| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 1 | # | 
| Dan Williams | 685784a | 2007-07-09 11:56:42 -0700 | [diff] [blame] | 2 | # Generic algorithms support | 
 | 3 | # | 
 | 4 | config XOR_BLOCKS | 
 | 5 | 	tristate | 
 | 6 |  | 
 | 7 | # | 
| Dan Williams | 9bc89cd | 2007-01-02 11:10:44 -0700 | [diff] [blame] | 8 | # async_tx api: hardware offloaded memory transfer/transform support | 
 | 9 | # | 
 | 10 | source "crypto/async_tx/Kconfig" | 
 | 11 |  | 
 | 12 | # | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 13 | # Cryptographic API Configuration | 
 | 14 | # | 
| Jan Engelhardt | 2e290f4 | 2007-05-18 15:11:01 +1000 | [diff] [blame] | 15 | menuconfig CRYPTO | 
| Sebastian Siewior | c3715cb9 | 2008-03-30 16:36:09 +0800 | [diff] [blame] | 16 | 	tristate "Cryptographic API" | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 17 | 	help | 
 | 18 | 	  This option provides the core Cryptographic API. | 
 | 19 |  | 
| Herbert Xu | cce9e06 | 2006-08-21 21:08:13 +1000 | [diff] [blame] | 20 | if CRYPTO | 
 | 21 |  | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 22 | comment "Crypto core or helper" | 
 | 23 |  | 
| Neil Horman | ccb778e | 2008-08-05 14:13:08 +0800 | [diff] [blame] | 24 | config CRYPTO_FIPS | 
 | 25 | 	bool "FIPS 200 compliance" | 
 | 26 | 	help | 
 | 27 | 	  This options enables the fips boot option which is | 
 | 28 | 	  required if you want to system to operate in a FIPS 200 | 
 | 29 | 	  certification.  You should say no unless you know what | 
 | 30 | 	  this is. | 
 | 31 |  | 
| Herbert Xu | cce9e06 | 2006-08-21 21:08:13 +1000 | [diff] [blame] | 32 | config CRYPTO_ALGAPI | 
 | 33 | 	tristate | 
| Herbert Xu | 6a0fcbb | 2008-12-10 23:29:44 +1100 | [diff] [blame] | 34 | 	select CRYPTO_ALGAPI2 | 
| Herbert Xu | cce9e06 | 2006-08-21 21:08:13 +1000 | [diff] [blame] | 35 | 	help | 
 | 36 | 	  This option provides the API for cryptographic algorithms. | 
 | 37 |  | 
| Herbert Xu | 6a0fcbb | 2008-12-10 23:29:44 +1100 | [diff] [blame] | 38 | config CRYPTO_ALGAPI2 | 
 | 39 | 	tristate | 
 | 40 |  | 
| Herbert Xu | 1ae9782 | 2007-08-30 15:36:14 +0800 | [diff] [blame] | 41 | config CRYPTO_AEAD | 
 | 42 | 	tristate | 
| Herbert Xu | 6a0fcbb | 2008-12-10 23:29:44 +1100 | [diff] [blame] | 43 | 	select CRYPTO_AEAD2 | 
| Herbert Xu | 1ae9782 | 2007-08-30 15:36:14 +0800 | [diff] [blame] | 44 | 	select CRYPTO_ALGAPI | 
 | 45 |  | 
| Herbert Xu | 6a0fcbb | 2008-12-10 23:29:44 +1100 | [diff] [blame] | 46 | config CRYPTO_AEAD2 | 
 | 47 | 	tristate | 
 | 48 | 	select CRYPTO_ALGAPI2 | 
 | 49 |  | 
| Herbert Xu | 5cde0af | 2006-08-22 00:07:53 +1000 | [diff] [blame] | 50 | config CRYPTO_BLKCIPHER | 
 | 51 | 	tristate | 
| Herbert Xu | 6a0fcbb | 2008-12-10 23:29:44 +1100 | [diff] [blame] | 52 | 	select CRYPTO_BLKCIPHER2 | 
| Herbert Xu | 5cde0af | 2006-08-22 00:07:53 +1000 | [diff] [blame] | 53 | 	select CRYPTO_ALGAPI | 
| Herbert Xu | 6a0fcbb | 2008-12-10 23:29:44 +1100 | [diff] [blame] | 54 |  | 
 | 55 | config CRYPTO_BLKCIPHER2 | 
 | 56 | 	tristate | 
 | 57 | 	select CRYPTO_ALGAPI2 | 
 | 58 | 	select CRYPTO_RNG2 | 
| Herbert Xu | 5cde0af | 2006-08-22 00:07:53 +1000 | [diff] [blame] | 59 |  | 
| Herbert Xu | 055bcee | 2006-08-19 22:24:23 +1000 | [diff] [blame] | 60 | config CRYPTO_HASH | 
 | 61 | 	tristate | 
| Herbert Xu | 6a0fcbb | 2008-12-10 23:29:44 +1100 | [diff] [blame] | 62 | 	select CRYPTO_HASH2 | 
| Herbert Xu | 055bcee | 2006-08-19 22:24:23 +1000 | [diff] [blame] | 63 | 	select CRYPTO_ALGAPI | 
 | 64 |  | 
| Herbert Xu | 6a0fcbb | 2008-12-10 23:29:44 +1100 | [diff] [blame] | 65 | config CRYPTO_HASH2 | 
 | 66 | 	tristate | 
 | 67 | 	select CRYPTO_ALGAPI2 | 
 | 68 |  | 
| Neil Horman | 17f0f4a | 2008-08-14 22:15:52 +1000 | [diff] [blame] | 69 | config CRYPTO_RNG | 
 | 70 | 	tristate | 
| Herbert Xu | 6a0fcbb | 2008-12-10 23:29:44 +1100 | [diff] [blame] | 71 | 	select CRYPTO_RNG2 | 
| Neil Horman | 17f0f4a | 2008-08-14 22:15:52 +1000 | [diff] [blame] | 72 | 	select CRYPTO_ALGAPI | 
 | 73 |  | 
| Herbert Xu | 6a0fcbb | 2008-12-10 23:29:44 +1100 | [diff] [blame] | 74 | config CRYPTO_RNG2 | 
 | 75 | 	tristate | 
 | 76 | 	select CRYPTO_ALGAPI2 | 
 | 77 |  | 
| Herbert Xu | 2b8c19d | 2006-09-21 11:31:44 +1000 | [diff] [blame] | 78 | config CRYPTO_MANAGER | 
 | 79 | 	tristate "Cryptographic algorithm manager" | 
| Herbert Xu | 6a0fcbb | 2008-12-10 23:29:44 +1100 | [diff] [blame] | 80 | 	select CRYPTO_MANAGER2 | 
| Herbert Xu | 2b8c19d | 2006-09-21 11:31:44 +1000 | [diff] [blame] | 81 | 	help | 
 | 82 | 	  Create default cryptographic template instantiations such as | 
 | 83 | 	  cbc(aes). | 
 | 84 |  | 
| Herbert Xu | 6a0fcbb | 2008-12-10 23:29:44 +1100 | [diff] [blame] | 85 | config CRYPTO_MANAGER2 | 
 | 86 | 	def_tristate CRYPTO_MANAGER || (CRYPTO_MANAGER!=n && CRYPTO_ALGAPI=y) | 
 | 87 | 	select CRYPTO_AEAD2 | 
 | 88 | 	select CRYPTO_HASH2 | 
 | 89 | 	select CRYPTO_BLKCIPHER2 | 
 | 90 |  | 
| Rik Snel | c494e07 | 2006-11-29 18:59:44 +1100 | [diff] [blame] | 91 | config CRYPTO_GF128MUL | 
 | 92 | 	tristate "GF(2^128) multiplication functions (EXPERIMENTAL)" | 
