[linux.git] / crypto / Kconfig

#
# Generic algorithms support
#
config XOR_BLOCKS
	tristate

#
# async_tx api: hardware offloaded memory transfer/transform support
#
source "crypto/async_tx/Kconfig"

#
# Cryptographic API Configuration
#
menuconfig CRYPTO
	tristate "Cryptographic API"
	help
	  This option provides the core Cryptographic API.

if CRYPTO

config CRYPTO_ALGAPI
	tristate
	help
	  This option provides the API for cryptographic algorithms.

config CRYPTO_AEAD
	tristate
	select CRYPTO_ALGAPI

config CRYPTO_BLKCIPHER
	tristate
	select CRYPTO_ALGAPI

config CRYPTO_SEQIV
	tristate "Sequence Number IV Generator"
	select CRYPTO_AEAD
	select CRYPTO_BLKCIPHER
	help
	  This IV generator generates an IV based on a sequence number by
	  xoring it with a salt.  This algorithm is mainly useful for CTR
	  and similar modes.

config CRYPTO_HASH
	tristate
	select CRYPTO_ALGAPI

config CRYPTO_MANAGER
	tristate "Cryptographic algorithm manager"
	select CRYPTO_ALGAPI
	help
	  Create default cryptographic template instantiations such as
	  cbc(aes).

config CRYPTO_HMAC
	tristate "HMAC support"
	select CRYPTO_HASH
	select CRYPTO_MANAGER
	help
	  HMAC: Keyed-Hashing for Message Authentication (RFC2104).
	  This is required for IPSec.

config CRYPTO_XCBC
	tristate "XCBC support"
	depends on EXPERIMENTAL
	select CRYPTO_HASH
	select CRYPTO_MANAGER
	help
	  XCBC: Keyed-Hashing with encryption algorithm
		http://www.ietf.org/rfc/rfc3566.txt
		http://csrc.nist.gov/encryption/modes/proposedmodes/
		 xcbc-mac/xcbc-mac-spec.pdf

config CRYPTO_NULL
	tristate "Null algorithms"
	select CRYPTO_ALGAPI
	select CRYPTO_BLKCIPHER
	help
	  These are 'Null' algorithms, used by IPsec, which do nothing.

config CRYPTO_MD4
	tristate "MD4 digest algorithm"
	select CRYPTO_ALGAPI
	help
	  MD4 message digest algorithm (RFC1320).

config CRYPTO_MD5
	tristate "MD5 digest algorithm"
	select CRYPTO_ALGAPI
	help
	  MD5 message digest algorithm (RFC1321).

config CRYPTO_SHA1
	tristate "SHA1 digest algorithm"
	select CRYPTO_ALGAPI
	help
	  SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2).

config CRYPTO_SHA256
	tristate "SHA224 and SHA256 digest algorithm"
	select CRYPTO_ALGAPI
	help
	  SHA256 secure hash standard (DFIPS 180-2).
	  
	  This version of SHA implements a 256 bit hash with 128 bits of
	  security against collision attacks.

          This code also includes SHA-224, a 224 bit hash with 112 bits
          of security against collision attacks.

config CRYPTO_SHA512
	tristate "SHA384 and SHA512 digest algorithms"
	select CRYPTO_ALGAPI
	help
	  SHA512 secure hash standard (DFIPS 180-2).
	  
	  This version of SHA implements a 512 bit hash with 256 bits of
	  security against collision attacks.

	  This code also includes SHA-384, a 384 bit hash with 192 bits
	  of security against collision attacks.

config CRYPTO_WP512
	tristate "Whirlpool digest algorithms"
	select CRYPTO_ALGAPI
	help
	  Whirlpool hash algorithm 512, 384 and 256-bit hashes

	  Whirlpool-512 is part of the NESSIE cryptographic primitives.
	  Whirlpool will be part of the ISO/IEC 10118-3:2003(E) standard

	  See also:
	  <http://planeta.terra.com.br/informatica/paulobarreto/WhirlpoolPage.html>

config CRYPTO_TGR192
	tristate "Tiger digest algorithms"
	select CRYPTO_ALGAPI
	help
	  Tiger hash algorithm 192, 160 and 128-bit hashes

	  Tiger is a hash function optimized for 64-bit processors while
	  still having decent performance on 32-bit processors.
	  Tiger was developed by Ross Anderson and Eli Biham.

	  See also:
	  <http://www.cs.technion.ac.il/~biham/Reports/Tiger/>.

config CRYPTO_GF128MUL
	tristate "GF(2^128) multiplication functions (EXPERIMENTAL)"
	depends on EXPERIMENTAL
	help
	  Efficient table driven implementation of multiplications in the
	  field GF(2^128).  This is needed by some cypher modes. This
	  option will be selected automatically if you select such a
	  cipher mode.  Only select this option by hand if you expect to load
	  an external module that requires these functions.

config CRYPTO_ECB
	tristate "ECB support"
	select CRYPTO_BLKCIPHER
	select CRYPTO_MANAGER
	help
	  ECB: Electronic CodeBook mode
	  This is the simplest block cipher algorithm.  It simply encrypts
	  the input block by block.

config CRYPTO_CBC
	tristate "CBC support"
	select CRYPTO_BLKCIPHER
	select CRYPTO_MANAGER
	help
	  CBC: Cipher Block Chaining mode
	  This block cipher algorithm is required for IPSec.

config CRYPTO_PCBC
	tristate "PCBC support"
	select CRYPTO_BLKCIPHER
	select CRYPTO_MANAGER
	help
	  PCBC: Propagating Cipher Block Chaining mode
	  This block cipher algorithm is required for RxRPC.

config CRYPTO_LRW
	tristate "LRW support (EXPERIMENTAL)"
	depends on EXPERIMENTAL
	select CRYPTO_BLKCIPHER
	select CRYPTO_MANAGER
	select CRYPTO_GF128MUL
	help
	  LRW: Liskov Rivest Wagner, a tweakable, non malleable, non movable
	  narrow block cipher mode for dm-crypt.  Use it with cipher
	  specification string aes-lrw-benbi, the key must be 256, 320 or 384.
	  The first 128, 192 or 256 bits in the key are used for AES and the
	  rest is used to tie each cipher block to its logical position.

