Config.in.crypto 16 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564
  1. menu "Crypto kernel modules"
  2. config ADK_KERNEL_CRYPTO
  3. boolean
  4. default n
  5. config ADK_KERNEL_CRYPTO_HW
  6. boolean
  7. default n
  8. config ADK_KERNEL_OCF_FIPS
  9. boolean
  10. default n
  11. config ADK_KERNEL_OCF_CRYPTODEV
  12. boolean
  13. default n
  14. config ADK_KERNEL_CRYPTO_MANAGER
  15. tristate
  16. default n
  17. config ADK_KERNEL_OCF_OCF
  18. boolean
  19. default n
  20. select ADK_KERNEL_CRYPTO
  21. select ADK_KERNEL_OCF_FIPS
  22. select ADK_KERNEL_OCF_CRYPTODEV
  23. config ADK_KERNEL_CRYPTO_AES
  24. boolean
  25. default n
  26. config ADK_KERNEL_CRYPTO_SHA256
  27. boolean
  28. default n
  29. config ADK_KERNEL_CRYPTO_CBC
  30. boolean
  31. default n
  32. comment "Hardware cryptography"
  33. menu "Hardware crypto devices"
  34. config ADK_KPACKAGE_KMOD_CRYPTO_DEV_GEODE
  35. prompt "Support for the Geode LX/GX AES engine"
  36. tristate
  37. select ADK_KERNEL_CRYPTO_HW
  38. select ADK_KERNEL_CRYPTO
  39. depends on ADK_LINUX_X86_ALIX1C
  40. help
  41. Say 'Y' here to use the AMD Geode LX processor on-board AES
  42. engine for the CryptoAPI AES algorithm.
  43. config ADK_KPACKAGE_KMOD_CRYPTO_DEV_HIFN_795X
  44. prompt "Driver HIFN 795x crypto accelerator chips"
  45. tristate
  46. select ADK_KERNEL_CRYPTO_HW
  47. select ADK_KERNEL_CRYPTO
  48. select ADK_KPACKAGE_KMOD_CRYPTO_BLKCIPHER
  49. select ADK_KPACKAGE_KMOD_CRYPTO_ALGAPI
  50. select ADK_KPACKAGE_KMOD_CRYPTO_DES
  51. help
  52. This option allows you to have support for HIFN 795x crypto adapters.
  53. endmenu
  54. menu "OpenBSD Cryptographic framework"
  55. depends on !(ADK_LINUX_CRIS_FOXBOARD || ADK_LINUX_MIPS_AG241 || ADK_LINUX_QEMU || ADK_LINUX_ARM_FOXG20)
  56. config ADK_KPACKAGE_KMOD_OCF_HIFN
  57. prompt "kmod-cryptodev-hifn................ hifn engine"
  58. tristate
  59. default n
  60. select ADK_KERNEL_OCF_OCF
  61. help
  62. Engine for cryptodev that uses Hifn based accelerators
  63. such as the 7951, 7955, 7956, 7751, 7811.
  64. config ADK_KPACKAGE_KMOD_OCF_SAFE
  65. prompt "kmod-cryptodev-safe................ safenet engine"
  66. tristate
  67. default n
  68. select ADK_KERNEL_OCF_OCF
  69. help
  70. Engine for cryptodev that uses a number of the safenet Excel
  71. crypto accelerators. Currently for the 1141 and 1741.
  72. config ADK_KPACKAGE_KMOD_OCF_IXP4XX
  73. prompt "kmod-cryptodev-ixp4xx.............. IXP4xx engine"
  74. tristate
  75. default n
  76. select ADK_KERNEL_OCF_OCF
  77. depends on ADK_arm
  78. help
  79. Engine for cryptodev that uses XScale IXP4xx.
  80. Requires the Intel Access library.
  81. config ADK_KPACKAGE_KMOD_OCF_TALITOS
  82. prompt "kmod-cryptodev-talitos............. talitos engine"
