2 # Generic algorithms support
8 # async_tx api: hardware offloaded memory transfer/transform support
10 source "crypto/async_tx/Kconfig"
13 # Cryptographic API Configuration
16 tristate "Cryptographic API"
18 This option provides the core Cryptographic API.
22 comment "Crypto core or helper"
25 bool "FIPS 200 compliance"
27 This options enables the fips boot option which is
28 required if you want to system to operate in a FIPS 200
29 certification. You should say no unless you know what
36 This option provides the API for cryptographic algorithms.
50 config CRYPTO_BLKCIPHER
52 select CRYPTO_BLKCIPHER2
55 config CRYPTO_BLKCIPHER2
59 select CRYPTO_WORKQUEUE
84 tristate "Cryptographic algorithm manager"
85 select CRYPTO_MANAGER2
87 Create default cryptographic template instantiations such as
90 config CRYPTO_MANAGER2
91 def_tristate CRYPTO_MANAGER || (CRYPTO_MANAGER!=n && CRYPTO_ALGAPI=y)
94 select CRYPTO_BLKCIPHER2
97 config CRYPTO_GF128MUL
98 tristate "GF(2^128) multiplication functions (EXPERIMENTAL)"
99 depends on EXPERIMENTAL
101 Efficient table driven implementation of multiplications in the
102 field GF(2^128). This is needed by some cypher modes. This
103 option will be selected automatically if you select such a
104 cipher mode. Only select this option by hand if you expect to load
105 an external module that requires these functions.
108 tristate "Null algorithms"
110 select CRYPTO_BLKCIPHER
113 These are 'Null' algorithms, used by IPsec, which do nothing.
115 config CRYPTO_WORKQUEUE
119 tristate "Software async crypto daemon"
120 select CRYPTO_BLKCIPHER
122 select CRYPTO_MANAGER
123 select CRYPTO_WORKQUEUE
125 This is a generic software asynchronous crypto daemon that
126 converts an arbitrary synchronous software crypto algorithm
127 into an asynchronous algorithm that executes in a kernel thread.
129 config CRYPTO_AUTHENC
130 tristate "Authenc support"
132 select CRYPTO_BLKCIPHER
133 select CRYPTO_MANAGER
136 Authenc: Combined mode wrapper for IPsec.
137 This is required for IPSec.
140 tristate "Testing module"
142 select CRYPTO_MANAGER
144 Quick & dirty crypto test module.
146 comment "Authenticated Encryption with Associated Data"
149 tristate "CCM support"
153 Support for Counter with CBC MAC. Required for IPsec.
156 tristate "GCM/GMAC support"
159 select CRYPTO_GF128MUL
161 Support for Galois/Counter Mode (GCM) and Galois Message
162 Authentication Code (GMAC). Required for IPSec.
165 tristate "Sequence Number IV Generator"
167 select CRYPTO_BLKCIPHER
170 This IV generator generates an IV based on a sequence number by
171 xoring it with a salt. This algorithm is mainly useful for CTR
173 comment "Block modes"
176 tristate "CBC support"
177 select CRYPTO_BLKCIPHER
178 select CRYPTO_MANAGER
180 CBC: Cipher Block Chaining mode
181 This block cipher algorithm is required for IPSec.
184 tristate "CTR support"
185 select CRYPTO_BLKCIPHER
187 select CRYPTO_MANAGER
190 This block cipher algorithm is required for IPSec.
193 tristate "CTS support"
194 select CRYPTO_BLKCIPHER
196 CTS: Cipher Text Stealing
197 This is the Cipher Text Stealing mode as described by
198 Section 8 of rfc2040 and referenced by rfc3962.
199 (rfc3962 includes errata information in its Appendix A)
200 This mode is required for Kerberos gss mechanism support
204 tristate "ECB support"
205 select CRYPTO_BLKCIPHER
206 select CRYPTO_MANAGER
208 ECB: Electronic CodeBook mode
209 This is the simplest block cipher algorithm. It simply encrypts
210 the input block by block.
