]> bbs.cooldavid.org Git - net-next-2.6.git/blame - crypto/Kconfig
[CRYPTO] api: Do not remove users unless new algorithm matches
[net-next-2.6.git] / crypto / Kconfig
CommitLineData
1da177e4
LT
1#
2# Cryptographic API Configuration
3#
4
5menu "Cryptographic options"
6
7config CRYPTO
8 bool "Cryptographic API"
9 help
10 This option provides the core Cryptographic API.
11
cce9e06d
HX
12if CRYPTO
13
14config CRYPTO_ALGAPI
15 tristate
16 help
17 This option provides the API for cryptographic algorithms.
18
b5b7f088
HX
19config CRYPTO_ABLKCIPHER
20 tristate
21 select CRYPTO_BLKCIPHER
22
5cde0af2
HX
23config CRYPTO_BLKCIPHER
24 tristate
25 select CRYPTO_ALGAPI
26
055bcee3
HX
27config CRYPTO_HASH
28 tristate
29 select CRYPTO_ALGAPI
30
2b8c19db
HX
31config CRYPTO_MANAGER
32 tristate "Cryptographic algorithm manager"
33 select CRYPTO_ALGAPI
2b8c19db
HX
34 help
35 Create default cryptographic template instantiations such as
36 cbc(aes).
37
1da177e4 38config CRYPTO_HMAC
8425165d 39 tristate "HMAC support"
0796ae06 40 select CRYPTO_HASH
43518407 41 select CRYPTO_MANAGER
1da177e4
LT
42 help
43 HMAC: Keyed-Hashing for Message Authentication (RFC2104).
44 This is required for IPSec.
45
333b0d7e
KM
46config CRYPTO_XCBC
47 tristate "XCBC support"
48 depends on EXPERIMENTAL
49 select CRYPTO_HASH
50 select CRYPTO_MANAGER
51 help
52 XCBC: Keyed-Hashing with encryption algorithm
53 http://www.ietf.org/rfc/rfc3566.txt
54 http://csrc.nist.gov/encryption/modes/proposedmodes/
55 xcbc-mac/xcbc-mac-spec.pdf
56
1da177e4
LT
57config CRYPTO_NULL
58 tristate "Null algorithms"
cce9e06d 59 select CRYPTO_ALGAPI
1da177e4
LT
60 help
61 These are 'Null' algorithms, used by IPsec, which do nothing.
62
63config CRYPTO_MD4
64 tristate "MD4 digest algorithm"
cce9e06d 65 select CRYPTO_ALGAPI
1da177e4
LT
66 help
67 MD4 message digest algorithm (RFC1320).
68
69config CRYPTO_MD5
70 tristate "MD5 digest algorithm"
cce9e06d 71 select CRYPTO_ALGAPI
1da177e4
LT
72 help
73 MD5 message digest algorithm (RFC1321).
74
75config CRYPTO_SHA1
76 tristate "SHA1 digest algorithm"
cce9e06d 77 select CRYPTO_ALGAPI
1da177e4
LT
78 help
79 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2).
80
1da177e4
LT
81config CRYPTO_SHA256
82 tristate "SHA256 digest algorithm"
cce9e06d 83 select CRYPTO_ALGAPI
1da177e4
LT
84 help
85 SHA256 secure hash standard (DFIPS 180-2).
86
87 This version of SHA implements a 256 bit hash with 128 bits of
88 security against collision attacks.
89
90config CRYPTO_SHA512
91 tristate "SHA384 and SHA512 digest algorithms"
cce9e06d 92 select CRYPTO_ALGAPI
1da177e4
LT
93 help
94 SHA512 secure hash standard (DFIPS 180-2).
95
96 This version of SHA implements a 512 bit hash with 256 bits of
97 security against collision attacks.
98
99 This code also includes SHA-384, a 384 bit hash with 192 bits
100 of security against collision attacks.
101
102config CRYPTO_WP512
103 tristate "Whirlpool digest algorithms"
cce9e06d 104 select CRYPTO_ALGAPI
1da177e4
LT
105 help
106 Whirlpool hash algorithm 512, 384 and 256-bit hashes
107
108 Whirlpool-512 is part of the NESSIE cryptographic primitives.
109 Whirlpool will be part of the ISO/IEC 10118-3:2003(E) standard
110
111 See also:
112 <http://planeta.terra.com.br/informatica/paulobarreto/WhirlpoolPage.html>
113
114config CRYPTO_TGR192
115 tristate "Tiger digest algorithms"
cce9e06d 116 select CRYPTO_ALGAPI
1da177e4
LT
117 help
118 Tiger hash algorithm 192, 160 and 128-bit hashes
119
120 Tiger is a hash function optimized for 64-bit processors while
121 still having decent performance on 32-bit processors.
