11da177e4SLinus Torvalds# 2685784aaSDan Williams# Generic algorithms support 3685784aaSDan Williams# 4685784aaSDan Williamsconfig XOR_BLOCKS 5685784aaSDan Williams tristate 6685784aaSDan Williams 7685784aaSDan Williams# 89bc89cd8SDan Williams# async_tx api: hardware offloaded memory transfer/transform support 99bc89cd8SDan Williams# 109bc89cd8SDan Williamssource "crypto/async_tx/Kconfig" 119bc89cd8SDan Williams 129bc89cd8SDan Williams# 131da177e4SLinus Torvalds# Cryptographic API Configuration 141da177e4SLinus Torvalds# 152e290f43SJan Engelhardtmenuconfig CRYPTO 16c3715cb9SSebastian Siewior tristate "Cryptographic API" 171da177e4SLinus Torvalds help 181da177e4SLinus Torvalds This option provides the core Cryptographic API. 191da177e4SLinus Torvalds 20cce9e06dSHerbert Xuif CRYPTO 21cce9e06dSHerbert Xu 22584fffc8SSebastian Siewiorcomment "Crypto core or helper" 23584fffc8SSebastian Siewior 24ccb778e1SNeil Hormanconfig CRYPTO_FIPS 25ccb778e1SNeil Horman bool "FIPS 200 compliance" 26e84c5480SChuck Ebbert depends on CRYPTO_ANSI_CPRNG && !CRYPTO_MANAGER_DISABLE_TESTS 27ccb778e1SNeil Horman help 28ccb778e1SNeil Horman This options enables the fips boot option which is 29ccb778e1SNeil Horman required if you want to system to operate in a FIPS 200 30ccb778e1SNeil Horman certification. You should say no unless you know what 31e84c5480SChuck Ebbert this is. 32ccb778e1SNeil Horman 33cce9e06dSHerbert Xuconfig CRYPTO_ALGAPI 34cce9e06dSHerbert Xu tristate 356a0fcbb4SHerbert Xu select CRYPTO_ALGAPI2 36cce9e06dSHerbert Xu help 37cce9e06dSHerbert Xu This option provides the API for cryptographic algorithms. 38cce9e06dSHerbert Xu 396a0fcbb4SHerbert Xuconfig CRYPTO_ALGAPI2 406a0fcbb4SHerbert Xu tristate 416a0fcbb4SHerbert Xu 421ae97820SHerbert Xuconfig CRYPTO_AEAD 431ae97820SHerbert Xu tristate 446a0fcbb4SHerbert Xu select CRYPTO_AEAD2 451ae97820SHerbert Xu select CRYPTO_ALGAPI 461ae97820SHerbert Xu 476a0fcbb4SHerbert Xuconfig CRYPTO_AEAD2 486a0fcbb4SHerbert Xu tristate 496a0fcbb4SHerbert Xu select CRYPTO_ALGAPI2 506a0fcbb4SHerbert Xu 515cde0af2SHerbert Xuconfig CRYPTO_BLKCIPHER 525cde0af2SHerbert Xu tristate 536a0fcbb4SHerbert Xu select CRYPTO_BLKCIPHER2 545cde0af2SHerbert Xu select CRYPTO_ALGAPI 556a0fcbb4SHerbert Xu 566a0fcbb4SHerbert Xuconfig CRYPTO_BLKCIPHER2 576a0fcbb4SHerbert Xu tristate 586a0fcbb4SHerbert Xu select CRYPTO_ALGAPI2 596a0fcbb4SHerbert Xu select CRYPTO_RNG2 600a2e821dSHuang Ying select CRYPTO_WORKQUEUE 615cde0af2SHerbert Xu 62055bcee3SHerbert Xuconfig CRYPTO_HASH 63055bcee3SHerbert Xu tristate 646a0fcbb4SHerbert Xu select CRYPTO_HASH2 65055bcee3SHerbert Xu select CRYPTO_ALGAPI 66055bcee3SHerbert Xu 676a0fcbb4SHerbert Xuconfig CRYPTO_HASH2 686a0fcbb4SHerbert Xu tristate 696a0fcbb4SHerbert Xu select CRYPTO_ALGAPI2 706a0fcbb4SHerbert Xu 7117f0f4a4SNeil Hormanconfig CRYPTO_RNG 7217f0f4a4SNeil Horman tristate 736a0fcbb4SHerbert Xu select CRYPTO_RNG2 7417f0f4a4SNeil Horman select CRYPTO_ALGAPI 7517f0f4a4SNeil Horman 766a0fcbb4SHerbert Xuconfig CRYPTO_RNG2 776a0fcbb4SHerbert Xu tristate 786a0fcbb4SHerbert Xu select CRYPTO_ALGAPI2 796a0fcbb4SHerbert Xu 80a1d2f095SGeert Uytterhoevenconfig CRYPTO_PCOMP 81a1d2f095SGeert Uytterhoeven tristate 82bc94e596SHerbert Xu select CRYPTO_PCOMP2 83bc94e596SHerbert Xu select CRYPTO_ALGAPI 84bc94e596SHerbert Xu 85bc94e596SHerbert Xuconfig CRYPTO_PCOMP2 86bc94e596SHerbert Xu tristate 87a1d2f095SGeert Uytterhoeven select CRYPTO_ALGAPI2 88a1d2f095SGeert Uytterhoeven 892b8c19dbSHerbert Xuconfig CRYPTO_MANAGER 902b8c19dbSHerbert Xu tristate "Cryptographic algorithm manager" 916a0fcbb4SHerbert Xu select CRYPTO_MANAGER2 922b8c19dbSHerbert Xu help 932b8c19dbSHerbert Xu Create default cryptographic template instantiations such as 942b8c19dbSHerbert Xu cbc(aes). 952b8c19dbSHerbert Xu 966a0fcbb4SHerbert Xuconfig CRYPTO_MANAGER2 976a0fcbb4SHerbert Xu def_tristate CRYPTO_MANAGER || (CRYPTO_MANAGER!=n && CRYPTO_ALGAPI=y) 986a0fcbb4SHerbert Xu select CRYPTO_AEAD2 996a0fcbb4SHerbert Xu select CRYPTO_HASH2 1006a0fcbb4SHerbert Xu select CRYPTO_BLKCIPHER2 101bc94e596SHerbert Xu select CRYPTO_PCOMP2 1026a0fcbb4SHerbert Xu 103a38f7907SSteffen Klassertconfig CRYPTO_USER 104a38f7907SSteffen Klassert tristate "Userspace cryptographic algorithm configuration" 1055db017aaSHerbert Xu depends on NET 106a38f7907SSteffen Klassert select CRYPTO_MANAGER 107a38f7907SSteffen Klassert help 108d19978f5SValdis.Kletnieks@vt.edu Userspace configuration for cryptographic instantiations such as 109a38f7907SSteffen Klassert cbc(aes). 110a38f7907SSteffen Klassert 111326a6346SHerbert Xuconfig CRYPTO_MANAGER_DISABLE_TESTS 112326a6346SHerbert Xu bool "Disable run-time self tests" 11300ca28a5SHerbert Xu default y 11400ca28a5SHerbert Xu depends on CRYPTO_MANAGER2 1150b767f96SAlexander Shishkin help 116326a6346SHerbert Xu Disable run-time self tests that normally take place at 117326a6346SHerbert Xu algorithm registration. 1180b767f96SAlexander Shishkin 119584fffc8SSebastian Siewiorconfig CRYPTO_GF128MUL 12008c70fc3SJussi Kivilinna tristate "GF(2^128) multiplication functions" 121584fffc8SSebastian Siewior help 122584fffc8SSebastian Siewior Efficient table driven implementation of multiplications in the 123584fffc8SSebastian Siewior field GF(2^128). This is needed by some cypher modes. This 124584fffc8SSebastian Siewior option will be selected automatically if you select such a 125584fffc8SSebastian Siewior cipher mode. Only select this option by hand if you expect to load 126584fffc8SSebastian Siewior an external module that requires these functions. 127584fffc8SSebastian Siewior 128584fffc8SSebastian Siewiorconfig CRYPTO_NULL 129584fffc8SSebastian Siewior tristate "Null algorithms" 130584fffc8SSebastian Siewior select CRYPTO_ALGAPI 131584fffc8SSebastian Siewior select CRYPTO_BLKCIPHER 132d35d2454SHerbert Xu select CRYPTO_HASH 133584fffc8SSebastian Siewior help 134584fffc8SSebastian Siewior These are 'Null' algorithms, used by IPsec, which do nothing. 135584fffc8SSebastian Siewior 1365068c7a8SSteffen Klassertconfig CRYPTO_PCRYPT 1373b4afaf2SKees Cook tristate "Parallel crypto engine" 1383b4afaf2SKees Cook depends on SMP 1395068c7a8SSteffen Klassert select PADATA 1405068c7a8SSteffen Klassert select CRYPTO_MANAGER 1415068c7a8SSteffen Klassert select CRYPTO_AEAD 1425068c7a8SSteffen Klassert help 1435068c7a8SSteffen Klassert This converts an arbitrary crypto algorithm into a parallel 1445068c7a8SSteffen Klassert algorithm that executes in kernel threads. 1455068c7a8SSteffen Klassert 14625c38d3fSHuang Yingconfig CRYPTO_WORKQUEUE 14725c38d3fSHuang Ying tristate 14825c38d3fSHuang Ying 149584fffc8SSebastian Siewiorconfig CRYPTO_CRYPTD 150584fffc8SSebastian Siewior tristate "Software async crypto daemon" 151584fffc8SSebastian Siewior select CRYPTO_BLKCIPHER 152b8a28251SLoc Ho select CRYPTO_HASH 153584fffc8SSebastian Siewior select CRYPTO_MANAGER 154254eff77SHuang Ying select CRYPTO_WORKQUEUE 155584fffc8SSebastian Siewior help 156584fffc8SSebastian Siewior This is a generic software asynchronous crypto daemon that 157584fffc8SSebastian Siewior converts an arbitrary synchronous software crypto algorithm 158584fffc8SSebastian Siewior into an asynchronous algorithm that executes in a kernel thread. 159584fffc8SSebastian Siewior 160584fffc8SSebastian Siewiorconfig CRYPTO_AUTHENC 161584fffc8SSebastian Siewior tristate "Authenc support" 162584fffc8SSebastian Siewior select CRYPTO_AEAD 163584fffc8SSebastian Siewior select CRYPTO_BLKCIPHER 164584fffc8SSebastian Siewior select CRYPTO_MANAGER 165584fffc8SSebastian Siewior select CRYPTO_HASH 166584fffc8SSebastian Siewior help 167584fffc8SSebastian Siewior Authenc: Combined mode wrapper for IPsec. 168584fffc8SSebastian Siewior This is required for IPSec. 169584fffc8SSebastian Siewior 170584fffc8SSebastian Siewiorconfig CRYPTO_TEST 171584fffc8SSebastian Siewior tristate "Testing module" 172584fffc8SSebastian Siewior depends on m 173da7f033dSHerbert Xu select CRYPTO_MANAGER 174584fffc8SSebastian Siewior help 175584fffc8SSebastian Siewior Quick & dirty crypto test module. 176584fffc8SSebastian Siewior 177a62b01cdSArd Biesheuvelconfig CRYPTO_ABLK_HELPER 178ffaf9156SJussi Kivilinna tristate 179ffaf9156SJussi Kivilinna select CRYPTO_CRYPTD 180ffaf9156SJussi Kivilinna 181596d8750SJussi Kivilinnaconfig CRYPTO_GLUE_HELPER_X86 182596d8750SJussi Kivilinna tristate 183596d8750SJussi Kivilinna depends on X86 184596d8750SJussi Kivilinna select CRYPTO_ALGAPI 185596d8750SJussi Kivilinna 186584fffc8SSebastian Siewiorcomment "Authenticated Encryption with Associated Data" 187584fffc8SSebastian Siewior 188584fffc8SSebastian Siewiorconfig CRYPTO_CCM 189584fffc8SSebastian Siewior tristate "CCM support" 190584fffc8SSebastian Siewior select CRYPTO_CTR 191584fffc8SSebastian Siewior select CRYPTO_AEAD 192584fffc8SSebastian Siewior help 193584fffc8SSebastian Siewior Support for Counter with CBC MAC. Required for IPsec. 194584fffc8SSebastian Siewior 195584fffc8SSebastian Siewiorconfig CRYPTO_GCM 196584fffc8SSebastian Siewior tristate "GCM/GMAC support" 197584fffc8SSebastian Siewior select CRYPTO_CTR 198584fffc8SSebastian Siewior select CRYPTO_AEAD 1999382d97aSHuang Ying select CRYPTO_GHASH 2009489667dSJussi Kivilinna select CRYPTO_NULL 201584fffc8SSebastian Siewior help 202584fffc8SSebastian Siewior Support for Galois/Counter Mode (GCM) and Galois Message 203584fffc8SSebastian Siewior Authentication Code (GMAC). Required for IPSec. 