213 tristate "LRW support (EXPERIMENTAL)"
214 depends on EXPERIMENTAL
215 select CRYPTO_BLKCIPHER
216 select CRYPTO_MANAGER
217 select CRYPTO_GF128MUL
219 LRW: Liskov Rivest Wagner, a tweakable, non malleable, non movable
220 narrow block cipher mode for dm-crypt. Use it with cipher
221 specification string aes-lrw-benbi, the key must be 256, 320 or 384.
222 The first 128, 192 or 256 bits in the key are used for AES and the
223 rest is used to tie each cipher block to its logical position.
226 tristate "PCBC support"
227 select CRYPTO_BLKCIPHER
228 select CRYPTO_MANAGER
230 PCBC: Propagating Cipher Block Chaining mode
231 This block cipher algorithm is required for RxRPC.
234 tristate "XTS support (EXPERIMENTAL)"
235 depends on EXPERIMENTAL
236 select CRYPTO_BLKCIPHER
237 select CRYPTO_MANAGER
238 select CRYPTO_GF128MUL
240 XTS: IEEE1619/D16 narrow block cipher use with aes-xts-plain,
241 key size 256, 384 or 512 bits. This implementation currently
242 can't handle a sectorsize which is not a multiple of 16 bytes.
246 select CRYPTO_BLKCIPHER
247 select CRYPTO_MANAGER
252 tristate "HMAC support"
254 select CRYPTO_MANAGER
256 HMAC: Keyed-Hashing for Message Authentication (RFC2104).
257 This is required for IPSec.
260 tristate "XCBC support"
261 depends on EXPERIMENTAL
263 select CRYPTO_MANAGER
265 XCBC: Keyed-Hashing with encryption algorithm
266 http://www.ietf.org/rfc/rfc3566.txt
267 http://csrc.nist.gov/encryption/modes/proposedmodes/
268 xcbc-mac/xcbc-mac-spec.pdf
273 tristate "CRC32c CRC algorithm"
276 Castagnoli, et al Cyclic Redundancy-Check Algorithm. Used
277 by iSCSI for header and data digests and by others.
278 See Castagnoli93. Module will be crc32c.
280 config CRYPTO_CRC32C_INTEL
281 tristate "CRC32c INTEL hardware acceleration"
285 In Intel processor with SSE4.2 supported, the processor will
286 support CRC32C implementation using hardware accelerated CRC32
287 instruction. This option will create 'crc32c-intel' module,
288 which will enable any routine to use the CRC32 instruction to
289 gain performance compared with software implementation.
290 Module will be crc32c-intel.
293 tristate "MD4 digest algorithm"
296 MD4 message digest algorithm (RFC1320).
299 tristate "MD5 digest algorithm"
302 MD5 message digest algorithm (RFC1321).
304 config CRYPTO_MICHAEL_MIC
305 tristate "Michael MIC keyed digest algorithm"
308 Michael MIC is used for message integrity protection in TKIP
309 (IEEE 802.11i). This algorithm is required for TKIP, but it
310 should not be used for other purposes because of the weakness
314 tristate "RIPEMD-128 digest algorithm"
317 RIPEMD-128 (ISO/IEC 10118-3:2004).
319 RIPEMD-128 is a 128-bit cryptographic hash function. It should only
320 to be used as a secure replacement for RIPEMD. For other use cases
321 RIPEMD-160 should be used.
323 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
324 See <http://home.esat.kuleuven.be/~bosselae/ripemd160.html>
327 tristate "RIPEMD-160 digest algorithm"
330 RIPEMD-160 (ISO/IEC 10118-3:2004).
332 RIPEMD-160 is a 160-bit cryptographic hash function. It is intended
333 to be used as a secure replacement for the 128-bit hash functions
334 MD4, MD5 and it's predecessor RIPEMD
335 (not to be confused with RIPEMD-128).
337 It's speed is comparable to SHA1 and there are no known attacks
340 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
341 See <http://home.esat.kuleuven.be/~bosselae/ripemd160.html>
344 tristate "RIPEMD-256 digest algorithm"
347 RIPEMD-256 is an optional extension of RIPEMD-128 with a
348 256 bit hash. It is intended for applications that require
349 longer hash-results, without needing a larger security level
352 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
353 See <http://home.esat.kuleuven.be/~bosselae/ripemd160.html>
356 tristate "RIPEMD-320 digest algorithm"
359 RIPEMD-320 is an optional extension of RIPEMD-160 with a
360 320 bit hash. It is intended for applications that require
361 longer hash-results, without needing a larger security level
364 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
365 See <http://home.esat.kuleuven.be/~bosselae/ripemd160.html>
368 tristate "SHA1 digest algorithm"
371 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2).