config CRYPTO_XTS
	tristate "XTS support (EXPERIMENTAL)"
	depends on EXPERIMENTAL
	select CRYPTO_BLKCIPHER
	select CRYPTO_MANAGER
	select CRYPTO_GF128MUL
	help
	  XTS: IEEE1619/D16 narrow block cipher use with aes-xts-plain,
	  key size 256, 384 or 512 bits. This implementation currently
	  can't handle a sectorsize which is not a multiple of 16 bytes.

config CRYPTO_CTR
	tristate "CTR support"
	select CRYPTO_BLKCIPHER
	select CRYPTO_SEQIV
	select CRYPTO_MANAGER
	help
	  CTR: Counter mode
	  This block cipher algorithm is required for IPSec.

config CRYPTO_CTS
	tristate "CTS support"
	select CRYPTO_BLKCIPHER
	help
	  CTS: Cipher Text Stealing
	  This is the Cipher Text Stealing mode as described by
	  Section 8 of rfc2040 and referenced by rfc3962.
	  (rfc3962 includes errata information in its Appendix A)
	  This mode is required for Kerberos gss mechanism support
	  for AES encryption.

config CRYPTO_GCM
	tristate "GCM/GMAC support"
	select CRYPTO_CTR
	select CRYPTO_AEAD
	select CRYPTO_GF128MUL
	help
	  Support for Galois/Counter Mode (GCM) and Galois Message
	  Authentication Code (GMAC). Required for IPSec.

config CRYPTO_CCM
	tristate "CCM support"
	select CRYPTO_CTR
	select CRYPTO_AEAD
	help
	  Support for Counter with CBC MAC. Required for IPsec.

config CRYPTO_CRYPTD
	tristate "Software async crypto daemon"
	select CRYPTO_BLKCIPHER
	select CRYPTO_MANAGER
	help
	  This is a generic software asynchronous crypto daemon that
	  converts an arbitrary synchronous software crypto algorithm
	  into an asynchronous algorithm that executes in a kernel thread.

config CRYPTO_DES
	tristate "DES and Triple DES EDE cipher algorithms"
	select CRYPTO_ALGAPI
	help
	  DES cipher algorithm (FIPS 46-2), and Triple DES EDE (FIPS 46-3).

config CRYPTO_FCRYPT
	tristate "FCrypt cipher algorithm"
	select CRYPTO_ALGAPI
	select CRYPTO_BLKCIPHER
	help
	  FCrypt algorithm used by RxRPC.

config CRYPTO_BLOWFISH
	tristate "Blowfish cipher algorithm"
	select CRYPTO_ALGAPI
	help
	  Blowfish cipher algorithm, by Bruce Schneier.
	  
	  This is a variable key length cipher which can use keys from 32
	  bits to 448 bits in length.  It's fast, simple and specifically
	  designed for use on "large microprocessors".
	  
	  See also:
	  <http://www.schneier.com/blowfish.html>

config CRYPTO_TWOFISH
	tristate "Twofish cipher algorithm"
	select CRYPTO_ALGAPI
	select CRYPTO_TWOFISH_COMMON
	help
	  Twofish cipher algorithm.
	  
	  Twofish was submitted as an AES (Advanced Encryption Standard)
	  candidate cipher by researchers at CounterPane Systems.  It is a
	  16 round block cipher supporting key sizes of 128, 192, and 256
	  bits.
	  
	  See also:
	  <http://www.schneier.com/twofish.html>

config CRYPTO_TWOFISH_COMMON
	tristate
	help
	  Common parts of the Twofish cipher algorithm shared by the
	  generic c and the assembler implementations.

config CRYPTO_TWOFISH_586
	tristate "Twofish cipher algorithms (i586)"
	depends on (X86 || UML_X86) && !64BIT
	select CRYPTO_ALGAPI
	select CRYPTO_TWOFISH_COMMON
	help
	  Twofish cipher algorithm.

	  Twofish was submitted as an AES (Advanced Encryption Standard)
	  candidate cipher by researchers at CounterPane Systems.  It is a
	  16 round block cipher supporting key sizes of 128, 192, and 256
	  bits.

	  See also:
	  <http://www.schneier.com/twofish.html>

config CRYPTO_TWOFISH_X86_64
	tristate "Twofish cipher algorithm (x86_64)"
	depends on (X86 || UML_X86) && 64BIT
	select CRYPTO_ALGAPI
	select CRYPTO_TWOFISH_COMMON
	help
	  Twofish cipher algorithm (x86_64).

	  Twofish was submitted as an AES (Advanced Encryption Standard)
	  candidate cipher by researchers at CounterPane Systems.  It is a
	  16 round block cipher supporting key sizes of 128, 192, and 256
	  bits.

	  See also:
	  <http://www.schneier.com/twofish.html>

config CRYPTO_SERPENT
	tristate "Serpent cipher algorithm"
	select CRYPTO_ALGAPI
	help
	  Serpent cipher algorithm, by Anderson, Biham & Knudsen.

	  Keys are allowed to be from 0 to 256 bits in length, in steps
	  of 8 bits.  Also includes the 'Tnepres' algorithm, a reversed
	  variant of Serpent for compatibility with old kerneli.org code.

	  See also:
	  <http://www.cl.cam.ac.uk/~rja14/serpent.html>

config CRYPTO_AES
	tristate "AES cipher algorithms"
	select CRYPTO_ALGAPI
	help
	  AES cipher algorithms (FIPS-197). AES uses the Rijndael 
	  algorithm.

