2 # Generic algorithms support
8 # async_tx api: hardware offloaded memory transfer/transform support
10 source "crypto/async_tx/Kconfig"
13 # Cryptographic API Configuration
16 bool "Cryptographic API"
18 This option provides the core Cryptographic API.
25 This option provides the API for cryptographic algorithms.
27 config CRYPTO_ABLKCIPHER
29 select CRYPTO_BLKCIPHER
35 config CRYPTO_BLKCIPHER
44 tristate "Cryptographic algorithm manager"
47 Create default cryptographic template instantiations such as
51 tristate "HMAC support"
55 HMAC: Keyed-Hashing for Message Authentication (RFC2104).
56 This is required for IPSec.
59 tristate "XCBC support"
60 depends on EXPERIMENTAL
64 XCBC: Keyed-Hashing with encryption algorithm
65 http://www.ietf.org/rfc/rfc3566.txt
66 http://csrc.nist.gov/encryption/modes/proposedmodes/
67 xcbc-mac/xcbc-mac-spec.pdf
70 tristate "Null algorithms"
73 These are 'Null' algorithms, used by IPsec, which do nothing.
76 tristate "MD4 digest algorithm"
79 MD4 message digest algorithm (RFC1320).
82 tristate "MD5 digest algorithm"
85 MD5 message digest algorithm (RFC1321).
88 tristate "SHA1 digest algorithm"
91 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2).
94 tristate "SHA256 digest algorithm"
97 SHA256 secure hash standard (DFIPS 180-2).
99 This version of SHA implements a 256 bit hash with 128 bits of
100 security against collision attacks.
103 tristate "SHA384 and SHA512 digest algorithms"
106 SHA512 secure hash standard (DFIPS 180-2).
108 This version of SHA implements a 512 bit hash with 256 bits of
109 security against collision attacks.
111 This code also includes SHA-384, a 384 bit hash with 192 bits
112 of security against collision attacks.
115 tristate "Whirlpool digest algorithms"
118 Whirlpool hash algorithm 512, 384 and 256-bit hashes
120 Whirlpool-512 is part of the NESSIE cryptographic primitives.
121 Whirlpool will be part of the ISO/IEC 10118-3:2003(E) standard
124 <http://planeta.terra.com.br/informatica/paulobarreto/WhirlpoolPage.html>
127 tristate "Tiger digest algorithms"
130 Tiger hash algorithm 192, 160 and 128-bit hashes
132 Tiger is a hash function optimized for 64-bit processors while
133 still having decent performance on 32-bit processors.
134 Tiger was developed by Ross Anderson and Eli Biham.
137 <http://www.cs.technion.ac.il/~biham/Reports/Tiger/>.
139 config CRYPTO_GF128MUL
140 tristate "GF(2^128) multiplication functions (EXPERIMENTAL)"
141 depends on EXPERIMENTAL
143 Efficient table driven implementation of multiplications in the
144 field GF(2^128). This is needed by some cypher modes. This
145 option will be selected automatically if you select such a
146 cipher mode. Only select this option by hand if you expect to load
147 an external module that requires these functions.
150 tristate "ECB support"
151 select CRYPTO_BLKCIPHER
152 select CRYPTO_MANAGER
154 ECB: Electronic CodeBook mode
155 This is the simplest block cipher algorithm. It simply encrypts
156 the input block by block.
159 tristate "CBC support"
160 select CRYPTO_BLKCIPHER
161 select CRYPTO_MANAGER
163 CBC: Cipher Block Chaining mode
164 This block cipher algorithm is required for IPSec.
167 tristate "PCBC support"
168 select CRYPTO_BLKCIPHER
169 select CRYPTO_MANAGER
171 PCBC: Propagating Cipher Block Chaining mode
172 This block cipher algorithm is required for RxRPC.
175 tristate "LRW support (EXPERIMENTAL)"
176 depends on EXPERIMENTAL
177 select CRYPTO_BLKCIPHER
178 select CRYPTO_MANAGER
179 select CRYPTO_GF128MUL
181 LRW: Liskov Rivest Wagner, a tweakable, non malleable, non movable
182 narrow block cipher mode for dm-crypt. Use it with cipher
183 specification string aes-lrw-benbi, the key must be 256, 320 or 384.
184 The first 128, 192 or 256 bits in the key are used for AES and the
185 rest is used to tie each cipher block to its logical position.