374 tristate "SHA224 and SHA256 digest algorithm"
377 SHA256 secure hash standard (DFIPS 180-2).
379 This version of SHA implements a 256 bit hash with 128 bits of
380 security against collision attacks.
382 This code also includes SHA-224, a 224 bit hash with 112 bits
383 of security against collision attacks.
386 tristate "SHA384 and SHA512 digest algorithms"
389 SHA512 secure hash standard (DFIPS 180-2).
391 This version of SHA implements a 512 bit hash with 256 bits of
392 security against collision attacks.
394 This code also includes SHA-384, a 384 bit hash with 192 bits
395 of security against collision attacks.
398 tristate "Tiger digest algorithms"
401 Tiger hash algorithm 192, 160 and 128-bit hashes
403 Tiger is a hash function optimized for 64-bit processors while
404 still having decent performance on 32-bit processors.
405 Tiger was developed by Ross Anderson and Eli Biham.
408 <http://www.cs.technion.ac.il/~biham/Reports/Tiger/>.
411 tristate "Whirlpool digest algorithms"
414 Whirlpool hash algorithm 512, 384 and 256-bit hashes
416 Whirlpool-512 is part of the NESSIE cryptographic primitives.
417 Whirlpool will be part of the ISO/IEC 10118-3:2003(E) standard
420 <http://planeta.terra.com.br/informatica/paulobarreto/WhirlpoolPage.html>
425 tristate "AES cipher algorithms"
428 AES cipher algorithms (FIPS-197). AES uses the Rijndael
431 Rijndael appears to be consistently a very good performer in
432 both hardware and software across a wide range of computing
433 environments regardless of its use in feedback or non-feedback
434 modes. Its key setup time is excellent, and its key agility is
435 good. Rijndael's very low memory requirements make it very well
436 suited for restricted-space environments, in which it also
437 demonstrates excellent performance. Rijndael's operations are
438 among the easiest to defend against power and timing attacks.
440 The AES specifies three key sizes: 128, 192 and 256 bits
442 See <http://csrc.nist.gov/CryptoToolkit/aes/> for more information.
444 config CRYPTO_AES_586
445 tristate "AES cipher algorithms (i586)"
446 depends on (X86 || UML_X86) && !64BIT
450 AES cipher algorithms (FIPS-197). AES uses the Rijndael
453 Rijndael appears to be consistently a very good performer in
454 both hardware and software across a wide range of computing
455 environments regardless of its use in feedback or non-feedback
456 modes. Its key setup time is excellent, and its key agility is
457 good. Rijndael's very low memory requirements make it very well
458 suited for restricted-space environments, in which it also
459 demonstrates excellent performance. Rijndael's operations are
460 among the easiest to defend against power and timing attacks.
462 The AES specifies three key sizes: 128, 192 and 256 bits
464 See <http://csrc.nist.gov/encryption/aes/> for more information.
466 config CRYPTO_AES_X86_64
467 tristate "AES cipher algorithms (x86_64)"
468 depends on (X86 || UML_X86) && 64BIT
472 AES cipher algorithms (FIPS-197). AES uses the Rijndael
475 Rijndael appears to be consistently a very good performer in
476 both hardware and software across a wide range of computing
477 environments regardless of its use in feedback or non-feedback
478 modes. Its key setup time is excellent, and its key agility is
479 good. Rijndael's very low memory requirements make it very well
480 suited for restricted-space environments, in which it also
481 demonstrates excellent performance. Rijndael's operations are
482 among the easiest to defend against power and timing attacks.
