Config.in.crypto 16 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559
  1. menu "Crypto kernel modules"
  2. config ADK_KERNEL_CRYPTO
  3. boolean
  4. default n
  5. config ADK_KERNEL_CRYPTO_HW
  6. boolean
  7. default n
  8. config ADK_KERNEL_OCF_FIPS
  9. boolean
  10. default n
  11. config ADK_KERNEL_OCF_CRYPTODEV
  12. boolean
  13. default n
  14. config ADK_KERNEL_OCF_OCF
  15. boolean
  16. default n
  17. select ADK_KERNEL_CRYPTO
  18. select ADK_KERNEL_OCF_FIPS
  19. select ADK_KERNEL_OCF_CRYPTODEV
  20. config ADK_KERNEL_CRYPTO_AES
  21. boolean
  22. default n
  23. config ADK_KERNEL_CRYPTO_SHA256
  24. boolean
  25. default n
  26. config ADK_KERNEL_CRYPTO_CBC
  27. boolean
  28. default n
  29. comment "Hardware cryptography"
  30. menu "Hardware crypto devices"
  31. config ADK_KPACKAGE_KMOD_CRYPTO_DEV_GEODE
  32. prompt "Support for the Geode LX/GX AES engine"
  33. tristate
  34. select ADK_KERNEL_CRYPTO_HW
  35. select ADK_KERNEL_CRYPTO
  36. depends on ADK_LINUX_X86_ALIX1C
  37. help
  38. Say 'Y' here to use the AMD Geode LX processor on-board AES
  39. engine for the CryptoAPI AES algorithm.
  40. config ADK_KPACKAGE_KMOD_CRYPTO_DEV_HIFN_795X
  41. prompt "Driver HIFN 795x crypto accelerator chips"
  42. tristate
  43. select ADK_KERNEL_CRYPTO_HW
  44. select ADK_KERNEL_CRYPTO
  45. select ADK_KPACKAGE_KMOD_CRYPTO_BLKCIPHER
  46. select ADK_KPACKAGE_KMOD_CRYPTO_ALGAPI
  47. select ADK_KPACKAGE_KMOD_CRYPTO_DES
  48. help
  49. This option allows you to have support for HIFN 795x crypto adapters.
  50. endmenu
  51. menu "OpenBSD Cryptographic framework"
  52. depends on !ADK_LINUX_CRIS_FOXBOARD
  53. config ADK_KPACKAGE_KMOD_OCF_HIFN
  54. prompt "kmod-cryptodev-hifn................ hifn engine"
  55. tristate
  56. default n
  57. select ADK_KERNEL_OCF_OCF
  58. help
  59. Engine for cryptodev that uses Hifn based accelerators
  60. such as the 7951, 7955, 7956, 7751, 7811.
  61. config ADK_KPACKAGE_KMOD_OCF_SAFE
  62. prompt "kmod-cryptodev-safe................ safenet engine"
  63. tristate
  64. default n
  65. select ADK_KERNEL_OCF_OCF
  66. help
  67. Engine for cryptodev that uses a number of the safenet Excel
  68. crypto accelerators. Currently for the 1141 and 1741.
  69. config ADK_KPACKAGE_KMOD_OCF_IXP4XX
  70. prompt "kmod-cryptodev-ixp4xx.............. IXP4xx engine"
  71. tristate
  72. default n
  73. select ADK_KERNEL_OCF_OCF
  74. depends on ADK_arm
  75. help
  76. Engine for cryptodev that uses XScale IXP4xx.
  77. Requires the Intel Access library.
  78. config ADK_KPACKAGE_KMOD_OCF_TALITOS
  79. prompt "kmod-cryptodev-talitos............. talitos engine"
