| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 1 | # | 
| Dan Williams | 685784a | 2007-07-09 11:56:42 -0700 | [diff] [blame] | 2 | # Generic algorithms support | 
|  | 3 | # | 
|  | 4 | config XOR_BLOCKS | 
|  | 5 | tristate | 
|  | 6 |  | 
|  | 7 | # | 
| Dan Williams | 9bc89cd | 2007-01-02 11:10:44 -0700 | [diff] [blame] | 8 | # async_tx api: hardware offloaded memory transfer/transform support | 
|  | 9 | # | 
|  | 10 | source "crypto/async_tx/Kconfig" | 
|  | 11 |  | 
|  | 12 | # | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 13 | # Cryptographic API Configuration | 
|  | 14 | # | 
| Jan Engelhardt | 2e290f4 | 2007-05-18 15:11:01 +1000 | [diff] [blame] | 15 | menuconfig CRYPTO | 
| Sebastian Siewior | c3715cb9 | 2008-03-30 16:36:09 +0800 | [diff] [blame] | 16 | tristate "Cryptographic API" | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 17 | help | 
|  | 18 | This option provides the core Cryptographic API. | 
|  | 19 |  | 
| Herbert Xu | cce9e06 | 2006-08-21 21:08:13 +1000 | [diff] [blame] | 20 | if CRYPTO | 
|  | 21 |  | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 22 | comment "Crypto core or helper" | 
|  | 23 |  | 
| Neil Horman | ccb778e | 2008-08-05 14:13:08 +0800 | [diff] [blame] | 24 | config CRYPTO_FIPS | 
|  | 25 | bool "FIPS 200 compliance" | 
|  | 26 | help | 
|  | 27 | This options enables the fips boot option which is | 
|  | 28 | required if you want to system to operate in a FIPS 200 | 
|  | 29 | certification.  You should say no unless you know what | 
|  | 30 | this is. | 
|  | 31 |  | 
| Herbert Xu | cce9e06 | 2006-08-21 21:08:13 +1000 | [diff] [blame] | 32 | config CRYPTO_ALGAPI | 
|  | 33 | tristate | 
| Herbert Xu | 6a0fcbb | 2008-12-10 23:29:44 +1100 | [diff] [blame] | 34 | select CRYPTO_ALGAPI2 | 
| Herbert Xu | cce9e06 | 2006-08-21 21:08:13 +1000 | [diff] [blame] | 35 | help | 
|  | 36 | This option provides the API for cryptographic algorithms. | 
|  | 37 |  | 
| Herbert Xu | 6a0fcbb | 2008-12-10 23:29:44 +1100 | [diff] [blame] | 38 | config CRYPTO_ALGAPI2 | 
|  | 39 | tristate | 
|  | 40 |  | 
| Herbert Xu | 1ae9782 | 2007-08-30 15:36:14 +0800 | [diff] [blame] | 41 | config CRYPTO_AEAD | 
|  | 42 | tristate | 
| Herbert Xu | 6a0fcbb | 2008-12-10 23:29:44 +1100 | [diff] [blame] | 43 | select CRYPTO_AEAD2 | 
| Herbert Xu | 1ae9782 | 2007-08-30 15:36:14 +0800 | [diff] [blame] | 44 | select CRYPTO_ALGAPI | 
|  | 45 |  | 
| Herbert Xu | 6a0fcbb | 2008-12-10 23:29:44 +1100 | [diff] [blame] | 46 | config CRYPTO_AEAD2 | 
|  | 47 | tristate | 
|  | 48 | select CRYPTO_ALGAPI2 | 
|  | 49 |  | 
| Herbert Xu | 5cde0af | 2006-08-22 00:07:53 +1000 | [diff] [blame] | 50 | config CRYPTO_BLKCIPHER | 
|  | 51 | tristate | 
| Herbert Xu | 6a0fcbb | 2008-12-10 23:29:44 +1100 | [diff] [blame] | 52 | select CRYPTO_BLKCIPHER2 | 
| Herbert Xu | 5cde0af | 2006-08-22 00:07:53 +1000 | [diff] [blame] | 53 | select CRYPTO_ALGAPI | 
| Herbert Xu | 6a0fcbb | 2008-12-10 23:29:44 +1100 | [diff] [blame] | 54 |  | 
|  | 55 | config CRYPTO_BLKCIPHER2 | 
|  | 56 | tristate | 
|  | 57 | select CRYPTO_ALGAPI2 | 
|  | 58 | select CRYPTO_RNG2 | 
| Herbert Xu | 5cde0af | 2006-08-22 00:07:53 +1000 | [diff] [blame] | 59 |  | 
| Herbert Xu | 055bcee | 2006-08-19 22:24:23 +1000 | [diff] [blame] | 60 | config CRYPTO_HASH | 
|  | 61 | tristate | 
| Herbert Xu | 6a0fcbb | 2008-12-10 23:29:44 +1100 | [diff] [blame] | 62 | select CRYPTO_HASH2 | 
| Herbert Xu | 055bcee | 2006-08-19 22:24:23 +1000 | [diff] [blame] | 63 | select CRYPTO_ALGAPI | 
|  | 64 |  | 
| Herbert Xu | 6a0fcbb | 2008-12-10 23:29:44 +1100 | [diff] [blame] | 65 | config CRYPTO_HASH2 | 
|  | 66 | tristate | 
|  | 67 | select CRYPTO_ALGAPI2 | 
|  | 68 |  | 
| Neil Horman | 17f0f4a | 2008-08-14 22:15:52 +1000 | [diff] [blame] | 69 | config CRYPTO_RNG | 
|  | 70 | tristate | 
| Herbert Xu | 6a0fcbb | 2008-12-10 23:29:44 +1100 | [diff] [blame] | 71 | select CRYPTO_RNG2 | 
| Neil Horman | 17f0f4a | 2008-08-14 22:15:52 +1000 | [diff] [blame] | 72 | select CRYPTO_ALGAPI | 
|  | 73 |  | 
| Herbert Xu | 6a0fcbb | 2008-12-10 23:29:44 +1100 | [diff] [blame] | 74 | config CRYPTO_RNG2 | 
|  | 75 | tristate | 
|  | 76 | select CRYPTO_ALGAPI2 | 
|  | 77 |  | 
| Herbert Xu | 2b8c19d | 2006-09-21 11:31:44 +1000 | [diff] [blame] | 78 | config CRYPTO_MANAGER | 
|  | 79 | tristate "Cryptographic algorithm manager" | 
| Herbert Xu | 6a0fcbb | 2008-12-10 23:29:44 +1100 | [diff] [blame] | 80 | select CRYPTO_MANAGER2 | 
| Herbert Xu | 2b8c19d | 2006-09-21 11:31:44 +1000 | [diff] [blame] | 81 | help | 
|  | 82 | Create default cryptographic template instantiations such as | 
|  | 83 | cbc(aes). | 
|  | 84 |  | 
| Herbert Xu | 6a0fcbb | 2008-12-10 23:29:44 +1100 | [diff] [blame] | 85 | config CRYPTO_MANAGER2 | 
|  | 86 | def_tristate CRYPTO_MANAGER || (CRYPTO_MANAGER!=n && CRYPTO_ALGAPI=y) | 
|  | 87 | select CRYPTO_AEAD2 | 
|  | 88 | select CRYPTO_HASH2 | 
|  | 89 | select CRYPTO_BLKCIPHER2 | 
|  | 90 |  | 
| Rik Snel | c494e07 | 2006-11-29 18:59:44 +1100 | [diff] [blame] | 91 | config CRYPTO_GF128MUL | 
|  | 92 | tristate "GF(2^128) multiplication functions (EXPERIMENTAL)" | 
|  | 93 | depends on EXPERIMENTAL | 
|  | 94 | help | 
|  | 95 | Efficient table driven implementation of multiplications in the | 
