| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 1 | # | 
| Dan Williams | 685784a | 2007-07-09 11:56:42 -0700 | [diff] [blame] | 2 | # Generic algorithms support | 
|  | 3 | # | 
|  | 4 | config XOR_BLOCKS | 
|  | 5 | tristate | 
|  | 6 |  | 
|  | 7 | # | 
| Dan Williams | 9bc89cd | 2007-01-02 11:10:44 -0700 | [diff] [blame] | 8 | # async_tx api: hardware offloaded memory transfer/transform support | 
|  | 9 | # | 
|  | 10 | source "crypto/async_tx/Kconfig" | 
|  | 11 |  | 
|  | 12 | # | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 13 | # Cryptographic API Configuration | 
|  | 14 | # | 
| Jan Engelhardt | 2e290f4 | 2007-05-18 15:11:01 +1000 | [diff] [blame] | 15 | menuconfig CRYPTO | 
| Sebastian Siewior | c3715cb9 | 2008-03-30 16:36:09 +0800 | [diff] [blame] | 16 | tristate "Cryptographic API" | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 17 | help | 
|  | 18 | This option provides the core Cryptographic API. | 
|  | 19 |  | 
| Herbert Xu | cce9e06 | 2006-08-21 21:08:13 +1000 | [diff] [blame] | 20 | if CRYPTO | 
|  | 21 |  | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 22 | comment "Crypto core or helper" | 
|  | 23 |  | 
| Neil Horman | ccb778e | 2008-08-05 14:13:08 +0800 | [diff] [blame] | 24 | config CRYPTO_FIPS | 
|  | 25 | bool "FIPS 200 compliance" | 
|  | 26 | help | 
|  | 27 | This options enables the fips boot option which is | 
|  | 28 | required if you want to system to operate in a FIPS 200 | 
|  | 29 | certification.  You should say no unless you know what | 
|  | 30 | this is. | 
|  | 31 |  | 
| Herbert Xu | cce9e06 | 2006-08-21 21:08:13 +1000 | [diff] [blame] | 32 | config CRYPTO_ALGAPI | 
|  | 33 | tristate | 
| Herbert Xu | 6a0fcbb | 2008-12-10 23:29:44 +1100 | [diff] [blame^] | 34 | select CRYPTO_ALGAPI2 | 
| Herbert Xu | cce9e06 | 2006-08-21 21:08:13 +1000 | [diff] [blame] | 35 | help | 
|  | 36 | This option provides the API for cryptographic algorithms. | 
|  | 37 |  | 
| Herbert Xu | 6a0fcbb | 2008-12-10 23:29:44 +1100 | [diff] [blame^] | 38 | config CRYPTO_ALGAPI2 | 
|  | 39 | tristate | 
|  | 40 |  | 
| Herbert Xu | 1ae9782 | 2007-08-30 15:36:14 +0800 | [diff] [blame] | 41 | config CRYPTO_AEAD | 
|  | 42 | tristate | 
| Herbert Xu | 6a0fcbb | 2008-12-10 23:29:44 +1100 | [diff] [blame^] | 43 | select CRYPTO_AEAD2 | 
| Herbert Xu | 1ae9782 | 2007-08-30 15:36:14 +0800 | [diff] [blame] | 44 | select CRYPTO_ALGAPI | 
|  | 45 |  | 
| Herbert Xu | 6a0fcbb | 2008-12-10 23:29:44 +1100 | [diff] [blame^] | 46 | config CRYPTO_AEAD2 | 
|  | 47 | tristate | 
|  | 48 | select CRYPTO_ALGAPI2 | 
|  | 49 |  | 
| Herbert Xu | 5cde0af | 2006-08-22 00:07:53 +1000 | [diff] [blame] | 50 | config CRYPTO_BLKCIPHER | 
|  | 51 | tristate | 
| Herbert Xu | 6a0fcbb | 2008-12-10 23:29:44 +1100 | [diff] [blame^] | 52 | select CRYPTO_BLKCIPHER2 | 
| Herbert Xu | 5cde0af | 2006-08-22 00:07:53 +1000 | [diff] [blame] | 53 | select CRYPTO_ALGAPI | 
| Herbert Xu | 6a0fcbb | 2008-12-10 23:29:44 +1100 | [diff] [blame^] | 54 |  | 
|  | 55 | config CRYPTO_BLKCIPHER2 | 
|  | 56 | tristate | 
|  | 57 | select CRYPTO_ALGAPI2 | 
|  | 58 | select CRYPTO_RNG2 | 
| Herbert Xu | 5cde0af | 2006-08-22 00:07:53 +1000 | [diff] [blame] | 59 |  | 
| Herbert Xu | 055bcee | 2006-08-19 22:24:23 +1000 | [diff] [blame] | 60 | config CRYPTO_HASH | 
|  | 61 | tristate | 
| Herbert Xu | 6a0fcbb | 2008-12-10 23:29:44 +1100 | [diff] [blame^] | 62 | select CRYPTO_HASH2 | 
| Herbert Xu | 055bcee | 2006-08-19 22:24:23 +1000 | [diff] [blame] | 63 | select CRYPTO_ALGAPI | 
|  | 64 |  | 
| Herbert Xu | 6a0fcbb | 2008-12-10 23:29:44 +1100 | [diff] [blame^] | 65 | config CRYPTO_HASH2 | 
|  | 66 | tristate | 
|  | 67 | select CRYPTO_ALGAPI2 | 
|  | 68 |  | 
| Neil Horman | 17f0f4a | 2008-08-14 22:15:52 +1000 | [diff] [blame] | 69 | config CRYPTO_RNG | 
|  | 70 | tristate | 
| Herbert Xu | 6a0fcbb | 2008-12-10 23:29:44 +1100 | [diff] [blame^] | 71 | select CRYPTO_RNG2 | 
| Neil Horman | 17f0f4a | 2008-08-14 22:15:52 +1000 | [diff] [blame] | 72 | select CRYPTO_ALGAPI | 
|  | 73 |  | 
| Herbert Xu | 6a0fcbb | 2008-12-10 23:29:44 +1100 | [diff] [blame^] | 74 | config CRYPTO_RNG2 | 
|  | 75 | tristate | 
|  | 76 | select CRYPTO_ALGAPI2 | 
|  | 77 |  | 
| Herbert Xu | 2b8c19d | 2006-09-21 11:31:44 +1000 | [diff] [blame] | 78 | config CRYPTO_MANAGER | 
|  | 79 | tristate "Cryptographic algorithm manager" | 
| Herbert Xu | 6a0fcbb | 2008-12-10 23:29:44 +1100 | [diff] [blame^] | 80 | select CRYPTO_MANAGER2 | 
| Herbert Xu | 2b8c19d | 2006-09-21 11:31:44 +1000 | [diff] [blame] | 81 | help | 
|  | 82 | Create default cryptographic template instantiations such as | 
|  | 83 | cbc(aes). | 
|  | 84 |  | 
| Herbert Xu | 6a0fcbb | 2008-12-10 23:29:44 +1100 | [diff] [blame^] | 85 | config CRYPTO_MANAGER2 | 
|  | 86 | def_tristate CRYPTO_MANAGER || (CRYPTO_MANAGER!=n && CRYPTO_ALGAPI=y) | 
|  | 87 | select CRYPTO_AEAD2 | 
|  | 88 | select CRYPTO_HASH2 | 
|  | 89 | select CRYPTO_BLKCIPHER2 | 
|  | 90 |  | 
| Rik Snel | c494e07 | 2006-11-29 18:59:44 +1100 | [diff] [blame] | 91 | config CRYPTO_GF128MUL | 