204584fffc8SSebastian Siewior 205584fffc8SSebastian Siewiorconfig CRYPTO_SEQIV 206584fffc8SSebastian Siewior tristate "Sequence Number IV Generator" 207584fffc8SSebastian Siewior select CRYPTO_AEAD 208584fffc8SSebastian Siewior select CRYPTO_BLKCIPHER 209a0f000ecSHerbert Xu select CRYPTO_RNG 210584fffc8SSebastian Siewior help 211584fffc8SSebastian Siewior This IV generator generates an IV based on a sequence number by 212584fffc8SSebastian Siewior xoring it with a salt. This algorithm is mainly useful for CTR 213584fffc8SSebastian Siewior 214584fffc8SSebastian Siewiorcomment "Block modes" 215584fffc8SSebastian Siewior 216584fffc8SSebastian Siewiorconfig CRYPTO_CBC 217584fffc8SSebastian Siewior tristate "CBC support" 218584fffc8SSebastian Siewior select CRYPTO_BLKCIPHER 219584fffc8SSebastian Siewior select CRYPTO_MANAGER 220584fffc8SSebastian Siewior help 221584fffc8SSebastian Siewior CBC: Cipher Block Chaining mode 222584fffc8SSebastian Siewior This block cipher algorithm is required for IPSec. 223584fffc8SSebastian Siewior 224584fffc8SSebastian Siewiorconfig CRYPTO_CTR 225584fffc8SSebastian Siewior tristate "CTR support" 226584fffc8SSebastian Siewior select CRYPTO_BLKCIPHER 227584fffc8SSebastian Siewior select CRYPTO_SEQIV 228584fffc8SSebastian Siewior select CRYPTO_MANAGER 229584fffc8SSebastian Siewior help 230584fffc8SSebastian Siewior CTR: Counter mode 231584fffc8SSebastian Siewior This block cipher algorithm is required for IPSec. 232584fffc8SSebastian Siewior 233584fffc8SSebastian Siewiorconfig CRYPTO_CTS 234584fffc8SSebastian Siewior tristate "CTS support" 235584fffc8SSebastian Siewior select CRYPTO_BLKCIPHER 236584fffc8SSebastian Siewior help 237584fffc8SSebastian Siewior CTS: Cipher Text Stealing 238584fffc8SSebastian Siewior This is the Cipher Text Stealing mode as described by 239584fffc8SSebastian Siewior Section 8 of rfc2040 and referenced by rfc3962. 240584fffc8SSebastian Siewior (rfc3962 includes errata information in its Appendix A) 241584fffc8SSebastian Siewior This mode is required for Kerberos gss mechanism support 242584fffc8SSebastian Siewior for AES encryption. 243584fffc8SSebastian Siewior 244584fffc8SSebastian Siewiorconfig CRYPTO_ECB 245584fffc8SSebastian Siewior tristate "ECB support" 246584fffc8SSebastian Siewior select CRYPTO_BLKCIPHER 247584fffc8SSebastian Siewior select CRYPTO_MANAGER 248584fffc8SSebastian Siewior help 249584fffc8SSebastian Siewior ECB: Electronic CodeBook mode 250584fffc8SSebastian Siewior This is the simplest block cipher algorithm. It simply encrypts 251584fffc8SSebastian Siewior the input block by block. 252584fffc8SSebastian Siewior 253584fffc8SSebastian Siewiorconfig CRYPTO_LRW 2542470a2b2SJussi Kivilinna tristate "LRW support" 255584fffc8SSebastian Siewior select CRYPTO_BLKCIPHER 256584fffc8SSebastian Siewior select CRYPTO_MANAGER 257584fffc8SSebastian Siewior select CRYPTO_GF128MUL 258584fffc8SSebastian Siewior help 259584fffc8SSebastian Siewior LRW: Liskov Rivest Wagner, a tweakable, non malleable, non movable 260584fffc8SSebastian Siewior narrow block cipher mode for dm-crypt. Use it with cipher 261584fffc8SSebastian Siewior specification string aes-lrw-benbi, the key must be 256, 320 or 384. 262584fffc8SSebastian Siewior The first 128, 192 or 256 bits in the key are used for AES and the 263584fffc8SSebastian Siewior rest is used to tie each cipher block to its logical position. 264584fffc8SSebastian Siewior 265584fffc8SSebastian Siewiorconfig CRYPTO_PCBC 266584fffc8SSebastian Siewior tristate "PCBC support" 267584fffc8SSebastian Siewior select CRYPTO_BLKCIPHER 268584fffc8SSebastian Siewior select CRYPTO_MANAGER 269584fffc8SSebastian Siewior help 270584fffc8SSebastian Siewior PCBC: Propagating Cipher Block Chaining mode 271584fffc8SSebastian Siewior This block cipher algorithm is required for RxRPC. 272584fffc8SSebastian Siewior 273584fffc8SSebastian Siewiorconfig CRYPTO_XTS 2745bcf8e6dSJussi Kivilinna tristate "XTS support" 275584fffc8SSebastian Siewior select CRYPTO_BLKCIPHER 276584fffc8SSebastian Siewior select CRYPTO_MANAGER 277584fffc8SSebastian Siewior select CRYPTO_GF128MUL 278584fffc8SSebastian Siewior help 279584fffc8SSebastian Siewior XTS: IEEE1619/D16 narrow block cipher use with aes-xts-plain, 280584fffc8SSebastian Siewior key size 256, 384 or 512 bits. This implementation currently 281584fffc8SSebastian Siewior can't handle a sectorsize which is not a multiple of 16 bytes. 282584fffc8SSebastian Siewior 283584fffc8SSebastian Siewiorcomment "Hash modes" 284584fffc8SSebastian Siewior 28593b5e86aSJussi Kivilinnaconfig CRYPTO_CMAC 28693b5e86aSJussi Kivilinna tristate "CMAC support" 28793b5e86aSJussi Kivilinna select CRYPTO_HASH 28893b5e86aSJussi Kivilinna select CRYPTO_MANAGER 28993b5e86aSJussi Kivilinna help 29093b5e86aSJussi Kivilinna Cipher-based Message Authentication Code (CMAC) specified by 29193b5e86aSJussi Kivilinna The National Institute of Standards and Technology (NIST). 29293b5e86aSJussi Kivilinna 29393b5e86aSJussi Kivilinna https://tools.ietf.org/html/rfc4493 29493b5e86aSJussi Kivilinna http://csrc.nist.gov/publications/nistpubs/800-38B/SP_800-38B.pdf 29593b5e86aSJussi Kivilinna 2961da177e4SLinus Torvaldsconfig CRYPTO_HMAC 2978425165dSHerbert Xu tristate "HMAC support" 2980796ae06SHerbert Xu select CRYPTO_HASH 29943518407SHerbert Xu select CRYPTO_MANAGER 3001da177e4SLinus Torvalds help 3011da177e4SLinus Torvalds HMAC: Keyed-Hashing for Message Authentication (RFC2104). 3021da177e4SLinus Torvalds This is required for IPSec. 3031da177e4SLinus Torvalds 304333b0d7eSKazunori MIYAZAWAconfig CRYPTO_XCBC 305333b0d7eSKazunori MIYAZAWA tristate "XCBC support" 306333b0d7eSKazunori MIYAZAWA select CRYPTO_HASH 307333b0d7eSKazunori MIYAZAWA select CRYPTO_MANAGER 308333b0d7eSKazunori MIYAZAWA help 309333b0d7eSKazunori MIYAZAWA XCBC: Keyed-Hashing with encryption algorithm 310333b0d7eSKazunori MIYAZAWA http://www.ietf.org/rfc/rfc3566.txt 311333b0d7eSKazunori MIYAZAWA http://csrc.nist.gov/encryption/modes/proposedmodes/ 312333b0d7eSKazunori MIYAZAWA xcbc-mac/xcbc-mac-spec.pdf 313333b0d7eSKazunori MIYAZAWA 314f1939f7cSShane Wangconfig CRYPTO_VMAC 315f1939f7cSShane Wang tristate "VMAC support" 316f1939f7cSShane Wang select CRYPTO_HASH 317f1939f7cSShane Wang select CRYPTO_MANAGER 318f1939f7cSShane Wang help 319f1939f7cSShane Wang VMAC is a message authentication algorithm designed for 320f1939f7cSShane Wang very high speed on 64-bit architectures. 321f1939f7cSShane Wang 322f1939f7cSShane Wang See also: 323f1939f7cSShane Wang <http://fastcrypto.org/vmac> 324f1939f7cSShane Wang 325584fffc8SSebastian Siewiorcomment "Digest" 326584fffc8SSebastian Siewior 327584fffc8SSebastian Siewiorconfig CRYPTO_CRC32C 328584fffc8SSebastian Siewior tristate "CRC32c CRC algorithm" 3295773a3e6SHerbert Xu select CRYPTO_HASH 3306a0962b2SDarrick J. Wong select CRC32 3311da177e4SLinus Torvalds help 332584fffc8SSebastian Siewior Castagnoli, et al Cyclic Redundancy-Check Algorithm. Used 333584fffc8SSebastian Siewior by iSCSI for header and data digests and by others. 33469c35efcSHerbert Xu See Castagnoli93. Module will be crc32c. 3351da177e4SLinus Torvalds 3368cb51ba8SAustin Zhangconfig CRYPTO_CRC32C_INTEL 3378cb51ba8SAustin Zhang tristate "CRC32c INTEL hardware acceleration" 3388cb51ba8SAustin Zhang depends on X86 3398cb51ba8SAustin Zhang select CRYPTO_HASH 3408cb51ba8SAustin Zhang help 3418cb51ba8SAustin Zhang In Intel processor with SSE4.2 supported, the processor will 3428cb51ba8SAustin Zhang support CRC32C implementation using hardware accelerated CRC32 3438cb51ba8SAustin Zhang instruction. This option will create 'crc32c-intel' module, 3448cb51ba8SAustin Zhang which will enable any routine to use the CRC32 instruction to 3458cb51ba8SAustin Zhang gain performance compared with software implementation. 3468cb51ba8SAustin Zhang Module will be crc32c-intel. 3478cb51ba8SAustin Zhang 348442a7c40SDavid S. Millerconfig CRYPTO_CRC32C_SPARC64 349442a7c40SDavid S. Miller tristate "CRC32c CRC algorithm (SPARC64)" 350442a7c40SDavid S. Miller depends on SPARC64 351442a7c40SDavid S. Miller select CRYPTO_HASH 352442a7c40SDavid S. Miller select CRC32 353442a7c40SDavid S. Miller help 354442a7c40SDavid S. Miller CRC32c CRC algorithm implemented using sparc64 crypto instructions, 355442a7c40SDavid S. Miller when available. 356442a7c40SDavid S. Miller 35778c37d19SAlexander Boykoconfig CRYPTO_CRC32 35878c37d19SAlexander Boyko tristate "CRC32 CRC algorithm" 35978c37d19SAlexander Boyko select CRYPTO_HASH 36078c37d19SAlexander Boyko select CRC32 36178c37d19SAlexander Boyko help 36278c37d19SAlexander Boyko CRC-32-IEEE 802.3 cyclic redundancy-check algorithm. 36378c37d19SAlexander Boyko Shash crypto api wrappers to crc32_le function. 36478c37d19SAlexander Boyko 36578c37d19SAlexander Boykoconfig CRYPTO_CRC32_PCLMUL 36678c37d19SAlexander Boyko tristate "CRC32 PCLMULQDQ hardware acceleration" 36778c37d19SAlexander Boyko depends on X86 36878c37d19SAlexander Boyko select CRYPTO_HASH 36978c37d19SAlexander Boyko select CRC32 37078c37d19SAlexander Boyko help 37178c37d19SAlexander Boyko From Intel Westmere and AMD Bulldozer processor with SSE4.2 37278c37d19SAlexander Boyko and PCLMULQDQ supported, the processor will support 37378c37d19SAlexander Boyko CRC32 PCLMULQDQ implementation using hardware accelerated PCLMULQDQ 37478c37d19SAlexander Boyko instruction. This option will create 'crc32-plcmul' module, 37578c37d19SAlexander Boyko which will enable any routine to use the CRC-32-IEEE 802.3 checksum 37678c37d19SAlexander Boyko and gain better performance as compared with the table implementation. 37778c37d19SAlexander Boyko 37868411521SHerbert Xuconfig CRYPTO_CRCT10DIF 37968411521SHerbert Xu tristate "CRCT10DIF algorithm" 38068411521SHerbert Xu select CRYPTO_HASH 38168411521SHerbert Xu help 38268411521SHerbert Xu CRC T10 Data Integrity Field computation is being cast as 38368411521SHerbert Xu a crypto transform. This allows for faster crc t10 diff 38468411521SHerbert Xu transforms to be used if they are available. 