 | 93 | 	depends on EXPERIMENTAL | 
 | 94 | 	help | 
 | 95 | 	  Efficient table driven implementation of multiplications in the | 
 | 96 | 	  field GF(2^128).  This is needed by some cypher modes. This | 
 | 97 | 	  option will be selected automatically if you select such a | 
 | 98 | 	  cipher mode.  Only select this option by hand if you expect to load | 
 | 99 | 	  an external module that requires these functions. | 
 | 100 |  | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 101 | config CRYPTO_NULL | 
 | 102 | 	tristate "Null algorithms" | 
 | 103 | 	select CRYPTO_ALGAPI | 
 | 104 | 	select CRYPTO_BLKCIPHER | 
| Herbert Xu | d35d245 | 2008-11-08 08:09:56 +0800 | [diff] [blame^] | 105 | 	select CRYPTO_HASH | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 106 | 	help | 
 | 107 | 	  These are 'Null' algorithms, used by IPsec, which do nothing. | 
 | 108 |  | 
 | 109 | config CRYPTO_CRYPTD | 
 | 110 | 	tristate "Software async crypto daemon" | 
| Herbert Xu | db131ef | 2006-09-21 11:44:08 +1000 | [diff] [blame] | 111 | 	select CRYPTO_BLKCIPHER | 
| Loc Ho | b8a2825 | 2008-05-14 21:23:00 +0800 | [diff] [blame] | 112 | 	select CRYPTO_HASH | 
| Herbert Xu | 4351840 | 2006-10-16 21:28:58 +1000 | [diff] [blame] | 113 | 	select CRYPTO_MANAGER | 
| Herbert Xu | db131ef | 2006-09-21 11:44:08 +1000 | [diff] [blame] | 114 | 	help | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 115 | 	  This is a generic software asynchronous crypto daemon that | 
 | 116 | 	  converts an arbitrary synchronous software crypto algorithm | 
 | 117 | 	  into an asynchronous algorithm that executes in a kernel thread. | 
 | 118 |  | 
 | 119 | config CRYPTO_AUTHENC | 
 | 120 | 	tristate "Authenc support" | 
 | 121 | 	select CRYPTO_AEAD | 
 | 122 | 	select CRYPTO_BLKCIPHER | 
 | 123 | 	select CRYPTO_MANAGER | 
 | 124 | 	select CRYPTO_HASH | 
 | 125 | 	help | 
 | 126 | 	  Authenc: Combined mode wrapper for IPsec. | 
 | 127 | 	  This is required for IPSec. | 
 | 128 |  | 
 | 129 | config CRYPTO_TEST | 
 | 130 | 	tristate "Testing module" | 
 | 131 | 	depends on m | 
| Herbert Xu | da7f033 | 2008-07-31 17:08:25 +0800 | [diff] [blame] | 132 | 	select CRYPTO_MANAGER | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 133 | 	help | 
 | 134 | 	  Quick & dirty crypto test module. | 
 | 135 |  | 
 | 136 | comment "Authenticated Encryption with Associated Data" | 
 | 137 |  | 
 | 138 | config CRYPTO_CCM | 
 | 139 | 	tristate "CCM support" | 
 | 140 | 	select CRYPTO_CTR | 
 | 141 | 	select CRYPTO_AEAD | 
 | 142 | 	help | 
 | 143 | 	  Support for Counter with CBC MAC. Required for IPsec. | 
 | 144 |  | 
 | 145 | config CRYPTO_GCM | 
 | 146 | 	tristate "GCM/GMAC support" | 
 | 147 | 	select CRYPTO_CTR | 
 | 148 | 	select CRYPTO_AEAD | 
 | 149 | 	select CRYPTO_GF128MUL | 
 | 150 | 	help | 
 | 151 | 	  Support for Galois/Counter Mode (GCM) and Galois Message | 
 | 152 | 	  Authentication Code (GMAC). Required for IPSec. | 
 | 153 |  | 
 | 154 | config CRYPTO_SEQIV | 
 | 155 | 	tristate "Sequence Number IV Generator" | 
 | 156 | 	select CRYPTO_AEAD | 
 | 157 | 	select CRYPTO_BLKCIPHER | 
| Herbert Xu | a0f000e | 2008-08-14 22:21:31 +1000 | [diff] [blame] | 158 | 	select CRYPTO_RNG | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 159 | 	help | 
 | 160 | 	  This IV generator generates an IV based on a sequence number by | 
 | 161 | 	  xoring it with a salt.  This algorithm is mainly useful for CTR | 
 | 162 |  | 
 | 163 | comment "Block modes" | 
| Herbert Xu | db131ef | 2006-09-21 11:44:08 +1000 | [diff] [blame] | 164 |  | 
 | 165 | config CRYPTO_CBC | 
 | 166 | 	tristate "CBC support" | 
 | 167 | 	select CRYPTO_BLKCIPHER | 
| Herbert Xu | 4351840 | 2006-10-16 21:28:58 +1000 | [diff] [blame] | 168 | 	select CRYPTO_MANAGER | 
| Herbert Xu | db131ef | 2006-09-21 11:44:08 +1000 | [diff] [blame] | 169 | 	help | 
 | 170 | 	  CBC: Cipher Block Chaining mode | 
 | 171 | 	  This block cipher algorithm is required for IPSec. | 
 | 172 |  | 
| Joy Latten | 23e353c | 2007-10-23 08:50:32 +0800 | [diff] [blame] | 173 | config CRYPTO_CTR | 
 | 174 | 	tristate "CTR support" | 
 | 175 | 	select CRYPTO_BLKCIPHER | 
| Herbert Xu | 0a27032 | 2007-11-30 21:38:37 +1100 | [diff] [blame] | 176 | 	select CRYPTO_SEQIV | 
| Joy Latten | 23e353c | 2007-10-23 08:50:32 +0800 | [diff] [blame] | 177 | 	select CRYPTO_MANAGER | 
| Joy Latten | 23e353c | 2007-10-23 08:50:32 +0800 | [diff] [blame] | 178 | 	help | 
 | 179 | 	  CTR: Counter mode | 
 | 180 | 	  This block cipher algorithm is required for IPSec. | 
 | 181 |  | 
| Kevin Coffman | 76cb952 | 2008-03-24 21:26:16 +0800 | [diff] [blame] | 182 | config CRYPTO_CTS | 
 | 183 | 	tristate "CTS support" | 
 | 184 | 	select CRYPTO_BLKCIPHER | 
 | 185 | 	help | 
 | 186 | 	  CTS: Cipher Text Stealing | 
 | 187 | 	  This is the Cipher Text Stealing mode as described by | 
 | 188 | 	  Section 8 of rfc2040 and referenced by rfc3962. | 
 | 189 | 	  (rfc3962 includes errata information in its Appendix A) | 
 | 190 | 	  This mode is required for Kerberos gss mechanism support | 
 | 191 | 	  for AES encryption. | 