|  | 92 | tristate "GF(2^128) multiplication functions (EXPERIMENTAL)" | 
|  | 93 | depends on EXPERIMENTAL | 
|  | 94 | help | 
|  | 95 | Efficient table driven implementation of multiplications in the | 
|  | 96 | field GF(2^128).  This is needed by some cypher modes. This | 
|  | 97 | option will be selected automatically if you select such a | 
|  | 98 | cipher mode.  Only select this option by hand if you expect to load | 
|  | 99 | an external module that requires these functions. | 
|  | 100 |  | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 101 | config CRYPTO_NULL | 
|  | 102 | tristate "Null algorithms" | 
|  | 103 | select CRYPTO_ALGAPI | 
|  | 104 | select CRYPTO_BLKCIPHER | 
|  | 105 | help | 
|  | 106 | These are 'Null' algorithms, used by IPsec, which do nothing. | 
|  | 107 |  | 
|  | 108 | config CRYPTO_CRYPTD | 
|  | 109 | tristate "Software async crypto daemon" | 
| Herbert Xu | db131ef | 2006-09-21 11:44:08 +1000 | [diff] [blame] | 110 | select CRYPTO_BLKCIPHER | 
| Loc Ho | b8a2825 | 2008-05-14 21:23:00 +0800 | [diff] [blame] | 111 | select CRYPTO_HASH | 
| Herbert Xu | 4351840 | 2006-10-16 21:28:58 +1000 | [diff] [blame] | 112 | select CRYPTO_MANAGER | 
| Herbert Xu | db131ef | 2006-09-21 11:44:08 +1000 | [diff] [blame] | 113 | help | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 114 | This is a generic software asynchronous crypto daemon that | 
|  | 115 | converts an arbitrary synchronous software crypto algorithm | 
|  | 116 | into an asynchronous algorithm that executes in a kernel thread. | 
|  | 117 |  | 
|  | 118 | config CRYPTO_AUTHENC | 
|  | 119 | tristate "Authenc support" | 
|  | 120 | select CRYPTO_AEAD | 
|  | 121 | select CRYPTO_BLKCIPHER | 
|  | 122 | select CRYPTO_MANAGER | 
|  | 123 | select CRYPTO_HASH | 
|  | 124 | help | 
|  | 125 | Authenc: Combined mode wrapper for IPsec. | 
|  | 126 | This is required for IPSec. | 
|  | 127 |  | 
|  | 128 | config CRYPTO_TEST | 
|  | 129 | tristate "Testing module" | 
|  | 130 | depends on m | 
| Herbert Xu | da7f033 | 2008-07-31 17:08:25 +0800 | [diff] [blame] | 131 | select CRYPTO_MANAGER | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 132 | help | 
|  | 133 | Quick & dirty crypto test module. | 
|  | 134 |  | 
|  | 135 | comment "Authenticated Encryption with Associated Data" | 
|  | 136 |  | 
|  | 137 | config CRYPTO_CCM | 
|  | 138 | tristate "CCM support" | 
|  | 139 | select CRYPTO_CTR | 
|  | 140 | select CRYPTO_AEAD | 
|  | 141 | help | 
|  | 142 | Support for Counter with CBC MAC. Required for IPsec. | 
|  | 143 |  | 
|  | 144 | config CRYPTO_GCM | 
|  | 145 | tristate "GCM/GMAC support" | 
|  | 146 | select CRYPTO_CTR | 
|  | 147 | select CRYPTO_AEAD | 
|  | 148 | select CRYPTO_GF128MUL | 
|  | 149 | help | 
|  | 150 | Support for Galois/Counter Mode (GCM) and Galois Message | 
|  | 151 | Authentication Code (GMAC). Required for IPSec. | 
|  | 152 |  | 
|  | 153 | config CRYPTO_SEQIV | 
|  | 154 | tristate "Sequence Number IV Generator" | 
|  | 155 | select CRYPTO_AEAD | 
|  | 156 | select CRYPTO_BLKCIPHER | 
| Herbert Xu | a0f000e | 2008-08-14 22:21:31 +1000 | [diff] [blame] | 157 | select CRYPTO_RNG | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 158 | help | 
|  | 159 | This IV generator generates an IV based on a sequence number by | 
|  | 160 | xoring it with a salt.  This algorithm is mainly useful for CTR | 
|  | 161 |  | 
|  | 162 | comment "Block modes" | 
| Herbert Xu | db131ef | 2006-09-21 11:44:08 +1000 | [diff] [blame] | 163 |  | 
|  | 164 | config CRYPTO_CBC | 
|  | 165 | tristate "CBC support" | 
|  | 166 | select CRYPTO_BLKCIPHER | 
| Herbert Xu | 4351840 | 2006-10-16 21:28:58 +1000 | [diff] [blame] | 167 | select CRYPTO_MANAGER | 
| Herbert Xu | db131ef | 2006-09-21 11:44:08 +1000 | [diff] [blame] | 168 | help | 
|  | 169 | CBC: Cipher Block Chaining mode | 
|  | 170 | This block cipher algorithm is required for IPSec. | 
|  | 171 |  | 
| Joy Latten | 23e353c | 2007-10-23 08:50:32 +0800 | [diff] [blame] | 172 | config CRYPTO_CTR | 
|  | 173 | tristate "CTR support" | 
|  | 174 | select CRYPTO_BLKCIPHER | 
| Herbert Xu | 0a27032 | 2007-11-30 21:38:37 +1100 | [diff] [blame] | 175 | select CRYPTO_SEQIV | 
| Joy Latten | 23e353c | 2007-10-23 08:50:32 +0800 | [diff] [blame] | 176 | select CRYPTO_MANAGER | 
| Joy Latten | 23e353c | 2007-10-23 08:50:32 +0800 | [diff] [blame] | 177 | help | 
|  | 178 | CTR: Counter mode | 
|  | 179 | This block cipher algorithm is required for IPSec. | 
|  | 180 |  | 
| Kevin Coffman | 76cb952 | 2008-03-24 21:26:16 +0800 | [diff] [blame] | 181 | config CRYPTO_CTS | 
|  | 182 | tristate "CTS support" | 
|  | 183 | select CRYPTO_BLKCIPHER | 
|  | 184 | help | 
|  | 185 | CTS: Cipher Text Stealing | 
|  | 186 | This is the Cipher Text Stealing mode as described by | 
|  | 187 | Section 8 of rfc2040 and referenced by rfc3962. | 
|  | 188 | (rfc3962 includes errata information in its Appendix A) | 
|  | 189 | This mode is required for Kerberos gss mechanism support | 
|  | 190 | for AES encryption. | 
|  | 191 |  | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 192 | config CRYPTO_ECB | 