38568411521SHerbert Xu 38668411521SHerbert Xuconfig CRYPTO_CRCT10DIF_PCLMUL 38768411521SHerbert Xu tristate "CRCT10DIF PCLMULQDQ hardware acceleration" 38868411521SHerbert Xu depends on X86 && 64BIT && CRC_T10DIF 38968411521SHerbert Xu select CRYPTO_HASH 39068411521SHerbert Xu help 39168411521SHerbert Xu For x86_64 processors with SSE4.2 and PCLMULQDQ supported, 39268411521SHerbert Xu CRC T10 DIF PCLMULQDQ computation can be hardware 39368411521SHerbert Xu accelerated PCLMULQDQ instruction. This option will create 39468411521SHerbert Xu 'crct10dif-plcmul' module, which is faster when computing the 39568411521SHerbert Xu crct10dif checksum as compared with the generic table implementation. 39668411521SHerbert Xu 3972cdc6899SHuang Yingconfig CRYPTO_GHASH 3982cdc6899SHuang Ying tristate "GHASH digest algorithm" 3992cdc6899SHuang Ying select CRYPTO_GF128MUL 4002cdc6899SHuang Ying help 4012cdc6899SHuang Ying GHASH is message digest algorithm for GCM (Galois/Counter Mode). 4022cdc6899SHuang Ying 4031da177e4SLinus Torvaldsconfig CRYPTO_MD4 4041da177e4SLinus Torvalds tristate "MD4 digest algorithm" 405808a1763SAdrian-Ken Rueegsegger select CRYPTO_HASH 4061da177e4SLinus Torvalds help 4071da177e4SLinus Torvalds MD4 message digest algorithm (RFC1320). 4081da177e4SLinus Torvalds 4091da177e4SLinus Torvaldsconfig CRYPTO_MD5 4101da177e4SLinus Torvalds tristate "MD5 digest algorithm" 41114b75ba7SAdrian-Ken Rueegsegger select CRYPTO_HASH 4121da177e4SLinus Torvalds help 4131da177e4SLinus Torvalds MD5 message digest algorithm (RFC1321). 4141da177e4SLinus Torvalds 415fa4dfedcSDavid S. Millerconfig CRYPTO_MD5_SPARC64 416fa4dfedcSDavid S. Miller tristate "MD5 digest algorithm (SPARC64)" 417fa4dfedcSDavid S. Miller depends on SPARC64 418fa4dfedcSDavid S. Miller select CRYPTO_MD5 419fa4dfedcSDavid S. Miller select CRYPTO_HASH 420fa4dfedcSDavid S. Miller help 421fa4dfedcSDavid S. Miller MD5 message digest algorithm (RFC1321) implemented 422fa4dfedcSDavid S. Miller using sparc64 crypto instructions, when available. 423fa4dfedcSDavid S. Miller 424584fffc8SSebastian Siewiorconfig CRYPTO_MICHAEL_MIC 425584fffc8SSebastian Siewior tristate "Michael MIC keyed digest algorithm" 42619e2bf14SAdrian-Ken Rueegsegger select CRYPTO_HASH 427584fffc8SSebastian Siewior help 428584fffc8SSebastian Siewior Michael MIC is used for message integrity protection in TKIP 429584fffc8SSebastian Siewior (IEEE 802.11i). This algorithm is required for TKIP, but it 430584fffc8SSebastian Siewior should not be used for other purposes because of the weakness 431584fffc8SSebastian Siewior of the algorithm. 432584fffc8SSebastian Siewior 43382798f90SAdrian-Ken Rueegseggerconfig CRYPTO_RMD128 43482798f90SAdrian-Ken Rueegsegger tristate "RIPEMD-128 digest algorithm" 4357c4468bcSHerbert Xu select CRYPTO_HASH 43682798f90SAdrian-Ken Rueegsegger help 43782798f90SAdrian-Ken Rueegsegger RIPEMD-128 (ISO/IEC 10118-3:2004). 43882798f90SAdrian-Ken Rueegsegger 43982798f90SAdrian-Ken Rueegsegger RIPEMD-128 is a 128-bit cryptographic hash function. It should only 44035ed4b35SMichael Witten be used as a secure replacement for RIPEMD. For other use cases, 44182798f90SAdrian-Ken Rueegsegger RIPEMD-160 should be used. 44282798f90SAdrian-Ken Rueegsegger 44382798f90SAdrian-Ken Rueegsegger Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel. 4446d8de74cSJustin P. Mattock See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html> 44582798f90SAdrian-Ken Rueegsegger 44682798f90SAdrian-Ken Rueegseggerconfig CRYPTO_RMD160 44782798f90SAdrian-Ken Rueegsegger tristate "RIPEMD-160 digest algorithm" 448e5835fbaSHerbert Xu select CRYPTO_HASH 44982798f90SAdrian-Ken Rueegsegger help 45082798f90SAdrian-Ken Rueegsegger RIPEMD-160 (ISO/IEC 10118-3:2004). 45182798f90SAdrian-Ken Rueegsegger 45282798f90SAdrian-Ken Rueegsegger RIPEMD-160 is a 160-bit cryptographic hash function. It is intended 45382798f90SAdrian-Ken Rueegsegger to be used as a secure replacement for the 128-bit hash functions 454b6d44341SAdrian Bunk MD4, MD5 and it's predecessor RIPEMD 455b6d44341SAdrian Bunk (not to be confused with RIPEMD-128). 45682798f90SAdrian-Ken Rueegsegger 457b6d44341SAdrian Bunk It's speed is comparable to SHA1 and there are no known attacks 458b6d44341SAdrian Bunk against RIPEMD-160. 459534fe2c1SAdrian-Ken Rueegsegger 460534fe2c1SAdrian-Ken Rueegsegger Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel. 4616d8de74cSJustin P. Mattock See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html> 462534fe2c1SAdrian-Ken Rueegsegger 463534fe2c1SAdrian-Ken Rueegseggerconfig CRYPTO_RMD256 464534fe2c1SAdrian-Ken Rueegsegger tristate "RIPEMD-256 digest algorithm" 465d8a5e2e9SHerbert Xu select CRYPTO_HASH 466534fe2c1SAdrian-Ken Rueegsegger help 467b6d44341SAdrian Bunk RIPEMD-256 is an optional extension of RIPEMD-128 with a 468b6d44341SAdrian Bunk 256 bit hash. It is intended for applications that require 469b6d44341SAdrian Bunk longer hash-results, without needing a larger security level 470b6d44341SAdrian Bunk (than RIPEMD-128). 471534fe2c1SAdrian-Ken Rueegsegger 472534fe2c1SAdrian-Ken Rueegsegger Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel. 4736d8de74cSJustin P. Mattock See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html> 474534fe2c1SAdrian-Ken Rueegsegger 475534fe2c1SAdrian-Ken Rueegseggerconfig CRYPTO_RMD320 476534fe2c1SAdrian-Ken Rueegsegger tristate "RIPEMD-320 digest algorithm" 4773b8efb4cSHerbert Xu select CRYPTO_HASH 478534fe2c1SAdrian-Ken Rueegsegger help 479b6d44341SAdrian Bunk RIPEMD-320 is an optional extension of RIPEMD-160 with a 480b6d44341SAdrian Bunk 320 bit hash. It is intended for applications that require 481b6d44341SAdrian Bunk longer hash-results, without needing a larger security level 482b6d44341SAdrian Bunk (than RIPEMD-160). 483534fe2c1SAdrian-Ken Rueegsegger 48482798f90SAdrian-Ken Rueegsegger Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel. 4856d8de74cSJustin P. Mattock See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html> 48682798f90SAdrian-Ken Rueegsegger 4871da177e4SLinus Torvaldsconfig CRYPTO_SHA1 4881da177e4SLinus Torvalds tristate "SHA1 digest algorithm" 48954ccb367SAdrian-Ken Rueegsegger select CRYPTO_HASH 4901da177e4SLinus Torvalds help 4911da177e4SLinus Torvalds SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2). 4921da177e4SLinus Torvalds 49366be8951SMathias Krauseconfig CRYPTO_SHA1_SSSE3 4947c1da8d0Schandramouli narayanan tristate "SHA1 digest algorithm (SSSE3/AVX/AVX2)" 49566be8951SMathias Krause depends on X86 && 64BIT 49666be8951SMathias Krause select CRYPTO_SHA1 49766be8951SMathias Krause select CRYPTO_HASH 49866be8951SMathias Krause help 49966be8951SMathias Krause SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented 50066be8951SMathias Krause using Supplemental SSE3 (SSSE3) instructions or Advanced Vector 5017c1da8d0Schandramouli narayanan Extensions (AVX/AVX2), when available. 50266be8951SMathias Krause 5038275d1aaSTim Chenconfig CRYPTO_SHA256_SSSE3 5048275d1aaSTim Chen tristate "SHA256 digest algorithm (SSSE3/AVX/AVX2)" 5058275d1aaSTim Chen depends on X86 && 64BIT 5068275d1aaSTim Chen select CRYPTO_SHA256 5078275d1aaSTim Chen select CRYPTO_HASH 5088275d1aaSTim Chen help 5098275d1aaSTim Chen SHA-256 secure hash standard (DFIPS 180-2) implemented 5108275d1aaSTim Chen using Supplemental SSE3 (SSSE3) instructions, or Advanced Vector 5118275d1aaSTim Chen Extensions version 1 (AVX1), or Advanced Vector Extensions 5128275d1aaSTim Chen version 2 (AVX2) instructions, when available. 5138275d1aaSTim Chen 51487de4579STim Chenconfig CRYPTO_SHA512_SSSE3 51587de4579STim Chen tristate "SHA512 digest algorithm (SSSE3/AVX/AVX2)" 51687de4579STim Chen depends on X86 && 64BIT 51787de4579STim Chen select CRYPTO_SHA512 51887de4579STim Chen select CRYPTO_HASH 51987de4579STim Chen help 52087de4579STim Chen SHA-512 secure hash standard (DFIPS 180-2) implemented 52187de4579STim Chen using Supplemental SSE3 (SSSE3) instructions, or Advanced Vector 52287de4579STim Chen Extensions version 1 (AVX1), or Advanced Vector Extensions 52387de4579STim Chen version 2 (AVX2) instructions, when available. 52487de4579STim Chen 5254ff28d4cSDavid S. Millerconfig CRYPTO_SHA1_SPARC64 5264ff28d4cSDavid S. Miller tristate "SHA1 digest algorithm (SPARC64)" 5274ff28d4cSDavid S. Miller depends on SPARC64 5284ff28d4cSDavid S. Miller select CRYPTO_SHA1 5294ff28d4cSDavid S. Miller select CRYPTO_HASH 5304ff28d4cSDavid S. Miller help 5314ff28d4cSDavid S. Miller SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented 5324ff28d4cSDavid S. Miller using sparc64 crypto instructions, when available. 5334ff28d4cSDavid S. Miller 534f0be44f4SDavid McCulloughconfig CRYPTO_SHA1_ARM 535f0be44f4SDavid McCullough tristate "SHA1 digest algorithm (ARM-asm)" 536f0be44f4SDavid McCullough depends on ARM 537f0be44f4SDavid McCullough select CRYPTO_SHA1 538f0be44f4SDavid McCullough select CRYPTO_HASH 539f0be44f4SDavid McCullough help 540f0be44f4SDavid McCullough SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented 541f0be44f4SDavid McCullough using optimized ARM assembler. 542f0be44f4SDavid McCullough 543*60468255SJussi Kivilinnaconfig CRYPTO_SHA1_ARM_NEON 544*60468255SJussi Kivilinna tristate "SHA1 digest algorithm (ARM NEON)" 545*60468255SJussi Kivilinna depends on ARM && KERNEL_MODE_NEON && !CPU_BIG_ENDIAN 546*60468255SJussi Kivilinna select CRYPTO_SHA1_ARM 547*60468255SJussi Kivilinna select CRYPTO_SHA1 548*60468255SJussi Kivilinna select CRYPTO_HASH 549*60468255SJussi Kivilinna help 550*60468255SJussi Kivilinna SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented 551*60468255SJussi Kivilinna using optimized ARM NEON assembly, when NEON instructions are 552*60468255SJussi Kivilinna available. 553*60468255SJussi Kivilinna 554323a6bf1SMichael Ellermanconfig CRYPTO_SHA1_PPC 555323a6bf1SMichael Ellerman tristate "SHA1 digest algorithm (powerpc)" 556323a6bf1SMichael Ellerman depends on PPC 557323a6bf1SMichael Ellerman help 558323a6bf1SMichael Ellerman This is the powerpc hardware accelerated implementation of the 559323a6bf1SMichael Ellerman SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2). 