2 # Generic algorithms support
8 # async_tx api: hardware offloaded memory transfer/transform support
10 source "crypto/async_tx/Kconfig"
13 # Cryptographic API Configuration
16 tristate "Cryptographic API"
18 This option provides the core Cryptographic API.
22 comment "Crypto core or helper"
25 bool "FIPS 200 compliance"
26 depends on (CRYPTO_ANSI_CPRNG || CRYPTO_DRBG) && !CRYPTO_MANAGER_DISABLE_TESTS
29 This options enables the fips boot option which is
30 required if you want to system to operate in a FIPS 200
31 certification. You should say no unless you know what
38 This option provides the API for cryptographic algorithms.
52 config CRYPTO_BLKCIPHER
54 select CRYPTO_BLKCIPHER2
57 config CRYPTO_BLKCIPHER2
61 select CRYPTO_WORKQUEUE
91 tristate "Cryptographic algorithm manager"
92 select CRYPTO_MANAGER2
94 Create default cryptographic template instantiations such as
97 config CRYPTO_MANAGER2
98 def_tristate CRYPTO_MANAGER || (CRYPTO_MANAGER!=n && CRYPTO_ALGAPI=y)
101 select CRYPTO_BLKCIPHER2
105 tristate "Userspace cryptographic algorithm configuration"
107 select CRYPTO_MANAGER
109 Userspace configuration for cryptographic instantiations such as
112 config CRYPTO_MANAGER_DISABLE_TESTS
113 bool "Disable run-time self tests"
115 depends on CRYPTO_MANAGER2
117 Disable run-time self tests that normally take place at
118 algorithm registration.
120 config CRYPTO_GF128MUL
121 tristate "GF(2^128) multiplication functions"
123 Efficient table driven implementation of multiplications in the
124 field GF(2^128). This is needed by some cypher modes. This
125 option will be selected automatically if you select such a
126 cipher mode. Only select this option by hand if you expect to load
127 an external module that requires these functions.
130 tristate "Null algorithms"
132 select CRYPTO_BLKCIPHER
135 These are 'Null' algorithms, used by IPsec, which do nothing.
138 tristate "Parallel crypto engine"
141 select CRYPTO_MANAGER
144 This converts an arbitrary crypto algorithm into a parallel
145 algorithm that executes in kernel threads.
147 config CRYPTO_WORKQUEUE
151 tristate "Software async crypto daemon"
152 select CRYPTO_BLKCIPHER
154 select CRYPTO_MANAGER
155 select CRYPTO_WORKQUEUE
157 This is a generic software asynchronous crypto daemon that
158 converts an arbitrary synchronous software crypto algorithm
159 into an asynchronous algorithm that executes in a kernel thread.
161 config CRYPTO_MCRYPTD
162 tristate "Software async multi-buffer crypto daemon"
163 select CRYPTO_BLKCIPHER
165 select CRYPTO_MANAGER
166 select CRYPTO_WORKQUEUE
168 This is a generic software asynchronous crypto daemon that
169 provides the kernel thread to assist multi-buffer crypto
170 algorithms for submitting jobs and flushing jobs in multi-buffer
171 crypto algorithms. Multi-buffer crypto algorithms are executed
172 in the context of this kernel thread and drivers can post
173 their crypto request asynchronously to be processed by this daemon.
175 config CRYPTO_AUTHENC
176 tristate "Authenc support"
178 select CRYPTO_BLKCIPHER
179 select CRYPTO_MANAGER
182 Authenc: Combined mode wrapper for IPsec.
183 This is required for IPSec.
186 tristate "Testing module"
188 select CRYPTO_MANAGER
190 Quick & dirty crypto test module.
192 config CRYPTO_ABLK_HELPER
196 config CRYPTO_GLUE_HELPER_X86
201 comment "Authenticated Encryption with Associated Data"
204 tristate "CCM support"
208 Support for Counter with CBC MAC. Required for IPsec.
211 tristate "GCM/GMAC support"
217 Support for Galois/Counter Mode (GCM) and Galois Message
218 Authentication Code (GMAC). Required for IPSec.
221 tristate "Sequence Number IV Generator"
223 select CRYPTO_BLKCIPHER
226 This IV generator generates an IV based on a sequence number by
227 xoring it with a salt. This algorithm is mainly useful for CTR
229 comment "Block modes"
232 tristate "CBC support"
233 select CRYPTO_BLKCIPHER
234 select CRYPTO_MANAGER
236 CBC: Cipher Block Chaining mode
237 This block cipher algorithm is required for IPSec.
240 tristate "CTR support"
241 select CRYPTO_BLKCIPHER
243 select CRYPTO_MANAGER
246 This block cipher algorithm is required for IPSec.
249 tristate "CTS support"
250 select CRYPTO_BLKCIPHER
252 CTS: Cipher Text Stealing
253 This is the Cipher Text Stealing mode as described by
254 Section 8 of rfc2040 and referenced by rfc3962.
255 (rfc3962 includes errata information in its Appendix A)
256 This mode is required for Kerberos gss mechanism support
260 tristate "ECB support"
261 select CRYPTO_BLKCIPHER
262 select CRYPTO_MANAGER
264 ECB: Electronic CodeBook mode
265 This is the simplest block cipher algorithm. It simply encrypts
266 the input block by block.
269 tristate "LRW support"
270 select CRYPTO_BLKCIPHER
271 select CRYPTO_MANAGER
272 select CRYPTO_GF128MUL
274 LRW: Liskov Rivest Wagner, a tweakable, non malleable, non movable
275 narrow block cipher mode for dm-crypt. Use it with cipher
276 specification string aes-lrw-benbi, the key must be 256, 320 or 384.
277 The first 128, 192 or 256 bits in the key are used for AES and the
278 rest is used to tie each cipher block to its logical position.