|  | 193 | tristate "ECB support" | 
| Herbert Xu | 653ebd9 | 2007-11-27 19:48:27 +0800 | [diff] [blame] | 194 | select CRYPTO_BLKCIPHER | 
| Herbert Xu | 124b53d | 2007-04-16 20:49:20 +1000 | [diff] [blame] | 195 | select CRYPTO_MANAGER | 
|  | 196 | help | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 197 | ECB: Electronic CodeBook mode | 
|  | 198 | This is the simplest block cipher algorithm.  It simply encrypts | 
|  | 199 | the input block by block. | 
| Herbert Xu | 124b53d | 2007-04-16 20:49:20 +1000 | [diff] [blame] | 200 |  | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 201 | config CRYPTO_LRW | 
|  | 202 | tristate "LRW support (EXPERIMENTAL)" | 
|  | 203 | depends on EXPERIMENTAL | 
| David Howells | 9083163 | 2006-12-16 12:13:14 +1100 | [diff] [blame] | 204 | select CRYPTO_BLKCIPHER | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 205 | select CRYPTO_MANAGER | 
|  | 206 | select CRYPTO_GF128MUL | 
| David Howells | 9083163 | 2006-12-16 12:13:14 +1100 | [diff] [blame] | 207 | help | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 208 | LRW: Liskov Rivest Wagner, a tweakable, non malleable, non movable | 
|  | 209 | narrow block cipher mode for dm-crypt.  Use it with cipher | 
|  | 210 | specification string aes-lrw-benbi, the key must be 256, 320 or 384. | 
|  | 211 | The first 128, 192 or 256 bits in the key are used for AES and the | 
|  | 212 | rest is used to tie each cipher block to its logical position. | 
| David Howells | 9083163 | 2006-12-16 12:13:14 +1100 | [diff] [blame] | 213 |  | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 214 | config CRYPTO_PCBC | 
|  | 215 | tristate "PCBC support" | 
|  | 216 | select CRYPTO_BLKCIPHER | 
|  | 217 | select CRYPTO_MANAGER | 
|  | 218 | help | 
|  | 219 | PCBC: Propagating Cipher Block Chaining mode | 
|  | 220 | This block cipher algorithm is required for RxRPC. | 
|  | 221 |  | 
|  | 222 | config CRYPTO_XTS | 
|  | 223 | tristate "XTS support (EXPERIMENTAL)" | 
|  | 224 | depends on EXPERIMENTAL | 
|  | 225 | select CRYPTO_BLKCIPHER | 
|  | 226 | select CRYPTO_MANAGER | 
|  | 227 | select CRYPTO_GF128MUL | 
|  | 228 | help | 
|  | 229 | XTS: IEEE1619/D16 narrow block cipher use with aes-xts-plain, | 
|  | 230 | key size 256, 384 or 512 bits. This implementation currently | 
|  | 231 | can't handle a sectorsize which is not a multiple of 16 bytes. | 
|  | 232 |  | 
|  | 233 | comment "Hash modes" | 
|  | 234 |  | 
|  | 235 | config CRYPTO_HMAC | 
|  | 236 | tristate "HMAC support" | 
|  | 237 | select CRYPTO_HASH | 
|  | 238 | select CRYPTO_MANAGER | 
|  | 239 | help | 
|  | 240 | HMAC: Keyed-Hashing for Message Authentication (RFC2104). | 
|  | 241 | This is required for IPSec. | 
|  | 242 |  | 
|  | 243 | config CRYPTO_XCBC | 
|  | 244 | tristate "XCBC support" | 
|  | 245 | depends on EXPERIMENTAL | 
|  | 246 | select CRYPTO_HASH | 
|  | 247 | select CRYPTO_MANAGER | 
|  | 248 | help | 
|  | 249 | XCBC: Keyed-Hashing with encryption algorithm | 
|  | 250 | http://www.ietf.org/rfc/rfc3566.txt | 
|  | 251 | http://csrc.nist.gov/encryption/modes/proposedmodes/ | 
|  | 252 | xcbc-mac/xcbc-mac-spec.pdf | 
|  | 253 |  | 
|  | 254 | comment "Digest" | 
|  | 255 |  | 
|  | 256 | config CRYPTO_CRC32C | 
|  | 257 | tristate "CRC32c CRC algorithm" | 
| Herbert Xu | 5773a3e | 2008-07-08 20:54:28 +0800 | [diff] [blame] | 258 | select CRYPTO_HASH | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 259 | select LIBCRC32C | 
|  | 260 | help | 
|  | 261 | Castagnoli, et al Cyclic Redundancy-Check Algorithm.  Used | 
|  | 262 | by iSCSI for header and data digests and by others. | 
|  | 263 | See Castagnoli93.  This implementation uses lib/libcrc32c. | 
| Adrian Bunk | b6d4434 | 2008-07-16 19:28:00 +0800 | [diff] [blame] | 264 | Module will be crc32c. | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 265 |  | 
| Austin Zhang | 8cb51ba | 2008-08-07 09:57:03 +0800 | [diff] [blame] | 266 | config CRYPTO_CRC32C_INTEL | 
|  | 267 | tristate "CRC32c INTEL hardware acceleration" | 
|  | 268 | depends on X86 | 
|  | 269 | select CRYPTO_HASH | 
|  | 270 | help | 
|  | 271 | In Intel processor with SSE4.2 supported, the processor will | 
|  | 272 | support CRC32C implementation using hardware accelerated CRC32 | 
|  | 273 | instruction. This option will create 'crc32c-intel' module, | 
|  | 274 | which will enable any routine to use the CRC32 instruction to | 
|  | 275 | gain performance compared with software implementation. | 
|  | 276 | Module will be crc32c-intel. | 
|  | 277 |  | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 278 | config CRYPTO_MD4 | 
|  | 279 | tristate "MD4 digest algorithm" | 
| Herbert Xu | cce9e06 | 2006-08-21 21:08:13 +1000 | [diff] [blame] | 280 | select CRYPTO_ALGAPI | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 281 | help | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 282 | MD4 message digest algorithm (RFC1320). | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 283 |  | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 284 | config CRYPTO_MD5 | 