484 The AES specifies three key sizes: 128, 192 and 256 bits
486 See <http://csrc.nist.gov/encryption/aes/> for more information.
488 config CRYPTO_AES_NI_INTEL
489 tristate "AES cipher algorithms (AES-NI)"
490 depends on (X86 || UML_X86) && 64BIT
491 select CRYPTO_AES_X86_64
495 Use Intel AES-NI instructions for AES algorithm.
497 AES cipher algorithms (FIPS-197). AES uses the Rijndael
500 Rijndael appears to be consistently a very good performer in
501 both hardware and software across a wide range of computing
502 environments regardless of its use in feedback or non-feedback
503 modes. Its key setup time is excellent, and its key agility is
504 good. Rijndael's very low memory requirements make it very well
505 suited for restricted-space environments, in which it also
506 demonstrates excellent performance. Rijndael's operations are
507 among the easiest to defend against power and timing attacks.
509 The AES specifies three key sizes: 128, 192 and 256 bits
511 See <http://csrc.nist.gov/encryption/aes/> for more information.
514 tristate "Anubis cipher algorithm"
517 Anubis cipher algorithm.
519 Anubis is a variable key length cipher which can use keys from
520 128 bits to 320 bits in length. It was evaluated as a entrant
521 in the NESSIE competition.
524 <https://www.cosic.esat.kuleuven.ac.be/nessie/reports/>
525 <http://planeta.terra.com.br/informatica/paulobarreto/AnubisPage.html>
528 tristate "ARC4 cipher algorithm"
531 ARC4 cipher algorithm.
533 ARC4 is a stream cipher using keys ranging from 8 bits to 2048
534 bits in length. This algorithm is required for driver-based
535 WEP, but it should not be for other purposes because of the
536 weakness of the algorithm.
538 config CRYPTO_BLOWFISH
539 tristate "Blowfish cipher algorithm"
542 Blowfish cipher algorithm, by Bruce Schneier.
544 This is a variable key length cipher which can use keys from 32
545 bits to 448 bits in length. It's fast, simple and specifically
546 designed for use on "large microprocessors".
549 <http://www.schneier.com/blowfish.html>
551 config CRYPTO_CAMELLIA
552 tristate "Camellia cipher algorithms"
556 Camellia cipher algorithms module.
558 Camellia is a symmetric key block cipher developed jointly
559 at NTT and Mitsubishi Electric Corporation.
561 The Camellia specifies three key sizes: 128, 192 and 256 bits.
564 <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
567 tristate "CAST5 (CAST-128) cipher algorithm"
570 The CAST5 encryption algorithm (synonymous with CAST-128) is
571 described in RFC2144.
574 tristate "CAST6 (CAST-256) cipher algorithm"
577 The CAST6 encryption algorithm (synonymous with CAST-256) is
578 described in RFC2612.
581 tristate "DES and Triple DES EDE cipher algorithms"
584 DES cipher algorithm (FIPS 46-2), and Triple DES EDE (FIPS 46-3).
587 tristate "FCrypt cipher algorithm"
589 select CRYPTO_BLKCIPHER
591 FCrypt algorithm used by RxRPC.
594 tristate "Khazad cipher algorithm"
597 Khazad cipher algorithm.
599 Khazad was a finalist in the initial NESSIE competition. It is
600 an algorithm optimized for 64-bit processors with good performance
601 on 32-bit processors. Khazad uses an 128 bit key size.
604 <http://planeta.terra.com.br/informatica/paulobarreto/KhazadPage.html>
606 config CRYPTO_SALSA20
607 tristate "Salsa20 stream cipher algorithm (EXPERIMENTAL)"
608 depends on EXPERIMENTAL
609 select CRYPTO_BLKCIPHER
611 Salsa20 stream cipher algorithm.
613 Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
614 Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
616 The Salsa20 stream cipher algorithm is designed by Daniel J.
617 Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
619 config CRYPTO_SALSA20_586
620 tristate "Salsa20 stream cipher algorithm (i586) (EXPERIMENTAL)"