281 tristate "PCBC support"
282 select CRYPTO_BLKCIPHER
283 select CRYPTO_MANAGER
285 PCBC: Propagating Cipher Block Chaining mode
286 This block cipher algorithm is required for RxRPC.
289 tristate "XTS support"
290 select CRYPTO_BLKCIPHER
291 select CRYPTO_MANAGER
292 select CRYPTO_GF128MUL
294 XTS: IEEE1619/D16 narrow block cipher use with aes-xts-plain,
295 key size 256, 384 or 512 bits. This implementation currently
296 can't handle a sectorsize which is not a multiple of 16 bytes.
301 tristate "CMAC support"
303 select CRYPTO_MANAGER
305 Cipher-based Message Authentication Code (CMAC) specified by
306 The National Institute of Standards and Technology (NIST).
308 https://tools.ietf.org/html/rfc4493
309 http://csrc.nist.gov/publications/nistpubs/800-38B/SP_800-38B.pdf
312 tristate "HMAC support"
314 select CRYPTO_MANAGER
316 HMAC: Keyed-Hashing for Message Authentication (RFC2104).
317 This is required for IPSec.
320 tristate "XCBC support"
322 select CRYPTO_MANAGER
324 XCBC: Keyed-Hashing with encryption algorithm
325 http://www.ietf.org/rfc/rfc3566.txt
326 http://csrc.nist.gov/encryption/modes/proposedmodes/
327 xcbc-mac/xcbc-mac-spec.pdf
330 tristate "VMAC support"
332 select CRYPTO_MANAGER
334 VMAC is a message authentication algorithm designed for
335 very high speed on 64-bit architectures.
338 <http://fastcrypto.org/vmac>
343 tristate "CRC32c CRC algorithm"
347 Castagnoli, et al Cyclic Redundancy-Check Algorithm. Used
348 by iSCSI for header and data digests and by others.
349 See Castagnoli93. Module will be crc32c.
351 config CRYPTO_CRC32C_INTEL
352 tristate "CRC32c INTEL hardware acceleration"
356 In Intel processor with SSE4.2 supported, the processor will
357 support CRC32C implementation using hardware accelerated CRC32
358 instruction. This option will create 'crc32c-intel' module,
359 which will enable any routine to use the CRC32 instruction to
360 gain performance compared with software implementation.
361 Module will be crc32c-intel.
363 config CRYPTO_CRC32C_SPARC64
364 tristate "CRC32c CRC algorithm (SPARC64)"
369 CRC32c CRC algorithm implemented using sparc64 crypto instructions,
373 tristate "CRC32 CRC algorithm"
377 CRC-32-IEEE 802.3 cyclic redundancy-check algorithm.
378 Shash crypto api wrappers to crc32_le function.
380 config CRYPTO_CRC32_PCLMUL
381 tristate "CRC32 PCLMULQDQ hardware acceleration"
386 From Intel Westmere and AMD Bulldozer processor with SSE4.2
387 and PCLMULQDQ supported, the processor will support
388 CRC32 PCLMULQDQ implementation using hardware accelerated PCLMULQDQ
389 instruction. This option will create 'crc32-plcmul' module,
390 which will enable any routine to use the CRC-32-IEEE 802.3 checksum
391 and gain better performance as compared with the table implementation.
393 config CRYPTO_CRCT10DIF
394 tristate "CRCT10DIF algorithm"
397 CRC T10 Data Integrity Field computation is being cast as
398 a crypto transform. This allows for faster crc t10 diff
399 transforms to be used if they are available.
401 config CRYPTO_CRCT10DIF_PCLMUL
402 tristate "CRCT10DIF PCLMULQDQ hardware acceleration"
403 depends on X86 && 64BIT && CRC_T10DIF
406 For x86_64 processors with SSE4.2 and PCLMULQDQ supported,
407 CRC T10 DIF PCLMULQDQ computation can be hardware
408 accelerated PCLMULQDQ instruction. This option will create
409 'crct10dif-plcmul' module, which is faster when computing the
410 crct10dif checksum as compared with the generic table implementation.
413 tristate "GHASH digest algorithm"
414 select CRYPTO_GF128MUL
416 GHASH is message digest algorithm for GCM (Galois/Counter Mode).
419 tristate "MD4 digest algorithm"
422 MD4 message digest algorithm (RFC1320).
425 tristate "MD5 digest algorithm"
428 MD5 message digest algorithm (RFC1321).
430 config CRYPTO_MD5_OCTEON
431 tristate "MD5 digest algorithm (OCTEON)"
432 depends on CPU_CAVIUM_OCTEON
436 MD5 message digest algorithm (RFC1321) implemented
437 using OCTEON crypto instructions, when available.
439 config CRYPTO_MD5_PPC
440 tristate "MD5 digest algorithm (PPC)"
444 MD5 message digest algorithm (RFC1321) implemented
447 config CRYPTO_MD5_SPARC64
448 tristate "MD5 digest algorithm (SPARC64)"
453 MD5 message digest algorithm (RFC1321) implemented
454 using sparc64 crypto instructions, when available.
456 config CRYPTO_MICHAEL_MIC
457 tristate "Michael MIC keyed digest algorithm"
460 Michael MIC is used for message integrity protection in TKIP
461 (IEEE 802.11i). This algorithm is required for TKIP, but it
462 should not be used for other purposes because of the weakness
466 tristate "RIPEMD-128 digest algorithm"
469 RIPEMD-128 (ISO/IEC 10118-3:2004).
471 RIPEMD-128 is a 128-bit cryptographic hash function. It should only
472 be used as a secure replacement for RIPEMD. For other use cases,
473 RIPEMD-160 should be used.
475 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
476 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
479 tristate "RIPEMD-160 digest algorithm"
482 RIPEMD-160 (ISO/IEC 10118-3:2004).
484 RIPEMD-160 is a 160-bit cryptographic hash function. It is intended
485 to be used as a secure replacement for the 128-bit hash functions
486 MD4, MD5 and it's predecessor RIPEMD
487 (not to be confused with RIPEMD-128).