	  Rijndael appears to be consistently a very good performer in
	  both hardware and software across a wide range of computing 
	  environments regardless of its use in feedback or non-feedback 
	  modes. Its key setup time is excellent, and its key agility is 
	  good. Rijndael's very low memory requirements make it very well 
	  suited for restricted-space environments, in which it also 
	  demonstrates excellent performance. Rijndael's operations are 
	  among the easiest to defend against power and timing attacks.	

	  The AES specifies three key sizes: 128, 192 and 256 bits	  

	  See <http://csrc.nist.gov/CryptoToolkit/aes/> for more information.

config CRYPTO_AES_586
	tristate "AES cipher algorithms (i586)"
	depends on (X86 || UML_X86) && !64BIT
	select CRYPTO_ALGAPI
	select CRYPTO_AES
	help
	  AES cipher algorithms (FIPS-197). AES uses the Rijndael 
	  algorithm.

	  Rijndael appears to be consistently a very good performer in
	  both hardware and software across a wide range of computing 
	  environments regardless of its use in feedback or non-feedback 
	  modes. Its key setup time is excellent, and its key agility is 
	  good. Rijndael's very low memory requirements make it very well 
	  suited for restricted-space environments, in which it also 
	  demonstrates excellent performance. Rijndael's operations are 
	  among the easiest to defend against power and timing attacks.	

	  The AES specifies three key sizes: 128, 192 and 256 bits	  

	  See <http://csrc.nist.gov/encryption/aes/> for more information.

config CRYPTO_AES_X86_64
	tristate "AES cipher algorithms (x86_64)"
	depends on (X86 || UML_X86) && 64BIT
	select CRYPTO_ALGAPI
	select CRYPTO_AES
	help
	  AES cipher algorithms (FIPS-197). AES uses the Rijndael 
	  algorithm.

	  Rijndael appears to be consistently a very good performer in
	  both hardware and software across a wide range of computing 
	  environments regardless of its use in feedback or non-feedback 
	  modes. Its key setup time is excellent, and its key agility is 
	  good. Rijndael's very low memory requirements make it very well 
	  suited for restricted-space environments, in which it also 
	  demonstrates excellent performance. Rijndael's operations are 
	  among the easiest to defend against power and timing attacks.	

	  The AES specifies three key sizes: 128, 192 and 256 bits	  

	  See <http://csrc.nist.gov/encryption/aes/> for more information.

config CRYPTO_CAST5
	tristate "CAST5 (CAST-128) cipher algorithm"
	select CRYPTO_ALGAPI
	help
	  The CAST5 encryption algorithm (synonymous with CAST-128) is
	  described in RFC2144.

config CRYPTO_CAST6
	tristate "CAST6 (CAST-256) cipher algorithm"
	select CRYPTO_ALGAPI
	help
	  The CAST6 encryption algorithm (synonymous with CAST-256) is
	  described in RFC2612.

config CRYPTO_TEA
	tristate "TEA, XTEA and XETA cipher algorithms"
	select CRYPTO_ALGAPI
	help
	  TEA cipher algorithm.

	  Tiny Encryption Algorithm is a simple cipher that uses
	  many rounds for security.  It is very fast and uses
	  little memory.

	  Xtendend Tiny Encryption Algorithm is a modification to
	  the TEA algorithm to address a potential key weakness
	  in the TEA algorithm.

	  Xtendend Encryption Tiny Algorithm is a mis-implementation 
	  of the XTEA algorithm for compatibility purposes.

config CRYPTO_ARC4
	tristate "ARC4 cipher algorithm"
	select CRYPTO_ALGAPI
	help
	  ARC4 cipher algorithm.

	  ARC4 is a stream cipher using keys ranging from 8 bits to 2048
	  bits in length.  This algorithm is required for driver-based 
	  WEP, but it should not be for other purposes because of the
	  weakness of the algorithm.

config CRYPTO_KHAZAD
	tristate "Khazad cipher algorithm"
	select CRYPTO_ALGAPI
	help
	  Khazad cipher algorithm.

	  Khazad was a finalist in the initial NESSIE competition.  It is
	  an algorithm optimized for 64-bit processors with good performance
	  on 32-bit processors.  Khazad uses an 128 bit key size.

	  See also:
	  <http://planeta.terra.com.br/informatica/paulobarreto/KhazadPage.html>

config CRYPTO_ANUBIS
	tristate "Anubis cipher algorithm"
	select CRYPTO_ALGAPI
	help
	  Anubis cipher algorithm.

	  Anubis is a variable key length cipher which can use keys from 
	  128 bits to 320 bits in length.  It was evaluated as a entrant
	  in the NESSIE competition.
	  
	  See also:
	  <https://www.cosic.esat.kuleuven.ac.be/nessie/reports/>
	  <http://planeta.terra.com.br/informatica/paulobarreto/AnubisPage.html>

config CRYPTO_SEED
	tristate "SEED cipher algorithm"
	select CRYPTO_ALGAPI
	help
	  SEED cipher algorithm (RFC4269).

	  SEED is a 128-bit symmetric key block cipher that has been
	  developed by KISA (Korea Information Security Agency) as a
	  national standard encryption algorithm of the Republic of Korea.
	  It is a 16 round block cipher with the key size of 128 bit.

	  See also:
	  <http://www.kisa.or.kr/kisa/seed/jsp/seed_eng.jsp>

config CRYPTO_SALSA20
	tristate "Salsa20 stream cipher algorithm (EXPERIMENTAL)"
	depends on EXPERIMENTAL
	select CRYPTO_BLKCIPHER
	help
	  Salsa20 stream cipher algorithm.

	  Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
	  Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>

	  The Salsa20 stream cipher algorithm is designed by Daniel J.
	  Bernstein <[email protected]>. See <http://cr.yp.to/snuffle.html>

config CRYPTO_SALSA20_586
	tristate "Salsa20 stream cipher algorithm (i586) (EXPERIMENTAL)"
	depends on (X86 || UML_X86) && !64BIT
	depends on EXPERIMENTAL
	select CRYPTO_BLKCIPHER
	help
	  Salsa20 stream cipher algorithm.