|  | 96 | field GF(2^128).  This is needed by some cypher modes. This | 
|  | 97 | option will be selected automatically if you select such a | 
|  | 98 | cipher mode.  Only select this option by hand if you expect to load | 
|  | 99 | an external module that requires these functions. | 
|  | 100 |  | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 101 | config CRYPTO_NULL | 
|  | 102 | tristate "Null algorithms" | 
|  | 103 | select CRYPTO_ALGAPI | 
|  | 104 | select CRYPTO_BLKCIPHER | 
| Herbert Xu | d35d245 | 2008-11-08 08:09:56 +0800 | [diff] [blame] | 105 | select CRYPTO_HASH | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 106 | help | 
|  | 107 | These are 'Null' algorithms, used by IPsec, which do nothing. | 
|  | 108 |  | 
|  | 109 | config CRYPTO_CRYPTD | 
|  | 110 | tristate "Software async crypto daemon" | 
| Herbert Xu | db131ef | 2006-09-21 11:44:08 +1000 | [diff] [blame] | 111 | select CRYPTO_BLKCIPHER | 
| Loc Ho | b8a2825 | 2008-05-14 21:23:00 +0800 | [diff] [blame] | 112 | select CRYPTO_HASH | 
| Herbert Xu | 4351840 | 2006-10-16 21:28:58 +1000 | [diff] [blame] | 113 | select CRYPTO_MANAGER | 
| Herbert Xu | db131ef | 2006-09-21 11:44:08 +1000 | [diff] [blame] | 114 | help | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 115 | This is a generic software asynchronous crypto daemon that | 
|  | 116 | converts an arbitrary synchronous software crypto algorithm | 
|  | 117 | into an asynchronous algorithm that executes in a kernel thread. | 
|  | 118 |  | 
|  | 119 | config CRYPTO_AUTHENC | 
|  | 120 | tristate "Authenc support" | 
|  | 121 | select CRYPTO_AEAD | 
|  | 122 | select CRYPTO_BLKCIPHER | 
|  | 123 | select CRYPTO_MANAGER | 
|  | 124 | select CRYPTO_HASH | 
|  | 125 | help | 
|  | 126 | Authenc: Combined mode wrapper for IPsec. | 
|  | 127 | This is required for IPSec. | 
|  | 128 |  | 
|  | 129 | config CRYPTO_TEST | 
|  | 130 | tristate "Testing module" | 
|  | 131 | depends on m | 
| Herbert Xu | da7f033 | 2008-07-31 17:08:25 +0800 | [diff] [blame] | 132 | select CRYPTO_MANAGER | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 133 | help | 
|  | 134 | Quick & dirty crypto test module. | 
|  | 135 |  | 
|  | 136 | comment "Authenticated Encryption with Associated Data" | 
|  | 137 |  | 
|  | 138 | config CRYPTO_CCM | 
|  | 139 | tristate "CCM support" | 
|  | 140 | select CRYPTO_CTR | 
|  | 141 | select CRYPTO_AEAD | 
|  | 142 | help | 
|  | 143 | Support for Counter with CBC MAC. Required for IPsec. | 
|  | 144 |  | 
|  | 145 | config CRYPTO_GCM | 
|  | 146 | tristate "GCM/GMAC support" | 
|  | 147 | select CRYPTO_CTR | 
|  | 148 | select CRYPTO_AEAD | 
|  | 149 | select CRYPTO_GF128MUL | 
|  | 150 | help | 
|  | 151 | Support for Galois/Counter Mode (GCM) and Galois Message | 
|  | 152 | Authentication Code (GMAC). Required for IPSec. | 
|  | 153 |  | 
|  | 154 | config CRYPTO_SEQIV | 
|  | 155 | tristate "Sequence Number IV Generator" | 
|  | 156 | select CRYPTO_AEAD | 
|  | 157 | select CRYPTO_BLKCIPHER | 
| Herbert Xu | a0f000e | 2008-08-14 22:21:31 +1000 | [diff] [blame] | 158 | select CRYPTO_RNG | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 159 | help | 
|  | 160 | This IV generator generates an IV based on a sequence number by | 
|  | 161 | xoring it with a salt.  This algorithm is mainly useful for CTR | 
|  | 162 |  | 
|  | 163 | comment "Block modes" | 
| Herbert Xu | db131ef | 2006-09-21 11:44:08 +1000 | [diff] [blame] | 164 |  | 
|  | 165 | config CRYPTO_CBC | 
|  | 166 | tristate "CBC support" | 
|  | 167 | select CRYPTO_BLKCIPHER | 
| Herbert Xu | 4351840 | 2006-10-16 21:28:58 +1000 | [diff] [blame] | 168 | select CRYPTO_MANAGER | 
| Herbert Xu | db131ef | 2006-09-21 11:44:08 +1000 | [diff] [blame] | 169 | help | 
|  | 170 | CBC: Cipher Block Chaining mode | 
|  | 171 | This block cipher algorithm is required for IPSec. | 
|  | 172 |  | 
| Joy Latten | 23e353c | 2007-10-23 08:50:32 +0800 | [diff] [blame] | 173 | config CRYPTO_CTR | 
|  | 174 | tristate "CTR support" | 
|  | 175 | select CRYPTO_BLKCIPHER | 
| Herbert Xu | 0a27032 | 2007-11-30 21:38:37 +1100 | [diff] [blame] | 176 | select CRYPTO_SEQIV | 
| Joy Latten | 23e353c | 2007-10-23 08:50:32 +0800 | [diff] [blame] | 177 | select CRYPTO_MANAGER | 
| Joy Latten | 23e353c | 2007-10-23 08:50:32 +0800 | [diff] [blame] | 178 | help | 
|  | 179 | CTR: Counter mode | 
|  | 180 | This block cipher algorithm is required for IPSec. | 
|  | 181 |  | 
| Kevin Coffman | 76cb952 | 2008-03-24 21:26:16 +0800 | [diff] [blame] | 182 | config CRYPTO_CTS | 
|  | 183 | tristate "CTS support" | 
|  | 184 | select CRYPTO_BLKCIPHER | 
|  | 185 | help | 
|  | 186 | CTS: Cipher Text Stealing | 
|  | 187 | This is the Cipher Text Stealing mode as described by | 
|  | 188 | Section 8 of rfc2040 and referenced by rfc3962. | 
|  | 189 | (rfc3962 includes errata information in its Appendix A) | 
|  | 190 | This mode is required for Kerberos gss mechanism support | 
|  | 191 | for AES encryption. | 
|  | 192 |  | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 193 | config CRYPTO_ECB | 
|  | 194 | tristate "ECB support" | 
| Herbert Xu | 653ebd9 | 2007-11-27 19:48:27 +0800 | [diff] [blame] | 195 | select CRYPTO_BLKCIPHER | 
| Herbert Xu | 124b53d | 2007-04-16 20:49:20 +1000 | [diff] [blame] | 196 | select CRYPTO_MANAGER | 