|  | 285 | tristate "MD5 digest algorithm" | 
| Herbert Xu | cce9e06 | 2006-08-21 21:08:13 +1000 | [diff] [blame] | 286 | select CRYPTO_ALGAPI | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 287 | help | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 288 | MD5 message digest algorithm (RFC1321). | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 289 |  | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 290 | config CRYPTO_MICHAEL_MIC | 
|  | 291 | tristate "Michael MIC keyed digest algorithm" | 
|  | 292 | select CRYPTO_ALGAPI | 
|  | 293 | help | 
|  | 294 | Michael MIC is used for message integrity protection in TKIP | 
|  | 295 | (IEEE 802.11i). This algorithm is required for TKIP, but it | 
|  | 296 | should not be used for other purposes because of the weakness | 
|  | 297 | of the algorithm. | 
|  | 298 |  | 
| Adrian-Ken Rueegsegger | 82798f9 | 2008-05-07 22:17:37 +0800 | [diff] [blame] | 299 | config CRYPTO_RMD128 | 
| Adrian Bunk | b6d4434 | 2008-07-16 19:28:00 +0800 | [diff] [blame] | 300 | tristate "RIPEMD-128 digest algorithm" | 
|  | 301 | select CRYPTO_ALGAPI | 
|  | 302 | help | 
|  | 303 | RIPEMD-128 (ISO/IEC 10118-3:2004). | 
| Adrian-Ken Rueegsegger | 82798f9 | 2008-05-07 22:17:37 +0800 | [diff] [blame] | 304 |  | 
| Adrian Bunk | b6d4434 | 2008-07-16 19:28:00 +0800 | [diff] [blame] | 305 | RIPEMD-128 is a 128-bit cryptographic hash function. It should only | 
|  | 306 | to be used as a secure replacement for RIPEMD. For other use cases | 
|  | 307 | RIPEMD-160 should be used. | 
| Adrian-Ken Rueegsegger | 82798f9 | 2008-05-07 22:17:37 +0800 | [diff] [blame] | 308 |  | 
| Adrian Bunk | b6d4434 | 2008-07-16 19:28:00 +0800 | [diff] [blame] | 309 | Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel. | 
|  | 310 | See <http://home.esat.kuleuven.be/~bosselae/ripemd160.html> | 
| Adrian-Ken Rueegsegger | 82798f9 | 2008-05-07 22:17:37 +0800 | [diff] [blame] | 311 |  | 
|  | 312 | config CRYPTO_RMD160 | 
| Adrian Bunk | b6d4434 | 2008-07-16 19:28:00 +0800 | [diff] [blame] | 313 | tristate "RIPEMD-160 digest algorithm" | 
|  | 314 | select CRYPTO_ALGAPI | 
|  | 315 | help | 
|  | 316 | RIPEMD-160 (ISO/IEC 10118-3:2004). | 
| Adrian-Ken Rueegsegger | 82798f9 | 2008-05-07 22:17:37 +0800 | [diff] [blame] | 317 |  | 
| Adrian Bunk | b6d4434 | 2008-07-16 19:28:00 +0800 | [diff] [blame] | 318 | RIPEMD-160 is a 160-bit cryptographic hash function. It is intended | 
|  | 319 | to be used as a secure replacement for the 128-bit hash functions | 
|  | 320 | MD4, MD5 and it's predecessor RIPEMD | 
|  | 321 | (not to be confused with RIPEMD-128). | 
| Adrian-Ken Rueegsegger | 82798f9 | 2008-05-07 22:17:37 +0800 | [diff] [blame] | 322 |  | 
| Adrian Bunk | b6d4434 | 2008-07-16 19:28:00 +0800 | [diff] [blame] | 323 | It's speed is comparable to SHA1 and there are no known attacks | 
|  | 324 | against RIPEMD-160. | 
| Adrian-Ken Rueegsegger | 534fe2c | 2008-05-09 21:30:27 +0800 | [diff] [blame] | 325 |  | 
| Adrian Bunk | b6d4434 | 2008-07-16 19:28:00 +0800 | [diff] [blame] | 326 | Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel. | 
|  | 327 | See <http://home.esat.kuleuven.be/~bosselae/ripemd160.html> | 
| Adrian-Ken Rueegsegger | 534fe2c | 2008-05-09 21:30:27 +0800 | [diff] [blame] | 328 |  | 
|  | 329 | config CRYPTO_RMD256 | 
| Adrian Bunk | b6d4434 | 2008-07-16 19:28:00 +0800 | [diff] [blame] | 330 | tristate "RIPEMD-256 digest algorithm" | 
|  | 331 | select CRYPTO_ALGAPI | 
|  | 332 | help | 
|  | 333 | RIPEMD-256 is an optional extension of RIPEMD-128 with a | 
|  | 334 | 256 bit hash. It is intended for applications that require | 
|  | 335 | longer hash-results, without needing a larger security level | 
|  | 336 | (than RIPEMD-128). | 
| Adrian-Ken Rueegsegger | 534fe2c | 2008-05-09 21:30:27 +0800 | [diff] [blame] | 337 |  | 
| Adrian Bunk | b6d4434 | 2008-07-16 19:28:00 +0800 | [diff] [blame] | 338 | Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel. | 
|  | 339 | See <http://home.esat.kuleuven.be/~bosselae/ripemd160.html> | 
| Adrian-Ken Rueegsegger | 534fe2c | 2008-05-09 21:30:27 +0800 | [diff] [blame] | 340 |  | 
|  | 341 | config CRYPTO_RMD320 | 
| Adrian Bunk | b6d4434 | 2008-07-16 19:28:00 +0800 | [diff] [blame] | 342 | tristate "RIPEMD-320 digest algorithm" | 
|  | 343 | select CRYPTO_ALGAPI | 
|  | 344 | help | 
|  | 345 | RIPEMD-320 is an optional extension of RIPEMD-160 with a | 
|  | 346 | 320 bit hash. It is intended for applications that require | 
|  | 347 | longer hash-results, without needing a larger security level | 
|  | 348 | (than RIPEMD-160). | 
| Adrian-Ken Rueegsegger | 534fe2c | 2008-05-09 21:30:27 +0800 | [diff] [blame] | 349 |  | 
| Adrian Bunk | b6d4434 | 2008-07-16 19:28:00 +0800 | [diff] [blame] | 350 | Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel. | 
|  | 351 | See <http://home.esat.kuleuven.be/~bosselae/ripemd160.html> | 
| Adrian-Ken Rueegsegger | 82798f9 | 2008-05-07 22:17:37 +0800 | [diff] [blame] | 352 |  | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 353 | config CRYPTO_SHA1 | 
|  | 354 | tristate "SHA1 digest algorithm" | 