	  Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
	  Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>

	  The Salsa20 stream cipher algorithm is designed by Daniel J.
	  Bernstein <[email protected]>. See <http://cr.yp.to/snuffle.html>

config CRYPTO_SALSA20_X86_64
	tristate "Salsa20 stream cipher algorithm (x86_64) (EXPERIMENTAL)"
	depends on (X86 || UML_X86) && 64BIT
	depends on EXPERIMENTAL
	select CRYPTO_BLKCIPHER
	help
	  Salsa20 stream cipher algorithm.

	  Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
	  Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>

	  The Salsa20 stream cipher algorithm is designed by Daniel J.
	  Bernstein <[email protected]>. See <http://cr.yp.to/snuffle.html>

config CRYPTO_DEFLATE
	tristate "Deflate compression algorithm"
	select CRYPTO_ALGAPI
	select ZLIB_INFLATE
	select ZLIB_DEFLATE
	help
	  This is the Deflate algorithm (RFC1951), specified for use in
	  IPSec with the IPCOMP protocol (RFC3173, RFC2394).
	  
	  You will most probably want this if using IPSec.

config CRYPTO_MICHAEL_MIC
	tristate "Michael MIC keyed digest algorithm"
	select CRYPTO_ALGAPI
	help
	  Michael MIC is used for message integrity protection in TKIP
	  (IEEE 802.11i). This algorithm is required for TKIP, but it
	  should not be used for other purposes because of the weakness
	  of the algorithm.

config CRYPTO_CRC32C
	tristate "CRC32c CRC algorithm"
	select CRYPTO_ALGAPI
	select LIBCRC32C
	help
	  Castagnoli, et al Cyclic Redundancy-Check Algorithm.  Used
	  by iSCSI for header and data digests and by others.
	  See Castagnoli93.  This implementation uses lib/libcrc32c.
          Module will be crc32c.

config CRYPTO_CAMELLIA
	tristate "Camellia cipher algorithms"
	depends on CRYPTO
	select CRYPTO_ALGAPI
	help
	  Camellia cipher algorithms module.

	  Camellia is a symmetric key block cipher developed jointly
	  at NTT and Mitsubishi Electric Corporation.

	  The Camellia specifies three key sizes: 128, 192 and 256 bits.

	  See also:
	  <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>

config CRYPTO_TEST
	tristate "Testing module"
	depends on m
	select CRYPTO_ALGAPI
	select CRYPTO_AEAD
	select CRYPTO_BLKCIPHER
	help
	  Quick & dirty crypto test module.

config CRYPTO_AUTHENC
	tristate "Authenc support"
	select CRYPTO_AEAD
	select CRYPTO_BLKCIPHER
	select CRYPTO_MANAGER
	select CRYPTO_HASH
	help
	  Authenc: Combined mode wrapper for IPsec.
	  This is required for IPSec.

config CRYPTO_LZO
	tristate "LZO compression algorithm"
	select CRYPTO_ALGAPI
	select LZO_COMPRESS
	select LZO_DECOMPRESS
	help
	  This is the LZO algorithm.

source "drivers/crypto/Kconfig"