|  | 197 | help | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 198 | ECB: Electronic CodeBook mode | 
|  | 199 | This is the simplest block cipher algorithm.  It simply encrypts | 
|  | 200 | the input block by block. | 
| Herbert Xu | 124b53d | 2007-04-16 20:49:20 +1000 | [diff] [blame] | 201 |  | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 202 | config CRYPTO_LRW | 
|  | 203 | tristate "LRW support (EXPERIMENTAL)" | 
|  | 204 | depends on EXPERIMENTAL | 
| David Howells | 9083163 | 2006-12-16 12:13:14 +1100 | [diff] [blame] | 205 | select CRYPTO_BLKCIPHER | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 206 | select CRYPTO_MANAGER | 
|  | 207 | select CRYPTO_GF128MUL | 
| David Howells | 9083163 | 2006-12-16 12:13:14 +1100 | [diff] [blame] | 208 | help | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 209 | LRW: Liskov Rivest Wagner, a tweakable, non malleable, non movable | 
|  | 210 | narrow block cipher mode for dm-crypt.  Use it with cipher | 
|  | 211 | specification string aes-lrw-benbi, the key must be 256, 320 or 384. | 
|  | 212 | The first 128, 192 or 256 bits in the key are used for AES and the | 
|  | 213 | rest is used to tie each cipher block to its logical position. | 
| David Howells | 9083163 | 2006-12-16 12:13:14 +1100 | [diff] [blame] | 214 |  | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 215 | config CRYPTO_PCBC | 
|  | 216 | tristate "PCBC support" | 
|  | 217 | select CRYPTO_BLKCIPHER | 
|  | 218 | select CRYPTO_MANAGER | 
|  | 219 | help | 
|  | 220 | PCBC: Propagating Cipher Block Chaining mode | 
|  | 221 | This block cipher algorithm is required for RxRPC. | 
|  | 222 |  | 
|  | 223 | config CRYPTO_XTS | 
|  | 224 | tristate "XTS support (EXPERIMENTAL)" | 
|  | 225 | depends on EXPERIMENTAL | 
|  | 226 | select CRYPTO_BLKCIPHER | 
|  | 227 | select CRYPTO_MANAGER | 
|  | 228 | select CRYPTO_GF128MUL | 
|  | 229 | help | 
|  | 230 | XTS: IEEE1619/D16 narrow block cipher use with aes-xts-plain, | 
|  | 231 | key size 256, 384 or 512 bits. This implementation currently | 
|  | 232 | can't handle a sectorsize which is not a multiple of 16 bytes. | 
|  | 233 |  | 
|  | 234 | comment "Hash modes" | 
|  | 235 |  | 
|  | 236 | config CRYPTO_HMAC | 
|  | 237 | tristate "HMAC support" | 
|  | 238 | select CRYPTO_HASH | 
|  | 239 | select CRYPTO_MANAGER | 
|  | 240 | help | 
|  | 241 | HMAC: Keyed-Hashing for Message Authentication (RFC2104). | 
|  | 242 | This is required for IPSec. | 
|  | 243 |  | 
|  | 244 | config CRYPTO_XCBC | 
|  | 245 | tristate "XCBC support" | 
|  | 246 | depends on EXPERIMENTAL | 
|  | 247 | select CRYPTO_HASH | 
|  | 248 | select CRYPTO_MANAGER | 
|  | 249 | help | 
|  | 250 | XCBC: Keyed-Hashing with encryption algorithm | 
|  | 251 | http://www.ietf.org/rfc/rfc3566.txt | 
|  | 252 | http://csrc.nist.gov/encryption/modes/proposedmodes/ | 
|  | 253 | xcbc-mac/xcbc-mac-spec.pdf | 
|  | 254 |  | 
|  | 255 | comment "Digest" | 
|  | 256 |  | 
|  | 257 | config CRYPTO_CRC32C | 
|  | 258 | tristate "CRC32c CRC algorithm" | 
| Herbert Xu | 5773a3e | 2008-07-08 20:54:28 +0800 | [diff] [blame] | 259 | select CRYPTO_HASH | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 260 | help | 
|  | 261 | Castagnoli, et al Cyclic Redundancy-Check Algorithm.  Used | 
|  | 262 | by iSCSI for header and data digests and by others. | 
| Herbert Xu | 69c35ef | 2008-11-07 15:11:47 +0800 | [diff] [blame] | 263 | See Castagnoli93.  Module will be crc32c. | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 264 |  | 
| Austin Zhang | 8cb51ba | 2008-08-07 09:57:03 +0800 | [diff] [blame] | 265 | config CRYPTO_CRC32C_INTEL | 
|  | 266 | tristate "CRC32c INTEL hardware acceleration" | 
|  | 267 | depends on X86 | 
|  | 268 | select CRYPTO_HASH | 
|  | 269 | help | 
|  | 270 | In Intel processor with SSE4.2 supported, the processor will | 
|  | 271 | support CRC32C implementation using hardware accelerated CRC32 | 
|  | 272 | instruction. This option will create 'crc32c-intel' module, | 
|  | 273 | which will enable any routine to use the CRC32 instruction to | 
|  | 274 | gain performance compared with software implementation. | 
|  | 275 | Module will be crc32c-intel. | 
|  | 276 |  | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 277 | config CRYPTO_MD4 | 
|  | 278 | tristate "MD4 digest algorithm" | 
| Adrian-Ken Rueegsegger | 808a176 | 2008-12-03 19:55:27 +0800 | [diff] [blame] | 279 | select CRYPTO_HASH | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 280 | help | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 281 | MD4 message digest algorithm (RFC1320). | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 282 |  | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 283 | config CRYPTO_MD5 | 
|  | 284 | tristate "MD5 digest algorithm" | 
| Adrian-Ken Rueegsegger | 14b75ba | 2008-12-03 19:57:12 +0800 | [diff] [blame] | 285 | select CRYPTO_HASH | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 286 | help | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 287 | MD5 message digest algorithm (RFC1321). | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 288 |  | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 289 | config CRYPTO_MICHAEL_MIC | 