489 It's speed is comparable to SHA1 and there are no known attacks
492 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
493 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
496 tristate "RIPEMD-256 digest algorithm"
499 RIPEMD-256 is an optional extension of RIPEMD-128 with a
500 256 bit hash. It is intended for applications that require
501 longer hash-results, without needing a larger security level
504 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
505 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
508 tristate "RIPEMD-320 digest algorithm"
511 RIPEMD-320 is an optional extension of RIPEMD-160 with a
512 320 bit hash. It is intended for applications that require
513 longer hash-results, without needing a larger security level
516 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
517 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
520 tristate "SHA1 digest algorithm"
523 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2).
525 config CRYPTO_SHA1_SSSE3
526 tristate "SHA1 digest algorithm (SSSE3/AVX/AVX2)"
527 depends on X86 && 64BIT
531 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented
532 using Supplemental SSE3 (SSSE3) instructions or Advanced Vector
533 Extensions (AVX/AVX2), when available.
535 config CRYPTO_SHA256_SSSE3
536 tristate "SHA256 digest algorithm (SSSE3/AVX/AVX2)"
537 depends on X86 && 64BIT
541 SHA-256 secure hash standard (DFIPS 180-2) implemented
542 using Supplemental SSE3 (SSSE3) instructions, or Advanced Vector
543 Extensions version 1 (AVX1), or Advanced Vector Extensions
544 version 2 (AVX2) instructions, when available.
546 config CRYPTO_SHA512_SSSE3
547 tristate "SHA512 digest algorithm (SSSE3/AVX/AVX2)"
548 depends on X86 && 64BIT
552 SHA-512 secure hash standard (DFIPS 180-2) implemented
553 using Supplemental SSE3 (SSSE3) instructions, or Advanced Vector
554 Extensions version 1 (AVX1), or Advanced Vector Extensions
555 version 2 (AVX2) instructions, when available.
557 config CRYPTO_SHA1_OCTEON
558 tristate "SHA1 digest algorithm (OCTEON)"
559 depends on CPU_CAVIUM_OCTEON
563 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented
564 using OCTEON crypto instructions, when available.
566 config CRYPTO_SHA1_SPARC64
567 tristate "SHA1 digest algorithm (SPARC64)"
572 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented
573 using sparc64 crypto instructions, when available.
575 config CRYPTO_SHA1_ARM
576 tristate "SHA1 digest algorithm (ARM-asm)"
581 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented
582 using optimized ARM assembler.
584 config CRYPTO_SHA1_ARM_NEON
585 tristate "SHA1 digest algorithm (ARM NEON)"
586 depends on ARM && KERNEL_MODE_NEON
587 select CRYPTO_SHA1_ARM
591 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented
592 using optimized ARM NEON assembly, when NEON instructions are
595 config CRYPTO_SHA1_PPC
596 tristate "SHA1 digest algorithm (powerpc)"
599 This is the powerpc hardware accelerated implementation of the
600 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2).
602 config CRYPTO_SHA1_PPC_SPE
603 tristate "SHA1 digest algorithm (PPC SPE)"
604 depends on PPC && SPE
606 SHA-1 secure hash standard (DFIPS 180-4) implemented
607 using powerpc SPE SIMD instruction set.
609 config CRYPTO_SHA1_MB
610 tristate "SHA1 digest algorithm (x86_64 Multi-Buffer, Experimental)"
611 depends on X86 && 64BIT
614 select CRYPTO_MCRYPTD
616 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented
617 using multi-buffer technique. This algorithm computes on
618 multiple data lanes concurrently with SIMD instructions for
619 better throughput. It should not be enabled by default but
620 used when there is significant amount of work to keep the keep
621 the data lanes filled to get performance benefit. If the data
622 lanes remain unfilled, a flush operation will be initiated to
623 process the crypto jobs, adding a slight latency.
626 tristate "SHA224 and SHA256 digest algorithm"
629 SHA256 secure hash standard (DFIPS 180-2).
631 This version of SHA implements a 256 bit hash with 128 bits of
632 security against collision attacks.
634 This code also includes SHA-224, a 224 bit hash with 112 bits
635 of security against collision attacks.
637 config CRYPTO_SHA256_PPC_SPE
638 tristate "SHA224 and SHA256 digest algorithm (PPC SPE)"
639 depends on PPC && SPE
643 SHA224 and SHA256 secure hash standard (DFIPS 180-2)
644 implemented using powerpc SPE SIMD instruction set.
646 config CRYPTO_SHA256_OCTEON
647 tristate "SHA224 and SHA256 digest algorithm (OCTEON)"
648 depends on CPU_CAVIUM_OCTEON
652 SHA-256 secure hash standard (DFIPS 180-2) implemented
653 using OCTEON crypto instructions, when available.
655 config CRYPTO_SHA256_SPARC64
656 tristate "SHA224 and SHA256 digest algorithm (SPARC64)"
661 SHA-256 secure hash standard (DFIPS 180-2) implemented
662 using sparc64 crypto instructions, when available.
665 tristate "SHA384 and SHA512 digest algorithms"
668 SHA512 secure hash standard (DFIPS 180-2).
670 This version of SHA implements a 512 bit hash with 256 bits of
671 security against collision attacks.
673 This code also includes SHA-384, a 384 bit hash with 192 bits
674 of security against collision attacks.
676 config CRYPTO_SHA512_OCTEON
677 tristate "SHA384 and SHA512 digest algorithms (OCTEON)"
678 depends on CPU_CAVIUM_OCTEON
682 SHA-512 secure hash standard (DFIPS 180-2) implemented
683 using OCTEON crypto instructions, when available.
685 config CRYPTO_SHA512_SPARC64
686 tristate "SHA384 and SHA512 digest algorithm (SPARC64)"
691 SHA-512 secure hash standard (DFIPS 180-2) implemented
692 using sparc64 crypto instructions, when available.