122 Tiger was developed by Ross Anderson and Eli Biham.
123
124 See also:
125 <http://www.cs.technion.ac.il/~biham/Reports/Tiger/>.
126
c494e070
RS
127config CRYPTO_GF128MUL
128 tristate "GF(2^128) multiplication functions (EXPERIMENTAL)"
129 depends on EXPERIMENTAL
130 help
131 Efficient table driven implementation of multiplications in the
132 field GF(2^128). This is needed by some cypher modes. This
133 option will be selected automatically if you select such a
134 cipher mode. Only select this option by hand if you expect to load
135 an external module that requires these functions.
136
db131ef9
HX
137config CRYPTO_ECB
138 tristate "ECB support"
139 select CRYPTO_BLKCIPHER
43518407 140 select CRYPTO_MANAGER
db131ef9
HX
141 default m
142 help
143 ECB: Electronic CodeBook mode
144 This is the simplest block cipher algorithm. It simply encrypts
145 the input block by block.
146
147config CRYPTO_CBC
148 tristate "CBC support"
149 select CRYPTO_BLKCIPHER
43518407 150 select CRYPTO_MANAGER
db131ef9
HX
151 default m
152 help
153 CBC: Cipher Block Chaining mode
154 This block cipher algorithm is required for IPSec.
155
91652be5
DH
156config CRYPTO_PCBC
157 tristate "PCBC support"
158 select CRYPTO_BLKCIPHER
159 select CRYPTO_MANAGER
160 default m
161 help
162 PCBC: Propagating Cipher Block Chaining mode
163 This block cipher algorithm is required for RxRPC.
164
64470f1b
RS
165config CRYPTO_LRW
166 tristate "LRW support (EXPERIMENTAL)"
167 depends on EXPERIMENTAL
168 select CRYPTO_BLKCIPHER
169 select CRYPTO_MANAGER
170 select CRYPTO_GF128MUL
171 help
172 LRW: Liskov Rivest Wagner, a tweakable, non malleable, non movable
173 narrow block cipher mode for dm-crypt. Use it with cipher
174 specification string aes-lrw-benbi, the key must be 256, 320 or 384.
175 The first 128, 192 or 256 bits in the key are used for AES and the
176 rest is used to tie each cipher block to its logical position.
177
1da177e4
LT
178config CRYPTO_DES
179 tristate "DES and Triple DES EDE cipher algorithms"
cce9e06d 180 select CRYPTO_ALGAPI
1da177e4
LT
181 help
182 DES cipher algorithm (FIPS 46-2), and Triple DES EDE (FIPS 46-3).
183
90831639
DH
184config CRYPTO_FCRYPT
185 tristate "FCrypt cipher algorithm"
186 select CRYPTO_ALGAPI
187 select CRYPTO_BLKCIPHER
188 help
189 FCrypt algorithm used by RxRPC.
190
1da177e4
LT
191config CRYPTO_BLOWFISH
192 tristate "Blowfish cipher algorithm"
cce9e06d 193 select CRYPTO_ALGAPI
1da177e4
LT
194 help
195 Blowfish cipher algorithm, by Bruce Schneier.
196
197 This is a variable key length cipher which can use keys from 32
198 bits to 448 bits in length. It's fast, simple and specifically
199 designed for use on "large microprocessors".
200
201 See also:
202 <http://www.schneier.com/blowfish.html>
203
204config CRYPTO_TWOFISH
205 tristate "Twofish cipher algorithm"
cce9e06d 206 select CRYPTO_ALGAPI
2729bb42 207 select CRYPTO_TWOFISH_COMMON
1da177e4
LT
208 help
209 Twofish cipher algorithm.
210
211 Twofish was submitted as an AES (Advanced Encryption Standard)
212 candidate cipher by researchers at CounterPane Systems. It is a
213 16 round block cipher supporting key sizes of 128, 192, and 256
214 bits.
215
216 See also:
217 <http://www.schneier.com/twofish.html>
218
2729bb42
JF
219config CRYPTO_TWOFISH_COMMON
220 tristate
2729bb42
JF
221 help
222 Common parts of the Twofish cipher algorithm shared by the
223 generic c and the assembler implementations.
224
b9f535ff
JF
225config CRYPTO_TWOFISH_586
226 tristate "Twofish cipher algorithms (i586)"
cce9e06d
HX
227 depends on (X86 || UML_X86) && !64BIT
228 select CRYPTO_ALGAPI
b9f535ff
JF
229 select CRYPTO_TWOFISH_COMMON
230 help
231 Twofish cipher algorithm.
232
233 Twofish was submitted as an AES (Advanced Encryption Standard)
234 candidate cipher by researchers at CounterPane Systems. It is a
235 16 round block cipher supporting key sizes of 128, 192, and 256
236 bits.