endif	# if CRYPTO
Commit	Line	Data
685784aa DW	1	#
	2	# Generic algorithms support
	3	#
	4	config XOR_BLOCKS
	5	tristate
	6
1da177e4	7	#
9bc89cd8	8	# async_tx api: hardware offloaded memory transfer/transform support
1da177e4	9	#
9bc89cd8	10	source "crypto/async_tx/Kconfig"
1da177e4	11
9bc89cd8 DW	12	#
	13	# Cryptographic API Configuration
	14	#
2e290f43	15	menuconfig CRYPTO
c3715cb9	16	tristate "Cryptographic API"
1da177e4 LT	17	help
	18	This option provides the core Cryptographic API.
	19
cce9e06d HX	20	if CRYPTO
	21
	22	config CRYPTO_ALGAPI
	23	tristate
	24	help
	25	This option provides the API for cryptographic algorithms.
	26
1ae97820 HX	27	config CRYPTO_AEAD
	28	tristate
	29	select CRYPTO_ALGAPI
	30
5cde0af2 HX	31	config CRYPTO_BLKCIPHER
	32	tristate
	33	select CRYPTO_ALGAPI
	34
0a270321 HX	35	config CRYPTO_SEQIV
0a270321 HX	36	tristate "Sequence Number IV Generator"
47262042	37	select CRYPTO_AEAD
0a270321 HX	38	select CRYPTO_BLKCIPHER
	39	help
	40	This IV generator generates an IV based on a sequence number by
	41	xoring it with a salt. This algorithm is mainly useful for CTR
	42	and similar modes.
	43
055bcee3 HX	44	config CRYPTO_HASH
	45	tristate
	46	select CRYPTO_ALGAPI
	47
2b8c19db HX	48	config CRYPTO_MANAGER
	49	tristate "Cryptographic algorithm manager"
	50	select CRYPTO_ALGAPI
2b8c19db HX	51	help
	52	Create default cryptographic template instantiations such as
	53	cbc(aes).
	54
1da177e4	55	config CRYPTO_HMAC
8425165d	56	tristate "HMAC support"
0796ae06	57	select CRYPTO_HASH
43518407	58	select CRYPTO_MANAGER
1da177e4 LT	59	help
	60	HMAC: Keyed-Hashing for Message Authentication (RFC2104).
	61	This is required for IPSec.
	62
333b0d7e KM	63	config CRYPTO_XCBC
	64	tristate "XCBC support"
	65	depends on EXPERIMENTAL
	66	select CRYPTO_HASH
	67	select CRYPTO_MANAGER
	68	help
	69	XCBC: Keyed-Hashing with encryption algorithm
	70	http://www.ietf.org/rfc/rfc3566.txt
	71	http://csrc.nist.gov/encryption/modes/proposedmodes/
	72	xcbc-mac/xcbc-mac-spec.pdf
	73
1da177e4 LT	74	config CRYPTO_NULL
1da177e4 LT	75	tristate "Null algorithms"
cce9e06d	76	select CRYPTO_ALGAPI
c8620c25	77	select CRYPTO_BLKCIPHER
1da177e4 LT	78	help
	79	These are 'Null' algorithms, used by IPsec, which do nothing.
	80
	81	config CRYPTO_MD4
	82	tristate "MD4 digest algorithm"
cce9e06d	83	select CRYPTO_ALGAPI
1da177e4 LT	84	help
	85	MD4 message digest algorithm (RFC1320).
	86
	87	config CRYPTO_MD5
	88	tristate "MD5 digest algorithm"
cce9e06d	89	select CRYPTO_ALGAPI
1da177e4 LT	90	help
	91	MD5 message digest algorithm (RFC1321).
	92
	93	config CRYPTO_SHA1
	94	tristate "SHA1 digest algorithm"
cce9e06d	95	select CRYPTO_ALGAPI
1da177e4 LT	96	help
	97	SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2).
	98
1da177e4	99	config CRYPTO_SHA256
cd12fb90	100	tristate "SHA224 and SHA256 digest algorithm"
cce9e06d	101	select CRYPTO_ALGAPI
1da177e4 LT	102	help
	103	SHA256 secure hash standard (DFIPS 180-2).
	104
	105	This version of SHA implements a 256 bit hash with 128 bits of
	106	security against collision attacks.
	107
cd12fb90 JL	108	This code also includes SHA-224, a 224 bit hash with 112 bits
	109	of security against collision attacks.
	110
1da177e4 LT	111	config CRYPTO_SHA512
1da177e4 LT	112	tristate "SHA384 and SHA512 digest algorithms"
cce9e06d	113	select CRYPTO_ALGAPI
1da177e4 LT	114	help
	115	SHA512 secure hash standard (DFIPS 180-2).
	116
	117	This version of SHA implements a 512 bit hash with 256 bits of
	118	security against collision attacks.
	119
	120	This code also includes SHA-384, a 384 bit hash with 192 bits
	121	of security against collision attacks.
	122
	123	config CRYPTO_WP512
	124	tristate "Whirlpool digest algorithms"
cce9e06d	125	select CRYPTO_ALGAPI
1da177e4 LT	126	help
	127	Whirlpool hash algorithm 512, 384 and 256-bit hashes
	128
	129	Whirlpool-512 is part of the NESSIE cryptographic primitives.
	130	Whirlpool will be part of the ISO/IEC 10118-3:2003(E) standard
	131
	132	See also:
	133	<http://planeta.terra.com.br/informatica/paulobarreto/WhirlpoolPage.html>
	134
	135	config CRYPTO_TGR192
	136	tristate "Tiger digest algorithms"
cce9e06d	137	select CRYPTO_ALGAPI
1da177e4 LT	138	help
	139	Tiger hash algorithm 192, 160 and 128-bit hashes
	140
	141	Tiger is a hash function optimized for 64-bit processors while
	142	still having decent performance on 32-bit processors.
	143	Tiger was developed by Ross Anderson and Eli Biham.
	144
	145	See also:
	146	<http://www.cs.technion.ac.il/~biham/Reports/Tiger/>.
	147
c494e070 RS	148	config CRYPTO_GF128MUL
	149	tristate "GF(2^128) multiplication functions (EXPERIMENTAL)"
	150	depends on EXPERIMENTAL
	151	help
	152	Efficient table driven implementation of multiplications in the
	153	field GF(2^128). This is needed by some cypher modes. This
	154	option will be selected automatically if you select such a
	155	cipher mode. Only select this option by hand if you expect to load
	156	an external module that requires these functions.
	157
db131ef9 HX	158	config CRYPTO_ECB
	159	tristate "ECB support"
	160	select CRYPTO_BLKCIPHER
43518407	161	select CRYPTO_MANAGER
db131ef9 HX	162	help
	163	ECB: Electronic CodeBook mode
	164	This is the simplest block cipher algorithm. It simply encrypts
	165	the input block by block.
	166
	167	config CRYPTO_CBC
	168	tristate "CBC support"