  83. tristate
  84. default n
  85. select ADK_KERNEL_OCF_OCF
  86. depends on ADK_powerpc || ADK_m68k || ADK_ppc
  87. help
  88. Engine for cryptodev that uses Freescale's security engine (SEC/talitos).
  89. endmenu
  90. comment "Software cryptography"
  91. menu "Crypto core / Block and Hash modes"
  92. config ADK_KPACKAGE_KMOD_CRYPTO_ALGAPI
  93. prompt "kmod-crypto-algapi.................. Crypto algorithm API"
  94. tristate
  95. default n
  96. select ADK_KERNEL_CRYPTO
  97. help
  98. config ADK_KPACKAGE_KMOD_CRYPTO_AEAD
  99. prompt "kmod-crypto-aead.................... Crypto algorithm AEAD"
  100. tristate
  101. default n
  102. select ADK_KERNEL_CRYPTO
  103. select ADK_KPACKAGE_KMOD_CRYPTO_ALGAPI
  104. help
  105. config ADK_KPACKAGE_KMOD_CRYPTO_MANAGER
  106. prompt "kmod-crypto-manager.................. Crypto algorithm manager"
  107. tristate
  108. default n
  109. depends on !ADK_KERNEL_CRYPTO_MANAGER
  110. select ADK_KPACKAGE_KMOD_CRYPTO_HASH
  111. select ADK_KPACKAGE_KMOD_CRYPTO_ALGAPI
  112. select ADK_KPACKAGE_KMOD_CRYPTO_AEAD
  113. help
  114. config ADK_KPACKAGE_KMOD_CRYPTO_HASH
  115. prompt "kmod-crypto-hash..................... Crypto hash support"
  116. tristate
  117. default n
  118. select ADK_KPACKAGE_KMOD_CRYPTO_ALGAPI
  119. help
  120. config ADK_KPACKAGE_KMOD_CRYPTO_BLKCIPHER
  121. prompt "kmod-crypto-blkcipher................ Crypto block cipher support"
  122. tristate
  123. default n
  124. select ADK_KPACKAGE_KMOD_CRYPTO_RNG2
  125. select ADK_KPACKAGE_KMOD_CRYPTO_ALGAPI
  126. help
  127. config ADK_KPACKAGE_KMOD_CRYPTO_CBC
  128. prompt "kmod-crypto-cbc...................... CBC support"
  129. tristate
  130. depends on !ADK_KERNEL_CRYPTO_CBC
  131. select ADK_KPACKAGE_KMOD_CRYPTO_BLKCIPHER
  132. select ADK_KPACKAGE_KMOD_CRYPTO_MANAGER
  133. default n
  134. help
  135. CBC: Cipher Block Chaining mode
  136. This block cipher algorithm is required for IPSec.
  137. config ADK_KPACKAGE_KMOD_CRYPTO_ECB
  138. prompt "kmod-crypto-ecb...................... ECB support"
  139. tristate
  140. default n
  141. select ADK_KPACKAGE_KMOD_CRYPTO_BLKCIPHER
  142. select ADK_KPACKAGE_KMOD_CRYPTO_MANAGER
  143. help
  144. ECB: Electronic CodeBook mode
  145. This is the simplest block cipher algorithm. It simply encrypts
  146. the input block by block.
  147. config ADK_KPACKAGE_KMOD_CRYPTO_HMAC
  148. prompt "kmod-crypto-hmac..................... HMAC support"
  149. tristate
  150. default n
  151. select ADK_KPACKAGE_KMOD_CRYPTO_HASH
  152. select ADK_KPACKAGE_KMOD_CRYPTO_MANAGER
  153. help
  154. HMAC: Keyed-Hashing for Message Authentication (RFC2104).
  155. This is required for IPSec.
  156. config ADK_KPACKAGE_KMOD_CRYPTO_RNG2
  157. prompt "kmod-crypto-rng...................... RNG support"
  158. tristate
  159. default n
  160. help
  161. Random number generator
  162. endmenu
  163. menu "Digest algorithms"
  164. config ADK_KPACKAGE_KMOD_CRYPTO_MD4
  165. prompt "kmod-crypto-md4...................... MD4 digest algorithm"