  80. tristate
  81. default n
  82. select ADK_KERNEL_OCF_OCF
  83. depends on ADK_powerpc || ADK_m68k || ADK_ppc
  84. help
  85. Engine for cryptodev that uses Freescale's security engine (SEC/talitos).
  86. endmenu
  87. comment "Software cryptography"
  88. menu "Crypto core / Block and Hash modes"
  89. config ADK_KPACKAGE_KMOD_CRYPTO_ALGAPI
  90. prompt "kmod-crypto-algapi.................. Crypto algorithm API"
  91. tristate
  92. default n
  93. select ADK_KERNEL_CRYPTO
  94. help
  95. config ADK_KPACKAGE_KMOD_CRYPTO_AEAD
  96. prompt "kmod-crypto-aead.................... Crypto algorithm AEAD"
  97. tristate
  98. default n
  99. select ADK_KERNEL_CRYPTO
  100. select ADK_KPACKAGE_KMOD_CRYPTO_ALGAPI
  101. help
  102. config ADK_KPACKAGE_KMOD_CRYPTO_MANAGER
  103. prompt "kmod-crypto-manager.................. Crypto algorithm manager"
  104. tristate
  105. default n
  106. select ADK_KPACKAGE_KMOD_CRYPTO_HASH
  107. select ADK_KPACKAGE_KMOD_CRYPTO_ALGAPI
  108. select ADK_KPACKAGE_KMOD_CRYPTO_AEAD
  109. help
  110. config ADK_KPACKAGE_KMOD_CRYPTO_HASH
  111. prompt "kmod-crypto-hash..................... Crypto hash support"
  112. tristate
  113. default n
  114. select ADK_KPACKAGE_KMOD_CRYPTO_ALGAPI
  115. help
  116. config ADK_KPACKAGE_KMOD_CRYPTO_BLKCIPHER
  117. prompt "kmod-crypto-blkcipher................ Crypto block cipher support"
  118. tristate
  119. default n
  120. select ADK_KPACKAGE_KMOD_CRYPTO_RNG2
  121. select ADK_KPACKAGE_KMOD_CRYPTO_ALGAPI
  122. help
  123. config ADK_KPACKAGE_KMOD_CRYPTO_CBC
  124. prompt "kmod-crypto-cbc...................... CBC support"
  125. tristate
  126. depends on !ADK_KERNEL_CRYPTO_CBC
  127. select ADK_KPACKAGE_KMOD_CRYPTO_BLKCIPHER
  128. select ADK_KPACKAGE_KMOD_CRYPTO_MANAGER
  129. default n
  130. help
  131. CBC: Cipher Block Chaining mode
  132. This block cipher algorithm is required for IPSec.
  133. config ADK_KPACKAGE_KMOD_CRYPTO_ECB
  134. prompt "kmod-crypto-ecb...................... ECB support"
  135. tristate
  136. default n
  137. select ADK_KPACKAGE_KMOD_CRYPTO_BLKCIPHER
  138. select ADK_KPACKAGE_KMOD_CRYPTO_MANAGER
  139. help
  140. ECB: Electronic CodeBook mode
  141. This is the simplest block cipher algorithm. It simply encrypts
  142. the input block by block.
  143. config ADK_KPACKAGE_KMOD_CRYPTO_HMAC
  144. prompt "kmod-crypto-hmac..................... HMAC support"
  145. tristate
  146. default n
  147. select ADK_KPACKAGE_KMOD_CRYPTO_HASH
  148. select ADK_KPACKAGE_KMOD_CRYPTO_MANAGER
  149. help
  150. HMAC: Keyed-Hashing for Message Authentication (RFC2104).
  151. This is required for IPSec.
  152. config ADK_KPACKAGE_KMOD_CRYPTO_RNG2
  153. prompt "kmod-crypto-rng...................... RNG support"
  154. tristate
  155. default n
  156. help
  157. Random number generator
  158. endmenu
  159. menu "Digest algorithms"
  160. config ADK_KPACKAGE_KMOD_CRYPTO_MD4
  161. prompt "kmod-crypto-md4...................... MD4 digest algorithm"