|  | 355 | select CRYPTO_ALGAPI | 
|  | 356 | help | 
|  | 357 | SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2). | 
|  | 358 |  | 
|  | 359 | config CRYPTO_SHA256 | 
|  | 360 | tristate "SHA224 and SHA256 digest algorithm" | 
|  | 361 | select CRYPTO_ALGAPI | 
|  | 362 | help | 
|  | 363 | SHA256 secure hash standard (DFIPS 180-2). | 
|  | 364 |  | 
|  | 365 | This version of SHA implements a 256 bit hash with 128 bits of | 
|  | 366 | security against collision attacks. | 
|  | 367 |  | 
| Adrian Bunk | b6d4434 | 2008-07-16 19:28:00 +0800 | [diff] [blame] | 368 | This code also includes SHA-224, a 224 bit hash with 112 bits | 
|  | 369 | of security against collision attacks. | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 370 |  | 
|  | 371 | config CRYPTO_SHA512 | 
|  | 372 | tristate "SHA384 and SHA512 digest algorithms" | 
|  | 373 | select CRYPTO_ALGAPI | 
|  | 374 | help | 
|  | 375 | SHA512 secure hash standard (DFIPS 180-2). | 
|  | 376 |  | 
|  | 377 | This version of SHA implements a 512 bit hash with 256 bits of | 
|  | 378 | security against collision attacks. | 
|  | 379 |  | 
|  | 380 | This code also includes SHA-384, a 384 bit hash with 192 bits | 
|  | 381 | of security against collision attacks. | 
|  | 382 |  | 
|  | 383 | config CRYPTO_TGR192 | 
|  | 384 | tristate "Tiger digest algorithms" | 
|  | 385 | select CRYPTO_ALGAPI | 
|  | 386 | help | 
|  | 387 | Tiger hash algorithm 192, 160 and 128-bit hashes | 
|  | 388 |  | 
|  | 389 | Tiger is a hash function optimized for 64-bit processors while | 
|  | 390 | still having decent performance on 32-bit processors. | 
|  | 391 | Tiger was developed by Ross Anderson and Eli Biham. | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 392 |  | 
|  | 393 | See also: | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 394 | <http://www.cs.technion.ac.il/~biham/Reports/Tiger/>. | 
|  | 395 |  | 
|  | 396 | config CRYPTO_WP512 | 
|  | 397 | tristate "Whirlpool digest algorithms" | 
|  | 398 | select CRYPTO_ALGAPI | 
|  | 399 | help | 
|  | 400 | Whirlpool hash algorithm 512, 384 and 256-bit hashes | 
|  | 401 |  | 
|  | 402 | Whirlpool-512 is part of the NESSIE cryptographic primitives. | 
|  | 403 | Whirlpool will be part of the ISO/IEC 10118-3:2003(E) standard | 
|  | 404 |  | 
|  | 405 | See also: | 
|  | 406 | <http://planeta.terra.com.br/informatica/paulobarreto/WhirlpoolPage.html> | 
|  | 407 |  | 
|  | 408 | comment "Ciphers" | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 409 |  | 
|  | 410 | config CRYPTO_AES | 
|  | 411 | tristate "AES cipher algorithms" | 
| Herbert Xu | cce9e06 | 2006-08-21 21:08:13 +1000 | [diff] [blame] | 412 | select CRYPTO_ALGAPI | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 413 | help | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 414 | AES cipher algorithms (FIPS-197). AES uses the Rijndael | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 415 | algorithm. | 
|  | 416 |  | 
|  | 417 | Rijndael appears to be consistently a very good performer in | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 418 | both hardware and software across a wide range of computing | 
|  | 419 | environments regardless of its use in feedback or non-feedback | 
|  | 420 | modes. Its key setup time is excellent, and its key agility is | 
|  | 421 | good. Rijndael's very low memory requirements make it very well | 
|  | 422 | suited for restricted-space environments, in which it also | 
|  | 423 | demonstrates excellent performance. Rijndael's operations are | 
|  | 424 | among the easiest to defend against power and timing attacks. | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 425 |  | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 426 | The AES specifies three key sizes: 128, 192 and 256 bits | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 427 |  | 
|  | 428 | See <http://csrc.nist.gov/CryptoToolkit/aes/> for more information. | 
|  | 429 |  | 
|  | 430 | config CRYPTO_AES_586 | 
|  | 431 | tristate "AES cipher algorithms (i586)" | 
| Herbert Xu | cce9e06 | 2006-08-21 21:08:13 +1000 | [diff] [blame] | 432 | depends on (X86 || UML_X86) && !64BIT | 
|  | 433 | select CRYPTO_ALGAPI | 
| Sebastian Siewior | 5157dea | 2007-11-10 19:07:16 +0800 | [diff] [blame] | 434 | select CRYPTO_AES | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 435 | help | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 436 | AES cipher algorithms (FIPS-197). AES uses the Rijndael | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 437 | algorithm. | 
|  | 438 |  | 
|  | 439 | Rijndael appears to be consistently a very good performer in | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 440 | both hardware and software across a wide range of computing | 
|  | 441 | environments regardless of its use in feedback or non-feedback | 
|  | 442 | modes. Its key setup time is excellent, and its key agility is | 
|  | 443 | good. Rijndael's very low memory requirements make it very well | 
|  | 444 | suited for restricted-space environments, in which it also | 