621 depends on (X86 || UML_X86) && !64BIT
622 depends on EXPERIMENTAL
623 select CRYPTO_BLKCIPHER
625 Salsa20 stream cipher algorithm.
627 Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
628 Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
630 The Salsa20 stream cipher algorithm is designed by Daniel J.
631 Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
633 config CRYPTO_SALSA20_X86_64
634 tristate "Salsa20 stream cipher algorithm (x86_64) (EXPERIMENTAL)"
635 depends on (X86 || UML_X86) && 64BIT
636 depends on EXPERIMENTAL
637 select CRYPTO_BLKCIPHER
639 Salsa20 stream cipher algorithm.
641 Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
642 Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
644 The Salsa20 stream cipher algorithm is designed by Daniel J.
645 Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
648 tristate "SEED cipher algorithm"
651 SEED cipher algorithm (RFC4269).
653 SEED is a 128-bit symmetric key block cipher that has been
654 developed by KISA (Korea Information Security Agency) as a
655 national standard encryption algorithm of the Republic of Korea.
656 It is a 16 round block cipher with the key size of 128 bit.
659 <http://www.kisa.or.kr/kisa/seed/jsp/seed_eng.jsp>
661 config CRYPTO_SERPENT
662 tristate "Serpent cipher algorithm"
665 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
667 Keys are allowed to be from 0 to 256 bits in length, in steps
668 of 8 bits. Also includes the 'Tnepres' algorithm, a reversed
669 variant of Serpent for compatibility with old kerneli.org code.
672 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
675 tristate "TEA, XTEA and XETA cipher algorithms"
678 TEA cipher algorithm.
680 Tiny Encryption Algorithm is a simple cipher that uses
681 many rounds for security. It is very fast and uses
684 Xtendend Tiny Encryption Algorithm is a modification to
685 the TEA algorithm to address a potential key weakness
686 in the TEA algorithm.
688 Xtendend Encryption Tiny Algorithm is a mis-implementation
689 of the XTEA algorithm for compatibility purposes.
691 config CRYPTO_TWOFISH
692 tristate "Twofish cipher algorithm"
694 select CRYPTO_TWOFISH_COMMON
696 Twofish cipher algorithm.
698 Twofish was submitted as an AES (Advanced Encryption Standard)
699 candidate cipher by researchers at CounterPane Systems. It is a
700 16 round block cipher supporting key sizes of 128, 192, and 256
704 <http://www.schneier.com/twofish.html>
706 config CRYPTO_TWOFISH_COMMON
709 Common parts of the Twofish cipher algorithm shared by the
710 generic c and the assembler implementations.
712 config CRYPTO_TWOFISH_586
713 tristate "Twofish cipher algorithms (i586)"
714 depends on (X86 || UML_X86) && !64BIT
716 select CRYPTO_TWOFISH_COMMON
718 Twofish cipher algorithm.
720 Twofish was submitted as an AES (Advanced Encryption Standard)
721 candidate cipher by researchers at CounterPane Systems. It is a
722 16 round block cipher supporting key sizes of 128, 192, and 256
726 <http://www.schneier.com/twofish.html>
728 config CRYPTO_TWOFISH_X86_64
729 tristate "Twofish cipher algorithm (x86_64)"
730 depends on (X86 || UML_X86) && 64BIT
732 select CRYPTO_TWOFISH_COMMON
734 Twofish cipher algorithm (x86_64).
736 Twofish was submitted as an AES (Advanced Encryption Standard)
737 candidate cipher by researchers at CounterPane Systems. It is a
738 16 round block cipher supporting key sizes of 128, 192, and 256
742 <http://www.schneier.com/twofish.html>
744 comment "Compression"
746 config CRYPTO_DEFLATE
747 tristate "Deflate compression algorithm"
752 This is the Deflate algorithm (RFC1951), specified for use in
753 IPSec with the IPCOMP protocol (RFC3173, RFC2394).
755 You will most probably want this if using IPSec.
758 tristate "Zlib compression algorithm"
764 This is the zlib algorithm.
767 tristate "LZO compression algorithm"
770 select LZO_DECOMPRESS
772 This is the LZO algorithm.
774 comment "Random Number Generation"
776 config CRYPTO_ANSI_CPRNG
777 tristate "Pseudo Random Number Generation for Cryptographic modules"
782 This option enables the generic pseudo random number generator
783 for cryptographic modules. Uses the Algorithm specified in
786 source "drivers/crypto/Kconfig"