  162. tristate
  163. default n
  164. select ADK_KPACKAGE_KMOD_CRYPTO_ALGAPI
  165. select ADK_KPACKAGE_KMOD_CRYPTO_HASH
  166. help
  167. MD4 message digest algorithm (RFC1320).
  168. config ADK_KPACKAGE_KMOD_CRYPTO_MD5
  169. prompt "kmod-crypto-md5...................... MD5 digest algorithm"
  170. tristate
  171. default n
  172. select ADK_KPACKAGE_KMOD_CRYPTO_ALGAPI
  173. select ADK_KPACKAGE_KMOD_CRYPTO_HASH
  174. help
  175. MD5 message digest algorithm (RFC1321).
  176. config ADK_KPACKAGE_KMOD_CRYPTO_SHA1
  177. prompt "kmod-crypto-sha1..................... SHA1 digest algorithm"
  178. tristate
  179. default n
  180. select ADK_KPACKAGE_KMOD_CRYPTO_ALGAPI
  181. select ADK_KPACKAGE_KMOD_CRYPTO_HASH
  182. help
  183. SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2).
  184. config ADK_KPACKAGE_KMOD_CRYPTO_SHA256
  185. prompt "kmod-crypto-sha256................... SHA256 digest algorithm"
  186. tristate
  187. default n
  188. depends on !ADK_KERNEL_CRYPTO_SHA256
  189. select ADK_KPACKAGE_KMOD_CRYPTO_ALGAPI
  190. select ADK_KPACKAGE_KMOD_CRYPTO_HASH
  191. help
  192. SHA256 secure hash standard (DFIPS 180-2).
  193. This version of SHA implements a 256 bit hash with 128 bits of
  194. security against collision attacks.
  195. config ADK_KPACKAGE_KMOD_CRYPTO_SHA512
  196. prompt "kmod-crypto-sha512................... SHA512 digest algorithm"
  197. tristate
  198. default n
  199. select ADK_KPACKAGE_KMOD_CRYPTO_ALGAPI
  200. select ADK_KPACKAGE_KMOD_CRYPTO_HASH
  201. help
  202. SHA512 secure hash standard (DFIPS 180-2).
  203. This version of SHA implements a 512 bit hash with 256 bits of
  204. security against collision attacks.
  205. This code also includes SHA-384, a 384 bit hash with 192 bits
  206. of security against collision attacks.
  207. config ADK_KPACKAGE_KMOD_CRYPTO_WP512
  208. prompt "kmod-crypto-whirlpool................ Whirlpool digest algorithms"
  209. tristate
  210. default n
  211. select ADK_KPACKAGE_KMOD_CRYPTO_ALGAPI
  212. select ADK_KPACKAGE_KMOD_CRYPTO_HASH
  213. help
  214. Whirlpool hash algorithm 512, 384 and 256-bit hashes
  215. Whirlpool-512 is part of the NESSIE cryptographic primitives.
  216. Whirlpool will be part of the ISO/IEC 10118-3:2003(E) standard
  217. See also:
  218. <http://planeta.terra.com.br/informatica/paulobarreto/WhirlpoolPage.html>
  219. config ADK_KPACKAGE_KMOD_CRYPTO_TGR192
  220. prompt "kmod-crypto-tiger.................... Tiger digest algorithms"
  221. tristate
  222. default n
  223. select ADK_KPACKAGE_KMOD_CRYPTO_ALGAPI
  224. select ADK_KPACKAGE_KMOD_CRYPTO_HASH
  225. help
  226. Tiger hash algorithm 192, 160 and 128-bit hashes
  227. Tiger is a hash function optimized for 64-bit processors while
  228. still having decent performance on 32-bit processors.
  229. Tiger was developed by Ross Anderson and Eli Biham.
  230. See also:
  231. <http://www.cs.technion.ac.il/~biham/Reports/Tiger/>.
  232. endmenu
  233. menu "Cipher algoritms"
  234. config ADK_KPACKAGE_KMOD_CRYPTO_AES
  235. prompt "kmod-crypto-aes...................... AES cipher algorithms"
  236. tristate
  237. default n
  238. depends on !ADK_KERNEL_CRYPTO_AES
  239. select ADK_KPACKAGE_KMOD_CRYPTO_ALGAPI
  240. help
  241. AES cipher algorithms (FIPS-197). AES uses the Rijndael
  242. algorithm.