560323a6bf1SMichael Ellerman 5611da177e4SLinus Torvaldsconfig CRYPTO_SHA256 562cd12fb90SJonathan Lynch tristate "SHA224 and SHA256 digest algorithm" 56350e109b5SAdrian-Ken Rueegsegger select CRYPTO_HASH 5641da177e4SLinus Torvalds help 5651da177e4SLinus Torvalds SHA256 secure hash standard (DFIPS 180-2). 5661da177e4SLinus Torvalds 5671da177e4SLinus Torvalds This version of SHA implements a 256 bit hash with 128 bits of 5681da177e4SLinus Torvalds security against collision attacks. 5691da177e4SLinus Torvalds 570cd12fb90SJonathan Lynch This code also includes SHA-224, a 224 bit hash with 112 bits 571cd12fb90SJonathan Lynch of security against collision attacks. 572cd12fb90SJonathan Lynch 57386c93b24SDavid S. Millerconfig CRYPTO_SHA256_SPARC64 57486c93b24SDavid S. Miller tristate "SHA224 and SHA256 digest algorithm (SPARC64)" 57586c93b24SDavid S. Miller depends on SPARC64 57686c93b24SDavid S. Miller select CRYPTO_SHA256 57786c93b24SDavid S. Miller select CRYPTO_HASH 57886c93b24SDavid S. Miller help 57986c93b24SDavid S. Miller SHA-256 secure hash standard (DFIPS 180-2) implemented 58086c93b24SDavid S. Miller using sparc64 crypto instructions, when available. 58186c93b24SDavid S. Miller 5821da177e4SLinus Torvaldsconfig CRYPTO_SHA512 5831da177e4SLinus Torvalds tristate "SHA384 and SHA512 digest algorithms" 584bd9d20dbSAdrian-Ken Rueegsegger select CRYPTO_HASH 5851da177e4SLinus Torvalds help 5861da177e4SLinus Torvalds SHA512 secure hash standard (DFIPS 180-2). 5871da177e4SLinus Torvalds 5881da177e4SLinus Torvalds This version of SHA implements a 512 bit hash with 256 bits of 5891da177e4SLinus Torvalds security against collision attacks. 5901da177e4SLinus Torvalds 5911da177e4SLinus Torvalds This code also includes SHA-384, a 384 bit hash with 192 bits 5921da177e4SLinus Torvalds of security against collision attacks. 5931da177e4SLinus Torvalds 594775e0c69SDavid S. Millerconfig CRYPTO_SHA512_SPARC64 595775e0c69SDavid S. Miller tristate "SHA384 and SHA512 digest algorithm (SPARC64)" 596775e0c69SDavid S. Miller depends on SPARC64 597775e0c69SDavid S. Miller select CRYPTO_SHA512 598775e0c69SDavid S. Miller select CRYPTO_HASH 599775e0c69SDavid S. Miller help 600775e0c69SDavid S. Miller SHA-512 secure hash standard (DFIPS 180-2) implemented 601775e0c69SDavid S. Miller using sparc64 crypto instructions, when available. 602775e0c69SDavid S. Miller 6031da177e4SLinus Torvaldsconfig CRYPTO_TGR192 6041da177e4SLinus Torvalds tristate "Tiger digest algorithms" 605f63fbd3dSAdrian-Ken Rueegsegger select CRYPTO_HASH 6061da177e4SLinus Torvalds help 6071da177e4SLinus Torvalds Tiger hash algorithm 192, 160 and 128-bit hashes 6081da177e4SLinus Torvalds 6091da177e4SLinus Torvalds Tiger is a hash function optimized for 64-bit processors while 6101da177e4SLinus Torvalds still having decent performance on 32-bit processors. 6111da177e4SLinus Torvalds Tiger was developed by Ross Anderson and Eli Biham. 6121da177e4SLinus Torvalds 6131da177e4SLinus Torvalds See also: 6141da177e4SLinus Torvalds <http://www.cs.technion.ac.il/~biham/Reports/Tiger/>. 6151da177e4SLinus Torvalds 616584fffc8SSebastian Siewiorconfig CRYPTO_WP512 617584fffc8SSebastian Siewior tristate "Whirlpool digest algorithms" 6184946510bSAdrian-Ken Rueegsegger select CRYPTO_HASH 6191da177e4SLinus Torvalds help 620584fffc8SSebastian Siewior Whirlpool hash algorithm 512, 384 and 256-bit hashes 6211da177e4SLinus Torvalds 622584fffc8SSebastian Siewior Whirlpool-512 is part of the NESSIE cryptographic primitives. 623584fffc8SSebastian Siewior Whirlpool will be part of the ISO/IEC 10118-3:2003(E) standard 6241da177e4SLinus Torvalds 6251da177e4SLinus Torvalds See also: 6266d8de74cSJustin P. Mattock <http://www.larc.usp.br/~pbarreto/WhirlpoolPage.html> 6271da177e4SLinus Torvalds 6280e1227d3SHuang Yingconfig CRYPTO_GHASH_CLMUL_NI_INTEL 6290e1227d3SHuang Ying tristate "GHASH digest algorithm (CLMUL-NI accelerated)" 6308af00860SRichard Weinberger depends on X86 && 64BIT 6310e1227d3SHuang Ying select CRYPTO_CRYPTD 6320e1227d3SHuang Ying help 6330e1227d3SHuang Ying GHASH is message digest algorithm for GCM (Galois/Counter Mode). 6340e1227d3SHuang Ying The implementation is accelerated by CLMUL-NI of Intel. 6350e1227d3SHuang Ying 636584fffc8SSebastian Siewiorcomment "Ciphers" 6371da177e4SLinus Torvalds 6381da177e4SLinus Torvaldsconfig CRYPTO_AES 6391da177e4SLinus Torvalds tristate "AES cipher algorithms" 640cce9e06dSHerbert Xu select CRYPTO_ALGAPI 6411da177e4SLinus Torvalds help 6421da177e4SLinus Torvalds AES cipher algorithms (FIPS-197). AES uses the Rijndael 6431da177e4SLinus Torvalds algorithm. 6441da177e4SLinus Torvalds 6451da177e4SLinus Torvalds Rijndael appears to be consistently a very good performer in 6461da177e4SLinus Torvalds both hardware and software across a wide range of computing 6471da177e4SLinus Torvalds environments regardless of its use in feedback or non-feedback 6481da177e4SLinus Torvalds modes. Its key setup time is excellent, and its key agility is 6491da177e4SLinus Torvalds good. Rijndael's very low memory requirements make it very well 6501da177e4SLinus Torvalds suited for restricted-space environments, in which it also 6511da177e4SLinus Torvalds demonstrates excellent performance. Rijndael's operations are 6521da177e4SLinus Torvalds among the easiest to defend against power and timing attacks. 6531da177e4SLinus Torvalds 6541da177e4SLinus Torvalds The AES specifies three key sizes: 128, 192 and 256 bits 6551da177e4SLinus Torvalds 6561da177e4SLinus Torvalds See <http://csrc.nist.gov/CryptoToolkit/aes/> for more information. 6571da177e4SLinus Torvalds 6581da177e4SLinus Torvaldsconfig CRYPTO_AES_586 6591da177e4SLinus Torvalds tristate "AES cipher algorithms (i586)" 660cce9e06dSHerbert Xu depends on (X86 || UML_X86) && !64BIT 661cce9e06dSHerbert Xu select CRYPTO_ALGAPI 6625157dea8SSebastian Siewior select CRYPTO_AES 6631da177e4SLinus Torvalds help 6641da177e4SLinus Torvalds AES cipher algorithms (FIPS-197). AES uses the Rijndael 6651da177e4SLinus Torvalds algorithm. 6661da177e4SLinus Torvalds 6671da177e4SLinus Torvalds Rijndael appears to be consistently a very good performer in 6681da177e4SLinus Torvalds both hardware and software across a wide range of computing 6691da177e4SLinus Torvalds environments regardless of its use in feedback or non-feedback 6701da177e4SLinus Torvalds modes. Its key setup time is excellent, and its key agility is 6711da177e4SLinus Torvalds good. Rijndael's very low memory requirements make it very well 6721da177e4SLinus Torvalds suited for restricted-space environments, in which it also 6731da177e4SLinus Torvalds demonstrates excellent performance. Rijndael's operations are 6741da177e4SLinus Torvalds among the easiest to defend against power and timing attacks. 6751da177e4SLinus Torvalds 6761da177e4SLinus Torvalds The AES specifies three key sizes: 128, 192 and 256 bits 6771da177e4SLinus Torvalds 6781da177e4SLinus Torvalds See <http://csrc.nist.gov/encryption/aes/> for more information. 6791da177e4SLinus Torvalds 680a2a892a2SAndreas Steinmetzconfig CRYPTO_AES_X86_64 681a2a892a2SAndreas Steinmetz tristate "AES cipher algorithms (x86_64)" 682cce9e06dSHerbert Xu depends on (X86 || UML_X86) && 64BIT 683cce9e06dSHerbert Xu select CRYPTO_ALGAPI 68481190b32SSebastian Siewior select CRYPTO_AES 685a2a892a2SAndreas Steinmetz help 686a2a892a2SAndreas Steinmetz AES cipher algorithms (FIPS-197). AES uses the Rijndael 687a2a892a2SAndreas Steinmetz algorithm. 688a2a892a2SAndreas Steinmetz 689a2a892a2SAndreas Steinmetz Rijndael appears to be consistently a very good performer in 690a2a892a2SAndreas Steinmetz both hardware and software across a wide range of computing 691a2a892a2SAndreas Steinmetz environments regardless of its use in feedback or non-feedback 692a2a892a2SAndreas Steinmetz modes. Its key setup time is excellent, and its key agility is 693a2a892a2SAndreas Steinmetz good. Rijndael's very low memory requirements make it very well 694a2a892a2SAndreas Steinmetz suited for restricted-space environments, in which it also 695a2a892a2SAndreas Steinmetz demonstrates excellent performance. Rijndael's operations are 696a2a892a2SAndreas Steinmetz among the easiest to defend against power and timing attacks. 697a2a892a2SAndreas Steinmetz 698a2a892a2SAndreas Steinmetz The AES specifies three key sizes: 128, 192 and 256 bits 699a2a892a2SAndreas Steinmetz 700a2a892a2SAndreas Steinmetz See <http://csrc.nist.gov/encryption/aes/> for more information. 701a2a892a2SAndreas Steinmetz 70254b6a1bdSHuang Yingconfig CRYPTO_AES_NI_INTEL 70354b6a1bdSHuang Ying tristate "AES cipher algorithms (AES-NI)" 7048af00860SRichard Weinberger depends on X86 7050d258efbSMathias Krause select CRYPTO_AES_X86_64 if 64BIT 7060d258efbSMathias Krause select CRYPTO_AES_586 if !64BIT 70754b6a1bdSHuang Ying select CRYPTO_CRYPTD 708801201aaSArd Biesheuvel select CRYPTO_ABLK_HELPER 70954b6a1bdSHuang Ying select CRYPTO_ALGAPI 7107643a11aSJussi Kivilinna select CRYPTO_GLUE_HELPER_X86 if 64BIT 711023af608SJussi Kivilinna select CRYPTO_LRW 712023af608SJussi Kivilinna select CRYPTO_XTS 71354b6a1bdSHuang Ying help 71454b6a1bdSHuang Ying Use Intel AES-NI instructions for AES algorithm. 71554b6a1bdSHuang Ying 71654b6a1bdSHuang Ying AES cipher algorithms (FIPS-197). AES uses the Rijndael 71754b6a1bdSHuang Ying algorithm. 71854b6a1bdSHuang Ying 71954b6a1bdSHuang Ying Rijndael appears to be consistently a very good performer in 72054b6a1bdSHuang Ying both hardware and software across a wide range of computing 72154b6a1bdSHuang Ying environments regardless of its use in feedback or non-feedback 72254b6a1bdSHuang Ying modes. Its key setup time is excellent, and its key agility is 72354b6a1bdSHuang Ying good. Rijndael's very low memory requirements make it very well 72454b6a1bdSHuang Ying suited for restricted-space environments, in which it also 72554b6a1bdSHuang Ying demonstrates excellent performance. Rijndael's operations are 72654b6a1bdSHuang Ying among the easiest to defend against power and timing attacks. 