694 config CRYPTO_SHA512_ARM_NEON
695 tristate "SHA384 and SHA512 digest algorithm (ARM NEON)"
696 depends on ARM && KERNEL_MODE_NEON
700 SHA-512 secure hash standard (DFIPS 180-2) implemented
701 using ARM NEON instructions, when available.
703 This version of SHA implements a 512 bit hash with 256 bits of
704 security against collision attacks.
706 This code also includes SHA-384, a 384 bit hash with 192 bits
707 of security against collision attacks.
710 tristate "Tiger digest algorithms"
713 Tiger hash algorithm 192, 160 and 128-bit hashes
715 Tiger is a hash function optimized for 64-bit processors while
716 still having decent performance on 32-bit processors.
717 Tiger was developed by Ross Anderson and Eli Biham.
720 <http://www.cs.technion.ac.il/~biham/Reports/Tiger/>.
723 tristate "Whirlpool digest algorithms"
726 Whirlpool hash algorithm 512, 384 and 256-bit hashes
728 Whirlpool-512 is part of the NESSIE cryptographic primitives.
729 Whirlpool will be part of the ISO/IEC 10118-3:2003(E) standard
732 <http://www.larc.usp.br/~pbarreto/WhirlpoolPage.html>
734 config CRYPTO_GHASH_CLMUL_NI_INTEL
735 tristate "GHASH digest algorithm (CLMUL-NI accelerated)"
736 depends on X86 && 64BIT
739 GHASH is message digest algorithm for GCM (Galois/Counter Mode).
740 The implementation is accelerated by CLMUL-NI of Intel.
745 tristate "AES cipher algorithms"
748 AES cipher algorithms (FIPS-197). AES uses the Rijndael
751 Rijndael appears to be consistently a very good performer in
752 both hardware and software across a wide range of computing
753 environments regardless of its use in feedback or non-feedback
754 modes. Its key setup time is excellent, and its key agility is
755 good. Rijndael's very low memory requirements make it very well
756 suited for restricted-space environments, in which it also
757 demonstrates excellent performance. Rijndael's operations are
758 among the easiest to defend against power and timing attacks.
760 The AES specifies three key sizes: 128, 192 and 256 bits
762 See <http://csrc.nist.gov/CryptoToolkit/aes/> for more information.
764 config CRYPTO_AES_586
765 tristate "AES cipher algorithms (i586)"
766 depends on (X86 || UML_X86) && !64BIT
770 AES cipher algorithms (FIPS-197). AES uses the Rijndael
773 Rijndael appears to be consistently a very good performer in
774 both hardware and software across a wide range of computing
775 environments regardless of its use in feedback or non-feedback
776 modes. Its key setup time is excellent, and its key agility is
777 good. Rijndael's very low memory requirements make it very well
778 suited for restricted-space environments, in which it also
779 demonstrates excellent performance. Rijndael's operations are
780 among the easiest to defend against power and timing attacks.
782 The AES specifies three key sizes: 128, 192 and 256 bits
784 See <http://csrc.nist.gov/encryption/aes/> for more information.
786 config CRYPTO_AES_X86_64
787 tristate "AES cipher algorithms (x86_64)"
788 depends on (X86 || UML_X86) && 64BIT
792 AES cipher algorithms (FIPS-197). AES uses the Rijndael
795 Rijndael appears to be consistently a very good performer in
796 both hardware and software across a wide range of computing
797 environments regardless of its use in feedback or non-feedback
798 modes. Its key setup time is excellent, and its key agility is
799 good. Rijndael's very low memory requirements make it very well
800 suited for restricted-space environments, in which it also
801 demonstrates excellent performance. Rijndael's operations are
802 among the easiest to defend against power and timing attacks.
804 The AES specifies three key sizes: 128, 192 and 256 bits
806 See <http://csrc.nist.gov/encryption/aes/> for more information.
808 config CRYPTO_AES_NI_INTEL
809 tristate "AES cipher algorithms (AES-NI)"
811 select CRYPTO_AES_X86_64 if 64BIT
812 select CRYPTO_AES_586 if !64BIT
814 select CRYPTO_ABLK_HELPER
816 select CRYPTO_GLUE_HELPER_X86 if 64BIT
820 Use Intel AES-NI instructions for AES algorithm.
822 AES cipher algorithms (FIPS-197). AES uses the Rijndael
825 Rijndael appears to be consistently a very good performer in
826 both hardware and software across a wide range of computing
827 environments regardless of its use in feedback or non-feedback
828 modes. Its key setup time is excellent, and its key agility is
829 good. Rijndael's very low memory requirements make it very well
830 suited for restricted-space environments, in which it also
831 demonstrates excellent performance. Rijndael's operations are
832 among the easiest to defend against power and timing attacks.
834 The AES specifies three key sizes: 128, 192 and 256 bits
836 See <http://csrc.nist.gov/encryption/aes/> for more information.
838 In addition to AES cipher algorithm support, the acceleration
839 for some popular block cipher mode is supported too, including
840 ECB, CBC, LRW, PCBC, XTS. The 64 bit version has additional
841 acceleration for CTR.
843 config CRYPTO_AES_SPARC64
844 tristate "AES cipher algorithms (SPARC64)"
849 Use SPARC64 crypto opcodes for AES algorithm.
851 AES cipher algorithms (FIPS-197). AES uses the Rijndael
854 Rijndael appears to be consistently a very good performer in
855 both hardware and software across a wide range of computing
856 environments regardless of its use in feedback or non-feedback
857 modes. Its key setup time is excellent, and its key agility is
858 good. Rijndael's very low memory requirements make it very well
859 suited for restricted-space environments, in which it also
860 demonstrates excellent performance. Rijndael's operations are
861 among the easiest to defend against power and timing attacks.
