2 # Generic algorithms support
8 # async_tx api: hardware offloaded memory transfer/transform support
10 source "crypto/async_tx/Kconfig"
13 # Cryptographic API Configuration
16 tristate "Cryptographic API"
18 This option provides the core Cryptographic API.
22 comment "Crypto core or helper"
25 bool "FIPS 200 compliance"
26 depends on CRYPTO_ANSI_CPRNG && !CRYPTO_MANAGER_DISABLE_TESTS
28 This options enables the fips boot option which is
29 required if you want to system to operate in a FIPS 200
30 certification. You should say no unless you know what
37 This option provides the API for cryptographic algorithms.
51 config CRYPTO_BLKCIPHER
53 select CRYPTO_BLKCIPHER2
56 config CRYPTO_BLKCIPHER2
60 select CRYPTO_WORKQUEUE
90 tristate "Cryptographic algorithm manager"
91 select CRYPTO_MANAGER2
93 Create default cryptographic template instantiations such as
96 config CRYPTO_MANAGER2
97 def_tristate CRYPTO_MANAGER || (CRYPTO_MANAGER!=n && CRYPTO_ALGAPI=y)
100 select CRYPTO_BLKCIPHER2
104 tristate "Userspace cryptographic algorithm configuration"
106 select CRYPTO_MANAGER
108 Userspace configuration for cryptographic instantiations such as
111 config CRYPTO_MANAGER_DISABLE_TESTS
112 bool "Disable run-time self tests"
114 depends on CRYPTO_MANAGER2
116 Disable run-time self tests that normally take place at
117 algorithm registration.
119 config CRYPTO_GF128MUL
120 tristate "GF(2^128) multiplication functions"
122 Efficient table driven implementation of multiplications in the
123 field GF(2^128). This is needed by some cypher modes. This
124 option will be selected automatically if you select such a
125 cipher mode. Only select this option by hand if you expect to load
126 an external module that requires these functions.
129 tristate "Null algorithms"
131 select CRYPTO_BLKCIPHER
134 These are 'Null' algorithms, used by IPsec, which do nothing.
137 tristate "Parallel crypto engine (EXPERIMENTAL)"
138 depends on SMP && EXPERIMENTAL
140 select CRYPTO_MANAGER
143 This converts an arbitrary crypto algorithm into a parallel
144 algorithm that executes in kernel threads.
146 config CRYPTO_WORKQUEUE
150 tristate "Software async crypto daemon"
151 select CRYPTO_BLKCIPHER
153 select CRYPTO_MANAGER
154 select CRYPTO_WORKQUEUE
156 This is a generic software asynchronous crypto daemon that
157 converts an arbitrary synchronous software crypto algorithm
158 into an asynchronous algorithm that executes in a kernel thread.
160 config CRYPTO_AUTHENC
161 tristate "Authenc support"
163 select CRYPTO_BLKCIPHER
164 select CRYPTO_MANAGER
167 Authenc: Combined mode wrapper for IPsec.
168 This is required for IPSec.
171 tristate "Testing module"
173 select CRYPTO_MANAGER
175 Quick & dirty crypto test module.
177 config CRYPTO_ABLK_HELPER_X86
182 config CRYPTO_GLUE_HELPER_X86
187 comment "Authenticated Encryption with Associated Data"
190 tristate "CCM support"
194 Support for Counter with CBC MAC. Required for IPsec.
197 tristate "GCM/GMAC support"
202 Support for Galois/Counter Mode (GCM) and Galois Message
203 Authentication Code (GMAC). Required for IPSec.
206 tristate "Sequence Number IV Generator"
208 select CRYPTO_BLKCIPHER
211 This IV generator generates an IV based on a sequence number by
212 xoring it with a salt. This algorithm is mainly useful for CTR
214 comment "Block modes"
217 tristate "CBC support"