72754b6a1bdSHuang Ying 72854b6a1bdSHuang Ying The AES specifies three key sizes: 128, 192 and 256 bits 72954b6a1bdSHuang Ying 73054b6a1bdSHuang Ying See <http://csrc.nist.gov/encryption/aes/> for more information. 73154b6a1bdSHuang Ying 7320d258efbSMathias Krause In addition to AES cipher algorithm support, the acceleration 7330d258efbSMathias Krause for some popular block cipher mode is supported too, including 7340d258efbSMathias Krause ECB, CBC, LRW, PCBC, XTS. The 64 bit version has additional 7350d258efbSMathias Krause acceleration for CTR. 7362cf4ac8bSHuang Ying 7379bf4852dSDavid S. Millerconfig CRYPTO_AES_SPARC64 7389bf4852dSDavid S. Miller tristate "AES cipher algorithms (SPARC64)" 7399bf4852dSDavid S. Miller depends on SPARC64 7409bf4852dSDavid S. Miller select CRYPTO_CRYPTD 7419bf4852dSDavid S. Miller select CRYPTO_ALGAPI 7429bf4852dSDavid S. Miller help 7439bf4852dSDavid S. Miller Use SPARC64 crypto opcodes for AES algorithm. 7449bf4852dSDavid S. Miller 7459bf4852dSDavid S. Miller AES cipher algorithms (FIPS-197). AES uses the Rijndael 7469bf4852dSDavid S. Miller algorithm. 7479bf4852dSDavid S. Miller 7489bf4852dSDavid S. Miller Rijndael appears to be consistently a very good performer in 7499bf4852dSDavid S. Miller both hardware and software across a wide range of computing 7509bf4852dSDavid S. Miller environments regardless of its use in feedback or non-feedback 7519bf4852dSDavid S. Miller modes. Its key setup time is excellent, and its key agility is 7529bf4852dSDavid S. Miller good. Rijndael's very low memory requirements make it very well 7539bf4852dSDavid S. Miller suited for restricted-space environments, in which it also 7549bf4852dSDavid S. Miller demonstrates excellent performance. Rijndael's operations are 7559bf4852dSDavid S. Miller among the easiest to defend against power and timing attacks. 7569bf4852dSDavid S. Miller 7579bf4852dSDavid S. Miller The AES specifies three key sizes: 128, 192 and 256 bits 7589bf4852dSDavid S. Miller 7599bf4852dSDavid S. Miller See <http://csrc.nist.gov/encryption/aes/> for more information. 7609bf4852dSDavid S. Miller 7619bf4852dSDavid S. Miller In addition to AES cipher algorithm support, the acceleration 7629bf4852dSDavid S. Miller for some popular block cipher mode is supported too, including 7639bf4852dSDavid S. Miller ECB and CBC. 7649bf4852dSDavid S. Miller 765f0be44f4SDavid McCulloughconfig CRYPTO_AES_ARM 766f0be44f4SDavid McCullough tristate "AES cipher algorithms (ARM-asm)" 767f0be44f4SDavid McCullough depends on ARM 768f0be44f4SDavid McCullough select CRYPTO_ALGAPI 769f0be44f4SDavid McCullough select CRYPTO_AES 770f0be44f4SDavid McCullough help 771f0be44f4SDavid McCullough Use optimized AES assembler routines for ARM platforms. 772f0be44f4SDavid McCullough 773f0be44f4SDavid McCullough AES cipher algorithms (FIPS-197). AES uses the Rijndael 774f0be44f4SDavid McCullough algorithm. 775f0be44f4SDavid McCullough 776f0be44f4SDavid McCullough Rijndael appears to be consistently a very good performer in 777f0be44f4SDavid McCullough both hardware and software across a wide range of computing 778f0be44f4SDavid McCullough environments regardless of its use in feedback or non-feedback 779f0be44f4SDavid McCullough modes. Its key setup time is excellent, and its key agility is 780f0be44f4SDavid McCullough good. Rijndael's very low memory requirements make it very well 781f0be44f4SDavid McCullough suited for restricted-space environments, in which it also 782f0be44f4SDavid McCullough demonstrates excellent performance. Rijndael's operations are 783f0be44f4SDavid McCullough among the easiest to defend against power and timing attacks. 784f0be44f4SDavid McCullough 785f0be44f4SDavid McCullough The AES specifies three key sizes: 128, 192 and 256 bits 786f0be44f4SDavid McCullough 787f0be44f4SDavid McCullough See <http://csrc.nist.gov/encryption/aes/> for more information. 788f0be44f4SDavid McCullough 789e4e7f10bSArd Biesheuvelconfig CRYPTO_AES_ARM_BS 790e4e7f10bSArd Biesheuvel tristate "Bit sliced AES using NEON instructions" 791e4e7f10bSArd Biesheuvel depends on ARM && KERNEL_MODE_NEON 792e4e7f10bSArd Biesheuvel select CRYPTO_ALGAPI 793e4e7f10bSArd Biesheuvel select CRYPTO_AES_ARM 794e4e7f10bSArd Biesheuvel select CRYPTO_ABLK_HELPER 795e4e7f10bSArd Biesheuvel help 796e4e7f10bSArd Biesheuvel Use a faster and more secure NEON based implementation of AES in CBC, 797e4e7f10bSArd Biesheuvel CTR and XTS modes 798e4e7f10bSArd Biesheuvel 799e4e7f10bSArd Biesheuvel Bit sliced AES gives around 45% speedup on Cortex-A15 for CTR mode 800e4e7f10bSArd Biesheuvel and for XTS mode encryption, CBC and XTS mode decryption speedup is 801e4e7f10bSArd Biesheuvel around 25%. (CBC encryption speed is not affected by this driver.) 802e4e7f10bSArd Biesheuvel This implementation does not rely on any lookup tables so it is 803e4e7f10bSArd Biesheuvel believed to be invulnerable to cache timing attacks. 804e4e7f10bSArd Biesheuvel 8051da177e4SLinus Torvaldsconfig CRYPTO_ANUBIS 8061da177e4SLinus Torvalds tristate "Anubis cipher algorithm" 807cce9e06dSHerbert Xu select CRYPTO_ALGAPI 8081da177e4SLinus Torvalds help 8091da177e4SLinus Torvalds Anubis cipher algorithm. 8101da177e4SLinus Torvalds 8111da177e4SLinus Torvalds Anubis is a variable key length cipher which can use keys from 8121da177e4SLinus Torvalds 128 bits to 320 bits in length. It was evaluated as a entrant 8131da177e4SLinus Torvalds in the NESSIE competition. 8141da177e4SLinus Torvalds 8151da177e4SLinus Torvalds See also: 8166d8de74cSJustin P. Mattock <https://www.cosic.esat.kuleuven.be/nessie/reports/> 8176d8de74cSJustin P. Mattock <http://www.larc.usp.br/~pbarreto/AnubisPage.html> 8181da177e4SLinus Torvalds 819584fffc8SSebastian Siewiorconfig CRYPTO_ARC4 820584fffc8SSebastian Siewior tristate "ARC4 cipher algorithm" 821b9b0f080SSebastian Andrzej Siewior select CRYPTO_BLKCIPHER 822e2ee95b8SHye-Shik Chang help 823584fffc8SSebastian Siewior ARC4 cipher algorithm. 824e2ee95b8SHye-Shik Chang 825584fffc8SSebastian Siewior ARC4 is a stream cipher using keys ranging from 8 bits to 2048 826584fffc8SSebastian Siewior bits in length. This algorithm is required for driver-based 827584fffc8SSebastian Siewior WEP, but it should not be for other purposes because of the 828584fffc8SSebastian Siewior weakness of the algorithm. 829584fffc8SSebastian Siewior 830584fffc8SSebastian Siewiorconfig CRYPTO_BLOWFISH 831584fffc8SSebastian Siewior tristate "Blowfish cipher algorithm" 832584fffc8SSebastian Siewior select CRYPTO_ALGAPI 83352ba867cSJussi Kivilinna select CRYPTO_BLOWFISH_COMMON 834584fffc8SSebastian Siewior help 835584fffc8SSebastian Siewior Blowfish cipher algorithm, by Bruce Schneier. 836584fffc8SSebastian Siewior 837584fffc8SSebastian Siewior This is a variable key length cipher which can use keys from 32 838584fffc8SSebastian Siewior bits to 448 bits in length. It's fast, simple and specifically 839584fffc8SSebastian Siewior designed for use on "large microprocessors". 840e2ee95b8SHye-Shik Chang 841e2ee95b8SHye-Shik Chang See also: 842584fffc8SSebastian Siewior <http://www.schneier.com/blowfish.html> 843584fffc8SSebastian Siewior 84452ba867cSJussi Kivilinnaconfig CRYPTO_BLOWFISH_COMMON 84552ba867cSJussi Kivilinna tristate 84652ba867cSJussi Kivilinna help 84752ba867cSJussi Kivilinna Common parts of the Blowfish cipher algorithm shared by the 84852ba867cSJussi Kivilinna generic c and the assembler implementations. 84952ba867cSJussi Kivilinna 85052ba867cSJussi Kivilinna See also: 85152ba867cSJussi Kivilinna <http://www.schneier.com/blowfish.html> 85252ba867cSJussi Kivilinna 85364b94ceaSJussi Kivilinnaconfig CRYPTO_BLOWFISH_X86_64 85464b94ceaSJussi Kivilinna tristate "Blowfish cipher algorithm (x86_64)" 855f21a7c19SAl Viro depends on X86 && 64BIT 85664b94ceaSJussi Kivilinna select CRYPTO_ALGAPI 85764b94ceaSJussi Kivilinna select CRYPTO_BLOWFISH_COMMON 85864b94ceaSJussi Kivilinna help 85964b94ceaSJussi Kivilinna Blowfish cipher algorithm (x86_64), by Bruce Schneier. 86064b94ceaSJussi Kivilinna 86164b94ceaSJussi Kivilinna This is a variable key length cipher which can use keys from 32 86264b94ceaSJussi Kivilinna bits to 448 bits in length. It's fast, simple and specifically 86364b94ceaSJussi Kivilinna designed for use on "large microprocessors". 86464b94ceaSJussi Kivilinna 86564b94ceaSJussi Kivilinna See also: 86664b94ceaSJussi Kivilinna <http://www.schneier.com/blowfish.html> 86764b94ceaSJussi Kivilinna 868584fffc8SSebastian Siewiorconfig CRYPTO_CAMELLIA 869584fffc8SSebastian Siewior tristate "Camellia cipher algorithms" 870584fffc8SSebastian Siewior depends on CRYPTO 871584fffc8SSebastian Siewior select CRYPTO_ALGAPI 872584fffc8SSebastian Siewior help 873584fffc8SSebastian Siewior Camellia cipher algorithms module. 874584fffc8SSebastian Siewior 875584fffc8SSebastian Siewior Camellia is a symmetric key block cipher developed jointly 876584fffc8SSebastian Siewior at NTT and Mitsubishi Electric Corporation. 877584fffc8SSebastian Siewior 878584fffc8SSebastian Siewior The Camellia specifies three key sizes: 128, 192 and 256 bits. 879584fffc8SSebastian Siewior 880584fffc8SSebastian Siewior See also: 881584fffc8SSebastian Siewior <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html> 882584fffc8SSebastian Siewior 8830b95ec56SJussi Kivilinnaconfig CRYPTO_CAMELLIA_X86_64 8840b95ec56SJussi Kivilinna tristate "Camellia cipher algorithm (x86_64)" 885f21a7c19SAl Viro depends on X86 && 64BIT 8860b95ec56SJussi Kivilinna depends on CRYPTO 8870b95ec56SJussi Kivilinna select CRYPTO_ALGAPI 888964263afSJussi Kivilinna select CRYPTO_GLUE_HELPER_X86 8890b95ec56SJussi Kivilinna select CRYPTO_LRW 8900b95ec56SJussi Kivilinna select CRYPTO_XTS 8910b95ec56SJussi Kivilinna help 8920b95ec56SJussi Kivilinna Camellia cipher algorithm module (x86_64). 