  243. Rijndael appears to be consistently a very good performer in
  244. both hardware and software across a wide range of computing
  245. environments regardless of its use in feedback or non-feedback
  246. modes. Its key setup time is excellent, and its key agility is
  247. good. Rijndael's very low memory requirements make it very well
  248. suited for restricted-space environments, in which it also
  249. demonstrates excellent performance. Rijndael's operations are
  250. among the easiest to defend against power and timing attacks.
  251. The AES specifies three key sizes: 128, 192 and 256 bits
  252. See <http://csrc.nist.gov/CryptoToolkit/aes/> for more information.
  253. config ADK_KPACKAGE_KMOD_CRYPTO_AES_586
  254. prompt "kmod-crypto-aes-i586................. AES cipher algorithms (i586)"
  255. tristate
  256. default n
  257. depends on ADK_x86
  258. select ADK_KPACKAGE_KMOD_CRYPTO_ALGAPI
  259. help
  260. AES cipher algorithms (FIPS-197). AES uses the Rijndael
  261. algorithm.
  262. Rijndael appears to be consistently a very good performer in
  263. both hardware and software across a wide range of computing
  264. environments regardless of its use in feedback or non-feedback
  265. modes. Its key setup time is excellent, and its key agility is
  266. good. Rijndael's very low memory requirements make it very well
  267. suited for restricted-space environments, in which it also
  268. demonstrates excellent performance. Rijndael's operations are
  269. among the easiest to defend against power and timing attacks.
  270. The AES specifies three key sizes: 128, 192 and 256 bits
  271. See <http://csrc.nist.gov/CryptoToolkit/aes/> for more information.
  272. config ADK_KPACKAGE_KMOD_CRYPTO_ANUBIS
  273. prompt "kmod-crypto-anubis................... Anubis cipher algorithm"
  274. tristate
  275. default n
  276. select ADK_KPACKAGE_KMOD_CRYPTO_ALGAPI
  277. help
  278. Anubis cipher algorithm.
  279. Anubis is a variable key length cipher which can use keys from
  280. 128 bits to 320 bits in length. It was evaluated as a entrant
  281. in the NESSIE competition.
  282. See also:
  283. <https://www.cosic.esat.kuleuven.ac.be/nessie/reports/>
  284. <http://planeta.terra.com.br/informatica/paulobarreto/AnubisPage.html>
  285. config ADK_KPACKAGE_KMOD_CRYPTO_ARC4
  286. prompt "kmod-crypto-arc4..................... ARC4 cipher algorithm"
  287. tristate
  288. default n
  289. select ADK_KPACKAGE_KMOD_CRYPTO_ALGAPI
  290. help
  291. ARC4 cipher algorithm.
  292. ARC4 is a stream cipher using keys ranging from 8 bits to 2048
  293. bits in length. This algorithm is required for driver-based
  294. WEP, but it should not be for other purposes because of the
  295. weakness of the algorithm.
  296. config ADK_KPACKAGE_KMOD_CRYPTO_BLOWFISH
  297. prompt "kmod-crypto-blowfish................. Blowfish cipher algorithm"
  298. tristate
  299. default n
  300. select ADK_KPACKAGE_KMOD_CRYPTO_ALGAPI
  301. help
  302. Blowfish cipher algorithm, by Bruce Schneier.
  303. This is a variable key length cipher which can use keys from 32
  304. bits to 448 bits in length. It's fast, simple and specifically
  305. designed for use on "large microprocessors".