218 select CRYPTO_BLKCIPHER
219 select CRYPTO_MANAGER
221 CBC: Cipher Block Chaining mode
222 This block cipher algorithm is required for IPSec.
225 tristate "CTR support"
226 select CRYPTO_BLKCIPHER
228 select CRYPTO_MANAGER
231 This block cipher algorithm is required for IPSec.
234 tristate "CTS support"
235 select CRYPTO_BLKCIPHER
237 CTS: Cipher Text Stealing
238 This is the Cipher Text Stealing mode as described by
239 Section 8 of rfc2040 and referenced by rfc3962.
240 (rfc3962 includes errata information in its Appendix A)
241 This mode is required for Kerberos gss mechanism support
245 tristate "ECB support"
246 select CRYPTO_BLKCIPHER
247 select CRYPTO_MANAGER
249 ECB: Electronic CodeBook mode
250 This is the simplest block cipher algorithm. It simply encrypts
251 the input block by block.
254 tristate "LRW support"
255 select CRYPTO_BLKCIPHER
256 select CRYPTO_MANAGER
257 select CRYPTO_GF128MUL
259 LRW: Liskov Rivest Wagner, a tweakable, non malleable, non movable
260 narrow block cipher mode for dm-crypt. Use it with cipher
261 specification string aes-lrw-benbi, the key must be 256, 320 or 384.
262 The first 128, 192 or 256 bits in the key are used for AES and the
263 rest is used to tie each cipher block to its logical position.
266 tristate "PCBC support"
267 select CRYPTO_BLKCIPHER
268 select CRYPTO_MANAGER
270 PCBC: Propagating Cipher Block Chaining mode
271 This block cipher algorithm is required for RxRPC.
274 tristate "XTS support"
275 select CRYPTO_BLKCIPHER
276 select CRYPTO_MANAGER
277 select CRYPTO_GF128MUL
279 XTS: IEEE1619/D16 narrow block cipher use with aes-xts-plain,
280 key size 256, 384 or 512 bits. This implementation currently
281 can't handle a sectorsize which is not a multiple of 16 bytes.
286 tristate "HMAC support"
288 select CRYPTO_MANAGER
290 HMAC: Keyed-Hashing for Message Authentication (RFC2104).
291 This is required for IPSec.
294 tristate "XCBC support"
295 depends on EXPERIMENTAL
297 select CRYPTO_MANAGER
299 XCBC: Keyed-Hashing with encryption algorithm
300 http://www.ietf.org/rfc/rfc3566.txt
301 http://csrc.nist.gov/encryption/modes/proposedmodes/
302 xcbc-mac/xcbc-mac-spec.pdf
305 tristate "VMAC support"
306 depends on EXPERIMENTAL
308 select CRYPTO_MANAGER
310 VMAC is a message authentication algorithm designed for
311 very high speed on 64-bit architectures.
314 <http://fastcrypto.org/vmac>
319 tristate "CRC32c CRC algorithm"
323 Castagnoli, et al Cyclic Redundancy-Check Algorithm. Used
324 by iSCSI for header and data digests and by others.
325 See Castagnoli93. Module will be crc32c.
327 config CRYPTO_CRC32C_INTEL
328 tristate "CRC32c INTEL hardware acceleration"
332 In Intel processor with SSE4.2 supported, the processor will
333 support CRC32C implementation using hardware accelerated CRC32
334 instruction. This option will create 'crc32c-intel' module,
335 which will enable any routine to use the CRC32 instruction to
336 gain performance compared with software implementation.