8930b95ec56SJussi Kivilinna 8940b95ec56SJussi Kivilinna Camellia is a symmetric key block cipher developed jointly 8950b95ec56SJussi Kivilinna at NTT and Mitsubishi Electric Corporation. 8960b95ec56SJussi Kivilinna 8970b95ec56SJussi Kivilinna The Camellia specifies three key sizes: 128, 192 and 256 bits. 8980b95ec56SJussi Kivilinna 8990b95ec56SJussi Kivilinna See also: 9000b95ec56SJussi Kivilinna <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html> 9010b95ec56SJussi Kivilinna 902d9b1d2e7SJussi Kivilinnaconfig CRYPTO_CAMELLIA_AESNI_AVX_X86_64 903d9b1d2e7SJussi Kivilinna tristate "Camellia cipher algorithm (x86_64/AES-NI/AVX)" 904d9b1d2e7SJussi Kivilinna depends on X86 && 64BIT 905d9b1d2e7SJussi Kivilinna depends on CRYPTO 906d9b1d2e7SJussi Kivilinna select CRYPTO_ALGAPI 907d9b1d2e7SJussi Kivilinna select CRYPTO_CRYPTD 908801201aaSArd Biesheuvel select CRYPTO_ABLK_HELPER 909d9b1d2e7SJussi Kivilinna select CRYPTO_GLUE_HELPER_X86 910d9b1d2e7SJussi Kivilinna select CRYPTO_CAMELLIA_X86_64 911d9b1d2e7SJussi Kivilinna select CRYPTO_LRW 912d9b1d2e7SJussi Kivilinna select CRYPTO_XTS 913d9b1d2e7SJussi Kivilinna help 914d9b1d2e7SJussi Kivilinna Camellia cipher algorithm module (x86_64/AES-NI/AVX). 915d9b1d2e7SJussi Kivilinna 916d9b1d2e7SJussi Kivilinna Camellia is a symmetric key block cipher developed jointly 917d9b1d2e7SJussi Kivilinna at NTT and Mitsubishi Electric Corporation. 918d9b1d2e7SJussi Kivilinna 919d9b1d2e7SJussi Kivilinna The Camellia specifies three key sizes: 128, 192 and 256 bits. 920d9b1d2e7SJussi Kivilinna 921d9b1d2e7SJussi Kivilinna See also: 922d9b1d2e7SJussi Kivilinna <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html> 923d9b1d2e7SJussi Kivilinna 924f3f935a7SJussi Kivilinnaconfig CRYPTO_CAMELLIA_AESNI_AVX2_X86_64 925f3f935a7SJussi Kivilinna tristate "Camellia cipher algorithm (x86_64/AES-NI/AVX2)" 926f3f935a7SJussi Kivilinna depends on X86 && 64BIT 927f3f935a7SJussi Kivilinna depends on CRYPTO 928f3f935a7SJussi Kivilinna select CRYPTO_ALGAPI 929f3f935a7SJussi Kivilinna select CRYPTO_CRYPTD 930801201aaSArd Biesheuvel select CRYPTO_ABLK_HELPER 931f3f935a7SJussi Kivilinna select CRYPTO_GLUE_HELPER_X86 932f3f935a7SJussi Kivilinna select CRYPTO_CAMELLIA_X86_64 933f3f935a7SJussi Kivilinna select CRYPTO_CAMELLIA_AESNI_AVX_X86_64 934f3f935a7SJussi Kivilinna select CRYPTO_LRW 935f3f935a7SJussi Kivilinna select CRYPTO_XTS 936f3f935a7SJussi Kivilinna help 937f3f935a7SJussi Kivilinna Camellia cipher algorithm module (x86_64/AES-NI/AVX2). 938f3f935a7SJussi Kivilinna 939f3f935a7SJussi Kivilinna Camellia is a symmetric key block cipher developed jointly 940f3f935a7SJussi Kivilinna at NTT and Mitsubishi Electric Corporation. 941f3f935a7SJussi Kivilinna 942f3f935a7SJussi Kivilinna The Camellia specifies three key sizes: 128, 192 and 256 bits. 943f3f935a7SJussi Kivilinna 944f3f935a7SJussi Kivilinna See also: 945f3f935a7SJussi Kivilinna <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html> 946f3f935a7SJussi Kivilinna 94781658ad0SDavid S. Millerconfig CRYPTO_CAMELLIA_SPARC64 94881658ad0SDavid S. Miller tristate "Camellia cipher algorithm (SPARC64)" 94981658ad0SDavid S. Miller depends on SPARC64 95081658ad0SDavid S. Miller depends on CRYPTO 95181658ad0SDavid S. Miller select CRYPTO_ALGAPI 95281658ad0SDavid S. Miller help 95381658ad0SDavid S. Miller Camellia cipher algorithm module (SPARC64). 95481658ad0SDavid S. Miller 95581658ad0SDavid S. Miller Camellia is a symmetric key block cipher developed jointly 95681658ad0SDavid S. Miller at NTT and Mitsubishi Electric Corporation. 95781658ad0SDavid S. Miller 95881658ad0SDavid S. Miller The Camellia specifies three key sizes: 128, 192 and 256 bits. 95981658ad0SDavid S. Miller 96081658ad0SDavid S. Miller See also: 96181658ad0SDavid S. Miller <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html> 96281658ad0SDavid S. Miller 963044ab525SJussi Kivilinnaconfig CRYPTO_CAST_COMMON 964044ab525SJussi Kivilinna tristate 965044ab525SJussi Kivilinna help 966044ab525SJussi Kivilinna Common parts of the CAST cipher algorithms shared by the 967044ab525SJussi Kivilinna generic c and the assembler implementations. 968044ab525SJussi Kivilinna 969584fffc8SSebastian Siewiorconfig CRYPTO_CAST5 970584fffc8SSebastian Siewior tristate "CAST5 (CAST-128) cipher algorithm" 971584fffc8SSebastian Siewior select CRYPTO_ALGAPI 972044ab525SJussi Kivilinna select CRYPTO_CAST_COMMON 973584fffc8SSebastian Siewior help 974584fffc8SSebastian Siewior The CAST5 encryption algorithm (synonymous with CAST-128) is 975584fffc8SSebastian Siewior described in RFC2144. 976584fffc8SSebastian Siewior 9774d6d6a2cSJohannes Goetzfriedconfig CRYPTO_CAST5_AVX_X86_64 9784d6d6a2cSJohannes Goetzfried tristate "CAST5 (CAST-128) cipher algorithm (x86_64/AVX)" 9794d6d6a2cSJohannes Goetzfried depends on X86 && 64BIT 9804d6d6a2cSJohannes Goetzfried select CRYPTO_ALGAPI 9814d6d6a2cSJohannes Goetzfried select CRYPTO_CRYPTD 982801201aaSArd Biesheuvel select CRYPTO_ABLK_HELPER 983044ab525SJussi Kivilinna select CRYPTO_CAST_COMMON 9844d6d6a2cSJohannes Goetzfried select CRYPTO_CAST5 9854d6d6a2cSJohannes Goetzfried help 9864d6d6a2cSJohannes Goetzfried The CAST5 encryption algorithm (synonymous with CAST-128) is 9874d6d6a2cSJohannes Goetzfried described in RFC2144. 9884d6d6a2cSJohannes Goetzfried 9894d6d6a2cSJohannes Goetzfried This module provides the Cast5 cipher algorithm that processes 9904d6d6a2cSJohannes Goetzfried sixteen blocks parallel using the AVX instruction set. 9914d6d6a2cSJohannes Goetzfried 992584fffc8SSebastian Siewiorconfig CRYPTO_CAST6 993584fffc8SSebastian Siewior tristate "CAST6 (CAST-256) cipher algorithm" 994584fffc8SSebastian Siewior select CRYPTO_ALGAPI 995044ab525SJussi Kivilinna select CRYPTO_CAST_COMMON 996584fffc8SSebastian Siewior help 997584fffc8SSebastian Siewior The CAST6 encryption algorithm (synonymous with CAST-256) is 998584fffc8SSebastian Siewior described in RFC2612. 999584fffc8SSebastian Siewior 10004ea1277dSJohannes Goetzfriedconfig CRYPTO_CAST6_AVX_X86_64 10014ea1277dSJohannes Goetzfried tristate "CAST6 (CAST-256) cipher algorithm (x86_64/AVX)" 10024ea1277dSJohannes Goetzfried depends on X86 && 64BIT 10034ea1277dSJohannes Goetzfried select CRYPTO_ALGAPI 10044ea1277dSJohannes Goetzfried select CRYPTO_CRYPTD 1005801201aaSArd Biesheuvel select CRYPTO_ABLK_HELPER 10064ea1277dSJohannes Goetzfried select CRYPTO_GLUE_HELPER_X86 1007044ab525SJussi Kivilinna select CRYPTO_CAST_COMMON 10084ea1277dSJohannes Goetzfried select CRYPTO_CAST6 10094ea1277dSJohannes Goetzfried select CRYPTO_LRW 10104ea1277dSJohannes Goetzfried select CRYPTO_XTS 10114ea1277dSJohannes Goetzfried help 10124ea1277dSJohannes Goetzfried The CAST6 encryption algorithm (synonymous with CAST-256) is 10134ea1277dSJohannes Goetzfried described in RFC2612. 10144ea1277dSJohannes Goetzfried 10154ea1277dSJohannes Goetzfried This module provides the Cast6 cipher algorithm that processes 10164ea1277dSJohannes Goetzfried eight blocks parallel using the AVX instruction set. 10174ea1277dSJohannes Goetzfried 1018584fffc8SSebastian Siewiorconfig CRYPTO_DES 1019584fffc8SSebastian Siewior tristate "DES and Triple DES EDE cipher algorithms" 1020584fffc8SSebastian Siewior select CRYPTO_ALGAPI 1021584fffc8SSebastian Siewior help 1022584fffc8SSebastian Siewior DES cipher algorithm (FIPS 46-2), and Triple DES EDE (FIPS 46-3). 1023584fffc8SSebastian Siewior 1024c5aac2dfSDavid S. Millerconfig CRYPTO_DES_SPARC64 1025c5aac2dfSDavid S. Miller tristate "DES and Triple DES EDE cipher algorithms (SPARC64)" 102697da37b3SDave Jones depends on SPARC64 1027c5aac2dfSDavid S. Miller select CRYPTO_ALGAPI 1028c5aac2dfSDavid S. Miller select CRYPTO_DES 1029c5aac2dfSDavid S. Miller help 1030c5aac2dfSDavid S. Miller DES cipher algorithm (FIPS 46-2), and Triple DES EDE (FIPS 46-3), 1031c5aac2dfSDavid S. Miller optimized using SPARC64 crypto opcodes. 1032c5aac2dfSDavid S. Miller 1033584fffc8SSebastian Siewiorconfig CRYPTO_FCRYPT 1034584fffc8SSebastian Siewior tristate "FCrypt cipher algorithm" 1035584fffc8SSebastian Siewior select CRYPTO_ALGAPI 1036584fffc8SSebastian Siewior select CRYPTO_BLKCIPHER 1037584fffc8SSebastian Siewior help 1038584fffc8SSebastian Siewior FCrypt algorithm used by RxRPC. 1039584fffc8SSebastian Siewior 1040584fffc8SSebastian Siewiorconfig CRYPTO_KHAZAD 1041584fffc8SSebastian Siewior tristate "Khazad cipher algorithm" 1042584fffc8SSebastian Siewior select CRYPTO_ALGAPI 1043584fffc8SSebastian Siewior help 1044584fffc8SSebastian Siewior Khazad cipher algorithm. 1045584fffc8SSebastian Siewior 1046584fffc8SSebastian Siewior Khazad was a finalist in the initial NESSIE competition. It is 1047584fffc8SSebastian Siewior an algorithm optimized for 64-bit processors with good performance 1048584fffc8SSebastian Siewior on 32-bit processors. Khazad uses an 128 bit key size. 1049584fffc8SSebastian Siewior 1050584fffc8SSebastian Siewior See also: 10516d8de74cSJustin P. Mattock <http://www.larc.usp.br/~pbarreto/KhazadPage.html> 1052e2ee95b8SHye-Shik Chang 10532407d608STan Swee Hengconfig CRYPTO_SALSA20 10543b4afaf2SKees Cook tristate "Salsa20 stream cipher algorithm" 10552407d608STan Swee Heng select CRYPTO_BLKCIPHER 10562407d608STan Swee Heng help 10572407d608STan Swee Heng Salsa20 stream cipher algorithm. 10582407d608STan Swee Heng 10592407d608STan Swee Heng Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT 10602407d608STan Swee Heng Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/> 10612407d608STan Swee Heng 10622407d608STan Swee Heng The Salsa20 stream cipher algorithm is designed by Daniel J. 10632407d608STan Swee Heng Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html> 10641da177e4SLinus Torvalds 1065974e4b75STan Swee Hengconfig CRYPTO_SALSA20_586 10663b4afaf2SKees Cook tristate "Salsa20 stream cipher algorithm (i586)" 1067974e4b75STan Swee Heng depends on (X86 || UML_X86) && !64BIT 1068974e4b75STan Swee Heng select CRYPTO_BLKCIPHER 1069974e4b75STan Swee Heng help 1070974e4b75STan Swee Heng Salsa20 stream cipher algorithm. 