 | 192 |  | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 193 | config CRYPTO_ECB | 
 | 194 | 	tristate "ECB support" | 
| Herbert Xu | 653ebd9 | 2007-11-27 19:48:27 +0800 | [diff] [blame] | 195 | 	select CRYPTO_BLKCIPHER | 
| Herbert Xu | 124b53d | 2007-04-16 20:49:20 +1000 | [diff] [blame] | 196 | 	select CRYPTO_MANAGER | 
 | 197 | 	help | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 198 | 	  ECB: Electronic CodeBook mode | 
 | 199 | 	  This is the simplest block cipher algorithm.  It simply encrypts | 
 | 200 | 	  the input block by block. | 
| Herbert Xu | 124b53d | 2007-04-16 20:49:20 +1000 | [diff] [blame] | 201 |  | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 202 | config CRYPTO_LRW | 
 | 203 | 	tristate "LRW support (EXPERIMENTAL)" | 
 | 204 | 	depends on EXPERIMENTAL | 
| David Howells | 9083163 | 2006-12-16 12:13:14 +1100 | [diff] [blame] | 205 | 	select CRYPTO_BLKCIPHER | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 206 | 	select CRYPTO_MANAGER | 
 | 207 | 	select CRYPTO_GF128MUL | 
| David Howells | 9083163 | 2006-12-16 12:13:14 +1100 | [diff] [blame] | 208 | 	help | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 209 | 	  LRW: Liskov Rivest Wagner, a tweakable, non malleable, non movable | 
 | 210 | 	  narrow block cipher mode for dm-crypt.  Use it with cipher | 
 | 211 | 	  specification string aes-lrw-benbi, the key must be 256, 320 or 384. | 
 | 212 | 	  The first 128, 192 or 256 bits in the key are used for AES and the | 
 | 213 | 	  rest is used to tie each cipher block to its logical position. | 
| David Howells | 9083163 | 2006-12-16 12:13:14 +1100 | [diff] [blame] | 214 |  | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 215 | config CRYPTO_PCBC | 
 | 216 | 	tristate "PCBC support" | 
 | 217 | 	select CRYPTO_BLKCIPHER | 
 | 218 | 	select CRYPTO_MANAGER | 
 | 219 | 	help | 
 | 220 | 	  PCBC: Propagating Cipher Block Chaining mode | 
 | 221 | 	  This block cipher algorithm is required for RxRPC. | 
 | 222 |  | 
 | 223 | config CRYPTO_XTS | 
 | 224 | 	tristate "XTS support (EXPERIMENTAL)" | 
 | 225 | 	depends on EXPERIMENTAL | 
 | 226 | 	select CRYPTO_BLKCIPHER | 
 | 227 | 	select CRYPTO_MANAGER | 
 | 228 | 	select CRYPTO_GF128MUL | 
 | 229 | 	help | 
 | 230 | 	  XTS: IEEE1619/D16 narrow block cipher use with aes-xts-plain, | 
 | 231 | 	  key size 256, 384 or 512 bits. This implementation currently | 
 | 232 | 	  can't handle a sectorsize which is not a multiple of 16 bytes. | 
 | 233 |  | 
 | 234 | comment "Hash modes" | 
 | 235 |  | 
 | 236 | config CRYPTO_HMAC | 
 | 237 | 	tristate "HMAC support" | 
 | 238 | 	select CRYPTO_HASH | 
 | 239 | 	select CRYPTO_MANAGER | 
 | 240 | 	help | 
 | 241 | 	  HMAC: Keyed-Hashing for Message Authentication (RFC2104). | 
 | 242 | 	  This is required for IPSec. | 
 | 243 |  | 
 | 244 | config CRYPTO_XCBC | 
 | 245 | 	tristate "XCBC support" | 
 | 246 | 	depends on EXPERIMENTAL | 
 | 247 | 	select CRYPTO_HASH | 
 | 248 | 	select CRYPTO_MANAGER | 
 | 249 | 	help | 
 | 250 | 	  XCBC: Keyed-Hashing with encryption algorithm | 
 | 251 | 		http://www.ietf.org/rfc/rfc3566.txt | 
 | 252 | 		http://csrc.nist.gov/encryption/modes/proposedmodes/ | 
 | 253 | 		 xcbc-mac/xcbc-mac-spec.pdf | 
 | 254 |  | 
 | 255 | comment "Digest" | 
 | 256 |  | 
 | 257 | config CRYPTO_CRC32C | 
 | 258 | 	tristate "CRC32c CRC algorithm" | 
| Herbert Xu | 5773a3e | 2008-07-08 20:54:28 +0800 | [diff] [blame] | 259 | 	select CRYPTO_HASH | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 260 | 	help | 
 | 261 | 	  Castagnoli, et al Cyclic Redundancy-Check Algorithm.  Used | 
 | 262 | 	  by iSCSI for header and data digests and by others. | 
| Herbert Xu | 69c35ef | 2008-11-07 15:11:47 +0800 | [diff] [blame] | 263 | 	  See Castagnoli93.  Module will be crc32c. | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 264 |  | 
| Austin Zhang | 8cb51ba | 2008-08-07 09:57:03 +0800 | [diff] [blame] | 265 | config CRYPTO_CRC32C_INTEL | 
 | 266 | 	tristate "CRC32c INTEL hardware acceleration" | 
 | 267 | 	depends on X86 | 
 | 268 | 	select CRYPTO_HASH | 
 | 269 | 	help | 
 | 270 | 	  In Intel processor with SSE4.2 supported, the processor will | 
 | 271 | 	  support CRC32C implementation using hardware accelerated CRC32 | 
 | 272 | 	  instruction. This option will create 'crc32c-intel' module, | 
 | 273 | 	  which will enable any routine to use the CRC32 instruction to | 
 | 274 | 	  gain performance compared with software implementation. | 
 | 275 | 	  Module will be crc32c-intel. | 
 | 276 |  | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 277 | config CRYPTO_MD4 | 
 | 278 | 	tristate "MD4 digest algorithm" | 
| Herbert Xu | cce9e06 | 2006-08-21 21:08:13 +1000 | [diff] [blame] | 279 | 	select CRYPTO_ALGAPI | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 280 | 	help | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 281 | 	  MD4 message digest algorithm (RFC1320). | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 282 |  | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 283 | config CRYPTO_MD5 | 
 | 284 | 	tristate "MD5 digest algorithm" | 