337 Module will be crc32c-intel.
340 tristate "GHASH digest algorithm"
341 select CRYPTO_GF128MUL
343 GHASH is message digest algorithm for GCM (Galois/Counter Mode).
346 tristate "MD4 digest algorithm"
349 MD4 message digest algorithm (RFC1320).
352 tristate "MD5 digest algorithm"
355 MD5 message digest algorithm (RFC1321).
357 config CRYPTO_MICHAEL_MIC
358 tristate "Michael MIC keyed digest algorithm"
361 Michael MIC is used for message integrity protection in TKIP
362 (IEEE 802.11i). This algorithm is required for TKIP, but it
363 should not be used for other purposes because of the weakness
367 tristate "RIPEMD-128 digest algorithm"
370 RIPEMD-128 (ISO/IEC 10118-3:2004).
372 RIPEMD-128 is a 128-bit cryptographic hash function. It should only
373 be used as a secure replacement for RIPEMD. For other use cases,
374 RIPEMD-160 should be used.
376 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
377 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
380 tristate "RIPEMD-160 digest algorithm"
383 RIPEMD-160 (ISO/IEC 10118-3:2004).
385 RIPEMD-160 is a 160-bit cryptographic hash function. It is intended
386 to be used as a secure replacement for the 128-bit hash functions
387 MD4, MD5 and it's predecessor RIPEMD
388 (not to be confused with RIPEMD-128).
390 It's speed is comparable to SHA1 and there are no known attacks
393 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
394 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
397 tristate "RIPEMD-256 digest algorithm"
400 RIPEMD-256 is an optional extension of RIPEMD-128 with a
401 256 bit hash. It is intended for applications that require
402 longer hash-results, without needing a larger security level
405 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
406 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
409 tristate "RIPEMD-320 digest algorithm"
412 RIPEMD-320 is an optional extension of RIPEMD-160 with a
413 320 bit hash. It is intended for applications that require
414 longer hash-results, without needing a larger security level
417 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
418 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
421 tristate "SHA1 digest algorithm"
424 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2).
426 config CRYPTO_SHA1_SSSE3
427 tristate "SHA1 digest algorithm (SSSE3/AVX)"
428 depends on X86 && 64BIT
432 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented
433 using Supplemental SSE3 (SSSE3) instructions or Advanced Vector
434 Extensions (AVX), when available.
437 tristate "SHA224 and SHA256 digest algorithm"
440 SHA256 secure hash standard (DFIPS 180-2).
442 This version of SHA implements a 256 bit hash with 128 bits of
443 security against collision attacks.
445 This code also includes SHA-224, a 224 bit hash with 112 bits
446 of security against collision attacks.
449 tristate "SHA384 and SHA512 digest algorithms"
452 SHA512 secure hash standard (DFIPS 180-2).
454 This version of SHA implements a 512 bit hash with 256 bits of
455 security against collision attacks.
457 This code also includes SHA-384, a 384 bit hash with 192 bits
458 of security against collision attacks.
461 tristate "Tiger digest algorithms"
464 Tiger hash algorithm 192, 160 and 128-bit hashes
466 Tiger is a hash function optimized for 64-bit processors while
467 still having decent performance on 32-bit processors.
468 Tiger was developed by Ross Anderson and Eli Biham.
471 <http://www.cs.technion.ac.il/~biham/Reports/Tiger/>.
474 tristate "Whirlpool digest algorithms"
477 Whirlpool hash algorithm 512, 384 and 256-bit hashes
479 Whirlpool-512 is part of the NESSIE cryptographic primitives.
480 Whirlpool will be part of the ISO/IEC 10118-3:2003(E) standard
483 <http://www.larc.usp.br/~pbarreto/WhirlpoolPage.html>
485 config CRYPTO_GHASH_CLMUL_NI_INTEL
486 tristate "GHASH digest algorithm (CLMUL-NI accelerated)"
487 depends on X86 && 64BIT
490 GHASH is message digest algorithm for GCM (Galois/Counter Mode).
491 The implementation is accelerated by CLMUL-NI of Intel.
496 tristate "AES cipher algorithms"
499 AES cipher algorithms (FIPS-197). AES uses the Rijndael
502 Rijndael appears to be consistently a very good performer in
503 both hardware and software across a wide range of computing
504 environments regardless of its use in feedback or non-feedback
505 modes. Its key setup time is excellent, and its key agility is
506 good. Rijndael's very low memory requirements make it very well
507 suited for restricted-space environments, in which it also
508 demonstrates excellent performance. Rijndael's operations are
509 among the easiest to defend against power and timing attacks.