188 tristate "Software async crypto daemon"
189 select CRYPTO_ABLKCIPHER
190 select CRYPTO_MANAGER
192 This is a generic software asynchronous crypto daemon that
193 converts an arbitrary synchronous software crypto algorithm
194 into an asynchronous algorithm that executes in a kernel thread.
197 tristate "DES and Triple DES EDE cipher algorithms"
200 DES cipher algorithm (FIPS 46-2), and Triple DES EDE (FIPS 46-3).
203 tristate "FCrypt cipher algorithm"
205 select CRYPTO_BLKCIPHER
207 FCrypt algorithm used by RxRPC.
209 config CRYPTO_BLOWFISH
210 tristate "Blowfish cipher algorithm"
213 Blowfish cipher algorithm, by Bruce Schneier.
215 This is a variable key length cipher which can use keys from 32
216 bits to 448 bits in length. It's fast, simple and specifically
217 designed for use on "large microprocessors".
220 <http://www.schneier.com/blowfish.html>
222 config CRYPTO_TWOFISH
223 tristate "Twofish cipher algorithm"
225 select CRYPTO_TWOFISH_COMMON
227 Twofish cipher algorithm.
229 Twofish was submitted as an AES (Advanced Encryption Standard)
230 candidate cipher by researchers at CounterPane Systems. It is a
231 16 round block cipher supporting key sizes of 128, 192, and 256
235 <http://www.schneier.com/twofish.html>
237 config CRYPTO_TWOFISH_COMMON
240 Common parts of the Twofish cipher algorithm shared by the
241 generic c and the assembler implementations.
243 config CRYPTO_TWOFISH_586
244 tristate "Twofish cipher algorithms (i586)"
245 depends on (X86 || UML_X86) && !64BIT
247 select CRYPTO_TWOFISH_COMMON
249 Twofish cipher algorithm.
251 Twofish was submitted as an AES (Advanced Encryption Standard)
252 candidate cipher by researchers at CounterPane Systems. It is a
253 16 round block cipher supporting key sizes of 128, 192, and 256
257 <http://www.schneier.com/twofish.html>
259 config CRYPTO_TWOFISH_X86_64
260 tristate "Twofish cipher algorithm (x86_64)"
261 depends on (X86 || UML_X86) && 64BIT
263 select CRYPTO_TWOFISH_COMMON
265 Twofish cipher algorithm (x86_64).
267 Twofish was submitted as an AES (Advanced Encryption Standard)
268 candidate cipher by researchers at CounterPane Systems. It is a
269 16 round block cipher supporting key sizes of 128, 192, and 256
273 <http://www.schneier.com/twofish.html>
275 config CRYPTO_SERPENT
276 tristate "Serpent cipher algorithm"
279 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
281 Keys are allowed to be from 0 to 256 bits in length, in steps
282 of 8 bits. Also includes the 'Tnepres' algorithm, a reversed
283 variant of Serpent for compatibility with old kerneli.org code.
286 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
289 tristate "AES cipher algorithms"
292 AES cipher algorithms (FIPS-197). AES uses the Rijndael
295 Rijndael appears to be consistently a very good performer in
296 both hardware and software across a wide range of computing
297 environments regardless of its use in feedback or non-feedback
298 modes. Its key setup time is excellent, and its key agility is
299 good. Rijndael's very low memory requirements make it very well
300 suited for restricted-space environments, in which it also
301 demonstrates excellent performance. Rijndael's operations are
302 among the easiest to defend against power and timing attacks.
304 The AES specifies three key sizes: 128, 192 and 256 bits
306 See <http://csrc.nist.gov/CryptoToolkit/aes/> for more information.
308 config CRYPTO_AES_586
309 tristate "AES cipher algorithms (i586)"
310 depends on (X86 || UML_X86) && !64BIT
313 AES cipher algorithms (FIPS-197). AES uses the Rijndael
316 Rijndael appears to be consistently a very good performer in
317 both hardware and software across a wide range of computing
318 environments regardless of its use in feedback or non-feedback
319 modes. Its key setup time is excellent, and its key agility is
320 good. Rijndael's very low memory requirements make it very well
321 suited for restricted-space environments, in which it also
322 demonstrates excellent performance. Rijndael's operations are
323 among the easiest to defend against power and timing attacks.