1071974e4b75STan Swee Heng 1072974e4b75STan Swee Heng Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT 1073974e4b75STan Swee Heng Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/> 1074974e4b75STan Swee Heng 1075974e4b75STan Swee Heng The Salsa20 stream cipher algorithm is designed by Daniel J. 1076974e4b75STan Swee Heng Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html> 1077974e4b75STan Swee Heng 10789a7dafbbSTan Swee Hengconfig CRYPTO_SALSA20_X86_64 10793b4afaf2SKees Cook tristate "Salsa20 stream cipher algorithm (x86_64)" 10809a7dafbbSTan Swee Heng depends on (X86 || UML_X86) && 64BIT 10819a7dafbbSTan Swee Heng select CRYPTO_BLKCIPHER 10829a7dafbbSTan Swee Heng help 10839a7dafbbSTan Swee Heng Salsa20 stream cipher algorithm. 10849a7dafbbSTan Swee Heng 10859a7dafbbSTan Swee Heng Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT 10869a7dafbbSTan Swee Heng Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/> 10879a7dafbbSTan Swee Heng 10889a7dafbbSTan Swee Heng The Salsa20 stream cipher algorithm is designed by Daniel J. 10899a7dafbbSTan Swee Heng Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html> 10909a7dafbbSTan Swee Heng 1091584fffc8SSebastian Siewiorconfig CRYPTO_SEED 1092584fffc8SSebastian Siewior tristate "SEED cipher algorithm" 1093584fffc8SSebastian Siewior select CRYPTO_ALGAPI 1094584fffc8SSebastian Siewior help 1095584fffc8SSebastian Siewior SEED cipher algorithm (RFC4269). 1096584fffc8SSebastian Siewior 1097584fffc8SSebastian Siewior SEED is a 128-bit symmetric key block cipher that has been 1098584fffc8SSebastian Siewior developed by KISA (Korea Information Security Agency) as a 1099584fffc8SSebastian Siewior national standard encryption algorithm of the Republic of Korea. 1100584fffc8SSebastian Siewior It is a 16 round block cipher with the key size of 128 bit. 1101584fffc8SSebastian Siewior 1102584fffc8SSebastian Siewior See also: 1103584fffc8SSebastian Siewior <http://www.kisa.or.kr/kisa/seed/jsp/seed_eng.jsp> 1104584fffc8SSebastian Siewior 1105584fffc8SSebastian Siewiorconfig CRYPTO_SERPENT 1106584fffc8SSebastian Siewior tristate "Serpent cipher algorithm" 1107584fffc8SSebastian Siewior select CRYPTO_ALGAPI 1108584fffc8SSebastian Siewior help 1109584fffc8SSebastian Siewior Serpent cipher algorithm, by Anderson, Biham & Knudsen. 1110584fffc8SSebastian Siewior 1111584fffc8SSebastian Siewior Keys are allowed to be from 0 to 256 bits in length, in steps 1112584fffc8SSebastian Siewior of 8 bits. Also includes the 'Tnepres' algorithm, a reversed 1113584fffc8SSebastian Siewior variant of Serpent for compatibility with old kerneli.org code. 1114584fffc8SSebastian Siewior 1115584fffc8SSebastian Siewior See also: 1116584fffc8SSebastian Siewior <http://www.cl.cam.ac.uk/~rja14/serpent.html> 1117584fffc8SSebastian Siewior 1118937c30d7SJussi Kivilinnaconfig CRYPTO_SERPENT_SSE2_X86_64 1119937c30d7SJussi Kivilinna tristate "Serpent cipher algorithm (x86_64/SSE2)" 1120937c30d7SJussi Kivilinna depends on X86 && 64BIT 1121937c30d7SJussi Kivilinna select CRYPTO_ALGAPI 1122341975bfSJussi Kivilinna select CRYPTO_CRYPTD 1123801201aaSArd Biesheuvel select CRYPTO_ABLK_HELPER 1124596d8750SJussi Kivilinna select CRYPTO_GLUE_HELPER_X86 1125937c30d7SJussi Kivilinna select CRYPTO_SERPENT 1126feaf0cfcSJussi Kivilinna select CRYPTO_LRW 1127feaf0cfcSJussi Kivilinna select CRYPTO_XTS 1128937c30d7SJussi Kivilinna help 1129937c30d7SJussi Kivilinna Serpent cipher algorithm, by Anderson, Biham & Knudsen. 1130937c30d7SJussi Kivilinna 1131937c30d7SJussi Kivilinna Keys are allowed to be from 0 to 256 bits in length, in steps 1132937c30d7SJussi Kivilinna of 8 bits. 1133937c30d7SJussi Kivilinna 1134937c30d7SJussi Kivilinna This module provides Serpent cipher algorithm that processes eigth 1135937c30d7SJussi Kivilinna blocks parallel using SSE2 instruction set. 1136937c30d7SJussi Kivilinna 1137937c30d7SJussi Kivilinna See also: 1138937c30d7SJussi Kivilinna <http://www.cl.cam.ac.uk/~rja14/serpent.html> 1139937c30d7SJussi Kivilinna 1140251496dbSJussi Kivilinnaconfig CRYPTO_SERPENT_SSE2_586 1141251496dbSJussi Kivilinna tristate "Serpent cipher algorithm (i586/SSE2)" 1142251496dbSJussi Kivilinna depends on X86 && !64BIT 1143251496dbSJussi Kivilinna select CRYPTO_ALGAPI 1144341975bfSJussi Kivilinna select CRYPTO_CRYPTD 1145801201aaSArd Biesheuvel select CRYPTO_ABLK_HELPER 1146596d8750SJussi Kivilinna select CRYPTO_GLUE_HELPER_X86 1147251496dbSJussi Kivilinna select CRYPTO_SERPENT 1148feaf0cfcSJussi Kivilinna select CRYPTO_LRW 1149feaf0cfcSJussi Kivilinna select CRYPTO_XTS 1150251496dbSJussi Kivilinna help 1151251496dbSJussi Kivilinna Serpent cipher algorithm, by Anderson, Biham & Knudsen. 1152251496dbSJussi Kivilinna 1153251496dbSJussi Kivilinna Keys are allowed to be from 0 to 256 bits in length, in steps 1154251496dbSJussi Kivilinna of 8 bits. 1155251496dbSJussi Kivilinna 1156251496dbSJussi Kivilinna This module provides Serpent cipher algorithm that processes four 1157251496dbSJussi Kivilinna blocks parallel using SSE2 instruction set. 1158251496dbSJussi Kivilinna 1159251496dbSJussi Kivilinna See also: 1160251496dbSJussi Kivilinna <http://www.cl.cam.ac.uk/~rja14/serpent.html> 1161251496dbSJussi Kivilinna 11627efe4076SJohannes Goetzfriedconfig CRYPTO_SERPENT_AVX_X86_64 11637efe4076SJohannes Goetzfried tristate "Serpent cipher algorithm (x86_64/AVX)" 11647efe4076SJohannes Goetzfried depends on X86 && 64BIT 11657efe4076SJohannes Goetzfried select CRYPTO_ALGAPI 11667efe4076SJohannes Goetzfried select CRYPTO_CRYPTD 1167801201aaSArd Biesheuvel select CRYPTO_ABLK_HELPER 11681d0debbdSJussi Kivilinna select CRYPTO_GLUE_HELPER_X86 11697efe4076SJohannes Goetzfried select CRYPTO_SERPENT 11707efe4076SJohannes Goetzfried select CRYPTO_LRW 11717efe4076SJohannes Goetzfried select CRYPTO_XTS 11727efe4076SJohannes Goetzfried help 11737efe4076SJohannes Goetzfried Serpent cipher algorithm, by Anderson, Biham & Knudsen. 11747efe4076SJohannes Goetzfried 11757efe4076SJohannes Goetzfried Keys are allowed to be from 0 to 256 bits in length, in steps 11767efe4076SJohannes Goetzfried of 8 bits. 11777efe4076SJohannes Goetzfried 11787efe4076SJohannes Goetzfried This module provides the Serpent cipher algorithm that processes 11797efe4076SJohannes Goetzfried eight blocks parallel using the AVX instruction set. 11807efe4076SJohannes Goetzfried 11817efe4076SJohannes Goetzfried See also: 11827efe4076SJohannes Goetzfried <http://www.cl.cam.ac.uk/~rja14/serpent.html> 11837efe4076SJohannes Goetzfried 118456d76c96SJussi Kivilinnaconfig CRYPTO_SERPENT_AVX2_X86_64 118556d76c96SJussi Kivilinna tristate "Serpent cipher algorithm (x86_64/AVX2)" 118656d76c96SJussi Kivilinna depends on X86 && 64BIT 118756d76c96SJussi Kivilinna select CRYPTO_ALGAPI 118856d76c96SJussi Kivilinna select CRYPTO_CRYPTD 1189801201aaSArd Biesheuvel select CRYPTO_ABLK_HELPER 119056d76c96SJussi Kivilinna select CRYPTO_GLUE_HELPER_X86 119156d76c96SJussi Kivilinna select CRYPTO_SERPENT 119256d76c96SJussi Kivilinna select CRYPTO_SERPENT_AVX_X86_64 119356d76c96SJussi Kivilinna select CRYPTO_LRW 119456d76c96SJussi Kivilinna select CRYPTO_XTS 119556d76c96SJussi Kivilinna help 119656d76c96SJussi Kivilinna Serpent cipher algorithm, by Anderson, Biham & Knudsen. 119756d76c96SJussi Kivilinna 119856d76c96SJussi Kivilinna Keys are allowed to be from 0 to 256 bits in length, in steps 119956d76c96SJussi Kivilinna of 8 bits. 120056d76c96SJussi Kivilinna 120156d76c96SJussi Kivilinna This module provides Serpent cipher algorithm that processes 16 120256d76c96SJussi Kivilinna blocks parallel using AVX2 instruction set. 120356d76c96SJussi Kivilinna 120456d76c96SJussi Kivilinna See also: 120556d76c96SJussi Kivilinna <http://www.cl.cam.ac.uk/~rja14/serpent.html> 120656d76c96SJussi Kivilinna 1207584fffc8SSebastian Siewiorconfig CRYPTO_TEA 1208584fffc8SSebastian Siewior tristate "TEA, XTEA and XETA cipher algorithms" 1209584fffc8SSebastian Siewior select CRYPTO_ALGAPI 1210584fffc8SSebastian Siewior help 1211584fffc8SSebastian Siewior TEA cipher algorithm. 1212584fffc8SSebastian Siewior 1213584fffc8SSebastian Siewior Tiny Encryption Algorithm is a simple cipher that uses 1214584fffc8SSebastian Siewior many rounds for security. It is very fast and uses 1215584fffc8SSebastian Siewior little memory. 1216584fffc8SSebastian Siewior 1217584fffc8SSebastian Siewior Xtendend Tiny Encryption Algorithm is a modification to 1218584fffc8SSebastian Siewior the TEA algorithm to address a potential key weakness 1219584fffc8SSebastian Siewior in the TEA algorithm. 1220584fffc8SSebastian Siewior 1221584fffc8SSebastian Siewior Xtendend Encryption Tiny Algorithm is a mis-implementation 1222584fffc8SSebastian Siewior of the XTEA algorithm for compatibility purposes. 1223584fffc8SSebastian Siewior 1224584fffc8SSebastian Siewiorconfig CRYPTO_TWOFISH 1225584fffc8SSebastian Siewior tristate "Twofish cipher algorithm" 1226584fffc8SSebastian Siewior select CRYPTO_ALGAPI 1227584fffc8SSebastian Siewior select CRYPTO_TWOFISH_COMMON 1228584fffc8SSebastian Siewior help 1229584fffc8SSebastian Siewior Twofish cipher algorithm. 1230584fffc8SSebastian Siewior 1231584fffc8SSebastian Siewior Twofish was submitted as an AES (Advanced Encryption Standard) 1232584fffc8SSebastian Siewior candidate cipher by researchers at CounterPane Systems. It is a 1233584fffc8SSebastian Siewior 16 round block cipher supporting key sizes of 128, 192, and 256 1234584fffc8SSebastian Siewior bits. 1235584fffc8SSebastian Siewior 1236584fffc8SSebastian Siewior See also: 1237584fffc8SSebastian Siewior <http://www.schneier.com/twofish.html> 1238584fffc8SSebastian Siewior 1239584fffc8SSebastian Siewiorconfig CRYPTO_TWOFISH_COMMON 1240584fffc8SSebastian Siewior tristate 1241584fffc8SSebastian Siewior help 1242584fffc8SSebastian Siewior Common parts of the Twofish cipher algorithm shared by the 1243584fffc8SSebastian Siewior generic c and the assembler implementations. 