863 The AES specifies three key sizes: 128, 192 and 256 bits
865 See <http://csrc.nist.gov/encryption/aes/> for more information.
867 In addition to AES cipher algorithm support, the acceleration
868 for some popular block cipher mode is supported too, including
871 config CRYPTO_AES_ARM
872 tristate "AES cipher algorithms (ARM-asm)"
877 Use optimized AES assembler routines for ARM platforms.
879 AES cipher algorithms (FIPS-197). AES uses the Rijndael
882 Rijndael appears to be consistently a very good performer in
883 both hardware and software across a wide range of computing
884 environments regardless of its use in feedback or non-feedback
885 modes. Its key setup time is excellent, and its key agility is
886 good. Rijndael's very low memory requirements make it very well
887 suited for restricted-space environments, in which it also
888 demonstrates excellent performance. Rijndael's operations are
889 among the easiest to defend against power and timing attacks.
891 The AES specifies three key sizes: 128, 192 and 256 bits
893 See <http://csrc.nist.gov/encryption/aes/> for more information.
895 config CRYPTO_AES_ARM_BS
896 tristate "Bit sliced AES using NEON instructions"
897 depends on ARM && KERNEL_MODE_NEON
899 select CRYPTO_AES_ARM
900 select CRYPTO_ABLK_HELPER
902 Use a faster and more secure NEON based implementation of AES in CBC,
905 Bit sliced AES gives around 45% speedup on Cortex-A15 for CTR mode
906 and for XTS mode encryption, CBC and XTS mode decryption speedup is
907 around 25%. (CBC encryption speed is not affected by this driver.)
908 This implementation does not rely on any lookup tables so it is
909 believed to be invulnerable to cache timing attacks.
911 config CRYPTO_AES_PPC_SPE
912 tristate "AES cipher algorithms (PPC SPE)"
913 depends on PPC && SPE
915 AES cipher algorithms (FIPS-197). Additionally the acceleration
916 for popular block cipher modes ECB, CBC, CTR and XTS is supported.
917 This module should only be used for low power (router) devices
918 without hardware AES acceleration (e.g. caam crypto). It reduces the
919 size of the AES tables from 16KB to 8KB + 256 bytes and mitigates
920 timining attacks. Nevertheless it might be not as secure as other
921 architecture specific assembler implementations that work on 1KB
922 tables or 256 bytes S-boxes.
925 tristate "Anubis cipher algorithm"
928 Anubis cipher algorithm.
930 Anubis is a variable key length cipher which can use keys from
931 128 bits to 320 bits in length. It was evaluated as a entrant
932 in the NESSIE competition.
935 <https://www.cosic.esat.kuleuven.be/nessie/reports/>
936 <http://www.larc.usp.br/~pbarreto/AnubisPage.html>
939 tristate "ARC4 cipher algorithm"
940 select CRYPTO_BLKCIPHER
942 ARC4 cipher algorithm.
944 ARC4 is a stream cipher using keys ranging from 8 bits to 2048
945 bits in length. This algorithm is required for driver-based
946 WEP, but it should not be for other purposes because of the
947 weakness of the algorithm.
949 config CRYPTO_BLOWFISH
950 tristate "Blowfish cipher algorithm"
952 select CRYPTO_BLOWFISH_COMMON
954 Blowfish cipher algorithm, by Bruce Schneier.
956 This is a variable key length cipher which can use keys from 32
957 bits to 448 bits in length. It's fast, simple and specifically
958 designed for use on "large microprocessors".
961 <http://www.schneier.com/blowfish.html>
963 config CRYPTO_BLOWFISH_COMMON
966 Common parts of the Blowfish cipher algorithm shared by the
967 generic c and the assembler implementations.
970 <http://www.schneier.com/blowfish.html>
972 config CRYPTO_BLOWFISH_X86_64
973 tristate "Blowfish cipher algorithm (x86_64)"
974 depends on X86 && 64BIT
976 select CRYPTO_BLOWFISH_COMMON
978 Blowfish cipher algorithm (x86_64), by Bruce Schneier.
980 This is a variable key length cipher which can use keys from 32
981 bits to 448 bits in length. It's fast, simple and specifically
982 designed for use on "large microprocessors".
985 <http://www.schneier.com/blowfish.html>
987 config CRYPTO_CAMELLIA
988 tristate "Camellia cipher algorithms"
992 Camellia cipher algorithms module.
994 Camellia is a symmetric key block cipher developed jointly
995 at NTT and Mitsubishi Electric Corporation.
997 The Camellia specifies three key sizes: 128, 192 and 256 bits.
1000 <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
1002 config CRYPTO_CAMELLIA_X86_64
1003 tristate "Camellia cipher algorithm (x86_64)"
1004 depends on X86 && 64BIT
1006 select CRYPTO_ALGAPI
1007 select CRYPTO_GLUE_HELPER_X86
1011 Camellia cipher algorithm module (x86_64).
1013 Camellia is a symmetric key block cipher developed jointly
1014 at NTT and Mitsubishi Electric Corporation.
1016 The Camellia specifies three key sizes: 128, 192 and 256 bits.
1019 <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
1021 config CRYPTO_CAMELLIA_AESNI_AVX_X86_64
1022 tristate "Camellia cipher algorithm (x86_64/AES-NI/AVX)"
1023 depends on X86 && 64BIT
1025 select CRYPTO_ALGAPI
1026 select CRYPTO_CRYPTD
1027 select CRYPTO_ABLK_HELPER
1028 select CRYPTO_GLUE_HELPER_X86
1029 select CRYPTO_CAMELLIA_X86_64
1033 Camellia cipher algorithm module (x86_64/AES-NI/AVX).
1035 Camellia is a symmetric key block cipher developed jointly
1036 at NTT and Mitsubishi Electric Corporation.