	169	select CRYPTO_BLKCIPHER
43518407	170	select CRYPTO_MANAGER
db131ef9 HX	171	help
	172	CBC: Cipher Block Chaining mode
	173	This block cipher algorithm is required for IPSec.
	174
91652be5 DH	175	config CRYPTO_PCBC
	176	tristate "PCBC support"
	177	select CRYPTO_BLKCIPHER
	178	select CRYPTO_MANAGER
91652be5 DH	179	help
	180	PCBC: Propagating Cipher Block Chaining mode
	181	This block cipher algorithm is required for RxRPC.
	182
64470f1b RS	183	config CRYPTO_LRW
	184	tristate "LRW support (EXPERIMENTAL)"
	185	depends on EXPERIMENTAL
	186	select CRYPTO_BLKCIPHER
	187	select CRYPTO_MANAGER
	188	select CRYPTO_GF128MUL
	189	help
	190	LRW: Liskov Rivest Wagner, a tweakable, non malleable, non movable
	191	narrow block cipher mode for dm-crypt. Use it with cipher
	192	specification string aes-lrw-benbi, the key must be 256, 320 or 384.
	193	The first 128, 192 or 256 bits in the key are used for AES and the
	194	rest is used to tie each cipher block to its logical position.
	195
f19f5111 RS	196	config CRYPTO_XTS
	197	tristate "XTS support (EXPERIMENTAL)"
	198	depends on EXPERIMENTAL
	199	select CRYPTO_BLKCIPHER
	200	select CRYPTO_MANAGER
	201	select CRYPTO_GF128MUL
	202	help
	203	XTS: IEEE1619/D16 narrow block cipher use with aes-xts-plain,
	204	key size 256, 384 or 512 bits. This implementation currently
	205	can't handle a sectorsize which is not a multiple of 16 bytes.
	206
23e353c8 JL	207	config CRYPTO_CTR
	208	tristate "CTR support"
	209	select CRYPTO_BLKCIPHER
0a270321	210	select CRYPTO_SEQIV
23e353c8	211	select CRYPTO_MANAGER
23e353c8 JL	212	help
	213	CTR: Counter mode
	214	This block cipher algorithm is required for IPSec.
	215
76cb9521 KC	216	config CRYPTO_CTS
	217	tristate "CTS support"
	218	select CRYPTO_BLKCIPHER
	219	help
	220	CTS: Cipher Text Stealing
	221	This is the Cipher Text Stealing mode as described by
	222	Section 8 of rfc2040 and referenced by rfc3962.
	223	(rfc3962 includes errata information in its Appendix A)
	224	This mode is required for Kerberos gss mechanism support
	225	for AES encryption.
	226
28db8e3e MH	227	config CRYPTO_GCM
	228	tristate "GCM/GMAC support"
	229	select CRYPTO_CTR
	230	select CRYPTO_AEAD
	231	select CRYPTO_GF128MUL
	232	help
	233	Support for Galois/Counter Mode (GCM) and Galois Message
	234	Authentication Code (GMAC). Required for IPSec.
	235
4a49b499 JL	236	config CRYPTO_CCM
	237	tristate "CCM support"
	238	select CRYPTO_CTR
	239	select CRYPTO_AEAD
	240	help
	241	Support for Counter with CBC MAC. Required for IPsec.
	242
124b53d0 HX	243	config CRYPTO_CRYPTD
124b53d0 HX	244	tristate "Software async crypto daemon"
653ebd9c	245	select CRYPTO_BLKCIPHER
124b53d0 HX	246	select CRYPTO_MANAGER
	247	help
	248	This is a generic software asynchronous crypto daemon that
	249	converts an arbitrary synchronous software crypto algorithm
	250	into an asynchronous algorithm that executes in a kernel thread.
	251
1da177e4 LT	252	config CRYPTO_DES
1da177e4 LT	253	tristate "DES and Triple DES EDE cipher algorithms"
cce9e06d	254	select CRYPTO_ALGAPI
1da177e4 LT	255	help
	256	DES cipher algorithm (FIPS 46-2), and Triple DES EDE (FIPS 46-3).
	257
90831639 DH	258	config CRYPTO_FCRYPT
	259	tristate "FCrypt cipher algorithm"
	260	select CRYPTO_ALGAPI
	261	select CRYPTO_BLKCIPHER
	262	help
	263	FCrypt algorithm used by RxRPC.
	264
1da177e4 LT	265	config CRYPTO_BLOWFISH
1da177e4 LT	266	tristate "Blowfish cipher algorithm"
cce9e06d	267	select CRYPTO_ALGAPI
1da177e4 LT	268	help
	269	Blowfish cipher algorithm, by Bruce Schneier.
	270
	271	This is a variable key length cipher which can use keys from 32
	272	bits to 448 bits in length. It's fast, simple and specifically
	273	designed for use on "large microprocessors".
	274
	275	See also:
	276	<http://www.schneier.com/blowfish.html>
	277
	278	config CRYPTO_TWOFISH
	279	tristate "Twofish cipher algorithm"
cce9e06d	280	select CRYPTO_ALGAPI
2729bb42	281	select CRYPTO_TWOFISH_COMMON
1da177e4 LT	282	help
	283	Twofish cipher algorithm.
	284
	285	Twofish was submitted as an AES (Advanced Encryption Standard)
	286	candidate cipher by researchers at CounterPane Systems. It is a
	287	16 round block cipher supporting key sizes of 128, 192, and 256
	288	bits.
	289
	290	See also:
	291	<http://www.schneier.com/twofish.html>
	292
2729bb42 JF	293	config CRYPTO_TWOFISH_COMMON
2729bb42 JF	294	tristate
2729bb42 JF	295	help
	296	Common parts of the Twofish cipher algorithm shared by the
	297	generic c and the assembler implementations.
	298
b9f535ff JF	299	config CRYPTO_TWOFISH_586
b9f535ff JF	300	tristate "Twofish cipher algorithms (i586)"
cce9e06d HX	301	depends on (X86 \|\| UML_X86) && !64BIT
cce9e06d HX	302	select CRYPTO_ALGAPI
b9f535ff JF	303	select CRYPTO_TWOFISH_COMMON
	304	help
	305	Twofish cipher algorithm.
	306
	307	Twofish was submitted as an AES (Advanced Encryption Standard)
	308	candidate cipher by researchers at CounterPane Systems. It is a
	309	16 round block cipher supporting key sizes of 128, 192, and 256
	310	bits.
	311
	312	See also:
	313	<http://www.schneier.com/twofish.html>
	314
eaf44088 JF	315	config CRYPTO_TWOFISH_X86_64
eaf44088 JF	316	tristate "Twofish cipher algorithm (x86_64)"
cce9e06d HX	317	depends on (X86 \|\| UML_X86) && 64BIT
cce9e06d HX	318	select CRYPTO_ALGAPI
eaf44088 JF	319	select CRYPTO_TWOFISH_COMMON
	320	help