|  | 290 | tristate "Michael MIC keyed digest algorithm" | 
| Adrian-Ken Rueegsegger | 19e2bf1 | 2008-12-07 19:35:38 +0800 | [diff] [blame] | 291 | select CRYPTO_HASH | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 292 | help | 
|  | 293 | Michael MIC is used for message integrity protection in TKIP | 
|  | 294 | (IEEE 802.11i). This algorithm is required for TKIP, but it | 
|  | 295 | should not be used for other purposes because of the weakness | 
|  | 296 | of the algorithm. | 
|  | 297 |  | 
| Adrian-Ken Rueegsegger | 82798f9 | 2008-05-07 22:17:37 +0800 | [diff] [blame] | 298 | config CRYPTO_RMD128 | 
| Adrian Bunk | b6d4434 | 2008-07-16 19:28:00 +0800 | [diff] [blame] | 299 | tristate "RIPEMD-128 digest algorithm" | 
| Herbert Xu | 7c4468b | 2008-11-08 09:10:40 +0800 | [diff] [blame] | 300 | select CRYPTO_HASH | 
| Adrian Bunk | b6d4434 | 2008-07-16 19:28:00 +0800 | [diff] [blame] | 301 | help | 
|  | 302 | RIPEMD-128 (ISO/IEC 10118-3:2004). | 
| Adrian-Ken Rueegsegger | 82798f9 | 2008-05-07 22:17:37 +0800 | [diff] [blame] | 303 |  | 
| Adrian Bunk | b6d4434 | 2008-07-16 19:28:00 +0800 | [diff] [blame] | 304 | RIPEMD-128 is a 128-bit cryptographic hash function. It should only | 
|  | 305 | to be used as a secure replacement for RIPEMD. For other use cases | 
|  | 306 | RIPEMD-160 should be used. | 
| Adrian-Ken Rueegsegger | 82798f9 | 2008-05-07 22:17:37 +0800 | [diff] [blame] | 307 |  | 
| Adrian Bunk | b6d4434 | 2008-07-16 19:28:00 +0800 | [diff] [blame] | 308 | Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel. | 
|  | 309 | See <http://home.esat.kuleuven.be/~bosselae/ripemd160.html> | 
| Adrian-Ken Rueegsegger | 82798f9 | 2008-05-07 22:17:37 +0800 | [diff] [blame] | 310 |  | 
|  | 311 | config CRYPTO_RMD160 | 
| Adrian Bunk | b6d4434 | 2008-07-16 19:28:00 +0800 | [diff] [blame] | 312 | tristate "RIPEMD-160 digest algorithm" | 
| Herbert Xu | e5835fb | 2008-11-08 09:18:51 +0800 | [diff] [blame] | 313 | select CRYPTO_HASH | 
| Adrian Bunk | b6d4434 | 2008-07-16 19:28:00 +0800 | [diff] [blame] | 314 | help | 
|  | 315 | RIPEMD-160 (ISO/IEC 10118-3:2004). | 
| Adrian-Ken Rueegsegger | 82798f9 | 2008-05-07 22:17:37 +0800 | [diff] [blame] | 316 |  | 
| Adrian Bunk | b6d4434 | 2008-07-16 19:28:00 +0800 | [diff] [blame] | 317 | RIPEMD-160 is a 160-bit cryptographic hash function. It is intended | 
|  | 318 | to be used as a secure replacement for the 128-bit hash functions | 
|  | 319 | MD4, MD5 and it's predecessor RIPEMD | 
|  | 320 | (not to be confused with RIPEMD-128). | 
| Adrian-Ken Rueegsegger | 82798f9 | 2008-05-07 22:17:37 +0800 | [diff] [blame] | 321 |  | 
| Adrian Bunk | b6d4434 | 2008-07-16 19:28:00 +0800 | [diff] [blame] | 322 | It's speed is comparable to SHA1 and there are no known attacks | 
|  | 323 | against RIPEMD-160. | 
| Adrian-Ken Rueegsegger | 534fe2c | 2008-05-09 21:30:27 +0800 | [diff] [blame] | 324 |  | 
| Adrian Bunk | b6d4434 | 2008-07-16 19:28:00 +0800 | [diff] [blame] | 325 | Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel. | 
|  | 326 | See <http://home.esat.kuleuven.be/~bosselae/ripemd160.html> | 
| Adrian-Ken Rueegsegger | 534fe2c | 2008-05-09 21:30:27 +0800 | [diff] [blame] | 327 |  | 
|  | 328 | config CRYPTO_RMD256 | 
| Adrian Bunk | b6d4434 | 2008-07-16 19:28:00 +0800 | [diff] [blame] | 329 | tristate "RIPEMD-256 digest algorithm" | 
| Herbert Xu | d8a5e2e | 2008-11-08 09:58:10 +0800 | [diff] [blame] | 330 | select CRYPTO_HASH | 
| Adrian Bunk | b6d4434 | 2008-07-16 19:28:00 +0800 | [diff] [blame] | 331 | help | 
|  | 332 | RIPEMD-256 is an optional extension of RIPEMD-128 with a | 
|  | 333 | 256 bit hash. It is intended for applications that require | 
|  | 334 | longer hash-results, without needing a larger security level | 
|  | 335 | (than RIPEMD-128). | 
| Adrian-Ken Rueegsegger | 534fe2c | 2008-05-09 21:30:27 +0800 | [diff] [blame] | 336 |  | 
| Adrian Bunk | b6d4434 | 2008-07-16 19:28:00 +0800 | [diff] [blame] | 337 | Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel. | 
|  | 338 | See <http://home.esat.kuleuven.be/~bosselae/ripemd160.html> | 
| Adrian-Ken Rueegsegger | 534fe2c | 2008-05-09 21:30:27 +0800 | [diff] [blame] | 339 |  | 
|  | 340 | config CRYPTO_RMD320 | 
| Adrian Bunk | b6d4434 | 2008-07-16 19:28:00 +0800 | [diff] [blame] | 341 | tristate "RIPEMD-320 digest algorithm" | 
| Herbert Xu | 3b8efb4 | 2008-11-08 10:11:09 +0800 | [diff] [blame] | 342 | select CRYPTO_HASH | 
| Adrian Bunk | b6d4434 | 2008-07-16 19:28:00 +0800 | [diff] [blame] | 343 | help | 
|  | 344 | RIPEMD-320 is an optional extension of RIPEMD-160 with a | 
|  | 345 | 320 bit hash. It is intended for applications that require | 
|  | 346 | longer hash-results, without needing a larger security level | 
|  | 347 | (than RIPEMD-160). | 
| Adrian-Ken Rueegsegger | 534fe2c | 2008-05-09 21:30:27 +0800 | [diff] [blame] | 348 |  | 
| Adrian Bunk | b6d4434 | 2008-07-16 19:28:00 +0800 | [diff] [blame] | 349 | Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel. | 
|  | 350 | See <http://home.esat.kuleuven.be/~bosselae/ripemd160.html> | 
| Adrian-Ken Rueegsegger | 82798f9 | 2008-05-07 22:17:37 +0800 | [diff] [blame] | 351 |  | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 352 | config CRYPTO_SHA1 | 