| Herbert Xu | cce9e06 | 2006-08-21 21:08:13 +1000 | [diff] [blame] | 285 | 	select CRYPTO_ALGAPI | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 286 | 	help | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 287 | 	  MD5 message digest algorithm (RFC1321). | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 288 |  | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 289 | config CRYPTO_MICHAEL_MIC | 
 | 290 | 	tristate "Michael MIC keyed digest algorithm" | 
 | 291 | 	select CRYPTO_ALGAPI | 
 | 292 | 	help | 
 | 293 | 	  Michael MIC is used for message integrity protection in TKIP | 
 | 294 | 	  (IEEE 802.11i). This algorithm is required for TKIP, but it | 
 | 295 | 	  should not be used for other purposes because of the weakness | 
 | 296 | 	  of the algorithm. | 
 | 297 |  | 
| Adrian-Ken Rueegsegger | 82798f9 | 2008-05-07 22:17:37 +0800 | [diff] [blame] | 298 | config CRYPTO_RMD128 | 
| Adrian Bunk | b6d4434 | 2008-07-16 19:28:00 +0800 | [diff] [blame] | 299 | 	tristate "RIPEMD-128 digest algorithm" | 
 | 300 | 	select CRYPTO_ALGAPI | 
 | 301 | 	help | 
 | 302 | 	  RIPEMD-128 (ISO/IEC 10118-3:2004). | 
| Adrian-Ken Rueegsegger | 82798f9 | 2008-05-07 22:17:37 +0800 | [diff] [blame] | 303 |  | 
| Adrian Bunk | b6d4434 | 2008-07-16 19:28:00 +0800 | [diff] [blame] | 304 | 	  RIPEMD-128 is a 128-bit cryptographic hash function. It should only | 
 | 305 | 	  to be used as a secure replacement for RIPEMD. For other use cases | 
 | 306 | 	  RIPEMD-160 should be used. | 
| Adrian-Ken Rueegsegger | 82798f9 | 2008-05-07 22:17:37 +0800 | [diff] [blame] | 307 |  | 
| Adrian Bunk | b6d4434 | 2008-07-16 19:28:00 +0800 | [diff] [blame] | 308 | 	  Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel. | 
 | 309 | 	  See <http://home.esat.kuleuven.be/~bosselae/ripemd160.html> | 
| Adrian-Ken Rueegsegger | 82798f9 | 2008-05-07 22:17:37 +0800 | [diff] [blame] | 310 |  | 
 | 311 | config CRYPTO_RMD160 | 
| Adrian Bunk | b6d4434 | 2008-07-16 19:28:00 +0800 | [diff] [blame] | 312 | 	tristate "RIPEMD-160 digest algorithm" | 
 | 313 | 	select CRYPTO_ALGAPI | 
 | 314 | 	help | 
 | 315 | 	  RIPEMD-160 (ISO/IEC 10118-3:2004). | 
| Adrian-Ken Rueegsegger | 82798f9 | 2008-05-07 22:17:37 +0800 | [diff] [blame] | 316 |  | 
| Adrian Bunk | b6d4434 | 2008-07-16 19:28:00 +0800 | [diff] [blame] | 317 | 	  RIPEMD-160 is a 160-bit cryptographic hash function. It is intended | 
 | 318 | 	  to be used as a secure replacement for the 128-bit hash functions | 
 | 319 | 	  MD4, MD5 and it's predecessor RIPEMD | 
 | 320 | 	  (not to be confused with RIPEMD-128). | 
| Adrian-Ken Rueegsegger | 82798f9 | 2008-05-07 22:17:37 +0800 | [diff] [blame] | 321 |  | 
| Adrian Bunk | b6d4434 | 2008-07-16 19:28:00 +0800 | [diff] [blame] | 322 | 	  It's speed is comparable to SHA1 and there are no known attacks | 
 | 323 | 	  against RIPEMD-160. | 
| Adrian-Ken Rueegsegger | 534fe2c | 2008-05-09 21:30:27 +0800 | [diff] [blame] | 324 |  | 
| Adrian Bunk | b6d4434 | 2008-07-16 19:28:00 +0800 | [diff] [blame] | 325 | 	  Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel. | 
 | 326 | 	  See <http://home.esat.kuleuven.be/~bosselae/ripemd160.html> | 
| Adrian-Ken Rueegsegger | 534fe2c | 2008-05-09 21:30:27 +0800 | [diff] [blame] | 327 |  | 
 | 328 | config CRYPTO_RMD256 | 
| Adrian Bunk | b6d4434 | 2008-07-16 19:28:00 +0800 | [diff] [blame] | 329 | 	tristate "RIPEMD-256 digest algorithm" | 
 | 330 | 	select CRYPTO_ALGAPI | 
 | 331 | 	help | 
 | 332 | 	  RIPEMD-256 is an optional extension of RIPEMD-128 with a | 
 | 333 | 	  256 bit hash. It is intended for applications that require | 
 | 334 | 	  longer hash-results, without needing a larger security level | 
 | 335 | 	  (than RIPEMD-128). | 
| Adrian-Ken Rueegsegger | 534fe2c | 2008-05-09 21:30:27 +0800 | [diff] [blame] | 336 |  | 
| Adrian Bunk | b6d4434 | 2008-07-16 19:28:00 +0800 | [diff] [blame] | 337 | 	  Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel. | 
 | 338 | 	  See <http://home.esat.kuleuven.be/~bosselae/ripemd160.html> | 
| Adrian-Ken Rueegsegger | 534fe2c | 2008-05-09 21:30:27 +0800 | [diff] [blame] | 339 |  | 
 | 340 | config CRYPTO_RMD320 | 
| Adrian Bunk | b6d4434 | 2008-07-16 19:28:00 +0800 | [diff] [blame] | 341 | 	tristate "RIPEMD-320 digest algorithm" | 
 | 342 | 	select CRYPTO_ALGAPI | 
 | 343 | 	help | 
 | 344 | 	  RIPEMD-320 is an optional extension of RIPEMD-160 with a | 
 | 345 | 	  320 bit hash. It is intended for applications that require | 
 | 346 | 	  longer hash-results, without needing a larger security level | 
 | 347 | 	  (than RIPEMD-160). | 
| Adrian-Ken Rueegsegger | 534fe2c | 2008-05-09 21:30:27 +0800 | [diff] [blame] | 348 |  | 
| Adrian Bunk | b6d4434 | 2008-07-16 19:28:00 +0800 | [diff] [blame] | 349 | 	  Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel. | 
 | 350 | 	  See <http://home.esat.kuleuven.be/~bosselae/ripemd160.html> | 
| Adrian-Ken Rueegsegger | 82798f9 | 2008-05-07 22:17:37 +0800 | [diff] [blame] | 351 |  | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 352 | config CRYPTO_SHA1 | 
