crypto/Kconfig

   1 #
   2 # Generic algorithms support
   3 #
   4 config XOR_BLOCKS
   5         tristate
   6
   7 #
   8 # async_tx api: hardware offloaded memory transfer/transform support
   9 #
  10 source "crypto/async_tx/Kconfig"
  11
  12 #
  13 # Cryptographic API Configuration
  14 #
  15 menuconfig CRYPTO
  16         tristate "Cryptographic API"
  17         help
  18           This option provides the core Cryptographic API.
  19
  20 if CRYPTO
  21
  22 comment "Crypto core or helper"
  23
  24 config CRYPTO_FIPS
  25         bool "FIPS 200 compliance"
  26         help
  27           This options enables the fips boot option which is
  28           required if you want to system to operate in a FIPS 200
  29           certification.  You should say no unless you know what
  30           this is.
  31
  32 config CRYPTO_ALGAPI
  33         tristate
  34         select CRYPTO_ALGAPI2
  35         help
  36           This option provides the API for cryptographic algorithms.
  37
  38 config CRYPTO_ALGAPI2
  39         tristate
  40
  41 config CRYPTO_AEAD
  42         tristate
  43         select CRYPTO_AEAD2
  44         select CRYPTO_ALGAPI
  45
  46 config CRYPTO_AEAD2
  47         tristate
  48         select CRYPTO_ALGAPI2
  49
  50 config CRYPTO_BLKCIPHER
  51         tristate
  52         select CRYPTO_BLKCIPHER2
  53         select CRYPTO_ALGAPI
  54
  55 config CRYPTO_BLKCIPHER2
  56         tristate
  57         select CRYPTO_ALGAPI2
  58         select CRYPTO_RNG2
  59
  60 config CRYPTO_HASH
  61         tristate
  62         select CRYPTO_HASH2
  63         select CRYPTO_ALGAPI
  64
  65 config CRYPTO_HASH2
  66         tristate
  67         select CRYPTO_ALGAPI2
  68
  69 config CRYPTO_RNG
  70         tristate
  71         select CRYPTO_RNG2
  72         select CRYPTO_ALGAPI
  73
  74 config CRYPTO_RNG2
  75         tristate
  76         select CRYPTO_ALGAPI2
  77
  78 config CRYPTO_MANAGER
  79         tristate "Cryptographic algorithm manager"
  80         select CRYPTO_MANAGER2
  81         help
  82           Create default cryptographic template instantiations such as
  83           cbc(aes).
  84
  85 config CRYPTO_MANAGER2
  86         def_tristate CRYPTO_MANAGER || (CRYPTO_MANAGER!=n && CRYPTO_ALGAPI=y)
  87         select CRYPTO_AEAD2
  88         select CRYPTO_HASH2
  89         select CRYPTO_BLKCIPHER2
  90
  91 config CRYPTO_GF128MUL
  92         tristate "GF(2^128) multiplication functions (EXPERIMENTAL)"
  93         depends on EXPERIMENTAL
  94         help
  95           Efficient table driven implementation of multiplications in the
  96           field GF(2^128).  This is needed by some cypher modes. This
  97           option will be selected automatically if you select such a
  98           cipher mode.  Only select this option by hand if you expect to load
  99           an external module that requires these functions.
 100
 101 config CRYPTO_NULL
 102         tristate "Null algorithms"
 103         select CRYPTO_ALGAPI
 104         select CRYPTO_BLKCIPHER
 105         help
 106           These are 'Null' algorithms, used by IPsec, which do nothing.
 107
 108 config CRYPTO_CRYPTD
 109         tristate "Software async crypto daemon"
 110         select CRYPTO_BLKCIPHER
 111         select CRYPTO_HASH
 112         select CRYPTO_MANAGER
 113         help
 114           This is a generic software asynchronous crypto daemon that
 115           converts an arbitrary synchronous software crypto algorithm
 116           into an asynchronous algorithm that executes in a kernel thread.
 117
 118 config CRYPTO_AUTHENC
 119         tristate "Authenc support"
 120         select CRYPTO_AEAD
 121         select CRYPTO_BLKCIPHER
 122         select CRYPTO_MANAGER
 123         select CRYPTO_HASH
 124         help
 125           Authenc: Combined mode wrapper for IPsec.
 126           This is required for IPSec.
 127
 128 config CRYPTO_TEST
 129         tristate "Testing module"
 130         depends on m
 131         select CRYPTO_MANAGER
 132         help
 133           Quick & dirty crypto test module.
 134
 135 comment "Authenticated Encryption with Associated Data"
 136
 137 config CRYPTO_CCM
 138         tristate "CCM support"