511 The AES specifies three key sizes: 128, 192 and 256 bits
513 See <http://csrc.nist.gov/CryptoToolkit/aes/> for more information.
515 config CRYPTO_AES_586
516 tristate "AES cipher algorithms (i586)"
517 depends on (X86 || UML_X86) && !64BIT
521 AES cipher algorithms (FIPS-197). AES uses the Rijndael
524 Rijndael appears to be consistently a very good performer in
525 both hardware and software across a wide range of computing
526 environments regardless of its use in feedback or non-feedback
527 modes. Its key setup time is excellent, and its key agility is
528 good. Rijndael's very low memory requirements make it very well
529 suited for restricted-space environments, in which it also
530 demonstrates excellent performance. Rijndael's operations are
531 among the easiest to defend against power and timing attacks.
533 The AES specifies three key sizes: 128, 192 and 256 bits
535 See <http://csrc.nist.gov/encryption/aes/> for more information.
537 config CRYPTO_AES_X86_64
538 tristate "AES cipher algorithms (x86_64)"
539 depends on (X86 || UML_X86) && 64BIT
543 AES cipher algorithms (FIPS-197). AES uses the Rijndael
546 Rijndael appears to be consistently a very good performer in
547 both hardware and software across a wide range of computing
548 environments regardless of its use in feedback or non-feedback
549 modes. Its key setup time is excellent, and its key agility is
550 good. Rijndael's very low memory requirements make it very well
551 suited for restricted-space environments, in which it also
552 demonstrates excellent performance. Rijndael's operations are
553 among the easiest to defend against power and timing attacks.
555 The AES specifies three key sizes: 128, 192 and 256 bits
557 See <http://csrc.nist.gov/encryption/aes/> for more information.
559 config CRYPTO_AES_NI_INTEL
560 tristate "AES cipher algorithms (AES-NI)"
562 select CRYPTO_AES_X86_64 if 64BIT
563 select CRYPTO_AES_586 if !64BIT
565 select CRYPTO_ABLK_HELPER_X86
568 Use Intel AES-NI instructions for AES algorithm.
570 AES cipher algorithms (FIPS-197). AES uses the Rijndael
573 Rijndael appears to be consistently a very good performer in
574 both hardware and software across a wide range of computing
575 environments regardless of its use in feedback or non-feedback
576 modes. Its key setup time is excellent, and its key agility is
577 good. Rijndael's very low memory requirements make it very well
578 suited for restricted-space environments, in which it also
579 demonstrates excellent performance. Rijndael's operations are
580 among the easiest to defend against power and timing attacks.
582 The AES specifies three key sizes: 128, 192 and 256 bits
584 See <http://csrc.nist.gov/encryption/aes/> for more information.
586 In addition to AES cipher algorithm support, the acceleration
587 for some popular block cipher mode is supported too, including
588 ECB, CBC, LRW, PCBC, XTS. The 64 bit version has additional
589 acceleration for CTR.
592 tristate "Anubis cipher algorithm"
595 Anubis cipher algorithm.
597 Anubis is a variable key length cipher which can use keys from
598 128 bits to 320 bits in length. It was evaluated as a entrant
599 in the NESSIE competition.
602 <https://www.cosic.esat.kuleuven.be/nessie/reports/>
603 <http://www.larc.usp.br/~pbarreto/AnubisPage.html>
606 tristate "ARC4 cipher algorithm"
609 ARC4 cipher algorithm.
611 ARC4 is a stream cipher using keys ranging from 8 bits to 2048
612 bits in length. This algorithm is required for driver-based
613 WEP, but it should not be for other purposes because of the
614 weakness of the algorithm.