 | 353 | 	tristate "SHA1 digest algorithm" | 
 | 354 | 	select CRYPTO_ALGAPI | 
 | 355 | 	help | 
 | 356 | 	  SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2). | 
 | 357 |  | 
 | 358 | config CRYPTO_SHA256 | 
 | 359 | 	tristate "SHA224 and SHA256 digest algorithm" | 
 | 360 | 	select CRYPTO_ALGAPI | 
 | 361 | 	help | 
 | 362 | 	  SHA256 secure hash standard (DFIPS 180-2). | 
 | 363 |  | 
 | 364 | 	  This version of SHA implements a 256 bit hash with 128 bits of | 
 | 365 | 	  security against collision attacks. | 
 | 366 |  | 
| Adrian Bunk | b6d4434 | 2008-07-16 19:28:00 +0800 | [diff] [blame] | 367 | 	  This code also includes SHA-224, a 224 bit hash with 112 bits | 
 | 368 | 	  of security against collision attacks. | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 369 |  | 
 | 370 | config CRYPTO_SHA512 | 
 | 371 | 	tristate "SHA384 and SHA512 digest algorithms" | 
 | 372 | 	select CRYPTO_ALGAPI | 
 | 373 | 	help | 
 | 374 | 	  SHA512 secure hash standard (DFIPS 180-2). | 
 | 375 |  | 
 | 376 | 	  This version of SHA implements a 512 bit hash with 256 bits of | 
 | 377 | 	  security against collision attacks. | 
 | 378 |  | 
 | 379 | 	  This code also includes SHA-384, a 384 bit hash with 192 bits | 
 | 380 | 	  of security against collision attacks. | 
 | 381 |  | 
 | 382 | config CRYPTO_TGR192 | 
 | 383 | 	tristate "Tiger digest algorithms" | 
 | 384 | 	select CRYPTO_ALGAPI | 
 | 385 | 	help | 
 | 386 | 	  Tiger hash algorithm 192, 160 and 128-bit hashes | 
 | 387 |  | 
 | 388 | 	  Tiger is a hash function optimized for 64-bit processors while | 
 | 389 | 	  still having decent performance on 32-bit processors. | 
 | 390 | 	  Tiger was developed by Ross Anderson and Eli Biham. | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 391 |  | 
 | 392 | 	  See also: | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 393 | 	  <http://www.cs.technion.ac.il/~biham/Reports/Tiger/>. | 
 | 394 |  | 
 | 395 | config CRYPTO_WP512 | 
 | 396 | 	tristate "Whirlpool digest algorithms" | 
 | 397 | 	select CRYPTO_ALGAPI | 
 | 398 | 	help | 
 | 399 | 	  Whirlpool hash algorithm 512, 384 and 256-bit hashes | 
 | 400 |  | 
 | 401 | 	  Whirlpool-512 is part of the NESSIE cryptographic primitives. | 
 | 402 | 	  Whirlpool will be part of the ISO/IEC 10118-3:2003(E) standard | 
 | 403 |  | 
 | 404 | 	  See also: | 
 | 405 | 	  <http://planeta.terra.com.br/informatica/paulobarreto/WhirlpoolPage.html> | 
 | 406 |  | 
 | 407 | comment "Ciphers" | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 408 |  | 
 | 409 | config CRYPTO_AES | 
 | 410 | 	tristate "AES cipher algorithms" | 
| Herbert Xu | cce9e06 | 2006-08-21 21:08:13 +1000 | [diff] [blame] | 411 | 	select CRYPTO_ALGAPI | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 412 | 	help | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 413 | 	  AES cipher algorithms (FIPS-197). AES uses the Rijndael | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 414 | 	  algorithm. | 
 | 415 |  | 
 | 416 | 	  Rijndael appears to be consistently a very good performer in | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 417 | 	  both hardware and software across a wide range of computing | 
 | 418 | 	  environments regardless of its use in feedback or non-feedback | 
 | 419 | 	  modes. Its key setup time is excellent, and its key agility is | 
 | 420 | 	  good. Rijndael's very low memory requirements make it very well | 
 | 421 | 	  suited for restricted-space environments, in which it also | 
 | 422 | 	  demonstrates excellent performance. Rijndael's operations are | 
 | 423 | 	  among the easiest to defend against power and timing attacks. | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 424 |  | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 425 | 	  The AES specifies three key sizes: 128, 192 and 256 bits | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 426 |  | 
 | 427 | 	  See <http://csrc.nist.gov/CryptoToolkit/aes/> for more information. | 
 | 428 |  | 
 | 429 | config CRYPTO_AES_586 | 
 | 430 | 	tristate "AES cipher algorithms (i586)" | 
| Herbert Xu | cce9e06 | 2006-08-21 21:08:13 +1000 | [diff] [blame] | 431 | 	depends on (X86 || UML_X86) && !64BIT | 
 | 432 | 	select CRYPTO_ALGAPI | 
| Sebastian Siewior | 5157dea | 2007-11-10 19:07:16 +0800 | [diff] [blame] | 433 | 	select CRYPTO_AES | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 434 | 	help | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 435 | 	  AES cipher algorithms (FIPS-197). AES uses the Rijndael | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 436 | 	  algorithm. | 
 | 437 |  | 
 | 438 | 	  Rijndael appears to be consistently a very good performer in | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 439 | 	  both hardware and software across a wide range of computing | 
 | 440 | 	  environments regardless of its use in feedback or non-feedback | 
 | 441 | 	  modes. Its key setup time is excellent, and its key agility is | 
 | 442 | 	  good. Rijndael's very low memory requirements make it very well | 
 | 443 | 	  suited for restricted-space environments, in which it also | 