237
238 See also:
239 <http://www.schneier.com/twofish.html>
240
eaf44088
JF
241config CRYPTO_TWOFISH_X86_64
242 tristate "Twofish cipher algorithm (x86_64)"
cce9e06d
HX
243 depends on (X86 || UML_X86) && 64BIT
244 select CRYPTO_ALGAPI
eaf44088
JF
245 select CRYPTO_TWOFISH_COMMON
246 help
247 Twofish cipher algorithm (x86_64).
248
249 Twofish was submitted as an AES (Advanced Encryption Standard)
250 candidate cipher by researchers at CounterPane Systems. It is a
251 16 round block cipher supporting key sizes of 128, 192, and 256
252 bits.
253
254 See also:
255 <http://www.schneier.com/twofish.html>
256
1da177e4
LT
257config CRYPTO_SERPENT
258 tristate "Serpent cipher algorithm"
cce9e06d 259 select CRYPTO_ALGAPI
1da177e4
LT
260 help
261 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
262
263 Keys are allowed to be from 0 to 256 bits in length, in steps
264 of 8 bits. Also includes the 'Tnepres' algorithm, a reversed
265 variant of Serpent for compatibility with old kerneli code.
266
267 See also:
268 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
269
270config CRYPTO_AES
271 tristate "AES cipher algorithms"
cce9e06d 272 select CRYPTO_ALGAPI
1da177e4
LT
273 help
274 AES cipher algorithms (FIPS-197). AES uses the Rijndael
275 algorithm.
276
277 Rijndael appears to be consistently a very good performer in
278 both hardware and software across a wide range of computing
279 environments regardless of its use in feedback or non-feedback
280 modes. Its key setup time is excellent, and its key agility is
281 good. Rijndael's very low memory requirements make it very well
282 suited for restricted-space environments, in which it also
283 demonstrates excellent performance. Rijndael's operations are
284 among the easiest to defend against power and timing attacks.
285
286 The AES specifies three key sizes: 128, 192 and 256 bits
287
288 See <http://csrc.nist.gov/CryptoToolkit/aes/> for more information.
289
290config CRYPTO_AES_586
291 tristate "AES cipher algorithms (i586)"
cce9e06d
HX
292 depends on (X86 || UML_X86) && !64BIT
293 select CRYPTO_ALGAPI
1da177e4
LT
294 help
295 AES cipher algorithms (FIPS-197). AES uses the Rijndael
296 algorithm.
297
298 Rijndael appears to be consistently a very good performer in
299 both hardware and software across a wide range of computing
300 environments regardless of its use in feedback or non-feedback
301 modes. Its key setup time is excellent, and its key agility is
302 good. Rijndael's very low memory requirements make it very well
303 suited for restricted-space environments, in which it also
304 demonstrates excellent performance. Rijndael's operations are
305 among the easiest to defend against power and timing attacks.
306
307 The AES specifies three key sizes: 128, 192 and 256 bits
a2a892a2
AS
308
309 See <http://csrc.nist.gov/encryption/aes/> for more information.
310
311config CRYPTO_AES_X86_64
312 tristate "AES cipher algorithms (x86_64)"
cce9e06d
HX
313 depends on (X86 || UML_X86) && 64BIT
314 select CRYPTO_ALGAPI
a2a892a2
AS
315 help
316 AES cipher algorithms (FIPS-197). AES uses the Rijndael
317 algorithm.
318
319 Rijndael appears to be consistently a very good performer in
320 both hardware and software across a wide range of computing
321 environments regardless of its use in feedback or non-feedback
322 modes. Its key setup time is excellent, and its key agility is
323 good. Rijndael's very low memory requirements make it very well
324 suited for restricted-space environments, in which it also
325 demonstrates excellent performance. Rijndael's operations are
326 among the easiest to defend against power and timing attacks.
327
328 The AES specifies three key sizes: 128, 192 and 256 bits
1da177e4
LT
329
330 See <http://csrc.nist.gov/encryption/aes/> for more information.
331
332config CRYPTO_CAST5
333 tristate "CAST5 (CAST-128) cipher algorithm"
cce9e06d 334 select CRYPTO_ALGAPI
1da177e4
LT
335 help
336 The CAST5 encryption algorithm (synonymous with CAST-128) is
337 described in RFC2144.