	321	Twofish cipher algorithm (x86_64).
	322
	323	Twofish was submitted as an AES (Advanced Encryption Standard)
	324	candidate cipher by researchers at CounterPane Systems. It is a
	325	16 round block cipher supporting key sizes of 128, 192, and 256
	326	bits.
	327
	328	See also:
	329	<http://www.schneier.com/twofish.html>
	330
1da177e4 LT	331	config CRYPTO_SERPENT
1da177e4 LT	332	tristate "Serpent cipher algorithm"
cce9e06d	333	select CRYPTO_ALGAPI
1da177e4 LT	334	help
	335	Serpent cipher algorithm, by Anderson, Biham & Knudsen.
	336
	337	Keys are allowed to be from 0 to 256 bits in length, in steps
	338	of 8 bits. Also includes the 'Tnepres' algorithm, a reversed
3dde6ad8	339	variant of Serpent for compatibility with old kerneli.org code.
1da177e4 LT	340
	341	See also:
	342	<http://www.cl.cam.ac.uk/~rja14/serpent.html>
	343
	344	config CRYPTO_AES
	345	tristate "AES cipher algorithms"
cce9e06d	346	select CRYPTO_ALGAPI
1da177e4 LT	347	help
	348	AES cipher algorithms (FIPS-197). AES uses the Rijndael
	349	algorithm.
	350
	351	Rijndael appears to be consistently a very good performer in
	352	both hardware and software across a wide range of computing
	353	environments regardless of its use in feedback or non-feedback
	354	modes. Its key setup time is excellent, and its key agility is
	355	good. Rijndael's very low memory requirements make it very well
	356	suited for restricted-space environments, in which it also
	357	demonstrates excellent performance. Rijndael's operations are
	358	among the easiest to defend against power and timing attacks.
	359
	360	The AES specifies three key sizes: 128, 192 and 256 bits
	361
	362	See <http://csrc.nist.gov/CryptoToolkit/aes/> for more information.
	363
	364	config CRYPTO_AES_586
	365	tristate "AES cipher algorithms (i586)"
cce9e06d HX	366	depends on (X86 \|\| UML_X86) && !64BIT
cce9e06d HX	367	select CRYPTO_ALGAPI
5157dea8	368	select CRYPTO_AES
1da177e4 LT	369	help
	370	AES cipher algorithms (FIPS-197). AES uses the Rijndael
	371	algorithm.
	372
	373	Rijndael appears to be consistently a very good performer in
	374	both hardware and software across a wide range of computing
	375	environments regardless of its use in feedback or non-feedback
	376	modes. Its key setup time is excellent, and its key agility is
	377	good. Rijndael's very low memory requirements make it very well
	378	suited for restricted-space environments, in which it also
	379	demonstrates excellent performance. Rijndael's operations are
	380	among the easiest to defend against power and timing attacks.
	381
	382	The AES specifies three key sizes: 128, 192 and 256 bits
a2a892a2 AS	383
	384	See <http://csrc.nist.gov/encryption/aes/> for more information.
	385
	386	config CRYPTO_AES_X86_64
	387	tristate "AES cipher algorithms (x86_64)"
cce9e06d HX	388	depends on (X86 \|\| UML_X86) && 64BIT
cce9e06d HX	389	select CRYPTO_ALGAPI
81190b32	390	select CRYPTO_AES
a2a892a2 AS	391	help
	392	AES cipher algorithms (FIPS-197). AES uses the Rijndael
	393	algorithm.
	394
	395	Rijndael appears to be consistently a very good performer in
	396	both hardware and software across a wide range of computing
	397	environments regardless of its use in feedback or non-feedback
	398	modes. Its key setup time is excellent, and its key agility is
	399	good. Rijndael's very low memory requirements make it very well
	400	suited for restricted-space environments, in which it also
	401	demonstrates excellent performance. Rijndael's operations are
	402	among the easiest to defend against power and timing attacks.
	403
	404	The AES specifies three key sizes: 128, 192 and 256 bits
1da177e4 LT	405
	406	See <http://csrc.nist.gov/encryption/aes/> for more information.
	407
	408	config CRYPTO_CAST5
	409	tristate "CAST5 (CAST-128) cipher algorithm"
cce9e06d	410	select CRYPTO_ALGAPI
1da177e4 LT	411	help
	412	The CAST5 encryption algorithm (synonymous with CAST-128) is
	413	described in RFC2144.
	414
	415	config CRYPTO_CAST6
	416	tristate "CAST6 (CAST-256) cipher algorithm"
cce9e06d	417	select CRYPTO_ALGAPI
1da177e4 LT	418	help
	419	The CAST6 encryption algorithm (synonymous with CAST-256) is
	420	described in RFC2612.
	421
	422	config CRYPTO_TEA
fb4f10ed	423	tristate "TEA, XTEA and XETA cipher algorithms"
cce9e06d	424	select CRYPTO_ALGAPI
1da177e4 LT	425	help
	426	TEA cipher algorithm.
	427
	428	Tiny Encryption Algorithm is a simple cipher that uses
	429	many rounds for security. It is very fast and uses
	430	little memory.
	431
	432	Xtendend Tiny Encryption Algorithm is a modification to
	433	the TEA algorithm to address a potential key weakness
	434	in the TEA algorithm.
	435
fb4f10ed AG	436	Xtendend Encryption Tiny Algorithm is a mis-implementation
	437	of the XTEA algorithm for compatibility purposes.
	438
1da177e4 LT	439	config CRYPTO_ARC4
1da177e4 LT	440	tristate "ARC4 cipher algorithm"
cce9e06d	441	select CRYPTO_ALGAPI
1da177e4 LT	442	help
	443	ARC4 cipher algorithm.
	444
	445	ARC4 is a stream cipher using keys ranging from 8 bits to 2048
	446	bits in length. This algorithm is required for driver-based
	447	WEP, but it should not be for other purposes because of the
	448	weakness of the algorithm.
	449
	450	config CRYPTO_KHAZAD
	451	tristate "Khazad cipher algorithm"
cce9e06d	452	select CRYPTO_ALGAPI
1da177e4 LT	453	help
	454	Khazad cipher algorithm.