|  | 353 | tristate "SHA1 digest algorithm" | 
| Adrian-Ken Rueegsegger | 54ccb36 | 2008-12-02 21:08:20 +0800 | [diff] [blame] | 354 | select CRYPTO_HASH | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 355 | help | 
|  | 356 | SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2). | 
|  | 357 |  | 
|  | 358 | config CRYPTO_SHA256 | 
|  | 359 | tristate "SHA224 and SHA256 digest algorithm" | 
| Adrian-Ken Rueegsegger | 50e109b5 | 2008-12-03 19:57:49 +0800 | [diff] [blame] | 360 | select CRYPTO_HASH | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 361 | help | 
|  | 362 | SHA256 secure hash standard (DFIPS 180-2). | 
|  | 363 |  | 
|  | 364 | This version of SHA implements a 256 bit hash with 128 bits of | 
|  | 365 | security against collision attacks. | 
|  | 366 |  | 
| Adrian Bunk | b6d4434 | 2008-07-16 19:28:00 +0800 | [diff] [blame] | 367 | This code also includes SHA-224, a 224 bit hash with 112 bits | 
|  | 368 | of security against collision attacks. | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 369 |  | 
|  | 370 | config CRYPTO_SHA512 | 
|  | 371 | tristate "SHA384 and SHA512 digest algorithms" | 
| Adrian-Ken Rueegsegger | bd9d20d | 2008-12-17 16:49:02 +1100 | [diff] [blame^] | 372 | select CRYPTO_HASH | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 373 | help | 
|  | 374 | SHA512 secure hash standard (DFIPS 180-2). | 
|  | 375 |  | 
|  | 376 | This version of SHA implements a 512 bit hash with 256 bits of | 
|  | 377 | security against collision attacks. | 
|  | 378 |  | 
|  | 379 | This code also includes SHA-384, a 384 bit hash with 192 bits | 
|  | 380 | of security against collision attacks. | 
|  | 381 |  | 
|  | 382 | config CRYPTO_TGR192 | 
|  | 383 | tristate "Tiger digest algorithms" | 
| Adrian-Ken Rueegsegger | f63fbd3 | 2008-12-03 19:58:32 +0800 | [diff] [blame] | 384 | select CRYPTO_HASH | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 385 | help | 
|  | 386 | Tiger hash algorithm 192, 160 and 128-bit hashes | 
|  | 387 |  | 
|  | 388 | Tiger is a hash function optimized for 64-bit processors while | 
|  | 389 | still having decent performance on 32-bit processors. | 
|  | 390 | Tiger was developed by Ross Anderson and Eli Biham. | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 391 |  | 
|  | 392 | See also: | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 393 | <http://www.cs.technion.ac.il/~biham/Reports/Tiger/>. | 
|  | 394 |  | 
|  | 395 | config CRYPTO_WP512 | 
|  | 396 | tristate "Whirlpool digest algorithms" | 
| Adrian-Ken Rueegsegger | 4946510 | 2008-12-07 19:34:37 +0800 | [diff] [blame] | 397 | select CRYPTO_HASH | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 398 | help | 
|  | 399 | Whirlpool hash algorithm 512, 384 and 256-bit hashes | 
|  | 400 |  | 
|  | 401 | Whirlpool-512 is part of the NESSIE cryptographic primitives. | 
|  | 402 | Whirlpool will be part of the ISO/IEC 10118-3:2003(E) standard | 
|  | 403 |  | 
|  | 404 | See also: | 
|  | 405 | <http://planeta.terra.com.br/informatica/paulobarreto/WhirlpoolPage.html> | 
|  | 406 |  | 
|  | 407 | comment "Ciphers" | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 408 |  | 
|  | 409 | config CRYPTO_AES | 
|  | 410 | tristate "AES cipher algorithms" | 
| Herbert Xu | cce9e06 | 2006-08-21 21:08:13 +1000 | [diff] [blame] | 411 | select CRYPTO_ALGAPI | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 412 | help | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 413 | AES cipher algorithms (FIPS-197). AES uses the Rijndael | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 414 | algorithm. | 
|  | 415 |  | 
|  | 416 | Rijndael appears to be consistently a very good performer in | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 417 | both hardware and software across a wide range of computing | 
|  | 418 | environments regardless of its use in feedback or non-feedback | 
|  | 419 | modes. Its key setup time is excellent, and its key agility is | 
|  | 420 | good. Rijndael's very low memory requirements make it very well | 
|  | 421 | suited for restricted-space environments, in which it also | 
|  | 422 | demonstrates excellent performance. Rijndael's operations are | 
|  | 423 | among the easiest to defend against power and timing attacks. | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 424 |  | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 425 | The AES specifies three key sizes: 128, 192 and 256 bits | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 426 |  | 
|  | 427 | See <http://csrc.nist.gov/CryptoToolkit/aes/> for more information. | 
|  | 428 |  | 
|  | 429 | config CRYPTO_AES_586 | 
|  | 430 | tristate "AES cipher algorithms (i586)" | 
| Herbert Xu | cce9e06 | 2006-08-21 21:08:13 +1000 | [diff] [blame] | 431 | depends on (X86 || UML_X86) && !64BIT | 
|  | 432 | select CRYPTO_ALGAPI | 
| Sebastian Siewior | 5157dea | 2007-11-10 19:07:16 +0800 | [diff] [blame] | 433 | select CRYPTO_AES | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 434 | help | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 435 | AES cipher algorithms (FIPS-197). AES uses the Rijndael | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 436 | algorithm. | 
|  | 437 |  | 
