[linux-2.6-block.git] / arch / arm / crypto / Kconfig

# SPDX-License-Identifier: GPL-2.0

menuconfig ARM_CRYPTO
	bool "ARM Accelerated Cryptographic Algorithms"
	depends on ARM
	help
	  Say Y here to choose from a selection of cryptographic algorithms
	  implemented using ARM specific CPU features or instructions.

if ARM_CRYPTO

config CRYPTO_SHA1_ARM
	tristate "SHA1 digest algorithm (ARM-asm)"
	select CRYPTO_SHA1
	select CRYPTO_HASH
	help
	  SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented
	  using optimized ARM assembler.

config CRYPTO_SHA1_ARM_NEON
	tristate "SHA1 digest algorithm (ARM NEON)"
	depends on KERNEL_MODE_NEON
	select CRYPTO_SHA1_ARM
	select CRYPTO_SHA1
	select CRYPTO_HASH
	help
	  SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented
	  using optimized ARM NEON assembly, when NEON instructions are
	  available.

config CRYPTO_SHA1_ARM_CE
	tristate "SHA1 digest algorithm (ARM v8 Crypto Extensions)"
	depends on KERNEL_MODE_NEON && (CC_IS_CLANG || GCC_VERSION >= 40800)
	select CRYPTO_SHA1_ARM
	select CRYPTO_HASH
	help
	  SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented
	  using special ARMv8 Crypto Extensions.

config CRYPTO_SHA2_ARM_CE
	tristate "SHA-224/256 digest algorithm (ARM v8 Crypto Extensions)"
	depends on KERNEL_MODE_NEON && (CC_IS_CLANG || GCC_VERSION >= 40800)
	select CRYPTO_SHA256_ARM
	select CRYPTO_HASH
	help
	  SHA-256 secure hash standard (DFIPS 180-2) implemented
	  using special ARMv8 Crypto Extensions.

config CRYPTO_SHA256_ARM
	tristate "SHA-224/256 digest algorithm (ARM-asm and NEON)"
	select CRYPTO_HASH
	depends on !CPU_V7M
	help
	  SHA-256 secure hash standard (DFIPS 180-2) implemented
	  using optimized ARM assembler and NEON, when available.

config CRYPTO_SHA512_ARM
	tristate "SHA-384/512 digest algorithm (ARM-asm and NEON)"
	select CRYPTO_HASH
	depends on !CPU_V7M
	help
	  SHA-512 secure hash standard (DFIPS 180-2) implemented
	  using optimized ARM assembler and NEON, when available.

config CRYPTO_AES_ARM
	tristate "Scalar AES cipher for ARM"
	select CRYPTO_ALGAPI
	select CRYPTO_AES
	help
	  Use optimized AES assembler routines for ARM platforms.

	  On ARM processors without the Crypto Extensions, this is the
	  fastest AES implementation for single blocks.  For multiple
	  blocks, the NEON bit-sliced implementation is usually faster.

	  This implementation may be vulnerable to cache timing attacks,
	  since it uses lookup tables.  However, as countermeasures it
	  disables IRQs and preloads the tables; it is hoped this makes
	  such attacks very difficult.

config CRYPTO_AES_ARM_BS
	tristate "Bit sliced AES using NEON instructions"
	depends on KERNEL_MODE_NEON
	select CRYPTO_SKCIPHER
	select CRYPTO_LIB_AES
	select CRYPTO_SIMD
	help
	  Use a faster and more secure NEON based implementation of AES in CBC,
	  CTR and XTS modes

	  Bit sliced AES gives around 45% speedup on Cortex-A15 for CTR mode
	  and for XTS mode encryption, CBC and XTS mode decryption speedup is
	  around 25%. (CBC encryption speed is not affected by this driver.)
	  This implementation does not rely on any lookup tables so it is
	  believed to be invulnerable to cache timing attacks.

config CRYPTO_AES_ARM_CE
	tristate "Accelerated AES using ARMv8 Crypto Extensions"
	depends on KERNEL_MODE_NEON && (CC_IS_CLANG || GCC_VERSION >= 40800)
	select CRYPTO_SKCIPHER
	select CRYPTO_LIB_AES
	select CRYPTO_SIMD
	help
	  Use an implementation of AES in CBC, CTR and XTS modes that uses
	  ARMv8 Crypto Extensions

config CRYPTO_GHASH_ARM_CE
	tristate "PMULL-accelerated GHASH using NEON/ARMv8 Crypto Extensions"
	depends on KERNEL_MODE_NEON && (CC_IS_CLANG || GCC_VERSION >= 40800)
	select CRYPTO_HASH
	select CRYPTO_CRYPTD
	select CRYPTO_GF128MUL
	help
	  Use an implementation of GHASH (used by the GCM AEAD chaining mode)
	  that uses the 64x64 to 128 bit polynomial multiplication (vmull.p64)
	  that is part of the ARMv8 Crypto Extensions, or a slower variant that
	  uses the vmull.p8 instruction that is part of the basic NEON ISA.