616 config CRYPTO_BLOWFISH
617 tristate "Blowfish cipher algorithm"
619 select CRYPTO_BLOWFISH_COMMON
621 Blowfish cipher algorithm, by Bruce Schneier.
623 This is a variable key length cipher which can use keys from 32
624 bits to 448 bits in length. It's fast, simple and specifically
625 designed for use on "large microprocessors".
628 <http://www.schneier.com/blowfish.html>
630 config CRYPTO_BLOWFISH_COMMON
633 Common parts of the Blowfish cipher algorithm shared by the
634 generic c and the assembler implementations.
637 <http://www.schneier.com/blowfish.html>
639 config CRYPTO_BLOWFISH_X86_64
640 tristate "Blowfish cipher algorithm (x86_64)"
641 depends on X86 && 64BIT
643 select CRYPTO_BLOWFISH_COMMON
645 Blowfish cipher algorithm (x86_64), by Bruce Schneier.
647 This is a variable key length cipher which can use keys from 32
648 bits to 448 bits in length. It's fast, simple and specifically
649 designed for use on "large microprocessors".
652 <http://www.schneier.com/blowfish.html>
654 config CRYPTO_CAMELLIA
655 tristate "Camellia cipher algorithms"
659 Camellia cipher algorithms module.
661 Camellia is a symmetric key block cipher developed jointly
662 at NTT and Mitsubishi Electric Corporation.
664 The Camellia specifies three key sizes: 128, 192 and 256 bits.
667 <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
669 config CRYPTO_CAMELLIA_X86_64
670 tristate "Camellia cipher algorithm (x86_64)"
671 depends on X86 && 64BIT
677 Camellia cipher algorithm module (x86_64).
679 Camellia is a symmetric key block cipher developed jointly
680 at NTT and Mitsubishi Electric Corporation.
682 The Camellia specifies three key sizes: 128, 192 and 256 bits.
685 <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
688 tristate "CAST5 (CAST-128) cipher algorithm"
691 The CAST5 encryption algorithm (synonymous with CAST-128) is
692 described in RFC2144.
695 tristate "CAST6 (CAST-256) cipher algorithm"
698 The CAST6 encryption algorithm (synonymous with CAST-256) is
699 described in RFC2612.
702 tristate "DES and Triple DES EDE cipher algorithms"
705 DES cipher algorithm (FIPS 46-2), and Triple DES EDE (FIPS 46-3).
708 tristate "FCrypt cipher algorithm"
710 select CRYPTO_BLKCIPHER
712 FCrypt algorithm used by RxRPC.
715 tristate "Khazad cipher algorithm"
718 Khazad cipher algorithm.
720 Khazad was a finalist in the initial NESSIE competition. It is
721 an algorithm optimized for 64-bit processors with good performance
722 on 32-bit processors. Khazad uses an 128 bit key size.
725 <http://www.larc.usp.br/~pbarreto/KhazadPage.html>
727 config CRYPTO_SALSA20
728 tristate "Salsa20 stream cipher algorithm (EXPERIMENTAL)"
729 depends on EXPERIMENTAL
730 select CRYPTO_BLKCIPHER
732 Salsa20 stream cipher algorithm.
734 Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
735 Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
737 The Salsa20 stream cipher algorithm is designed by Daniel J.
738 Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
740 config CRYPTO_SALSA20_586
741 tristate "Salsa20 stream cipher algorithm (i586) (EXPERIMENTAL)"
742 depends on (X86 || UML_X86) && !64BIT
743 depends on EXPERIMENTAL
744 select CRYPTO_BLKCIPHER
746 Salsa20 stream cipher algorithm.
748 Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
749 Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
751 The Salsa20 stream cipher algorithm is designed by Daniel J.
752 Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
754 config CRYPTO_SALSA20_X86_64
755 tristate "Salsa20 stream cipher algorithm (x86_64) (EXPERIMENTAL)"
756 depends on (X86 || UML_X86) && 64BIT
757 depends on EXPERIMENTAL
758 select CRYPTO_BLKCIPHER
760 Salsa20 stream cipher algorithm.
762 Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
763 Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
765 The Salsa20 stream cipher algorithm is designed by Daniel J.
766 Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
769 tristate "SEED cipher algorithm"
772 SEED cipher algorithm (RFC4269).
774 SEED is a 128-bit symmetric key block cipher that has been
775 developed by KISA (Korea Information Security Agency) as a
776 national standard encryption algorithm of the Republic of Korea.