1244584fffc8SSebastian Siewior 1245584fffc8SSebastian Siewiorconfig CRYPTO_TWOFISH_586 1246584fffc8SSebastian Siewior tristate "Twofish cipher algorithms (i586)" 1247584fffc8SSebastian Siewior depends on (X86 || UML_X86) && !64BIT 1248584fffc8SSebastian Siewior select CRYPTO_ALGAPI 1249584fffc8SSebastian Siewior select CRYPTO_TWOFISH_COMMON 1250584fffc8SSebastian Siewior help 1251584fffc8SSebastian Siewior Twofish cipher algorithm. 1252584fffc8SSebastian Siewior 1253584fffc8SSebastian Siewior Twofish was submitted as an AES (Advanced Encryption Standard) 1254584fffc8SSebastian Siewior candidate cipher by researchers at CounterPane Systems. It is a 1255584fffc8SSebastian Siewior 16 round block cipher supporting key sizes of 128, 192, and 256 1256584fffc8SSebastian Siewior bits. 1257584fffc8SSebastian Siewior 1258584fffc8SSebastian Siewior See also: 1259584fffc8SSebastian Siewior <http://www.schneier.com/twofish.html> 1260584fffc8SSebastian Siewior 1261584fffc8SSebastian Siewiorconfig CRYPTO_TWOFISH_X86_64 1262584fffc8SSebastian Siewior tristate "Twofish cipher algorithm (x86_64)" 1263584fffc8SSebastian Siewior depends on (X86 || UML_X86) && 64BIT 1264584fffc8SSebastian Siewior select CRYPTO_ALGAPI 1265584fffc8SSebastian Siewior select CRYPTO_TWOFISH_COMMON 1266584fffc8SSebastian Siewior help 1267584fffc8SSebastian Siewior Twofish cipher algorithm (x86_64). 1268584fffc8SSebastian Siewior 1269584fffc8SSebastian Siewior Twofish was submitted as an AES (Advanced Encryption Standard) 1270584fffc8SSebastian Siewior candidate cipher by researchers at CounterPane Systems. It is a 1271584fffc8SSebastian Siewior 16 round block cipher supporting key sizes of 128, 192, and 256 1272584fffc8SSebastian Siewior bits. 1273584fffc8SSebastian Siewior 1274584fffc8SSebastian Siewior See also: 1275584fffc8SSebastian Siewior <http://www.schneier.com/twofish.html> 1276584fffc8SSebastian Siewior 12778280daadSJussi Kivilinnaconfig CRYPTO_TWOFISH_X86_64_3WAY 12788280daadSJussi Kivilinna tristate "Twofish cipher algorithm (x86_64, 3-way parallel)" 1279f21a7c19SAl Viro depends on X86 && 64BIT 12808280daadSJussi Kivilinna select CRYPTO_ALGAPI 12818280daadSJussi Kivilinna select CRYPTO_TWOFISH_COMMON 12828280daadSJussi Kivilinna select CRYPTO_TWOFISH_X86_64 1283414cb5e7SJussi Kivilinna select CRYPTO_GLUE_HELPER_X86 1284e7cda5d2SJussi Kivilinna select CRYPTO_LRW 1285e7cda5d2SJussi Kivilinna select CRYPTO_XTS 12868280daadSJussi Kivilinna help 12878280daadSJussi Kivilinna Twofish cipher algorithm (x86_64, 3-way parallel). 12888280daadSJussi Kivilinna 12898280daadSJussi Kivilinna Twofish was submitted as an AES (Advanced Encryption Standard) 12908280daadSJussi Kivilinna candidate cipher by researchers at CounterPane Systems. It is a 12918280daadSJussi Kivilinna 16 round block cipher supporting key sizes of 128, 192, and 256 12928280daadSJussi Kivilinna bits. 12938280daadSJussi Kivilinna 12948280daadSJussi Kivilinna This module provides Twofish cipher algorithm that processes three 12958280daadSJussi Kivilinna blocks parallel, utilizing resources of out-of-order CPUs better. 12968280daadSJussi Kivilinna 12978280daadSJussi Kivilinna See also: 12988280daadSJussi Kivilinna <http://www.schneier.com/twofish.html> 12998280daadSJussi Kivilinna 1300107778b5SJohannes Goetzfriedconfig CRYPTO_TWOFISH_AVX_X86_64 1301107778b5SJohannes Goetzfried tristate "Twofish cipher algorithm (x86_64/AVX)" 1302107778b5SJohannes Goetzfried depends on X86 && 64BIT 1303107778b5SJohannes Goetzfried select CRYPTO_ALGAPI 1304107778b5SJohannes Goetzfried select CRYPTO_CRYPTD 1305801201aaSArd Biesheuvel select CRYPTO_ABLK_HELPER 1306a7378d4eSJussi Kivilinna select CRYPTO_GLUE_HELPER_X86 1307107778b5SJohannes Goetzfried select CRYPTO_TWOFISH_COMMON 1308107778b5SJohannes Goetzfried select CRYPTO_TWOFISH_X86_64 1309107778b5SJohannes Goetzfried select CRYPTO_TWOFISH_X86_64_3WAY 1310107778b5SJohannes Goetzfried select CRYPTO_LRW 1311107778b5SJohannes Goetzfried select CRYPTO_XTS 1312107778b5SJohannes Goetzfried help 1313107778b5SJohannes Goetzfried Twofish cipher algorithm (x86_64/AVX). 1314107778b5SJohannes Goetzfried 1315107778b5SJohannes Goetzfried Twofish was submitted as an AES (Advanced Encryption Standard) 1316107778b5SJohannes Goetzfried candidate cipher by researchers at CounterPane Systems. It is a 1317107778b5SJohannes Goetzfried 16 round block cipher supporting key sizes of 128, 192, and 256 1318107778b5SJohannes Goetzfried bits. 1319107778b5SJohannes Goetzfried 1320107778b5SJohannes Goetzfried This module provides the Twofish cipher algorithm that processes 1321107778b5SJohannes Goetzfried eight blocks parallel using the AVX Instruction Set. 1322107778b5SJohannes Goetzfried 1323107778b5SJohannes Goetzfried See also: 1324107778b5SJohannes Goetzfried <http://www.schneier.com/twofish.html> 1325107778b5SJohannes Goetzfried 1326584fffc8SSebastian Siewiorcomment "Compression" 1327584fffc8SSebastian Siewior 13281da177e4SLinus Torvaldsconfig CRYPTO_DEFLATE 13291da177e4SLinus Torvalds tristate "Deflate compression algorithm" 1330cce9e06dSHerbert Xu select CRYPTO_ALGAPI 13311da177e4SLinus Torvalds select ZLIB_INFLATE 13321da177e4SLinus Torvalds select ZLIB_DEFLATE 13331da177e4SLinus Torvalds help 13341da177e4SLinus Torvalds This is the Deflate algorithm (RFC1951), specified for use in 13351da177e4SLinus Torvalds IPSec with the IPCOMP protocol (RFC3173, RFC2394). 13361da177e4SLinus Torvalds 13371da177e4SLinus Torvalds You will most probably want this if using IPSec. 13381da177e4SLinus Torvalds 1339bf68e65eSGeert Uytterhoevenconfig CRYPTO_ZLIB 1340bf68e65eSGeert Uytterhoeven tristate "Zlib compression algorithm" 1341bf68e65eSGeert Uytterhoeven select CRYPTO_PCOMP 1342bf68e65eSGeert Uytterhoeven select ZLIB_INFLATE 1343bf68e65eSGeert Uytterhoeven select ZLIB_DEFLATE 1344bf68e65eSGeert Uytterhoeven select NLATTR 1345bf68e65eSGeert Uytterhoeven help 1346bf68e65eSGeert Uytterhoeven This is the zlib algorithm. 1347bf68e65eSGeert Uytterhoeven 13480b77abb3SZoltan Sogorconfig CRYPTO_LZO 13490b77abb3SZoltan Sogor tristate "LZO compression algorithm" 13500b77abb3SZoltan Sogor select CRYPTO_ALGAPI 13510b77abb3SZoltan Sogor select LZO_COMPRESS 13520b77abb3SZoltan Sogor select LZO_DECOMPRESS 13530b77abb3SZoltan Sogor help 13540b77abb3SZoltan Sogor This is the LZO algorithm. 13550b77abb3SZoltan Sogor 135635a1fc18SSeth Jenningsconfig CRYPTO_842 135735a1fc18SSeth Jennings tristate "842 compression algorithm" 135835a1fc18SSeth Jennings depends on CRYPTO_DEV_NX_COMPRESS 135935a1fc18SSeth Jennings # 842 uses lzo if the hardware becomes unavailable 136035a1fc18SSeth Jennings select LZO_COMPRESS 136135a1fc18SSeth Jennings select LZO_DECOMPRESS 136235a1fc18SSeth Jennings help 136335a1fc18SSeth Jennings This is the 842 algorithm. 136435a1fc18SSeth Jennings 13650ea8530dSChanho Minconfig CRYPTO_LZ4 13660ea8530dSChanho Min tristate "LZ4 compression algorithm" 13670ea8530dSChanho Min select CRYPTO_ALGAPI 13680ea8530dSChanho Min select LZ4_COMPRESS 13690ea8530dSChanho Min select LZ4_DECOMPRESS 13700ea8530dSChanho Min help 13710ea8530dSChanho Min This is the LZ4 algorithm. 13720ea8530dSChanho Min 13730ea8530dSChanho Minconfig CRYPTO_LZ4HC 13740ea8530dSChanho Min tristate "LZ4HC compression algorithm" 13750ea8530dSChanho Min select CRYPTO_ALGAPI 13760ea8530dSChanho Min select LZ4HC_COMPRESS 13770ea8530dSChanho Min select LZ4_DECOMPRESS 13780ea8530dSChanho Min help 13790ea8530dSChanho Min This is the LZ4 high compression mode algorithm. 13800ea8530dSChanho Min 138117f0f4a4SNeil Hormancomment "Random Number Generation" 138217f0f4a4SNeil Horman 138317f0f4a4SNeil Hormanconfig CRYPTO_ANSI_CPRNG 138417f0f4a4SNeil Horman tristate "Pseudo Random Number Generation for Cryptographic modules" 13854e4ed83bSNeil Horman default m 138617f0f4a4SNeil Horman select CRYPTO_AES 138717f0f4a4SNeil Horman select CRYPTO_RNG 138817f0f4a4SNeil Horman help 138917f0f4a4SNeil Horman This option enables the generic pseudo random number generator 139017f0f4a4SNeil Horman for cryptographic modules. Uses the Algorithm specified in 13917dd607e8SJiri Kosina ANSI X9.31 A.2.4. Note that this option must be enabled if 13927dd607e8SJiri Kosina CRYPTO_FIPS is selected 139317f0f4a4SNeil Horman 139403c8efc1SHerbert Xuconfig CRYPTO_USER_API 139503c8efc1SHerbert Xu tristate 139603c8efc1SHerbert Xu 1397fe869cdbSHerbert Xuconfig CRYPTO_USER_API_HASH 1398fe869cdbSHerbert Xu tristate "User-space interface for hash algorithms" 13997451708fSHerbert Xu depends on NET 1400fe869cdbSHerbert Xu select CRYPTO_HASH 1401fe869cdbSHerbert Xu select CRYPTO_USER_API 1402fe869cdbSHerbert Xu help 1403fe869cdbSHerbert Xu This option enables the user-spaces interface for hash 1404fe869cdbSHerbert Xu algorithms. 1405fe869cdbSHerbert Xu 14068ff59090SHerbert Xuconfig CRYPTO_USER_API_SKCIPHER 14078ff59090SHerbert Xu tristate "User-space interface for symmetric key cipher algorithms" 14087451708fSHerbert Xu depends on NET 14098ff59090SHerbert Xu select CRYPTO_BLKCIPHER 14108ff59090SHerbert Xu select CRYPTO_USER_API 14118ff59090SHerbert Xu help 14128ff59090SHerbert Xu This option enables the user-spaces interface for symmetric 14138ff59090SHerbert Xu key cipher algorithms. 14148ff59090SHerbert Xu 1415ee08997fSDmitry Kasatkinconfig CRYPTO_HASH_INFO 1416ee08997fSDmitry Kasatkin bool 1417ee08997fSDmitry Kasatkin 14181da177e4SLinus Torvaldssource "drivers/crypto/Kconfig" 1419964f3b3bSDavid Howellssource crypto/asymmetric_keys/Kconfig 14201da177e4SLinus Torvalds 1421cce9e06dSHerbert Xuendif # if CRYPTO 1422