 | 444 | 	  demonstrates excellent performance. Rijndael's operations are | 
 | 445 | 	  among the easiest to defend against power and timing attacks. | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 446 |  | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 447 | 	  The AES specifies three key sizes: 128, 192 and 256 bits | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 448 |  | 
 | 449 | 	  See <http://csrc.nist.gov/encryption/aes/> for more information. | 
 | 450 |  | 
| Andreas Steinmetz | a2a892a | 2005-07-06 13:55:00 -0700 | [diff] [blame] | 451 | config CRYPTO_AES_X86_64 | 
 | 452 | 	tristate "AES cipher algorithms (x86_64)" | 
| Herbert Xu | cce9e06 | 2006-08-21 21:08:13 +1000 | [diff] [blame] | 453 | 	depends on (X86 || UML_X86) && 64BIT | 
 | 454 | 	select CRYPTO_ALGAPI | 
| Sebastian Siewior | 81190b3 | 2007-11-08 21:25:04 +0800 | [diff] [blame] | 455 | 	select CRYPTO_AES | 
| Andreas Steinmetz | a2a892a | 2005-07-06 13:55:00 -0700 | [diff] [blame] | 456 | 	help | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 457 | 	  AES cipher algorithms (FIPS-197). AES uses the Rijndael | 
| Andreas Steinmetz | a2a892a | 2005-07-06 13:55:00 -0700 | [diff] [blame] | 458 | 	  algorithm. | 
 | 459 |  | 
 | 460 | 	  Rijndael appears to be consistently a very good performer in | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 461 | 	  both hardware and software across a wide range of computing | 
 | 462 | 	  environments regardless of its use in feedback or non-feedback | 
 | 463 | 	  modes. Its key setup time is excellent, and its key agility is | 
 | 464 | 	  good. Rijndael's very low memory requirements make it very well | 
 | 465 | 	  suited for restricted-space environments, in which it also | 
 | 466 | 	  demonstrates excellent performance. Rijndael's operations are | 
 | 467 | 	  among the easiest to defend against power and timing attacks. | 
| Andreas Steinmetz | a2a892a | 2005-07-06 13:55:00 -0700 | [diff] [blame] | 468 |  | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 469 | 	  The AES specifies three key sizes: 128, 192 and 256 bits | 
| Andreas Steinmetz | a2a892a | 2005-07-06 13:55:00 -0700 | [diff] [blame] | 470 |  | 
 | 471 | 	  See <http://csrc.nist.gov/encryption/aes/> for more information. | 
 | 472 |  | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 473 | config CRYPTO_ANUBIS | 
 | 474 | 	tristate "Anubis cipher algorithm" | 
 | 475 | 	select CRYPTO_ALGAPI | 
 | 476 | 	help | 
 | 477 | 	  Anubis cipher algorithm. | 
 | 478 |  | 
 | 479 | 	  Anubis is a variable key length cipher which can use keys from | 
 | 480 | 	  128 bits to 320 bits in length.  It was evaluated as a entrant | 
 | 481 | 	  in the NESSIE competition. | 
 | 482 |  | 
 | 483 | 	  See also: | 
 | 484 | 	  <https://www.cosic.esat.kuleuven.ac.be/nessie/reports/> | 
 | 485 | 	  <http://planeta.terra.com.br/informatica/paulobarreto/AnubisPage.html> | 
 | 486 |  | 
 | 487 | config CRYPTO_ARC4 | 
 | 488 | 	tristate "ARC4 cipher algorithm" | 
 | 489 | 	select CRYPTO_ALGAPI | 
 | 490 | 	help | 
 | 491 | 	  ARC4 cipher algorithm. | 
 | 492 |  | 
 | 493 | 	  ARC4 is a stream cipher using keys ranging from 8 bits to 2048 | 
 | 494 | 	  bits in length.  This algorithm is required for driver-based | 
 | 495 | 	  WEP, but it should not be for other purposes because of the | 
 | 496 | 	  weakness of the algorithm. | 
 | 497 |  | 
 | 498 | config CRYPTO_BLOWFISH | 
 | 499 | 	tristate "Blowfish cipher algorithm" | 
 | 500 | 	select CRYPTO_ALGAPI | 
 | 501 | 	help | 
 | 502 | 	  Blowfish cipher algorithm, by Bruce Schneier. | 
 | 503 |  | 
 | 504 | 	  This is a variable key length cipher which can use keys from 32 | 
 | 505 | 	  bits to 448 bits in length.  It's fast, simple and specifically | 
 | 506 | 	  designed for use on "large microprocessors". | 
 | 507 |  | 
 | 508 | 	  See also: | 
 | 509 | 	  <http://www.schneier.com/blowfish.html> | 
 | 510 |  | 
 | 511 | config CRYPTO_CAMELLIA | 
 | 512 | 	tristate "Camellia cipher algorithms" | 
 | 513 | 	depends on CRYPTO | 
 | 514 | 	select CRYPTO_ALGAPI | 
 | 515 | 	help | 
 | 516 | 	  Camellia cipher algorithms module. | 
 | 517 |  | 
 | 518 | 	  Camellia is a symmetric key block cipher developed jointly | 
 | 519 | 	  at NTT and Mitsubishi Electric Corporation. | 
 | 520 |  | 
 | 521 | 	  The Camellia specifies three key sizes: 128, 192 and 256 bits. | 
 | 522 |  | 
 | 523 | 	  See also: | 
 | 524 | 	  <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html> | 
 | 525 |  | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 526 | config CRYPTO_CAST5 | 
 | 527 | 	tristate "CAST5 (CAST-128) cipher algorithm" | 
| Herbert Xu | cce9e06 | 2006-08-21 21:08:13 +1000 | [diff] [blame] | 528 | 	select CRYPTO_ALGAPI | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 529 | 	help | 
 | 530 | 	  The CAST5 encryption algorithm (synonymous with CAST-128) is | 
 | 531 | 	  described in RFC2144. | 
 | 532 |  | 
 | 533 | config CRYPTO_CAST6 | 
 | 534 | 	tristate "CAST6 (CAST-256) cipher algorithm" | 