777 It is a 16 round block cipher with the key size of 128 bit.
780 <http://www.kisa.or.kr/kisa/seed/jsp/seed_eng.jsp>
782 config CRYPTO_SERPENT
783 tristate "Serpent cipher algorithm"
786 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
788 Keys are allowed to be from 0 to 256 bits in length, in steps
789 of 8 bits. Also includes the 'Tnepres' algorithm, a reversed
790 variant of Serpent for compatibility with old kerneli.org code.
793 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
795 config CRYPTO_SERPENT_SSE2_X86_64
796 tristate "Serpent cipher algorithm (x86_64/SSE2)"
797 depends on X86 && 64BIT
800 select CRYPTO_ABLK_HELPER_X86
801 select CRYPTO_GLUE_HELPER_X86
802 select CRYPTO_SERPENT
806 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
808 Keys are allowed to be from 0 to 256 bits in length, in steps
811 This module provides Serpent cipher algorithm that processes eigth
812 blocks parallel using SSE2 instruction set.
815 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
817 config CRYPTO_SERPENT_SSE2_586
818 tristate "Serpent cipher algorithm (i586/SSE2)"
819 depends on X86 && !64BIT
822 select CRYPTO_ABLK_HELPER_X86
823 select CRYPTO_GLUE_HELPER_X86
824 select CRYPTO_SERPENT
828 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
830 Keys are allowed to be from 0 to 256 bits in length, in steps
833 This module provides Serpent cipher algorithm that processes four
834 blocks parallel using SSE2 instruction set.
837 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
839 config CRYPTO_SERPENT_AVX_X86_64
840 tristate "Serpent cipher algorithm (x86_64/AVX)"
841 depends on X86 && 64BIT
844 select CRYPTO_ABLK_HELPER_X86
845 select CRYPTO_GLUE_HELPER_X86
846 select CRYPTO_SERPENT
850 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
852 Keys are allowed to be from 0 to 256 bits in length, in steps
855 This module provides the Serpent cipher algorithm that processes
856 eight blocks parallel using the AVX instruction set.
859 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
862 tristate "TEA, XTEA and XETA cipher algorithms"
865 TEA cipher algorithm.
867 Tiny Encryption Algorithm is a simple cipher that uses
868 many rounds for security. It is very fast and uses
871 Xtendend Tiny Encryption Algorithm is a modification to
872 the TEA algorithm to address a potential key weakness
873 in the TEA algorithm.
875 Xtendend Encryption Tiny Algorithm is a mis-implementation
876 of the XTEA algorithm for compatibility purposes.
878 config CRYPTO_TWOFISH
879 tristate "Twofish cipher algorithm"
881 select CRYPTO_TWOFISH_COMMON
883 Twofish cipher algorithm.
885 Twofish was submitted as an AES (Advanced Encryption Standard)
886 candidate cipher by researchers at CounterPane Systems. It is a
887 16 round block cipher supporting key sizes of 128, 192, and 256
891 <http://www.schneier.com/twofish.html>
893 config CRYPTO_TWOFISH_COMMON
896 Common parts of the Twofish cipher algorithm shared by the
897 generic c and the assembler implementations.