config CRYPTO_CRCT10DIF_ARM_CE
	tristate "CRCT10DIF digest algorithm using PMULL instructions"
	depends on KERNEL_MODE_NEON && (CC_IS_CLANG || GCC_VERSION >= 40800)
	depends on CRC_T10DIF
	select CRYPTO_HASH

config CRYPTO_CRC32_ARM_CE
	tristate "CRC32(C) digest algorithm using CRC and/or PMULL instructions"
	depends on KERNEL_MODE_NEON && (CC_IS_CLANG || GCC_VERSION >= 40800)
	depends on CRC32
	select CRYPTO_HASH

config CRYPTO_CHACHA20_NEON
	tristate "NEON and scalar accelerated ChaCha stream cipher algorithms"
	select CRYPTO_SKCIPHER
	select CRYPTO_ARCH_HAVE_LIB_CHACHA

config CRYPTO_POLY1305_ARM
	tristate "Accelerated scalar and SIMD Poly1305 hash implementations"
	select CRYPTO_HASH
	select CRYPTO_ARCH_HAVE_LIB_POLY1305

config CRYPTO_NHPOLY1305_NEON
	tristate "NEON accelerated NHPoly1305 hash function (for Adiantum)"
	depends on KERNEL_MODE_NEON
	select CRYPTO_NHPOLY1305

config CRYPTO_CURVE25519_NEON
	tristate "NEON accelerated Curve25519 scalar multiplication library"
	depends on KERNEL_MODE_NEON
	select CRYPTO_LIB_CURVE25519_GENERIC
	select CRYPTO_ARCH_HAVE_LIB_CURVE25519