|  | 438 | Rijndael appears to be consistently a very good performer in | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 439 | both hardware and software across a wide range of computing | 
|  | 440 | environments regardless of its use in feedback or non-feedback | 
|  | 441 | modes. Its key setup time is excellent, and its key agility is | 
|  | 442 | good. Rijndael's very low memory requirements make it very well | 
|  | 443 | suited for restricted-space environments, in which it also | 
|  | 444 | demonstrates excellent performance. Rijndael's operations are | 
|  | 445 | among the easiest to defend against power and timing attacks. | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 446 |  | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 447 | The AES specifies three key sizes: 128, 192 and 256 bits | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 448 |  | 
|  | 449 | See <http://csrc.nist.gov/encryption/aes/> for more information. | 
|  | 450 |  | 
| Andreas Steinmetz | a2a892a | 2005-07-06 13:55:00 -0700 | [diff] [blame] | 451 | config CRYPTO_AES_X86_64 | 
|  | 452 | tristate "AES cipher algorithms (x86_64)" | 
| Herbert Xu | cce9e06 | 2006-08-21 21:08:13 +1000 | [diff] [blame] | 453 | depends on (X86 || UML_X86) && 64BIT | 
|  | 454 | select CRYPTO_ALGAPI | 
| Sebastian Siewior | 81190b3 | 2007-11-08 21:25:04 +0800 | [diff] [blame] | 455 | select CRYPTO_AES | 
| Andreas Steinmetz | a2a892a | 2005-07-06 13:55:00 -0700 | [diff] [blame] | 456 | help | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 457 | AES cipher algorithms (FIPS-197). AES uses the Rijndael | 
| Andreas Steinmetz | a2a892a | 2005-07-06 13:55:00 -0700 | [diff] [blame] | 458 | algorithm. | 
|  | 459 |  | 
|  | 460 | Rijndael appears to be consistently a very good performer in | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 461 | both hardware and software across a wide range of computing | 
|  | 462 | environments regardless of its use in feedback or non-feedback | 
|  | 463 | modes. Its key setup time is excellent, and its key agility is | 
|  | 464 | good. Rijndael's very low memory requirements make it very well | 
|  | 465 | suited for restricted-space environments, in which it also | 
|  | 466 | demonstrates excellent performance. Rijndael's operations are | 
|  | 467 | among the easiest to defend against power and timing attacks. | 
| Andreas Steinmetz | a2a892a | 2005-07-06 13:55:00 -0700 | [diff] [blame] | 468 |  | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 469 | The AES specifies three key sizes: 128, 192 and 256 bits | 
| Andreas Steinmetz | a2a892a | 2005-07-06 13:55:00 -0700 | [diff] [blame] | 470 |  | 
|  | 471 | See <http://csrc.nist.gov/encryption/aes/> for more information. | 
|  | 472 |  | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 473 | config CRYPTO_ANUBIS | 
|  | 474 | tristate "Anubis cipher algorithm" | 
|  | 475 | select CRYPTO_ALGAPI | 
|  | 476 | help | 
|  | 477 | Anubis cipher algorithm. | 
|  | 478 |  | 
|  | 479 | Anubis is a variable key length cipher which can use keys from | 
|  | 480 | 128 bits to 320 bits in length.  It was evaluated as a entrant | 
|  | 481 | in the NESSIE competition. | 
|  | 482 |  | 
|  | 483 | See also: | 
|  | 484 | <https://www.cosic.esat.kuleuven.ac.be/nessie/reports/> | 
|  | 485 | <http://planeta.terra.com.br/informatica/paulobarreto/AnubisPage.html> | 
|  | 486 |  | 
|  | 487 | config CRYPTO_ARC4 | 
|  | 488 | tristate "ARC4 cipher algorithm" | 
|  | 489 | select CRYPTO_ALGAPI | 
|  | 490 | help | 
|  | 491 | ARC4 cipher algorithm. | 
|  | 492 |  | 
|  | 493 | ARC4 is a stream cipher using keys ranging from 8 bits to 2048 | 
|  | 494 | bits in length.  This algorithm is required for driver-based | 
|  | 495 | WEP, but it should not be for other purposes because of the | 
|  | 496 | weakness of the algorithm. | 
|  | 497 |  | 
|  | 498 | config CRYPTO_BLOWFISH | 
|  | 499 | tristate "Blowfish cipher algorithm" | 
|  | 500 | select CRYPTO_ALGAPI | 
|  | 501 | help | 
|  | 502 | Blowfish cipher algorithm, by Bruce Schneier. | 
|  | 503 |  | 
|  | 504 | This is a variable key length cipher which can use keys from 32 | 
|  | 505 | bits to 448 bits in length.  It's fast, simple and specifically | 
|  | 506 | designed for use on "large microprocessors". | 
|  | 507 |  | 
|  | 508 | See also: | 
|  | 509 | <http://www.schneier.com/blowfish.html> | 
|  | 510 |  | 
|  | 511 | config CRYPTO_CAMELLIA | 
|  | 512 | tristate "Camellia cipher algorithms" | 
|  | 513 | depends on CRYPTO | 
|  | 514 | select CRYPTO_ALGAPI | 
|  | 515 | help | 
|  | 516 | Camellia cipher algorithms module. | 
|  | 517 |  | 
|  | 518 | Camellia is a symmetric key block cipher developed jointly | 
|  | 519 | at NTT and Mitsubishi Electric Corporation. | 
|  | 520 |  | 
|  | 521 | The Camellia specifies three key sizes: 128, 192 and 256 bits. | 
|  | 522 |  | 
|  | 523 | See also: | 
|  | 524 | <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html> | 
|  | 525 |  | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 526 | config CRYPTO_CAST5 | 
|  | 527 | tristate "CAST5 (CAST-128) cipher algorithm" | 
| Herbert Xu | cce9e06 | 2006-08-21 21:08:13 +1000 | [diff] [blame] | 528 | select CRYPTO_ALGAPI | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 529 | help | 