1038 The Camellia specifies three key sizes: 128, 192 and 256 bits.
1041 <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
1043 config CRYPTO_CAMELLIA_AESNI_AVX2_X86_64
1044 tristate "Camellia cipher algorithm (x86_64/AES-NI/AVX2)"
1045 depends on X86 && 64BIT
1047 select CRYPTO_ALGAPI
1048 select CRYPTO_CRYPTD
1049 select CRYPTO_ABLK_HELPER
1050 select CRYPTO_GLUE_HELPER_X86
1051 select CRYPTO_CAMELLIA_X86_64
1052 select CRYPTO_CAMELLIA_AESNI_AVX_X86_64
1056 Camellia cipher algorithm module (x86_64/AES-NI/AVX2).
1058 Camellia is a symmetric key block cipher developed jointly
1059 at NTT and Mitsubishi Electric Corporation.
1061 The Camellia specifies three key sizes: 128, 192 and 256 bits.
1064 <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
1066 config CRYPTO_CAMELLIA_SPARC64
1067 tristate "Camellia cipher algorithm (SPARC64)"
1070 select CRYPTO_ALGAPI
1072 Camellia cipher algorithm module (SPARC64).
1074 Camellia is a symmetric key block cipher developed jointly
1075 at NTT and Mitsubishi Electric Corporation.
1077 The Camellia specifies three key sizes: 128, 192 and 256 bits.
1080 <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
1082 config CRYPTO_CAST_COMMON
1085 Common parts of the CAST cipher algorithms shared by the
1086 generic c and the assembler implementations.
1089 tristate "CAST5 (CAST-128) cipher algorithm"
1090 select CRYPTO_ALGAPI
1091 select CRYPTO_CAST_COMMON
1093 The CAST5 encryption algorithm (synonymous with CAST-128) is
1094 described in RFC2144.
1096 config CRYPTO_CAST5_AVX_X86_64
1097 tristate "CAST5 (CAST-128) cipher algorithm (x86_64/AVX)"
1098 depends on X86 && 64BIT
1099 select CRYPTO_ALGAPI
1100 select CRYPTO_CRYPTD
1101 select CRYPTO_ABLK_HELPER
1102 select CRYPTO_CAST_COMMON
1105 The CAST5 encryption algorithm (synonymous with CAST-128) is
1106 described in RFC2144.
1108 This module provides the Cast5 cipher algorithm that processes
1109 sixteen blocks parallel using the AVX instruction set.
1112 tristate "CAST6 (CAST-256) cipher algorithm"
1113 select CRYPTO_ALGAPI
1114 select CRYPTO_CAST_COMMON
1116 The CAST6 encryption algorithm (synonymous with CAST-256) is
1117 described in RFC2612.
1119 config CRYPTO_CAST6_AVX_X86_64
1120 tristate "CAST6 (CAST-256) cipher algorithm (x86_64/AVX)"
1121 depends on X86 && 64BIT
1122 select CRYPTO_ALGAPI
1123 select CRYPTO_CRYPTD
1124 select CRYPTO_ABLK_HELPER
1125 select CRYPTO_GLUE_HELPER_X86
1126 select CRYPTO_CAST_COMMON
1131 The CAST6 encryption algorithm (synonymous with CAST-256) is
1132 described in RFC2612.
1134 This module provides the Cast6 cipher algorithm that processes
1135 eight blocks parallel using the AVX instruction set.
1138 tristate "DES and Triple DES EDE cipher algorithms"
1139 select CRYPTO_ALGAPI
1141 DES cipher algorithm (FIPS 46-2), and Triple DES EDE (FIPS 46-3).
1143 config CRYPTO_DES_SPARC64
1144 tristate "DES and Triple DES EDE cipher algorithms (SPARC64)"
1146 select CRYPTO_ALGAPI
1149 DES cipher algorithm (FIPS 46-2), and Triple DES EDE (FIPS 46-3),
1150 optimized using SPARC64 crypto opcodes.
1152 config CRYPTO_DES3_EDE_X86_64
1153 tristate "Triple DES EDE cipher algorithm (x86-64)"
1154 depends on X86 && 64BIT
1155 select CRYPTO_ALGAPI
1158 Triple DES EDE (FIPS 46-3) algorithm.
1160 This module provides implementation of the Triple DES EDE cipher
1161 algorithm that is optimized for x86-64 processors. Two versions of
1162 algorithm are provided; regular processing one input block and
1163 one that processes three blocks parallel.
1165 config CRYPTO_FCRYPT
1166 tristate "FCrypt cipher algorithm"
1167 select CRYPTO_ALGAPI
1168 select CRYPTO_BLKCIPHER
1170 FCrypt algorithm used by RxRPC.
1172 config CRYPTO_KHAZAD
1173 tristate "Khazad cipher algorithm"
1174 select CRYPTO_ALGAPI
1176 Khazad cipher algorithm.
1178 Khazad was a finalist in the initial NESSIE competition. It is
1179 an algorithm optimized for 64-bit processors with good performance
1180 on 32-bit processors. Khazad uses an 128 bit key size.
1183 <http://www.larc.usp.br/~pbarreto/KhazadPage.html>
1185 config CRYPTO_SALSA20
1186 tristate "Salsa20 stream cipher algorithm"
1187 select CRYPTO_BLKCIPHER
1189 Salsa20 stream cipher algorithm.
1191 Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
1192 Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
1194 The Salsa20 stream cipher algorithm is designed by Daniel J.
1195 Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
1197 config CRYPTO_SALSA20_586
1198 tristate "Salsa20 stream cipher algorithm (i586)"
1199 depends on (X86 || UML_X86) && !64BIT
1200 select CRYPTO_BLKCIPHER
1202 Salsa20 stream cipher algorithm.
1204 Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
1205 Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
1207 The Salsa20 stream cipher algorithm is designed by Daniel J.
1208 Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
1210 config CRYPTO_SALSA20_X86_64
1211 tristate "Salsa20 stream cipher algorithm (x86_64)"
1212 depends on (X86 || UML_X86) && 64BIT
1213 select CRYPTO_BLKCIPHER
1215 Salsa20 stream cipher algorithm.
1217 Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
1218 Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
1220 The Salsa20 stream cipher algorithm is designed by Daniel J.
1221 Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
1224 tristate "SEED cipher algorithm"
1225 select CRYPTO_ALGAPI
1227 SEED cipher algorithm (RFC4269).
1229 SEED is a 128-bit symmetric key block cipher that has been
1230 developed by KISA (Korea Information Security Agency) as a
1231 national standard encryption algorithm of the Republic of Korea.