338
339config CRYPTO_CAST6
340 tristate "CAST6 (CAST-256) cipher algorithm"
cce9e06d 341 select CRYPTO_ALGAPI
1da177e4
LT
342 help
343 The CAST6 encryption algorithm (synonymous with CAST-256) is
344 described in RFC2612.
345
346config CRYPTO_TEA
fb4f10ed 347 tristate "TEA, XTEA and XETA cipher algorithms"
cce9e06d 348 select CRYPTO_ALGAPI
1da177e4
LT
349 help
350 TEA cipher algorithm.
351
352 Tiny Encryption Algorithm is a simple cipher that uses
353 many rounds for security. It is very fast and uses
354 little memory.
355
356 Xtendend Tiny Encryption Algorithm is a modification to
357 the TEA algorithm to address a potential key weakness
358 in the TEA algorithm.
359
fb4f10ed
AG
360 Xtendend Encryption Tiny Algorithm is a mis-implementation
361 of the XTEA algorithm for compatibility purposes.
362
1da177e4
LT
363config CRYPTO_ARC4
364 tristate "ARC4 cipher algorithm"
cce9e06d 365 select CRYPTO_ALGAPI
1da177e4
LT
366 help
367 ARC4 cipher algorithm.
368
369 ARC4 is a stream cipher using keys ranging from 8 bits to 2048
370 bits in length. This algorithm is required for driver-based
371 WEP, but it should not be for other purposes because of the
372 weakness of the algorithm.
373
374config CRYPTO_KHAZAD
375 tristate "Khazad cipher algorithm"
cce9e06d 376 select CRYPTO_ALGAPI
1da177e4
LT
377 help
378 Khazad cipher algorithm.
379
380 Khazad was a finalist in the initial NESSIE competition. It is
381 an algorithm optimized for 64-bit processors with good performance
382 on 32-bit processors. Khazad uses an 128 bit key size.
383
384 See also:
385 <http://planeta.terra.com.br/informatica/paulobarreto/KhazadPage.html>
386
387config CRYPTO_ANUBIS
388 tristate "Anubis cipher algorithm"
cce9e06d 389 select CRYPTO_ALGAPI
1da177e4
LT
390 help
391 Anubis cipher algorithm.
392
393 Anubis is a variable key length cipher which can use keys from
394 128 bits to 320 bits in length. It was evaluated as a entrant
395 in the NESSIE competition.
396
397 See also:
398 <https://www.cosic.esat.kuleuven.ac.be/nessie/reports/>
399 <http://planeta.terra.com.br/informatica/paulobarreto/AnubisPage.html>
400
401
402config CRYPTO_DEFLATE
403 tristate "Deflate compression algorithm"
cce9e06d 404 select CRYPTO_ALGAPI
1da177e4
LT
405 select ZLIB_INFLATE
406 select ZLIB_DEFLATE
407 help
408 This is the Deflate algorithm (RFC1951), specified for use in
409 IPSec with the IPCOMP protocol (RFC3173, RFC2394).
410
411 You will most probably want this if using IPSec.
412
413config CRYPTO_MICHAEL_MIC
414 tristate "Michael MIC keyed digest algorithm"
cce9e06d 415 select CRYPTO_ALGAPI
1da177e4
LT
416 help
417 Michael MIC is used for message integrity protection in TKIP
418 (IEEE 802.11i). This algorithm is required for TKIP, but it
419 should not be used for other purposes because of the weakness
420 of the algorithm.
421
422config CRYPTO_CRC32C
423 tristate "CRC32c CRC algorithm"
cce9e06d 424 select CRYPTO_ALGAPI
1da177e4
LT
425 select LIBCRC32C
426 help
427 Castagnoli, et al Cyclic Redundancy-Check Algorithm. Used
428 by iSCSI for header and data digests and by others.
429 See Castagnoli93. This implementation uses lib/libcrc32c.
430 Module will be crc32c.
431
04ac7db3
NT
432config CRYPTO_CAMELLIA
433 tristate "Camellia cipher algorithms"
434 depends on CRYPTO
435 select CRYPTO_ALGAPI
436 help
437 Camellia cipher algorithms module.
438
439 Camellia is a symmetric key block cipher developed jointly
440 at NTT and Mitsubishi Electric Corporation.
441
442 The Camellia specifies three key sizes: 128, 192 and 256 bits.
443
444 See also:
445 <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
446
1da177e4
LT
447config CRYPTO_TEST
448 tristate "Testing module"
cce9e06d
HX
449 depends on m
450 select CRYPTO_ALGAPI
1da177e4
LT
451 help
452 Quick & dirty crypto test module.
453
454source "drivers/crypto/Kconfig"
1da177e4 455
cce9e06d
HX
456endif # if CRYPTO
457
458endmenu