|  | 530 | The CAST5 encryption algorithm (synonymous with CAST-128) is | 
|  | 531 | described in RFC2144. | 
|  | 532 |  | 
|  | 533 | config CRYPTO_CAST6 | 
|  | 534 | tristate "CAST6 (CAST-256) cipher algorithm" | 
| Herbert Xu | cce9e06 | 2006-08-21 21:08:13 +1000 | [diff] [blame] | 535 | select CRYPTO_ALGAPI | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 536 | help | 
|  | 537 | The CAST6 encryption algorithm (synonymous with CAST-256) is | 
|  | 538 | described in RFC2612. | 
|  | 539 |  | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 540 | config CRYPTO_DES | 
|  | 541 | tristate "DES and Triple DES EDE cipher algorithms" | 
| Herbert Xu | cce9e06 | 2006-08-21 21:08:13 +1000 | [diff] [blame] | 542 | select CRYPTO_ALGAPI | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 543 | help | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 544 | DES cipher algorithm (FIPS 46-2), and Triple DES EDE (FIPS 46-3). | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 545 |  | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 546 | config CRYPTO_FCRYPT | 
|  | 547 | tristate "FCrypt cipher algorithm" | 
| Herbert Xu | cce9e06 | 2006-08-21 21:08:13 +1000 | [diff] [blame] | 548 | select CRYPTO_ALGAPI | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 549 | select CRYPTO_BLKCIPHER | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 550 | help | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 551 | FCrypt algorithm used by RxRPC. | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 552 |  | 
|  | 553 | config CRYPTO_KHAZAD | 
|  | 554 | tristate "Khazad cipher algorithm" | 
| Herbert Xu | cce9e06 | 2006-08-21 21:08:13 +1000 | [diff] [blame] | 555 | select CRYPTO_ALGAPI | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 556 | help | 
|  | 557 | Khazad cipher algorithm. | 
|  | 558 |  | 
|  | 559 | Khazad was a finalist in the initial NESSIE competition.  It is | 
|  | 560 | an algorithm optimized for 64-bit processors with good performance | 
|  | 561 | on 32-bit processors.  Khazad uses an 128 bit key size. | 
|  | 562 |  | 
|  | 563 | See also: | 
|  | 564 | <http://planeta.terra.com.br/informatica/paulobarreto/KhazadPage.html> | 
|  | 565 |  | 
| Tan Swee Heng | 2407d60 | 2007-11-23 19:45:00 +0800 | [diff] [blame] | 566 | config CRYPTO_SALSA20 | 
|  | 567 | tristate "Salsa20 stream cipher algorithm (EXPERIMENTAL)" | 
|  | 568 | depends on EXPERIMENTAL | 
|  | 569 | select CRYPTO_BLKCIPHER | 
|  | 570 | help | 
|  | 571 | Salsa20 stream cipher algorithm. | 
|  | 572 |  | 
|  | 573 | Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT | 
|  | 574 | Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/> | 
|  | 575 |  | 
|  | 576 | The Salsa20 stream cipher algorithm is designed by Daniel J. | 
|  | 577 | Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html> | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 578 |  | 
| Tan Swee Heng | 974e4b7 | 2007-12-10 15:52:56 +0800 | [diff] [blame] | 579 | config CRYPTO_SALSA20_586 | 
|  | 580 | tristate "Salsa20 stream cipher algorithm (i586) (EXPERIMENTAL)" | 
|  | 581 | depends on (X86 || UML_X86) && !64BIT | 
|  | 582 | depends on EXPERIMENTAL | 
|  | 583 | select CRYPTO_BLKCIPHER | 
| Tan Swee Heng | 974e4b7 | 2007-12-10 15:52:56 +0800 | [diff] [blame] | 584 | help | 
|  | 585 | Salsa20 stream cipher algorithm. | 
|  | 586 |  | 
|  | 587 | Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT | 
|  | 588 | Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/> | 
|  | 589 |  | 
|  | 590 | The Salsa20 stream cipher algorithm is designed by Daniel J. | 
|  | 591 | Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html> | 
|  | 592 |  | 
| Tan Swee Heng | 9a7dafb | 2007-12-18 00:04:40 +0800 | [diff] [blame] | 593 | config CRYPTO_SALSA20_X86_64 | 
|  | 594 | tristate "Salsa20 stream cipher algorithm (x86_64) (EXPERIMENTAL)" | 
|  | 595 | depends on (X86 || UML_X86) && 64BIT | 
|  | 596 | depends on EXPERIMENTAL | 
|  | 597 | select CRYPTO_BLKCIPHER | 
| Tan Swee Heng | 9a7dafb | 2007-12-18 00:04:40 +0800 | [diff] [blame] | 598 | help | 
|  | 599 | Salsa20 stream cipher algorithm. | 
|  | 600 |  | 
|  | 601 | Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT | 
|  | 602 | Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/> | 
|  | 603 |  | 
|  | 604 | The Salsa20 stream cipher algorithm is designed by Daniel J. | 
|  | 605 | Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html> | 
|  | 606 |  | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 607 | config CRYPTO_SEED | 
|  | 608 | tristate "SEED cipher algorithm" | 
|  | 609 | select CRYPTO_ALGAPI | 
|  | 610 | help | 
|  | 611 | SEED cipher algorithm (RFC4269). | 
|  | 612 |  | 
|  | 613 | SEED is a 128-bit symmetric key block cipher that has been | 
|  | 614 | developed by KISA (Korea Information Security Agency) as a | 
|  | 615 | national standard encryption algorithm of the Republic of Korea. | 
|  | 616 | It is a 16 round block cipher with the key size of 128 bit. | 
|  | 617 |  | 
|  | 618 | See also: | 
|  | 619 | <http://www.kisa.or.kr/kisa/seed/jsp/seed_eng.jsp> | 
|  | 620 |  | 
|  | 621 | config CRYPTO_SERPENT | 
|  | 622 | tristate "Serpent cipher algorithm" | 
|  | 623 | select CRYPTO_ALGAPI | 