899 config CRYPTO_TWOFISH_586
900 tristate "Twofish cipher algorithms (i586)"
901 depends on (X86 || UML_X86) && !64BIT
903 select CRYPTO_TWOFISH_COMMON
905 Twofish cipher algorithm.
907 Twofish was submitted as an AES (Advanced Encryption Standard)
908 candidate cipher by researchers at CounterPane Systems. It is a
909 16 round block cipher supporting key sizes of 128, 192, and 256
913 <http://www.schneier.com/twofish.html>
915 config CRYPTO_TWOFISH_X86_64
916 tristate "Twofish cipher algorithm (x86_64)"
917 depends on (X86 || UML_X86) && 64BIT
919 select CRYPTO_TWOFISH_COMMON
921 Twofish cipher algorithm (x86_64).
923 Twofish was submitted as an AES (Advanced Encryption Standard)
924 candidate cipher by researchers at CounterPane Systems. It is a
925 16 round block cipher supporting key sizes of 128, 192, and 256
929 <http://www.schneier.com/twofish.html>
931 config CRYPTO_TWOFISH_X86_64_3WAY
932 tristate "Twofish cipher algorithm (x86_64, 3-way parallel)"
933 depends on X86 && 64BIT
935 select CRYPTO_TWOFISH_COMMON
936 select CRYPTO_TWOFISH_X86_64
940 Twofish cipher algorithm (x86_64, 3-way parallel).
942 Twofish was submitted as an AES (Advanced Encryption Standard)
943 candidate cipher by researchers at CounterPane Systems. It is a
944 16 round block cipher supporting key sizes of 128, 192, and 256
947 This module provides Twofish cipher algorithm that processes three
948 blocks parallel, utilizing resources of out-of-order CPUs better.
951 <http://www.schneier.com/twofish.html>
953 config CRYPTO_TWOFISH_AVX_X86_64
954 tristate "Twofish cipher algorithm (x86_64/AVX)"
955 depends on X86 && 64BIT
958 select CRYPTO_ABLK_HELPER_X86
959 select CRYPTO_TWOFISH_COMMON
960 select CRYPTO_TWOFISH_X86_64
961 select CRYPTO_TWOFISH_X86_64_3WAY
965 Twofish cipher algorithm (x86_64/AVX).
967 Twofish was submitted as an AES (Advanced Encryption Standard)
968 candidate cipher by researchers at CounterPane Systems. It is a
969 16 round block cipher supporting key sizes of 128, 192, and 256
972 This module provides the Twofish cipher algorithm that processes
973 eight blocks parallel using the AVX Instruction Set.
976 <http://www.schneier.com/twofish.html>
978 comment "Compression"
980 config CRYPTO_DEFLATE
981 tristate "Deflate compression algorithm"
986 This is the Deflate algorithm (RFC1951), specified for use in
987 IPSec with the IPCOMP protocol (RFC3173, RFC2394).
989 You will most probably want this if using IPSec.
992 tristate "Zlib compression algorithm"
998 This is the zlib algorithm.
1001 tristate "LZO compression algorithm"
1002 select CRYPTO_ALGAPI
1004 select LZO_DECOMPRESS
1006 This is the LZO algorithm.
1008 comment "Random Number Generation"
1010 config CRYPTO_ANSI_CPRNG
1011 tristate "Pseudo Random Number Generation for Cryptographic modules"
1016 This option enables the generic pseudo random number generator
1017 for cryptographic modules. Uses the Algorithm specified in
1018 ANSI X9.31 A.2.4. Note that this option must be enabled if
1019 CRYPTO_FIPS is selected
1021 config CRYPTO_USER_API
1024 config CRYPTO_USER_API_HASH
1025 tristate "User-space interface for hash algorithms"
1028 select CRYPTO_USER_API
1030 This option enables the user-spaces interface for hash
1033 config CRYPTO_USER_API_SKCIPHER
1034 tristate "User-space interface for symmetric key cipher algorithms"
1036 select CRYPTO_BLKCIPHER
1037 select CRYPTO_USER_API
1039 This option enables the user-spaces interface for symmetric
1040 key cipher algorithms.
1042 source "drivers/crypto/Kconfig"