  166. tristate
  167. default n
  168. select ADK_KPACKAGE_KMOD_CRYPTO_ALGAPI
  169. select ADK_KPACKAGE_KMOD_CRYPTO_HASH
  170. help
  171. MD4 message digest algorithm (RFC1320).
  172. config ADK_KPACKAGE_KMOD_CRYPTO_MD5
  173. prompt "kmod-crypto-md5...................... MD5 digest algorithm"
  174. tristate
  175. default n
  176. select ADK_KPACKAGE_KMOD_CRYPTO_ALGAPI
  177. select ADK_KPACKAGE_KMOD_CRYPTO_HASH
  178. help
  179. MD5 message digest algorithm (RFC1321).
  180. config ADK_KPACKAGE_KMOD_CRYPTO_SHA1
  181. prompt "kmod-crypto-sha1..................... SHA1 digest algorithm"
  182. tristate
  183. default n
  184. select ADK_KPACKAGE_KMOD_CRYPTO_ALGAPI
  185. select ADK_KPACKAGE_KMOD_CRYPTO_HASH
  186. help
  187. SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2).
  188. config ADK_KPACKAGE_KMOD_CRYPTO_SHA256
  189. prompt "kmod-crypto-sha256................... SHA256 digest algorithm"
  190. tristate
  191. default n
  192. depends on !ADK_KERNEL_CRYPTO_SHA256
  193. select ADK_KPACKAGE_KMOD_CRYPTO_ALGAPI
  194. select ADK_KPACKAGE_KMOD_CRYPTO_HASH
  195. help
  196. SHA256 secure hash standard (DFIPS 180-2).
  197. This version of SHA implements a 256 bit hash with 128 bits of
  198. security against collision attacks.
  199. config ADK_KPACKAGE_KMOD_CRYPTO_SHA512
  200. prompt "kmod-crypto-sha512................... SHA512 digest algorithm"
  201. tristate
  202. default n
  203. select ADK_KPACKAGE_KMOD_CRYPTO_ALGAPI
  204. select ADK_KPACKAGE_KMOD_CRYPTO_HASH
  205. help
  206. SHA512 secure hash standard (DFIPS 180-2).
  207. This version of SHA implements a 512 bit hash with 256 bits of
  208. security against collision attacks.
  209. This code also includes SHA-384, a 384 bit hash with 192 bits
  210. of security against collision attacks.
  211. config ADK_KPACKAGE_KMOD_CRYPTO_WP512
  212. prompt "kmod-crypto-whirlpool................ Whirlpool digest algorithms"
  213. tristate
  214. default n
  215. select ADK_KPACKAGE_KMOD_CRYPTO_ALGAPI
  216. select ADK_KPACKAGE_KMOD_CRYPTO_HASH
  217. help
  218. Whirlpool hash algorithm 512, 384 and 256-bit hashes
  219. Whirlpool-512 is part of the NESSIE cryptographic primitives.
  220. Whirlpool will be part of the ISO/IEC 10118-3:2003(E) standard
  221. See also:
  222. <http://planeta.terra.com.br/informatica/paulobarreto/WhirlpoolPage.html>
  223. config ADK_KPACKAGE_KMOD_CRYPTO_TGR192
  224. prompt "kmod-crypto-tiger.................... Tiger digest algorithms"
  225. tristate
  226. default n
  227. select ADK_KPACKAGE_KMOD_CRYPTO_ALGAPI
  228. select ADK_KPACKAGE_KMOD_CRYPTO_HASH
  229. help
  230. Tiger hash algorithm 192, 160 and 128-bit hashes
  231. Tiger is a hash function optimized for 64-bit processors while
  232. still having decent performance on 32-bit processors.
  233. Tiger was developed by Ross Anderson and Eli Biham.
  234. See also:
  235. <http://www.cs.technion.ac.il/~biham/Reports/Tiger/>.