|  | 445 | demonstrates excellent performance. Rijndael's operations are | 
|  | 446 | among the easiest to defend against power and timing attacks. | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 447 |  | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 448 | The AES specifies three key sizes: 128, 192 and 256 bits | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 449 |  | 
|  | 450 | See <http://csrc.nist.gov/encryption/aes/> for more information. | 
|  | 451 |  | 
| Andreas Steinmetz | a2a892a | 2005-07-06 13:55:00 -0700 | [diff] [blame] | 452 | config CRYPTO_AES_X86_64 | 
|  | 453 | tristate "AES cipher algorithms (x86_64)" | 
| Herbert Xu | cce9e06 | 2006-08-21 21:08:13 +1000 | [diff] [blame] | 454 | depends on (X86 || UML_X86) && 64BIT | 
|  | 455 | select CRYPTO_ALGAPI | 
| Sebastian Siewior | 81190b3 | 2007-11-08 21:25:04 +0800 | [diff] [blame] | 456 | select CRYPTO_AES | 
| Andreas Steinmetz | a2a892a | 2005-07-06 13:55:00 -0700 | [diff] [blame] | 457 | help | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 458 | AES cipher algorithms (FIPS-197). AES uses the Rijndael | 
| Andreas Steinmetz | a2a892a | 2005-07-06 13:55:00 -0700 | [diff] [blame] | 459 | algorithm. | 
|  | 460 |  | 
|  | 461 | Rijndael appears to be consistently a very good performer in | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 462 | both hardware and software across a wide range of computing | 
|  | 463 | environments regardless of its use in feedback or non-feedback | 
|  | 464 | modes. Its key setup time is excellent, and its key agility is | 
|  | 465 | good. Rijndael's very low memory requirements make it very well | 
|  | 466 | suited for restricted-space environments, in which it also | 
|  | 467 | demonstrates excellent performance. Rijndael's operations are | 
|  | 468 | among the easiest to defend against power and timing attacks. | 
| Andreas Steinmetz | a2a892a | 2005-07-06 13:55:00 -0700 | [diff] [blame] | 469 |  | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 470 | The AES specifies three key sizes: 128, 192 and 256 bits | 
| Andreas Steinmetz | a2a892a | 2005-07-06 13:55:00 -0700 | [diff] [blame] | 471 |  | 
|  | 472 | See <http://csrc.nist.gov/encryption/aes/> for more information. | 
|  | 473 |  | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 474 | config CRYPTO_ANUBIS | 
|  | 475 | tristate "Anubis cipher algorithm" | 
|  | 476 | select CRYPTO_ALGAPI | 
|  | 477 | help | 
|  | 478 | Anubis cipher algorithm. | 
|  | 479 |  | 
|  | 480 | Anubis is a variable key length cipher which can use keys from | 
|  | 481 | 128 bits to 320 bits in length.  It was evaluated as a entrant | 
|  | 482 | in the NESSIE competition. | 
|  | 483 |  | 
|  | 484 | See also: | 
|  | 485 | <https://www.cosic.esat.kuleuven.ac.be/nessie/reports/> | 
|  | 486 | <http://planeta.terra.com.br/informatica/paulobarreto/AnubisPage.html> | 
|  | 487 |  | 
|  | 488 | config CRYPTO_ARC4 | 
|  | 489 | tristate "ARC4 cipher algorithm" | 
|  | 490 | select CRYPTO_ALGAPI | 
|  | 491 | help | 
|  | 492 | ARC4 cipher algorithm. | 
|  | 493 |  | 
|  | 494 | ARC4 is a stream cipher using keys ranging from 8 bits to 2048 | 
|  | 495 | bits in length.  This algorithm is required for driver-based | 
|  | 496 | WEP, but it should not be for other purposes because of the | 
|  | 497 | weakness of the algorithm. | 
|  | 498 |  | 
|  | 499 | config CRYPTO_BLOWFISH | 
|  | 500 | tristate "Blowfish cipher algorithm" | 
|  | 501 | select CRYPTO_ALGAPI | 
|  | 502 | help | 
|  | 503 | Blowfish cipher algorithm, by Bruce Schneier. | 
|  | 504 |  | 
|  | 505 | This is a variable key length cipher which can use keys from 32 | 
|  | 506 | bits to 448 bits in length.  It's fast, simple and specifically | 
|  | 507 | designed for use on "large microprocessors". | 
|  | 508 |  | 
|  | 509 | See also: | 
|  | 510 | <http://www.schneier.com/blowfish.html> | 
|  | 511 |  | 
|  | 512 | config CRYPTO_CAMELLIA | 
|  | 513 | tristate "Camellia cipher algorithms" | 
|  | 514 | depends on CRYPTO | 
|  | 515 | select CRYPTO_ALGAPI | 
|  | 516 | help | 
|  | 517 | Camellia cipher algorithms module. | 
|  | 518 |  | 
|  | 519 | Camellia is a symmetric key block cipher developed jointly | 
|  | 520 | at NTT and Mitsubishi Electric Corporation. | 
|  | 521 |  | 
|  | 522 | The Camellia specifies three key sizes: 128, 192 and 256 bits. | 
|  | 523 |  | 
|  | 524 | See also: | 
|  | 525 | <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html> | 
|  | 526 |  | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 527 | config CRYPTO_CAST5 | 
|  | 528 | tristate "CAST5 (CAST-128) cipher algorithm" | 
| Herbert Xu | cce9e06 | 2006-08-21 21:08:13 +1000 | [diff] [blame] | 529 | select CRYPTO_ALGAPI | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 530 | help | 
|  | 531 | The CAST5 encryption algorithm (synonymous with CAST-128) is | 
|  | 532 | described in RFC2144. | 
|  | 533 |  | 
|  | 534 | config CRYPTO_CAST6 | 
|  | 535 | tristate "CAST6 (CAST-256) cipher algorithm" | 