| Herbert Xu | cce9e06 | 2006-08-21 21:08:13 +1000 | [diff] [blame] | 535 | 	select CRYPTO_ALGAPI | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 536 | 	help | 
 | 537 | 	  The CAST6 encryption algorithm (synonymous with CAST-256) is | 
 | 538 | 	  described in RFC2612. | 
 | 539 |  | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 540 | config CRYPTO_DES | 
 | 541 | 	tristate "DES and Triple DES EDE cipher algorithms" | 
| Herbert Xu | cce9e06 | 2006-08-21 21:08:13 +1000 | [diff] [blame] | 542 | 	select CRYPTO_ALGAPI | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 543 | 	help | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 544 | 	  DES cipher algorithm (FIPS 46-2), and Triple DES EDE (FIPS 46-3). | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 545 |  | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 546 | config CRYPTO_FCRYPT | 
 | 547 | 	tristate "FCrypt cipher algorithm" | 
| Herbert Xu | cce9e06 | 2006-08-21 21:08:13 +1000 | [diff] [blame] | 548 | 	select CRYPTO_ALGAPI | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 549 | 	select CRYPTO_BLKCIPHER | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 550 | 	help | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 551 | 	  FCrypt algorithm used by RxRPC. | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 552 |  | 
 | 553 | config CRYPTO_KHAZAD | 
 | 554 | 	tristate "Khazad cipher algorithm" | 
| Herbert Xu | cce9e06 | 2006-08-21 21:08:13 +1000 | [diff] [blame] | 555 | 	select CRYPTO_ALGAPI | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 556 | 	help | 
 | 557 | 	  Khazad cipher algorithm. | 
 | 558 |  | 
 | 559 | 	  Khazad was a finalist in the initial NESSIE competition.  It is | 
 | 560 | 	  an algorithm optimized for 64-bit processors with good performance | 
 | 561 | 	  on 32-bit processors.  Khazad uses an 128 bit key size. | 
 | 562 |  | 
 | 563 | 	  See also: | 
 | 564 | 	  <http://planeta.terra.com.br/informatica/paulobarreto/KhazadPage.html> | 
 | 565 |  | 
| Tan Swee Heng | 2407d60 | 2007-11-23 19:45:00 +0800 | [diff] [blame] | 566 | config CRYPTO_SALSA20 | 
 | 567 | 	tristate "Salsa20 stream cipher algorithm (EXPERIMENTAL)" | 
 | 568 | 	depends on EXPERIMENTAL | 
 | 569 | 	select CRYPTO_BLKCIPHER | 
 | 570 | 	help | 
 | 571 | 	  Salsa20 stream cipher algorithm. | 
 | 572 |  | 
 | 573 | 	  Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT | 
 | 574 | 	  Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/> | 
 | 575 |  | 
 | 576 | 	  The Salsa20 stream cipher algorithm is designed by Daniel J. | 
 | 577 | 	  Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html> | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 578 |  | 
| Tan Swee Heng | 974e4b7 | 2007-12-10 15:52:56 +0800 | [diff] [blame] | 579 | config CRYPTO_SALSA20_586 | 
 | 580 | 	tristate "Salsa20 stream cipher algorithm (i586) (EXPERIMENTAL)" | 
 | 581 | 	depends on (X86 || UML_X86) && !64BIT | 
 | 582 | 	depends on EXPERIMENTAL | 
 | 583 | 	select CRYPTO_BLKCIPHER | 
| Tan Swee Heng | 974e4b7 | 2007-12-10 15:52:56 +0800 | [diff] [blame] | 584 | 	help | 
 | 585 | 	  Salsa20 stream cipher algorithm. | 
 | 586 |  | 
 | 587 | 	  Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT | 
 | 588 | 	  Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/> | 
 | 589 |  | 
 | 590 | 	  The Salsa20 stream cipher algorithm is designed by Daniel J. | 
 | 591 | 	  Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html> | 
 | 592 |  | 
| Tan Swee Heng | 9a7dafb | 2007-12-18 00:04:40 +0800 | [diff] [blame] | 593 | config CRYPTO_SALSA20_X86_64 | 
 | 594 | 	tristate "Salsa20 stream cipher algorithm (x86_64) (EXPERIMENTAL)" | 
 | 595 | 	depends on (X86 || UML_X86) && 64BIT | 
 | 596 | 	depends on EXPERIMENTAL | 
 | 597 | 	select CRYPTO_BLKCIPHER | 
| Tan Swee Heng | 9a7dafb | 2007-12-18 00:04:40 +0800 | [diff] [blame] | 598 | 	help | 
 | 599 | 	  Salsa20 stream cipher algorithm. | 
 | 600 |  | 
 | 601 | 	  Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT | 
 | 602 | 	  Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/> | 
 | 603 |  | 
 | 604 | 	  The Salsa20 stream cipher algorithm is designed by Daniel J. | 
 | 605 | 	  Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html> | 
 | 606 |  | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 607 | config CRYPTO_SEED | 
 | 608 | 	tristate "SEED cipher algorithm" | 
 | 609 | 	select CRYPTO_ALGAPI | 
 | 610 | 	help | 
 | 611 | 	  SEED cipher algorithm (RFC4269). | 
 | 612 |  | 
 | 613 | 	  SEED is a 128-bit symmetric key block cipher that has been | 
 | 614 | 	  developed by KISA (Korea Information Security Agency) as a | 
 | 615 | 	  national standard encryption algorithm of the Republic of Korea. | 
 | 616 | 	  It is a 16 round block cipher with the key size of 128 bit. | 
 | 617 |  | 
 | 618 | 	  See also: | 
 | 619 | 	  <http://www.kisa.or.kr/kisa/seed/jsp/seed_eng.jsp> | 
 | 620 |  | 
 | 621 | config CRYPTO_SERPENT | 
 | 622 | 	tristate "Serpent cipher algorithm" | 
 | 623 | 	select CRYPTO_ALGAPI | 
 | 624 | 	help | 
 | 625 | 	  Serpent cipher algorithm, by Anderson, Biham & Knudsen. | 
 | 626 |  | 