  236. endmenu
  237. menu "Cipher algoritms"
  238. config ADK_KPACKAGE_KMOD_CRYPTO_AES
  239. prompt "kmod-crypto-aes...................... AES cipher algorithms"
  240. tristate
  241. default n
  242. depends on !ADK_KERNEL_CRYPTO_AES
  243. select ADK_KPACKAGE_KMOD_CRYPTO_ALGAPI
  244. help
  245. AES cipher algorithms (FIPS-197). AES uses the Rijndael
  246. algorithm.
  247. Rijndael appears to be consistently a very good performer in
  248. both hardware and software across a wide range of computing
  249. environments regardless of its use in feedback or non-feedback
  250. modes. Its key setup time is excellent, and its key agility is
  251. good. Rijndael's very low memory requirements make it very well
  252. suited for restricted-space environments, in which it also
  253. demonstrates excellent performance. Rijndael's operations are
  254. among the easiest to defend against power and timing attacks.
  255. The AES specifies three key sizes: 128, 192 and 256 bits
  256. See <http://csrc.nist.gov/CryptoToolkit/aes/> for more information.
  257. config ADK_KPACKAGE_KMOD_CRYPTO_AES_586
  258. prompt "kmod-crypto-aes-i586................. AES cipher algorithms (i586)"
  259. tristate
  260. default n
  261. depends on ADK_x86
  262. select ADK_KPACKAGE_KMOD_CRYPTO_ALGAPI
  263. help
  264. AES cipher algorithms (FIPS-197). AES uses the Rijndael
  265. algorithm.
  266. Rijndael appears to be consistently a very good performer in
  267. both hardware and software across a wide range of computing
  268. environments regardless of its use in feedback or non-feedback
  269. modes. Its key setup time is excellent, and its key agility is
  270. good. Rijndael's very low memory requirements make it very well
  271. suited for restricted-space environments, in which it also
  272. demonstrates excellent performance. Rijndael's operations are
  273. among the easiest to defend against power and timing attacks.
  274. The AES specifies three key sizes: 128, 192 and 256 bits
  275. See <http://csrc.nist.gov/CryptoToolkit/aes/> for more information.
  276. config ADK_KPACKAGE_KMOD_CRYPTO_ANUBIS
  277. prompt "kmod-crypto-anubis................... Anubis cipher algorithm"
  278. tristate
  279. default n
  280. select ADK_KPACKAGE_KMOD_CRYPTO_ALGAPI
  281. help
  282. Anubis cipher algorithm.
  283. Anubis is a variable key length cipher which can use keys from
  284. 128 bits to 320 bits in length. It was evaluated as a entrant
  285. in the NESSIE competition.
  286. See also:
  287. <https://www.cosic.esat.kuleuven.ac.be/nessie/reports/>
  288. <http://planeta.terra.com.br/informatica/paulobarreto/AnubisPage.html>
  289. config ADK_KPACKAGE_KMOD_CRYPTO_ARC4
  290. prompt "kmod-crypto-arc4..................... ARC4 cipher algorithm"
  291. tristate
  292. default n
  293. select ADK_KPACKAGE_KMOD_CRYPTO_ALGAPI
  294. help
  295. ARC4 cipher algorithm.
  296. ARC4 is a stream cipher using keys ranging from 8 bits to 2048
  297. bits in length. This algorithm is required for driver-based
  298. WEP, but it should not be for other purposes because of the
  299. weakness of the algorithm.
  300. config ADK_KPACKAGE_KMOD_CRYPTO_BLOWFISH
  301. prompt "kmod-crypto-blowfish................. Blowfish cipher algorithm"
  302. tristate
  303. default n
  304. select ADK_KPACKAGE_KMOD_CRYPTO_ALGAPI
  305. help
  306. Blowfish cipher algorithm, by Bruce Schneier.
  307. This is a variable key length cipher which can use keys from 32
  308. bits to 448 bits in length. It's fast, simple and specifically
  309. designed for use on "large microprocessors".