325 The AES specifies three key sizes: 128, 192 and 256 bits
327 See <http://csrc.nist.gov/encryption/aes/> for more information.
329 config CRYPTO_AES_X86_64
330 tristate "AES cipher algorithms (x86_64)"
331 depends on (X86 || UML_X86) && 64BIT
334 AES cipher algorithms (FIPS-197). AES uses the Rijndael
337 Rijndael appears to be consistently a very good performer in
338 both hardware and software across a wide range of computing
339 environments regardless of its use in feedback or non-feedback
340 modes. Its key setup time is excellent, and its key agility is
341 good. Rijndael's very low memory requirements make it very well
342 suited for restricted-space environments, in which it also
343 demonstrates excellent performance. Rijndael's operations are
344 among the easiest to defend against power and timing attacks.
346 The AES specifies three key sizes: 128, 192 and 256 bits
348 See <http://csrc.nist.gov/encryption/aes/> for more information.
351 tristate "CAST5 (CAST-128) cipher algorithm"
354 The CAST5 encryption algorithm (synonymous with CAST-128) is
355 described in RFC2144.
358 tristate "CAST6 (CAST-256) cipher algorithm"
361 The CAST6 encryption algorithm (synonymous with CAST-256) is
362 described in RFC2612.
365 tristate "TEA, XTEA and XETA cipher algorithms"
368 TEA cipher algorithm.
370 Tiny Encryption Algorithm is a simple cipher that uses
371 many rounds for security. It is very fast and uses
374 Xtendend Tiny Encryption Algorithm is a modification to
375 the TEA algorithm to address a potential key weakness
376 in the TEA algorithm.
378 Xtendend Encryption Tiny Algorithm is a mis-implementation
379 of the XTEA algorithm for compatibility purposes.
382 tristate "ARC4 cipher algorithm"
385 ARC4 cipher algorithm.
387 ARC4 is a stream cipher using keys ranging from 8 bits to 2048
388 bits in length. This algorithm is required for driver-based
389 WEP, but it should not be for other purposes because of the
390 weakness of the algorithm.
393 tristate "Khazad cipher algorithm"
396 Khazad cipher algorithm.
398 Khazad was a finalist in the initial NESSIE competition. It is
399 an algorithm optimized for 64-bit processors with good performance
400 on 32-bit processors. Khazad uses an 128 bit key size.
403 <http://planeta.terra.com.br/informatica/paulobarreto/KhazadPage.html>
406 tristate "Anubis cipher algorithm"
409 Anubis cipher algorithm.
411 Anubis is a variable key length cipher which can use keys from
412 128 bits to 320 bits in length. It was evaluated as a entrant
413 in the NESSIE competition.
416 <https://www.cosic.esat.kuleuven.ac.be/nessie/reports/>
417 <http://planeta.terra.com.br/informatica/paulobarreto/AnubisPage.html>
420 tristate "SEED cipher algorithm"
423 SEED cipher algorithm (RFC4269).
425 SEED is a 128-bit symmetric key block cipher that has been
426 developed by KISA (Korea Information Security Agency) as a
427 national standard encryption algorithm of the Republic of Korea.
428 It is a 16 round block cipher with the key size of 128 bit.
431 <http://www.kisa.or.kr/kisa/seed/jsp/seed_eng.jsp>
434 config CRYPTO_DEFLATE
435 tristate "Deflate compression algorithm"
440 This is the Deflate algorithm (RFC1951), specified for use in
441 IPSec with the IPCOMP protocol (RFC3173, RFC2394).
443 You will most probably want this if using IPSec.
445 config CRYPTO_MICHAEL_MIC
446 tristate "Michael MIC keyed digest algorithm"
449 Michael MIC is used for message integrity protection in TKIP
450 (IEEE 802.11i). This algorithm is required for TKIP, but it
451 should not be used for other purposes because of the weakness
455 tristate "CRC32c CRC algorithm"
459 Castagnoli, et al Cyclic Redundancy-Check Algorithm. Used
460 by iSCSI for header and data digests and by others.
461 See Castagnoli93. This implementation uses lib/libcrc32c.
462 Module will be crc32c.
464 config CRYPTO_CAMELLIA
465 tristate "Camellia cipher algorithms"
469 Camellia cipher algorithms module.
471 Camellia is a symmetric key block cipher developed jointly
472 at NTT and Mitsubishi Electric Corporation.
474 The Camellia specifies three key sizes: 128, 192 and 256 bits.
477 <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
480 tristate "Testing module"
484 Quick & dirty crypto test module.
486 source "drivers/crypto/Kconfig"