  306. See also:
  307. <http://www.schneier.com/blowfish.html>
  308. config ADK_KPACKAGE_KMOD_CRYPTO_CAMELLIA
  309. prompt "kmod-crypto-camellia................. Camellia cipher algorithms"
  310. tristate
  311. default n
  312. select ADK_KPACKAGE_KMOD_CRYPTO_ALGAPI
  313. help
  314. Camellia cipher algorithms module.
  315. Camellia is a symmetric key block cipher developed jointly
  316. at NTT and Mitsubishi Electric Corporation.
  317. The Camellia specifies three key sizes: 128, 192 and 256 bits.
  318. See also:
  319. <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
  320. config ADK_KPACKAGE_KMOD_CRYPTO_CAST5
  321. prompt "kmod-crypto-cast5.................... CAST5 (CAST-128) cipher algorithm"
  322. tristate
  323. default n
  324. select ADK_KPACKAGE_KMOD_CRYPTO_ALGAPI
  325. help
  326. The CAST5 encryption algorithm (synonymous with CAST-128) is
  327. described in RFC2144.
  328. config ADK_KPACKAGE_KMOD_CRYPTO_CAST6
  329. prompt "kmod-crypto-cast6.................... CAST6 (CATS-256) cipher algorithm"
  330. tristate
  331. default n
  332. select ADK_KPACKAGE_KMOD_CRYPTO_ALGAPI
  333. help
  334. The CAST6 encryption algorithm (synonymous with CAST-256) is
  335. described in RFC2612.
  336. config ADK_KPACKAGE_KMOD_CRYPTO_DES
  337. prompt "kmod-crypto-des...................... DES and Triple DES EDE cipher algorithms"
  338. tristate
  339. default n
  340. select ADK_KPACKAGE_KMOD_CRYPTO_ALGAPI
  341. help
  342. DES cipher algorithm (FIPS 46-2), and Triple DES EDE (FIPS 46-3).
  343. config ADK_KPACKAGE_KMOD_CRYPTO_FCRYPT
  344. prompt "kmod-crypto-fcrypt................... FCrypt cipher algorithms"
  345. tristate
  346. default n
  347. select ADK_KPACKAGE_KMOD_CRYPTO_ALGAPI
  348. help
  349. FCrypt algorithm used by RxRPC.
  350. config ADK_KPACKAGE_KMOD_CRYPTO_KHAZAD
  351. prompt "kmod-crypto-khazad................... Khazad cipher algorithm"
  352. tristate
  353. default n
  354. select ADK_KPACKAGE_KMOD_CRYPTO_ALGAPI
  355. help
  356. Khazad cipher algorithm.
  357. Khazad was a finalist in the initial NESSIE competition. It is
  358. an algorithm optimized for 64-bit processors with good performance
  359. on 32-bit processors. Khazad uses an 128 bit key size.
  360. See also:
  361. <http://planeta.terra.com.br/informatica/paulobarreto/KhazadPage.html>
  362. config ADK_KPACKAGE_KMOD_CRYPTO_SERPENT
  363. prompt "kmod-crypto-serpent.................. Serpent cipher algorithm"
  364. tristate
  365. default n
  366. select ADK_KPACKAGE_KMOD_CRYPTO_ALGAPI
  367. help
  368. Serpent cipher algorithm, by Anderson, Biham & Knudsen.
  369. Keys are allowed to be from 0 to 256 bits in length, in steps
  370. of 8 bits. Also includes the 'Tnepres' algorithm, a reversed
  371. variant of Serpent for compatibility with old kerneli code.
  372. See also:
  373. <http://www.cl.cam.ac.uk/~rja14/serpent.html>
  374. config ADK_KPACKAGE_KMOD_CRYPTO_TEA
  375. prompt "kmod-crypto-tea...................... TEA, XTEA and XETA cipher algorithms"
  376. tristate
  377. default n
  378. select ADK_KPACKAGE_KMOD_CRYPTO_ALGAPI
  379. help
  380. TEA cipher algorithm.
  381. Tiny Encryption Algorithm is a simple cipher that uses
  382. many rounds for security. It is very fast and uses
  383. little memory.
  384. Xtendend Tiny Encryption Algorithm is a modification to
  385. the TEA algorithm to address a potential key weakness
  386. in the TEA algorithm.