  310. See also:
  311. <http://www.schneier.com/blowfish.html>
  312. config ADK_KPACKAGE_KMOD_CRYPTO_CAMELLIA
  313. prompt "kmod-crypto-camellia................. Camellia cipher algorithms"
  314. tristate
  315. default n
  316. select ADK_KPACKAGE_KMOD_CRYPTO_ALGAPI
  317. help
  318. Camellia cipher algorithms module.
  319. Camellia is a symmetric key block cipher developed jointly
  320. at NTT and Mitsubishi Electric Corporation.
  321. The Camellia specifies three key sizes: 128, 192 and 256 bits.
  322. See also:
  323. <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
  324. config ADK_KPACKAGE_KMOD_CRYPTO_CAST5
  325. prompt "kmod-crypto-cast5.................... CAST5 (CAST-128) cipher algorithm"
  326. tristate
  327. default n
  328. select ADK_KPACKAGE_KMOD_CRYPTO_ALGAPI
  329. help
  330. The CAST5 encryption algorithm (synonymous with CAST-128) is
  331. described in RFC2144.
  332. config ADK_KPACKAGE_KMOD_CRYPTO_CAST6
  333. prompt "kmod-crypto-cast6.................... CAST6 (CATS-256) cipher algorithm"
  334. tristate
  335. default n
  336. select ADK_KPACKAGE_KMOD_CRYPTO_ALGAPI
  337. help
  338. The CAST6 encryption algorithm (synonymous with CAST-256) is
  339. described in RFC2612.
  340. config ADK_KPACKAGE_KMOD_CRYPTO_DES
  341. prompt "kmod-crypto-des...................... DES and Triple DES EDE cipher algorithms"
  342. tristate
  343. default n
  344. select ADK_KPACKAGE_KMOD_CRYPTO_ALGAPI
  345. help
  346. DES cipher algorithm (FIPS 46-2), and Triple DES EDE (FIPS 46-3).
  347. config ADK_KPACKAGE_KMOD_CRYPTO_FCRYPT
  348. prompt "kmod-crypto-fcrypt................... FCrypt cipher algorithms"
  349. tristate
  350. default n
  351. select ADK_KPACKAGE_KMOD_CRYPTO_ALGAPI
  352. help
  353. FCrypt algorithm used by RxRPC.
  354. config ADK_KPACKAGE_KMOD_CRYPTO_KHAZAD
  355. prompt "kmod-crypto-khazad................... Khazad cipher algorithm"
  356. tristate
  357. default n
  358. select ADK_KPACKAGE_KMOD_CRYPTO_ALGAPI
  359. help
  360. Khazad cipher algorithm.
  361. Khazad was a finalist in the initial NESSIE competition. It is
  362. an algorithm optimized for 64-bit processors with good performance
  363. on 32-bit processors. Khazad uses an 128 bit key size.
  364. See also:
  365. <http://planeta.terra.com.br/informatica/paulobarreto/KhazadPage.html>
  366. config ADK_KPACKAGE_KMOD_CRYPTO_SERPENT
  367. prompt "kmod-crypto-serpent.................. Serpent cipher algorithm"
  368. tristate
  369. default n
  370. select ADK_KPACKAGE_KMOD_CRYPTO_ALGAPI
  371. help
  372. Serpent cipher algorithm, by Anderson, Biham & Knudsen.
  373. Keys are allowed to be from 0 to 256 bits in length, in steps
  374. of 8 bits. Also includes the 'Tnepres' algorithm, a reversed
  375. variant of Serpent for compatibility with old kerneli code.
  376. See also:
  377. <http://www.cl.cam.ac.uk/~rja14/serpent.html>
  378. config ADK_KPACKAGE_KMOD_CRYPTO_TEA
  379. prompt "kmod-crypto-tea...................... TEA, XTEA and XETA cipher algorithms"
  380. tristate
  381. default n
  382. select ADK_KPACKAGE_KMOD_CRYPTO_ALGAPI
  383. help
  384. TEA cipher algorithm.
  385. Tiny Encryption Algorithm is a simple cipher that uses
  386. many rounds for security. It is very fast and uses
  387. little memory.