1232 It is a 16 round block cipher with the key size of 128 bit.
1235 <http://www.kisa.or.kr/kisa/seed/jsp/seed_eng.jsp>
1237 config CRYPTO_SERPENT
1238 tristate "Serpent cipher algorithm"
1239 select CRYPTO_ALGAPI
1241 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
1243 Keys are allowed to be from 0 to 256 bits in length, in steps
1244 of 8 bits. Also includes the 'Tnepres' algorithm, a reversed
1245 variant of Serpent for compatibility with old kerneli.org code.
1248 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
1250 config CRYPTO_SERPENT_SSE2_X86_64
1251 tristate "Serpent cipher algorithm (x86_64/SSE2)"
1252 depends on X86 && 64BIT
1253 select CRYPTO_ALGAPI
1254 select CRYPTO_CRYPTD
1255 select CRYPTO_ABLK_HELPER
1256 select CRYPTO_GLUE_HELPER_X86
1257 select CRYPTO_SERPENT
1261 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
1263 Keys are allowed to be from 0 to 256 bits in length, in steps
1266 This module provides Serpent cipher algorithm that processes eigth
1267 blocks parallel using SSE2 instruction set.
1270 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
1272 config CRYPTO_SERPENT_SSE2_586
1273 tristate "Serpent cipher algorithm (i586/SSE2)"
1274 depends on X86 && !64BIT
1275 select CRYPTO_ALGAPI
1276 select CRYPTO_CRYPTD
1277 select CRYPTO_ABLK_HELPER
1278 select CRYPTO_GLUE_HELPER_X86
1279 select CRYPTO_SERPENT
1283 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
1285 Keys are allowed to be from 0 to 256 bits in length, in steps
1288 This module provides Serpent cipher algorithm that processes four
1289 blocks parallel using SSE2 instruction set.
1292 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
1294 config CRYPTO_SERPENT_AVX_X86_64
1295 tristate "Serpent cipher algorithm (x86_64/AVX)"
1296 depends on X86 && 64BIT
1297 select CRYPTO_ALGAPI
1298 select CRYPTO_CRYPTD
1299 select CRYPTO_ABLK_HELPER
1300 select CRYPTO_GLUE_HELPER_X86
1301 select CRYPTO_SERPENT
1305 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
1307 Keys are allowed to be from 0 to 256 bits in length, in steps
1310 This module provides the Serpent cipher algorithm that processes
1311 eight blocks parallel using the AVX instruction set.
1314 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
1316 config CRYPTO_SERPENT_AVX2_X86_64
1317 tristate "Serpent cipher algorithm (x86_64/AVX2)"
1318 depends on X86 && 64BIT
1319 select CRYPTO_ALGAPI
1320 select CRYPTO_CRYPTD
1321 select CRYPTO_ABLK_HELPER
1322 select CRYPTO_GLUE_HELPER_X86
1323 select CRYPTO_SERPENT
1324 select CRYPTO_SERPENT_AVX_X86_64
1328 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
1330 Keys are allowed to be from 0 to 256 bits in length, in steps
1333 This module provides Serpent cipher algorithm that processes 16
1334 blocks parallel using AVX2 instruction set.
1337 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
1340 tristate "TEA, XTEA and XETA cipher algorithms"
1341 select CRYPTO_ALGAPI
1343 TEA cipher algorithm.
1345 Tiny Encryption Algorithm is a simple cipher that uses
1346 many rounds for security. It is very fast and uses
1349 Xtendend Tiny Encryption Algorithm is a modification to
1350 the TEA algorithm to address a potential key weakness
1351 in the TEA algorithm.
1353 Xtendend Encryption Tiny Algorithm is a mis-implementation
1354 of the XTEA algorithm for compatibility purposes.
1356 config CRYPTO_TWOFISH
1357 tristate "Twofish cipher algorithm"
1358 select CRYPTO_ALGAPI
1359 select CRYPTO_TWOFISH_COMMON
1361 Twofish cipher algorithm.
1363 Twofish was submitted as an AES (Advanced Encryption Standard)
1364 candidate cipher by researchers at CounterPane Systems. It is a
1365 16 round block cipher supporting key sizes of 128, 192, and 256
1369 <http://www.schneier.com/twofish.html>
1371 config CRYPTO_TWOFISH_COMMON
1374 Common parts of the Twofish cipher algorithm shared by the
1375 generic c and the assembler implementations.
1377 config CRYPTO_TWOFISH_586
1378 tristate "Twofish cipher algorithms (i586)"
1379 depends on (X86 || UML_X86) && !64BIT
1380 select CRYPTO_ALGAPI
1381 select CRYPTO_TWOFISH_COMMON
1383 Twofish cipher algorithm.
1385 Twofish was submitted as an AES (Advanced Encryption Standard)
1386 candidate cipher by researchers at CounterPane Systems. It is a
1387 16 round block cipher supporting key sizes of 128, 192, and 256
1391 <http://www.schneier.com/twofish.html>
1393 config CRYPTO_TWOFISH_X86_64
1394 tristate "Twofish cipher algorithm (x86_64)"