| Herbert Xu | cce9e06 | 2006-08-21 21:08:13 +1000 | [diff] [blame] | 536 | select CRYPTO_ALGAPI | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 537 | help | 
|  | 538 | The CAST6 encryption algorithm (synonymous with CAST-256) is | 
|  | 539 | described in RFC2612. | 
|  | 540 |  | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 541 | config CRYPTO_DES | 
|  | 542 | tristate "DES and Triple DES EDE cipher algorithms" | 
| Herbert Xu | cce9e06 | 2006-08-21 21:08:13 +1000 | [diff] [blame] | 543 | select CRYPTO_ALGAPI | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 544 | help | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 545 | DES cipher algorithm (FIPS 46-2), and Triple DES EDE (FIPS 46-3). | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 546 |  | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 547 | config CRYPTO_FCRYPT | 
|  | 548 | tristate "FCrypt cipher algorithm" | 
| Herbert Xu | cce9e06 | 2006-08-21 21:08:13 +1000 | [diff] [blame] | 549 | select CRYPTO_ALGAPI | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 550 | select CRYPTO_BLKCIPHER | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 551 | help | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 552 | FCrypt algorithm used by RxRPC. | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 553 |  | 
|  | 554 | config CRYPTO_KHAZAD | 
|  | 555 | tristate "Khazad cipher algorithm" | 
| Herbert Xu | cce9e06 | 2006-08-21 21:08:13 +1000 | [diff] [blame] | 556 | select CRYPTO_ALGAPI | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 557 | help | 
|  | 558 | Khazad cipher algorithm. | 
|  | 559 |  | 
|  | 560 | Khazad was a finalist in the initial NESSIE competition.  It is | 
|  | 561 | an algorithm optimized for 64-bit processors with good performance | 
|  | 562 | on 32-bit processors.  Khazad uses an 128 bit key size. | 
|  | 563 |  | 
|  | 564 | See also: | 
|  | 565 | <http://planeta.terra.com.br/informatica/paulobarreto/KhazadPage.html> | 
|  | 566 |  | 
| Tan Swee Heng | 2407d60 | 2007-11-23 19:45:00 +0800 | [diff] [blame] | 567 | config CRYPTO_SALSA20 | 
|  | 568 | tristate "Salsa20 stream cipher algorithm (EXPERIMENTAL)" | 
|  | 569 | depends on EXPERIMENTAL | 
|  | 570 | select CRYPTO_BLKCIPHER | 
|  | 571 | help | 
|  | 572 | Salsa20 stream cipher algorithm. | 
|  | 573 |  | 
|  | 574 | Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT | 
|  | 575 | Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/> | 
|  | 576 |  | 
|  | 577 | The Salsa20 stream cipher algorithm is designed by Daniel J. | 
|  | 578 | Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html> | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 579 |  | 
| Tan Swee Heng | 974e4b7 | 2007-12-10 15:52:56 +0800 | [diff] [blame] | 580 | config CRYPTO_SALSA20_586 | 
|  | 581 | tristate "Salsa20 stream cipher algorithm (i586) (EXPERIMENTAL)" | 
|  | 582 | depends on (X86 || UML_X86) && !64BIT | 
|  | 583 | depends on EXPERIMENTAL | 
|  | 584 | select CRYPTO_BLKCIPHER | 
| Tan Swee Heng | 974e4b7 | 2007-12-10 15:52:56 +0800 | [diff] [blame] | 585 | help | 
|  | 586 | Salsa20 stream cipher algorithm. | 
|  | 587 |  | 
|  | 588 | Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT | 
|  | 589 | Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/> | 
|  | 590 |  | 
|  | 591 | The Salsa20 stream cipher algorithm is designed by Daniel J. | 
|  | 592 | Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html> | 
|  | 593 |  | 
| Tan Swee Heng | 9a7dafb | 2007-12-18 00:04:40 +0800 | [diff] [blame] | 594 | config CRYPTO_SALSA20_X86_64 | 
|  | 595 | tristate "Salsa20 stream cipher algorithm (x86_64) (EXPERIMENTAL)" | 
|  | 596 | depends on (X86 || UML_X86) && 64BIT | 
|  | 597 | depends on EXPERIMENTAL | 
|  | 598 | select CRYPTO_BLKCIPHER | 
| Tan Swee Heng | 9a7dafb | 2007-12-18 00:04:40 +0800 | [diff] [blame] | 599 | help | 
|  | 600 | Salsa20 stream cipher algorithm. | 
|  | 601 |  | 
|  | 602 | Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT | 
|  | 603 | Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/> | 
|  | 604 |  | 
|  | 605 | The Salsa20 stream cipher algorithm is designed by Daniel J. | 
|  | 606 | Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html> | 
|  | 607 |  | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 608 | config CRYPTO_SEED | 
|  | 609 | tristate "SEED cipher algorithm" | 
|  | 610 | select CRYPTO_ALGAPI | 
|  | 611 | help | 
|  | 612 | SEED cipher algorithm (RFC4269). | 
|  | 613 |  | 
|  | 614 | SEED is a 128-bit symmetric key block cipher that has been | 
|  | 615 | developed by KISA (Korea Information Security Agency) as a | 
|  | 616 | national standard encryption algorithm of the Republic of Korea. | 
|  | 617 | It is a 16 round block cipher with the key size of 128 bit. | 
|  | 618 |  | 
|  | 619 | See also: | 
|  | 620 | <http://www.kisa.or.kr/kisa/seed/jsp/seed_eng.jsp> | 
|  | 621 |  | 
|  | 622 | config CRYPTO_SERPENT | 
|  | 623 | tristate "Serpent cipher algorithm" | 
|  | 624 | select CRYPTO_ALGAPI | 
|  | 625 | help | 
|  | 626 | Serpent cipher algorithm, by Anderson, Biham & Knudsen. | 
|  | 627 |  | 