 | 627 | 	  Keys are allowed to be from 0 to 256 bits in length, in steps | 
 | 628 | 	  of 8 bits.  Also includes the 'Tnepres' algorithm, a reversed | 
 | 629 | 	  variant of Serpent for compatibility with old kerneli.org code. | 
 | 630 |  | 
 | 631 | 	  See also: | 
 | 632 | 	  <http://www.cl.cam.ac.uk/~rja14/serpent.html> | 
 | 633 |  | 
 | 634 | config CRYPTO_TEA | 
 | 635 | 	tristate "TEA, XTEA and XETA cipher algorithms" | 
 | 636 | 	select CRYPTO_ALGAPI | 
 | 637 | 	help | 
 | 638 | 	  TEA cipher algorithm. | 
 | 639 |  | 
 | 640 | 	  Tiny Encryption Algorithm is a simple cipher that uses | 
 | 641 | 	  many rounds for security.  It is very fast and uses | 
 | 642 | 	  little memory. | 
 | 643 |  | 
 | 644 | 	  Xtendend Tiny Encryption Algorithm is a modification to | 
 | 645 | 	  the TEA algorithm to address a potential key weakness | 
 | 646 | 	  in the TEA algorithm. | 
 | 647 |  | 
 | 648 | 	  Xtendend Encryption Tiny Algorithm is a mis-implementation | 
 | 649 | 	  of the XTEA algorithm for compatibility purposes. | 
 | 650 |  | 
 | 651 | config CRYPTO_TWOFISH | 
 | 652 | 	tristate "Twofish cipher algorithm" | 
 | 653 | 	select CRYPTO_ALGAPI | 
 | 654 | 	select CRYPTO_TWOFISH_COMMON | 
 | 655 | 	help | 
 | 656 | 	  Twofish cipher algorithm. | 
 | 657 |  | 
 | 658 | 	  Twofish was submitted as an AES (Advanced Encryption Standard) | 
 | 659 | 	  candidate cipher by researchers at CounterPane Systems.  It is a | 
 | 660 | 	  16 round block cipher supporting key sizes of 128, 192, and 256 | 
 | 661 | 	  bits. | 
 | 662 |  | 
 | 663 | 	  See also: | 
 | 664 | 	  <http://www.schneier.com/twofish.html> | 
 | 665 |  | 
 | 666 | config CRYPTO_TWOFISH_COMMON | 
 | 667 | 	tristate | 
 | 668 | 	help | 
 | 669 | 	  Common parts of the Twofish cipher algorithm shared by the | 
 | 670 | 	  generic c and the assembler implementations. | 
 | 671 |  | 
 | 672 | config CRYPTO_TWOFISH_586 | 
 | 673 | 	tristate "Twofish cipher algorithms (i586)" | 
 | 674 | 	depends on (X86 || UML_X86) && !64BIT | 
 | 675 | 	select CRYPTO_ALGAPI | 
 | 676 | 	select CRYPTO_TWOFISH_COMMON | 
 | 677 | 	help | 
 | 678 | 	  Twofish cipher algorithm. | 
 | 679 |  | 
 | 680 | 	  Twofish was submitted as an AES (Advanced Encryption Standard) | 
 | 681 | 	  candidate cipher by researchers at CounterPane Systems.  It is a | 
 | 682 | 	  16 round block cipher supporting key sizes of 128, 192, and 256 | 
 | 683 | 	  bits. | 
 | 684 |  | 
 | 685 | 	  See also: | 
 | 686 | 	  <http://www.schneier.com/twofish.html> | 
 | 687 |  | 
 | 688 | config CRYPTO_TWOFISH_X86_64 | 
 | 689 | 	tristate "Twofish cipher algorithm (x86_64)" | 
 | 690 | 	depends on (X86 || UML_X86) && 64BIT | 
 | 691 | 	select CRYPTO_ALGAPI | 
 | 692 | 	select CRYPTO_TWOFISH_COMMON | 
 | 693 | 	help | 
 | 694 | 	  Twofish cipher algorithm (x86_64). | 
 | 695 |  | 
 | 696 | 	  Twofish was submitted as an AES (Advanced Encryption Standard) | 
 | 697 | 	  candidate cipher by researchers at CounterPane Systems.  It is a | 
 | 698 | 	  16 round block cipher supporting key sizes of 128, 192, and 256 | 
 | 699 | 	  bits. | 
 | 700 |  | 
 | 701 | 	  See also: | 
 | 702 | 	  <http://www.schneier.com/twofish.html> | 
 | 703 |  | 
 | 704 | comment "Compression" | 
 | 705 |  | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 706 | config CRYPTO_DEFLATE | 
 | 707 | 	tristate "Deflate compression algorithm" | 
| Herbert Xu | cce9e06 | 2006-08-21 21:08:13 +1000 | [diff] [blame] | 708 | 	select CRYPTO_ALGAPI | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 709 | 	select ZLIB_INFLATE | 
 | 710 | 	select ZLIB_DEFLATE | 
 | 711 | 	help | 
 | 712 | 	  This is the Deflate algorithm (RFC1951), specified for use in | 
 | 713 | 	  IPSec with the IPCOMP protocol (RFC3173, RFC2394). | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 714 |  | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 715 | 	  You will most probably want this if using IPSec. | 
 | 716 |  | 
| Zoltan Sogor | 0b77abb | 2007-12-07 16:53:23 +0800 | [diff] [blame] | 717 | config CRYPTO_LZO | 
 | 718 | 	tristate "LZO compression algorithm" | 
 | 719 | 	select CRYPTO_ALGAPI | 
 | 720 | 	select LZO_COMPRESS | 
 | 721 | 	select LZO_DECOMPRESS | 
 | 722 | 	help | 
 | 723 | 	  This is the LZO algorithm. | 
 | 724 |  | 
| Neil Horman | 17f0f4a | 2008-08-14 22:15:52 +1000 | [diff] [blame] | 725 | comment "Random Number Generation" | 
 | 726 |  | 
 | 727 | config CRYPTO_ANSI_CPRNG | 
 | 728 | 	tristate "Pseudo Random Number Generation for Cryptographic modules" | 
 | 729 | 	select CRYPTO_AES | 
 | 730 | 	select CRYPTO_RNG | 
 | 731 | 	select CRYPTO_FIPS | 
 | 732 | 	help | 
 | 733 | 	  This option enables the generic pseudo random number generator | 
 | 734 | 	  for cryptographic modules.  Uses the Algorithm specified in | 
 | 735 | 	  ANSI X9.31 A.2.4 | 
 | 736 |  | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 737 | source "drivers/crypto/Kconfig" | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 738 |  | 
| Herbert Xu | cce9e06 | 2006-08-21 21:08:13 +1000 | [diff] [blame] | 739 | endif	# if CRYPTO |