|  | 624 | help | 
|  | 625 | Serpent cipher algorithm, by Anderson, Biham & Knudsen. | 
|  | 626 |  | 
|  | 627 | Keys are allowed to be from 0 to 256 bits in length, in steps | 
|  | 628 | of 8 bits.  Also includes the 'Tnepres' algorithm, a reversed | 
|  | 629 | variant of Serpent for compatibility with old kerneli.org code. | 
|  | 630 |  | 
|  | 631 | See also: | 
|  | 632 | <http://www.cl.cam.ac.uk/~rja14/serpent.html> | 
|  | 633 |  | 
|  | 634 | config CRYPTO_TEA | 
|  | 635 | tristate "TEA, XTEA and XETA cipher algorithms" | 
|  | 636 | select CRYPTO_ALGAPI | 
|  | 637 | help | 
|  | 638 | TEA cipher algorithm. | 
|  | 639 |  | 
|  | 640 | Tiny Encryption Algorithm is a simple cipher that uses | 
|  | 641 | many rounds for security.  It is very fast and uses | 
|  | 642 | little memory. | 
|  | 643 |  | 
|  | 644 | Xtendend Tiny Encryption Algorithm is a modification to | 
|  | 645 | the TEA algorithm to address a potential key weakness | 
|  | 646 | in the TEA algorithm. | 
|  | 647 |  | 
|  | 648 | Xtendend Encryption Tiny Algorithm is a mis-implementation | 
|  | 649 | of the XTEA algorithm for compatibility purposes. | 
|  | 650 |  | 
|  | 651 | config CRYPTO_TWOFISH | 
|  | 652 | tristate "Twofish cipher algorithm" | 
|  | 653 | select CRYPTO_ALGAPI | 
|  | 654 | select CRYPTO_TWOFISH_COMMON | 
|  | 655 | help | 
|  | 656 | Twofish cipher algorithm. | 
|  | 657 |  | 
|  | 658 | Twofish was submitted as an AES (Advanced Encryption Standard) | 
|  | 659 | candidate cipher by researchers at CounterPane Systems.  It is a | 
|  | 660 | 16 round block cipher supporting key sizes of 128, 192, and 256 | 
|  | 661 | bits. | 
|  | 662 |  | 
|  | 663 | See also: | 
|  | 664 | <http://www.schneier.com/twofish.html> | 
|  | 665 |  | 
|  | 666 | config CRYPTO_TWOFISH_COMMON | 
|  | 667 | tristate | 
|  | 668 | help | 
|  | 669 | Common parts of the Twofish cipher algorithm shared by the | 
|  | 670 | generic c and the assembler implementations. | 
|  | 671 |  | 
|  | 672 | config CRYPTO_TWOFISH_586 | 
|  | 673 | tristate "Twofish cipher algorithms (i586)" | 
|  | 674 | depends on (X86 || UML_X86) && !64BIT | 
|  | 675 | select CRYPTO_ALGAPI | 
|  | 676 | select CRYPTO_TWOFISH_COMMON | 
|  | 677 | help | 
|  | 678 | Twofish cipher algorithm. | 
|  | 679 |  | 
|  | 680 | Twofish was submitted as an AES (Advanced Encryption Standard) | 
|  | 681 | candidate cipher by researchers at CounterPane Systems.  It is a | 
|  | 682 | 16 round block cipher supporting key sizes of 128, 192, and 256 | 
|  | 683 | bits. | 
|  | 684 |  | 
|  | 685 | See also: | 
|  | 686 | <http://www.schneier.com/twofish.html> | 
|  | 687 |  | 
|  | 688 | config CRYPTO_TWOFISH_X86_64 | 
|  | 689 | tristate "Twofish cipher algorithm (x86_64)" | 
|  | 690 | depends on (X86 || UML_X86) && 64BIT | 
|  | 691 | select CRYPTO_ALGAPI | 
|  | 692 | select CRYPTO_TWOFISH_COMMON | 
|  | 693 | help | 
|  | 694 | Twofish cipher algorithm (x86_64). | 
|  | 695 |  | 
|  | 696 | Twofish was submitted as an AES (Advanced Encryption Standard) | 
|  | 697 | candidate cipher by researchers at CounterPane Systems.  It is a | 
|  | 698 | 16 round block cipher supporting key sizes of 128, 192, and 256 | 
|  | 699 | bits. | 
|  | 700 |  | 
|  | 701 | See also: | 
|  | 702 | <http://www.schneier.com/twofish.html> | 
|  | 703 |  | 
|  | 704 | comment "Compression" | 
|  | 705 |  | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 706 | config CRYPTO_DEFLATE | 
|  | 707 | tristate "Deflate compression algorithm" | 
| Herbert Xu | cce9e06 | 2006-08-21 21:08:13 +1000 | [diff] [blame] | 708 | select CRYPTO_ALGAPI | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 709 | select ZLIB_INFLATE | 
|  | 710 | select ZLIB_DEFLATE | 
|  | 711 | help | 
|  | 712 | This is the Deflate algorithm (RFC1951), specified for use in | 
|  | 713 | IPSec with the IPCOMP protocol (RFC3173, RFC2394). | 
| Sebastian Siewior | 584fffc | 2008-04-05 21:04:48 +0800 | [diff] [blame] | 714 |  | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 715 | You will most probably want this if using IPSec. | 
|  | 716 |  | 
| Zoltan Sogor | 0b77abb | 2007-12-07 16:53:23 +0800 | [diff] [blame] | 717 | config CRYPTO_LZO | 
|  | 718 | tristate "LZO compression algorithm" | 
|  | 719 | select CRYPTO_ALGAPI | 
|  | 720 | select LZO_COMPRESS | 
|  | 721 | select LZO_DECOMPRESS | 
|  | 722 | help | 
|  | 723 | This is the LZO algorithm. | 
|  | 724 |  | 
| Neil Horman | 17f0f4a | 2008-08-14 22:15:52 +1000 | [diff] [blame] | 725 | comment "Random Number Generation" | 
|  | 726 |  | 
|  | 727 | config CRYPTO_ANSI_CPRNG | 
|  | 728 | tristate "Pseudo Random Number Generation for Cryptographic modules" | 
|  | 729 | select CRYPTO_AES | 
|  | 730 | select CRYPTO_RNG | 
|  | 731 | select CRYPTO_FIPS | 
|  | 732 | help | 
|  | 733 | This option enables the generic pseudo random number generator | 
|  | 734 | for cryptographic modules.  Uses the Algorithm specified in | 
|  | 735 | ANSI X9.31 A.2.4 | 
|  | 736 |  | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 737 | source "drivers/crypto/Kconfig" | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 738 |  | 
| Herbert Xu | cce9e06 | 2006-08-21 21:08:13 +1000 | [diff] [blame] | 739 | endif	# if CRYPTO |