	455
	456	Khazad was a finalist in the initial NESSIE competition. It is
	457	an algorithm optimized for 64-bit processors with good performance
	458	on 32-bit processors. Khazad uses an 128 bit key size.
	459
	460	See also:
	461	<http://planeta.terra.com.br/informatica/paulobarreto/KhazadPage.html>
	462
	463	config CRYPTO_ANUBIS
	464	tristate "Anubis cipher algorithm"
cce9e06d	465	select CRYPTO_ALGAPI
1da177e4 LT	466	help
	467	Anubis cipher algorithm.
	468
	469	Anubis is a variable key length cipher which can use keys from
	470	128 bits to 320 bits in length. It was evaluated as a entrant
	471	in the NESSIE competition.
	472
	473	See also:
	474	<https://www.cosic.esat.kuleuven.ac.be/nessie/reports/>
	475	<http://planeta.terra.com.br/informatica/paulobarreto/AnubisPage.html>
	476
e2ee95b8 HSC	477	config CRYPTO_SEED
	478	tristate "SEED cipher algorithm"
	479	select CRYPTO_ALGAPI
	480	help
	481	SEED cipher algorithm (RFC4269).
	482
	483	SEED is a 128-bit symmetric key block cipher that has been
	484	developed by KISA (Korea Information Security Agency) as a
	485	national standard encryption algorithm of the Republic of Korea.
	486	It is a 16 round block cipher with the key size of 128 bit.
	487
	488	See also:
	489	<http://www.kisa.or.kr/kisa/seed/jsp/seed_eng.jsp>
	490
2407d608 TSH	491	config CRYPTO_SALSA20
	492	tristate "Salsa20 stream cipher algorithm (EXPERIMENTAL)"
	493	depends on EXPERIMENTAL
	494	select CRYPTO_BLKCIPHER
	495	help
	496	Salsa20 stream cipher algorithm.
	497
	498	Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
	499	Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
974e4b75 TSH	500
	501	The Salsa20 stream cipher algorithm is designed by Daniel J.
	502	Bernstein <[email protected]>. See <http://cr.yp.to/snuffle.html>
	503
	504	config CRYPTO_SALSA20_586
	505	tristate "Salsa20 stream cipher algorithm (i586) (EXPERIMENTAL)"
	506	depends on (X86 \|\| UML_X86) && !64BIT
	507	depends on EXPERIMENTAL
	508	select CRYPTO_BLKCIPHER
974e4b75 TSH	509	help
	510	Salsa20 stream cipher algorithm.
	511
	512	Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
	513	Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
9a7dafbb TSH	514
	515	The Salsa20 stream cipher algorithm is designed by Daniel J.
	516	Bernstein <[email protected]>. See <http://cr.yp.to/snuffle.html>
	517
	518	config CRYPTO_SALSA20_X86_64
	519	tristate "Salsa20 stream cipher algorithm (x86_64) (EXPERIMENTAL)"
	520	depends on (X86 \|\| UML_X86) && 64BIT
	521	depends on EXPERIMENTAL
	522	select CRYPTO_BLKCIPHER
9a7dafbb TSH	523	help
	524	Salsa20 stream cipher algorithm.
	525
	526	Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
	527	Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
2407d608 TSH	528
	529	The Salsa20 stream cipher algorithm is designed by Daniel J.
	530	Bernstein <[email protected]>. See <http://cr.yp.to/snuffle.html>
1da177e4 LT	531
	532	config CRYPTO_DEFLATE
	533	tristate "Deflate compression algorithm"
cce9e06d	534	select CRYPTO_ALGAPI
1da177e4 LT	535	select ZLIB_INFLATE
	536	select ZLIB_DEFLATE
	537	help
	538	This is the Deflate algorithm (RFC1951), specified for use in
	539	IPSec with the IPCOMP protocol (RFC3173, RFC2394).
	540
	541	You will most probably want this if using IPSec.
	542
	543	config CRYPTO_MICHAEL_MIC
	544	tristate "Michael MIC keyed digest algorithm"
cce9e06d	545	select CRYPTO_ALGAPI
1da177e4 LT	546	help
	547	Michael MIC is used for message integrity protection in TKIP
	548	(IEEE 802.11i). This algorithm is required for TKIP, but it
	549	should not be used for other purposes because of the weakness
	550	of the algorithm.
	551
	552	config CRYPTO_CRC32C
	553	tristate "CRC32c CRC algorithm"
cce9e06d	554	select CRYPTO_ALGAPI
1da177e4 LT	555	select LIBCRC32C
	556	help
	557	Castagnoli, et al Cyclic Redundancy-Check Algorithm. Used
	558	by iSCSI for header and data digests and by others.
	559	See Castagnoli93. This implementation uses lib/libcrc32c.
	560	Module will be crc32c.
	561
04ac7db3 NT	562	config CRYPTO_CAMELLIA
	563	tristate "Camellia cipher algorithms"
	564	depends on CRYPTO
	565	select CRYPTO_ALGAPI
	566	help
	567	Camellia cipher algorithms module.
	568
	569	Camellia is a symmetric key block cipher developed jointly
	570	at NTT and Mitsubishi Electric Corporation.
	571
	572	The Camellia specifies three key sizes: 128, 192 and 256 bits.
	573
	574	See also:
	575	<https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
	576
1da177e4 LT	577	config CRYPTO_TEST
1da177e4 LT	578	tristate "Testing module"
cce9e06d HX	579	depends on m
cce9e06d HX	580	select CRYPTO_ALGAPI
d1cda4e3	581	select CRYPTO_AEAD
242f1a34	582	select CRYPTO_BLKCIPHER
1da177e4 LT	583	help
	584	Quick & dirty crypto test module.
	585
3c09f17c HX	586	config CRYPTO_AUTHENC
	587	tristate "Authenc support"
	588	select CRYPTO_AEAD
3e16bfba	589	select CRYPTO_BLKCIPHER
3c09f17c	590	select CRYPTO_MANAGER
5e553110	591	select CRYPTO_HASH
3c09f17c HX	592	help
	593	Authenc: Combined mode wrapper for IPsec.
	594	This is required for IPSec.
	595
0b77abb3 ZS	596	config CRYPTO_LZO
	597	tristate "LZO compression algorithm"
	598	select CRYPTO_ALGAPI
	599	select LZO_COMPRESS
	600	select LZO_DECOMPRESS
	601	help
	602	This is the LZO algorithm.
	603
1da177e4	604	source "drivers/crypto/Kconfig"
1da177e4	605
cce9e06d	606	endif # if CRYPTO