  387. Xtendend Encryption Tiny Algorithm is a mis-implementation
  388. of the XTEA algorithm for compatibility purposes.
  389. config ADK_KPACKAGE_KMOD_CRYPTO_TWOFISH
  390. prompt "kmod-crypto-twofish.................. Twofish cipher algorithm"
  391. tristate
  392. default n
  393. select ADK_KPACKAGE_KMOD_CRYPTO_ALGAPI
  394. help
  395. Twofish cipher algorithm.
  396. Twofish was submitted as an AES (Advanced Encryption Standard)
  397. candidate cipher by researchers at CounterPane Systems. It is a
  398. 16 round block cipher supporting key sizes of 128, 192, and 256
  399. bits.
  400. See also:
  401. <http://www.schneier.com/twofish.html>
  402. config ADK_KPACKAGE_KMOD_CRYPTO_TWOFISH_586
  403. prompt "kmod-crypto-twofish-586.............. Twofish cipher algorithm (i586)"
  404. tristate
  405. default n
  406. select ADK_KPACKAGE_KMOD_CRYPTO_ALGAPI
  407. depends on ADK_x86
  408. help
  409. Twofish cipher algorithm.
  410. Twofish was submitted as an AES (Advanced Encryption Standard)
  411. candidate cipher by researchers at CounterPane Systems. It is a
  412. 16 round block cipher supporting key sizes of 128, 192, and 256
  413. bits.
  414. See also:
  415. <http://www.schneier.com/twofish.html>
  416. config ADK_KPACKAGE_KMOD_CRYPTO_NULL
  417. prompt "kmod-crypto-null..................... Null algorithms"
  418. tristate
  419. select ADK_KPACKAGE_KMOD_CRYPTO_BLKCIPHER
  420. select ADK_KPACKAGE_KMOD_CRYPTO_ALGAPI
  421. default n
  422. help
  423. These are 'Null' algorithms, used by IPsec, which do nothing.
  424. endmenu
  425. menu "Compression"
  426. config ADK_KPACKAGE_KMOD_CRYPTO_DEFLATE
  427. prompt "kmod-crypto-deflate.................. Deflate compression algorithm"
  428. tristate
  429. default n
  430. select ADK_KERNEL_CRYPTO
  431. help
  432. This is the Deflate algorithm (RFC1951), specified for use in
  433. IPSec with the IPCOMP protocol (RFC3173, RFC2394).
  434. You will most probably want this if using IPSec.
  435. config ADK_KPACKAGE_KMOD_CRYPTO_LZO
  436. prompt "kmod-crypto-lzo...................... LZO compression algorithm"
  437. tristate
  438. default n
  439. select ADK_KERNEL_CRYPTO
  440. help
  441. config ADK_KPACKAGE_KMOD_CRYPTO_MICHAEL_MIC
  442. prompt "kmod-crypto-michael-mic.............. Michael MIC keyed digest algorithm"
  443. tristate
  444. default n
  445. select ADK_KPACKAGE_KMOD_CRYPTO_ALGAPI
  446. help
  447. Michael MIC is used for message integrity protection in TKIP
  448. (IEEE 802.11i). This algorithm is required for TKIP, but it
  449. should not be used for other purposes because of the weakness
  450. of the algorithm.
  451. config ADK_KPACKAGE_KMOD_CRYPTO_CRC32C
  452. prompt "kmod-crypto-crc32c................... CRC32c CRC algorithm"
  453. tristate
  454. default n
  455. select ADK_KPACKAGE_KMOD_CRYPTO_HASH
  456. select ADK_KPACKAGE_KMOD_LIBCRC32C
  457. help
  458. Castagnoli, et al Cyclic Redundancy-Check Algorithm. Used
  459. by iSCSI for header and data digests and by others.
  460. See Castagnoli93. This implementation uses lib/libcrc32c.
  461. Module will be crc32c.
  462. endmenu
  463. endmenu