endif
Commit	Line	Data
b2441318	1	# SPDX-License-Identifier: GPL-2.0
652ccae5 AB	2
	3	menuconfig ARM_CRYPTO
	4	bool "ARM Accelerated Cryptographic Algorithms"
	5	depends on ARM
	6	help
	7	Say Y here to choose from a selection of cryptographic algorithms
	8	implemented using ARM specific CPU features or instructions.
	9
	10	if ARM_CRYPTO
	11
	12	config CRYPTO_SHA1_ARM
	13	tristate "SHA1 digest algorithm (ARM-asm)"
	14	select CRYPTO_SHA1
	15	select CRYPTO_HASH
	16	help
	17	SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented
	18	using optimized ARM assembler.
	19
	20	config CRYPTO_SHA1_ARM_NEON
	21	tristate "SHA1 digest algorithm (ARM NEON)"
	22	depends on KERNEL_MODE_NEON
	23	select CRYPTO_SHA1_ARM
	24	select CRYPTO_SHA1
	25	select CRYPTO_HASH
	26	help
	27	SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented
	28	using optimized ARM NEON assembly, when NEON instructions are
	29	available.
	30
864cbeed AB	31	config CRYPTO_SHA1_ARM_CE
864cbeed AB	32	tristate "SHA1 digest algorithm (ARM v8 Crypto Extensions)"
b4d0c0aa	33	depends on KERNEL_MODE_NEON && (CC_IS_CLANG \|\| GCC_VERSION >= 40800)
864cbeed	34	select CRYPTO_SHA1_ARM
864cbeed AB	35	select CRYPTO_HASH
	36	help
	37	SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented
	38	using special ARMv8 Crypto Extensions.
006d0624 AB	39
	40	config CRYPTO_SHA2_ARM_CE
	41	tristate "SHA-224/256 digest algorithm (ARM v8 Crypto Extensions)"
b4d0c0aa	42	depends on KERNEL_MODE_NEON && (CC_IS_CLANG \|\| GCC_VERSION >= 40800)
9205b949	43	select CRYPTO_SHA256_ARM
006d0624 AB	44	select CRYPTO_HASH
	45	help
	46	SHA-256 secure hash standard (DFIPS 180-2) implemented
	47	using special ARMv8 Crypto Extensions.
864cbeed	48
f2f770d7 ST	49	config CRYPTO_SHA256_ARM
	50	tristate "SHA-224/256 digest algorithm (ARM-asm and NEON)"
	51	select CRYPTO_HASH
b48321de	52	depends on !CPU_V7M
f2f770d7 ST	53	help
	54	SHA-256 secure hash standard (DFIPS 180-2) implemented
	55	using optimized ARM assembler and NEON, when available.
	56
c80ae7ca AB	57	config CRYPTO_SHA512_ARM
c80ae7ca AB	58	tristate "SHA-384/512 digest algorithm (ARM-asm and NEON)"
652ccae5	59	select CRYPTO_HASH
c80ae7ca	60	depends on !CPU_V7M
652ccae5 AB	61	help
652ccae5 AB	62	SHA-512 secure hash standard (DFIPS 180-2) implemented
c80ae7ca	63	using optimized ARM assembler and NEON, when available.
652ccae5 AB	64
652ccae5 AB	65	config CRYPTO_AES_ARM
81edb426	66	tristate "Scalar AES cipher for ARM"
652ccae5 AB	67	select CRYPTO_ALGAPI
	68	select CRYPTO_AES
	69	help
	70	Use optimized AES assembler routines for ARM platforms.
	71
913a3aa0 EB	72	On ARM processors without the Crypto Extensions, this is the
	73	fastest AES implementation for single blocks. For multiple
	74	blocks, the NEON bit-sliced implementation is usually faster.
	75
	76	This implementation may be vulnerable to cache timing attacks,
	77	since it uses lookup tables. However, as countermeasures it
	78	disables IRQs and preloads the tables; it is hoped this makes
	79	such attacks very difficult.
	80
652ccae5 AB	81	config CRYPTO_AES_ARM_BS
	82	tristate "Bit sliced AES using NEON instructions"
	83	depends on KERNEL_MODE_NEON
b95bba5d	84	select CRYPTO_SKCIPHER
aa6e2d2b	85	select CRYPTO_LIB_AES
6fdf436f	86	select CRYPTO_SIMD
652ccae5 AB	87	help
	88	Use a faster and more secure NEON based implementation of AES in CBC,
	89	CTR and XTS modes
	90
	91	Bit sliced AES gives around 45% speedup on Cortex-A15 for CTR mode
	92	and for XTS mode encryption, CBC and XTS mode decryption speedup is
	93	around 25%. (CBC encryption speed is not affected by this driver.)
	94	This implementation does not rely on any lookup tables so it is
	95	believed to be invulnerable to cache timing attacks.
	96
86464859 AB	97	config CRYPTO_AES_ARM_CE
86464859 AB	98	tristate "Accelerated AES using ARMv8 Crypto Extensions"
b4d0c0aa	99	depends on KERNEL_MODE_NEON && (CC_IS_CLANG \|\| GCC_VERSION >= 40800)
b95bba5d	100	select CRYPTO_SKCIPHER
f703964f	101	select CRYPTO_LIB_AES
585b5fa6	102	select CRYPTO_SIMD
86464859 AB	103	help
	104	Use an implementation of AES in CBC, CTR and XTS modes that uses
	105	ARMv8 Crypto Extensions
	106
f1e866b1	107	config CRYPTO_GHASH_ARM_CE
3759ee05	108	tristate "PMULL-accelerated GHASH using NEON/ARMv8 Crypto Extensions"
b4d0c0aa	109	depends on KERNEL_MODE_NEON && (CC_IS_CLANG \|\| GCC_VERSION >= 40800)
f1e866b1 AB	110	select CRYPTO_HASH
f1e866b1 AB	111	select CRYPTO_CRYPTD
00227e3a	112	select CRYPTO_GF128MUL
f1e866b1 AB	113	help
	114	Use an implementation of GHASH (used by the GCM AEAD chaining mode)
	115	that uses the 64x64 to 128 bit polynomial multiplication (vmull.p64)
3759ee05 AB	116	that is part of the ARMv8 Crypto Extensions, or a slower variant that
3759ee05 AB	117	uses the vmull.p8 instruction that is part of the basic NEON ISA.
f1e866b1	118
1d481f1c AB	119	config CRYPTO_CRCT10DIF_ARM_CE
1d481f1c AB	120	tristate "CRCT10DIF digest algorithm using PMULL instructions"
b4d0c0aa AB	121	depends on KERNEL_MODE_NEON && (CC_IS_CLANG \|\| GCC_VERSION >= 40800)
b4d0c0aa AB	122	depends on CRC_T10DIF
1d481f1c AB	123	select CRYPTO_HASH
1d481f1c AB	124
d0a3431a AB	125	config CRYPTO_CRC32_ARM_CE
d0a3431a AB	126	tristate "CRC32(C) digest algorithm using CRC and/or PMULL instructions"
b4d0c0aa AB	127	depends on KERNEL_MODE_NEON && (CC_IS_CLANG \|\| GCC_VERSION >= 40800)
b4d0c0aa AB	128	depends on CRC32
d0a3431a AB	129	select CRYPTO_HASH
d0a3431a AB	130
afaf712e	131	config CRYPTO_CHACHA20_NEON
b36d8c09	132	tristate "NEON and scalar accelerated ChaCha stream cipher algorithms"
b95bba5d	133	select CRYPTO_SKCIPHER
a44a3430	134	select CRYPTO_ARCH_HAVE_LIB_CHACHA
afaf712e	135
a6b803b3 AB	136	config CRYPTO_POLY1305_ARM
	137	tristate "Accelerated scalar and SIMD Poly1305 hash implementations"
	138	select CRYPTO_HASH
	139	select CRYPTO_ARCH_HAVE_LIB_POLY1305
afaf712e	140
16aae359 EB	141	config CRYPTO_NHPOLY1305_NEON
	142	tristate "NEON accelerated NHPoly1305 hash function (for Adiantum)"
	143	depends on KERNEL_MODE_NEON
	144	select CRYPTO_NHPOLY1305
	145
d8f1308a JD	146	config CRYPTO_CURVE25519_NEON
	147	tristate "NEON accelerated Curve25519 scalar multiplication library"
	148	depends on KERNEL_MODE_NEON
	149	select CRYPTO_LIB_CURVE25519_GENERIC
	150	select CRYPTO_ARCH_HAVE_LIB_CURVE25519
	151
652ccae5	152	endif