e06dSHerbert Xuendif	# if CRYPTO
1422