  388. Xtendend Tiny Encryption Algorithm is a modification to
  389. the TEA algorithm to address a potential key weakness
  390. in the TEA algorithm.
  391. Xtendend Encryption Tiny Algorithm is a mis-implementation
  392. of the XTEA algorithm for compatibility purposes.
  393. config ADK_KPACKAGE_KMOD_CRYPTO_TWOFISH
  394. prompt "kmod-crypto-twofish.................. Twofish cipher algorithm"
  395. tristate
  396. default n
  397. select ADK_KPACKAGE_KMOD_CRYPTO_ALGAPI
  398. help
  399. Twofish cipher algorithm.
  400. Twofish was submitted as an AES (Advanced Encryption Standard)
  401. candidate cipher by researchers at CounterPane Systems. It is a
  402. 16 round block cipher supporting key sizes of 128, 192, and 256
  403. bits.
  404. See also:
  405. <http://www.schneier.com/twofish.html>
  406. config ADK_KPACKAGE_KMOD_CRYPTO_TWOFISH_586
  407. prompt "kmod-crypto-twofish-586.............. Twofish cipher algorithm (i586)"
  408. tristate
  409. default n
  410. select ADK_KPACKAGE_KMOD_CRYPTO_ALGAPI
  411. depends on ADK_x86
  412. help
  413. Twofish cipher algorithm.
  414. Twofish was submitted as an AES (Advanced Encryption Standard)
  415. candidate cipher by researchers at CounterPane Systems. It is a
  416. 16 round block cipher supporting key sizes of 128, 192, and 256
  417. bits.
  418. See also:
  419. <http://www.schneier.com/twofish.html>
  420. config ADK_KPACKAGE_KMOD_CRYPTO_NULL
  421. prompt "kmod-crypto-null..................... Null algorithms"
  422. tristate
  423. select ADK_KPACKAGE_KMOD_CRYPTO_BLKCIPHER
  424. select ADK_KPACKAGE_KMOD_CRYPTO_ALGAPI
  425. default n
  426. help
  427. These are 'Null' algorithms, used by IPsec, which do nothing.
  428. endmenu
  429. menu "Compression"
  430. config ADK_KPACKAGE_KMOD_CRYPTO_DEFLATE
  431. prompt "kmod-crypto-deflate.................. Deflate compression algorithm"
  432. tristate
  433. default n
  434. select ADK_KERNEL_CRYPTO
  435. help
  436. This is the Deflate algorithm (RFC1951), specified for use in
  437. IPSec with the IPCOMP protocol (RFC3173, RFC2394).
  438. You will most probably want this if using IPSec.
  439. config ADK_KPACKAGE_KMOD_CRYPTO_LZO
  440. prompt "kmod-crypto-lzo...................... LZO compression algorithm"
  441. tristate
  442. default n
  443. select ADK_KERNEL_CRYPTO
  444. help
  445. config ADK_KPACKAGE_KMOD_CRYPTO_MICHAEL_MIC
  446. prompt "kmod-crypto-michael-mic.............. Michael MIC keyed digest algorithm"
  447. tristate
  448. default n
  449. select ADK_KPACKAGE_KMOD_CRYPTO_ALGAPI
  450. help
  451. Michael MIC is used for message integrity protection in TKIP
  452. (IEEE 802.11i). This algorithm is required for TKIP, but it
  453. should not be used for other purposes because of the weakness
  454. of the algorithm.
  455. config ADK_KPACKAGE_KMOD_CRYPTO_CRC32C
  456. prompt "kmod-crypto-crc32c................... CRC32c CRC algorithm"
  457. tristate
  458. default n
  459. select ADK_KPACKAGE_KMOD_CRYPTO_HASH
  460. select ADK_KPACKAGE_KMOD_LIBCRC32C
  461. help
  462. Castagnoli, et al Cyclic Redundancy-Check Algorithm. Used
  463. by iSCSI for header and data digests and by others.
  464. See Castagnoli93. This implementation uses lib/libcrc32c.
  465. Module will be crc32c.
  466. endmenu
  467. endmenu