1395 depends on (X86 || UML_X86) && 64BIT
1396 select CRYPTO_ALGAPI
1397 select CRYPTO_TWOFISH_COMMON
1399 Twofish cipher algorithm (x86_64).
1401 Twofish was submitted as an AES (Advanced Encryption Standard)
1402 candidate cipher by researchers at CounterPane Systems. It is a
1403 16 round block cipher supporting key sizes of 128, 192, and 256
1407 <http://www.schneier.com/twofish.html>
1409 config CRYPTO_TWOFISH_X86_64_3WAY
1410 tristate "Twofish cipher algorithm (x86_64, 3-way parallel)"
1411 depends on X86 && 64BIT
1412 select CRYPTO_ALGAPI
1413 select CRYPTO_TWOFISH_COMMON
1414 select CRYPTO_TWOFISH_X86_64
1415 select CRYPTO_GLUE_HELPER_X86
1419 Twofish cipher algorithm (x86_64, 3-way parallel).
1421 Twofish was submitted as an AES (Advanced Encryption Standard)
1422 candidate cipher by researchers at CounterPane Systems. It is a
1423 16 round block cipher supporting key sizes of 128, 192, and 256
1426 This module provides Twofish cipher algorithm that processes three
1427 blocks parallel, utilizing resources of out-of-order CPUs better.
1430 <http://www.schneier.com/twofish.html>
1432 config CRYPTO_TWOFISH_AVX_X86_64
1433 tristate "Twofish cipher algorithm (x86_64/AVX)"
1434 depends on X86 && 64BIT
1435 select CRYPTO_ALGAPI
1436 select CRYPTO_CRYPTD
1437 select CRYPTO_ABLK_HELPER
1438 select CRYPTO_GLUE_HELPER_X86
1439 select CRYPTO_TWOFISH_COMMON
1440 select CRYPTO_TWOFISH_X86_64
1441 select CRYPTO_TWOFISH_X86_64_3WAY
1445 Twofish cipher algorithm (x86_64/AVX).
1447 Twofish was submitted as an AES (Advanced Encryption Standard)
1448 candidate cipher by researchers at CounterPane Systems. It is a
1449 16 round block cipher supporting key sizes of 128, 192, and 256
1452 This module provides the Twofish cipher algorithm that processes
1453 eight blocks parallel using the AVX Instruction Set.
1456 <http://www.schneier.com/twofish.html>
1458 comment "Compression"
1460 config CRYPTO_DEFLATE
1461 tristate "Deflate compression algorithm"
1462 select CRYPTO_ALGAPI
1466 This is the Deflate algorithm (RFC1951), specified for use in
1467 IPSec with the IPCOMP protocol (RFC3173, RFC2394).
1469 You will most probably want this if using IPSec.
1472 tristate "Zlib compression algorithm"
1478 This is the zlib algorithm.
1481 tristate "LZO compression algorithm"
1482 select CRYPTO_ALGAPI
1484 select LZO_DECOMPRESS
1486 This is the LZO algorithm.
1489 tristate "842 compression algorithm"
1490 depends on CRYPTO_DEV_NX_COMPRESS
1491 # 842 uses lzo if the hardware becomes unavailable
1493 select LZO_DECOMPRESS
1495 This is the 842 algorithm.
1498 tristate "LZ4 compression algorithm"
1499 select CRYPTO_ALGAPI
1501 select LZ4_DECOMPRESS
1503 This is the LZ4 algorithm.
1506 tristate "LZ4HC compression algorithm"
1507 select CRYPTO_ALGAPI
1508 select LZ4HC_COMPRESS
1509 select LZ4_DECOMPRESS
1511 This is the LZ4 high compression mode algorithm.
1513 comment "Random Number Generation"
1515 config CRYPTO_ANSI_CPRNG
1516 tristate "Pseudo Random Number Generation for Cryptographic modules"
1521 This option enables the generic pseudo random number generator
1522 for cryptographic modules. Uses the Algorithm specified in
1523 ANSI X9.31 A.2.4. Note that this option must be enabled if
1524 CRYPTO_FIPS is selected
1526 menuconfig CRYPTO_DRBG_MENU
1527 tristate "NIST SP800-90A DRBG"
1529 NIST SP800-90A compliant DRBG. In the following submenu, one or
1530 more of the DRBG types must be selected.
1534 config CRYPTO_DRBG_HMAC
1535 bool "Enable HMAC DRBG"
1539 Enable the HMAC DRBG variant as defined in NIST SP800-90A.
1541 config CRYPTO_DRBG_HASH
1542 bool "Enable Hash DRBG"
1545 Enable the Hash DRBG variant as defined in NIST SP800-90A.
1547 config CRYPTO_DRBG_CTR
1548 bool "Enable CTR DRBG"
1551 Enable the CTR DRBG variant as defined in NIST SP800-90A.
1555 default CRYPTO_DRBG_MENU if (CRYPTO_DRBG_HMAC || CRYPTO_DRBG_HASH || CRYPTO_DRBG_CTR)
1558 endif # if CRYPTO_DRBG_MENU
1560 config CRYPTO_USER_API
1563 config CRYPTO_USER_API_HASH
1564 tristate "User-space interface for hash algorithms"
1567 select CRYPTO_USER_API
1569 This option enables the user-spaces interface for hash
1572 config CRYPTO_USER_API_SKCIPHER
1573 tristate "User-space interface for symmetric key cipher algorithms"
1575 select CRYPTO_BLKCIPHER
1576 select CRYPTO_USER_API
1578 This option enables the user-spaces interface for symmetric
1579 key cipher algorithms.
1581 config CRYPTO_USER_API_RNG
1582 tristate "User-space interface for random number generator algorithms"
1585 select CRYPTO_USER_API
1587 This option enables the user-spaces interface for random
1588 number generator algorithms.
1590 config CRYPTO_USER_API_AEAD
1591 tristate "User-space interface for AEAD cipher algorithms"
1594 select CRYPTO_USER_API
1596 This option enables the user-spaces interface for AEAD
1599 config CRYPTO_HASH_INFO
1602 source "drivers/crypto/Kconfig"
1603 source crypto/asymmetric_keys/Kconfig