|  | 628 | Keys are allowed to be from 0 to 256 bits in length, in steps | 
|  | 629 | of 8 bits.  Also includes the 'Tnepres' algorithm, a reversed | 
|  | 630 | variant of Serpent for compatibility with old kerneli.org code. | 
|  | 631 |  | 
|  | 632 | See also: | 
|  | 633 | <http://www.cl.cam.ac.uk/~rja14/serpent.html> | 
|  | 634 |  | 
|  | 635 | config CRYPTO_TEA | 
|  | 636 | tristate "TEA, XTEA and XETA cipher algorithms" | 
|  | 637 | select CRYPTO_ALGAPI | 
|  | 638 | help | 
|  | 639 | TEA cipher algorithm. | 
|  | 640 |  | 
|  | 641 | Tiny Encryption Algorithm is a simple cipher that uses | 
|  | 642 | many rounds for security.  It is very fast and uses | 
|  | 643 | little memory. | 
|  | 644 |  | 
|  | 645 | Xtendend Tiny Encryption Algorithm is a modification to | 
|  | 646 | the TEA algorithm to address a potential key weakness | 
|  | 647 | in the TEA algorithm. | 
|  | 648 |  | 
|  | 649 | Xtendend Encryption Tiny Algorithm is a mis-implementation | 
|  | 650 | of the XTEA algorithm for compatibility purposes. | 
|  | 651 |  | 
|  | 652 | config CRYPTO_TWOFISH | 
|  | 653 | tristate "Twofish cipher algorithm" | 
|  | 654 | select CRYPTO_ALGAPI | 
|  | 655 | select CRYPTO_TWOFISH_COMMON | 
|  | 656 | help | 
|  | 657 | Twofish cipher algorithm. | 
|  | 658 |  | 
|  | 659 | Twofish was submitted as an AES (Advanced Encryption Standard) | 
|  | 660 | candidate cipher by researchers at CounterPane Systems.  It is a | 
|  | 661 | 16 round block cipher supporting key sizes of 128, 192, and 256 | 
|  | 662 | bits. | 
|  | 663 |  | 
|  | 664 | See also: | 
|  | 665 | <http://www.schneier.com/twofish.html> | 
|  | 666 |  | 
|  | 667 | config CRYPTO_TWOFISH_COMMON | 
|  | 668 | tristate | 
|  | 669 | help | 
|  | 670 | Common parts of the Twofish cipher algorithm shared by the | 
|  | 671 | generic c and the assembler implementations. | 
|  | 672 |  | 
|  | 673 | config CRYPTO_TWOFISH_586 | 
|  | 674 | tristate "Twofish cipher algorithms (i586)" | 
|  | 675 | depends on (X86 || UML_X86) && !64BIT | 
|  | 676 | select CRYPTO_ALGAPI | 
|  | 677 | select CRYPTO_TWOFISH_COMMON | 
|  | 678 | help | 
|  | 679 | Twofish cipher algorithm. | 
|  | 680 |  | 
|  | 681 | Twofish was submitted as an AES (Advanced Encryption Standard) | 
|  | 682 | candidate cipher by researchers at CounterPane Systems.  It is a | 
|  | 683 | 16 round block cipher supporting key sizes of 128, 192, and 256 | 
|  | 684 | bits. | 
|  | 685 |  | 
|  | 686 | See also: | 
|  | 687 | <http://www.schneier.com/twofish.html> | 
|  | 688 |  | 
|  | 689 | config CRYPTO_TWOFISH_X86_64 | 
|  | 690 | tristate "Twofish cipher algorithm (x86_64)" | 
|  | 691 | depends on (X86 || UML_X86) && 64BIT | 
|  | 692 | select CRYPTO_ALGAPI | 
|  | 693 | select CRYPTO_TWOFISH_COMMON | 
|  | 694 | help | 
|  | 695 | Twofish cipher algorithm (x86_64). | 
|  | 696 |  | 
|  | 697 | Twofish was submitted as an AES (Advanced Encryption Standard) | 
|  | 698 | candidate cipher by researchers at CounterPane Systems.  It is a | 
|  | 699 | 16 round block cipher supporting key sizes of 128, 192, and 256 | 
|  | 700 | bits. | 
|  | 701 |  | 
|  | 702 | See also: | 
|  | 703 | <http://www.schneier.com/twofish.html> | 
|  | 704 |  | 
|  | 705 | comment "Compression" | 
|  | 706 |  | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 707 | config CRYPTO_DEFLATE | 
|  | 708 | tristate "Deflate compression algorithm" | 
| Herbert Xu | cce9e06 | 2006-08-21 21:08:13 +1000 | [diff] [blame] | 709 | select CRYPTO_ALGAPI | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 710 | select ZLIB_INFLATE | 
|  | 711 | select ZLIB_DEFLATE | 
|  | 712 | help | 
|  | 713 | This is the Deflate algorithm (RFC1951), specified for use in | 
|  | 714 | IPSec with the IPCOMP protocol (RFC3173, RFC2394). | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 715 |  | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 716 | You will most probably want this if using IPSec. | 
|  | 717 |  | 
| Zoltan Sogor | 0b77abb | 2007-12-07 16:53:23 +0800 | [diff] [blame] | 718 | config CRYPTO_LZO | 
|  | 719 | tristate "LZO compression algorithm" | 
|  | 720 | select CRYPTO_ALGAPI | 
|  | 721 | select LZO_COMPRESS | 
|  | 722 | select LZO_DECOMPRESS | 
|  | 723 | help | 
|  | 724 | This is the LZO algorithm. | 
|  | 725 |  | 
| Neil Horman | 17f0f4a | 2008-08-14 22:15:52 +1000 | [diff] [blame] | 726 | comment "Random Number Generation" | 
|  | 727 |  | 
|  | 728 | config CRYPTO_ANSI_CPRNG | 
|  | 729 | tristate "Pseudo Random Number Generation for Cryptographic modules" | 
|  | 730 | select CRYPTO_AES | 
|  | 731 | select CRYPTO_RNG | 
|  | 732 | select CRYPTO_FIPS | 
|  | 733 | help | 
|  | 734 | This option enables the generic pseudo random number generator | 
|  | 735 | for cryptographic modules.  Uses the Algorithm specified in | 
|  | 736 | ANSI X9.31 A.2.4 | 
|  | 737 |  | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 738 | source "drivers/crypto/Kconfig" | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 739 |  | 
| Herbert Xu | cce9e06 | 2006-08-21 21:08:13 +1000 | [diff] [blame] | 740 | endif	# if CRYPTO |