 139         select CRYPTO_CTR
 140         select CRYPTO_AEAD
 141         help
 142           Support for Counter with CBC MAC. Required for IPsec.
 143
 144 config CRYPTO_GCM
 145         tristate "GCM/GMAC support"
 146         select CRYPTO_CTR
 147         select CRYPTO_AEAD
 148         select CRYPTO_GF128MUL
 149         help
 150           Support for Galois/Counter Mode (GCM) and Galois Message
 151           Authentication Code (GMAC). Required for IPSec.
 152
 153 config CRYPTO_SEQIV
 154         tristate "Sequence Number IV Generator"
 155         select CRYPTO_AEAD
 156         select CRYPTO_BLKCIPHER
 157         select CRYPTO_RNG
 158         help
 159           This IV generator generates an IV based on a sequence number by
 160           xoring it with a salt.  This algorithm is mainly useful for CTR
 161
 162 comment "Block modes"
 163
 164 config CRYPTO_CBC
 165         tristate "CBC support"
 166         select CRYPTO_BLKCIPHER
 167         select CRYPTO_MANAGER
 168         help
 169           CBC: Cipher Block Chaining mode
 170           This block cipher algorithm is required for IPSec.
 171
 172 config CRYPTO_CTR
 173         tristate "CTR support"
 174         select CRYPTO_BLKCIPHER
 175         select CRYPTO_SEQIV
 176         select CRYPTO_MANAGER
 177         help
 178           CTR: Counter mode
 179           This block cipher algorithm is required for IPSec.
 180
 181 config CRYPTO_CTS
 182         tristate "CTS support"
 183         select CRYPTO_BLKCIPHER
 184         help
 185           CTS: Cipher Text Stealing
 186           This is the Cipher Text Stealing mode as described by
 187           Section 8 of rfc2040 and referenced by rfc3962.
 188           (rfc3962 includes errata information in its Appendix A)
 189           This mode is required for Kerberos gss mechanism support
 190           for AES encryption.
 191
 192 config CRYPTO_ECB
 193         tristate "ECB support"
 194         select CRYPTO_BLKCIPHER
 195         select CRYPTO_MANAGER
 196         help
 197           ECB: Electronic CodeBook mode
 198           This is the simplest block cipher algorithm.  It simply encrypts
 199           the input block by block.
 200
 201 config CRYPTO_LRW
 202         tristate "LRW support (EXPERIMENTAL)"
 203         depends on EXPERIMENTAL
 204         select CRYPTO_BLKCIPHER
 205         select CRYPTO_MANAGER
 206         select CRYPTO_GF128MUL
 207         help
 208           LRW: Liskov Rivest Wagner, a tweakable, non malleable, non movable
 209           narrow block cipher mode for dm-crypt.  Use it with cipher
 210           specification string aes-lrw-benbi, the key must be 256, 320 or 384.
 211           The first 128, 192 or 256 bits in the key are used for AES and the
 212           rest is used to tie each cipher block to its logical position.
 213
 214 config CRYPTO_PCBC
 215         tristate "PCBC support"
 216         select CRYPTO_BLKCIPHER
 217         select CRYPTO_MANAGER
 218         help
 219           PCBC: Propagating Cipher Block Chaining mode
 220           This block cipher algorithm is required for RxRPC.
 221
 222 config CRYPTO_XTS
 223         tristate "XTS support (EXPERIMENTAL)"
 224         depends on EXPERIMENTAL
 225         select CRYPTO_BLKCIPHER
 226         select CRYPTO_MANAGER
 227         select CRYPTO_GF128MUL
 228         help
 229           XTS: IEEE1619/D16 narrow block cipher use with aes-xts-plain,
 230           key size 256, 384 or 512 bits. This implementation currently
 231           can't handle a sectorsize which is not a multiple of 16 bytes.
 232
 233 comment "Hash modes"
 234
 235 config CRYPTO_HMAC
 236         tristate "HMAC support"
 237         select CRYPTO_HASH
 238         select CRYPTO_MANAGER
 239         help
 240           HMAC: Keyed-Hashing for Message Authentication (RFC2104).
 241           This is required for IPSec.
 242
 243 config CRYPTO_XCBC
 244         tristate "XCBC support"
 245         depends on EXPERIMENTAL
 246         select CRYPTO_HASH
 247         select CRYPTO_MANAGER
 248         help
 249           XCBC: Keyed-Hashing with encryption algorithm
 250                 http://www.ietf.org/rfc/rfc3566.txt
 251                 http://csrc.nist.gov/encryption/modes/proposedmodes/
 252                  xcbc-mac/xcbc-mac-spec.pdf
 253
 254 comment "Digest"
 255
 256 config CRYPTO_CRC32C
 257         tristate "CRC32c CRC algorithm"
 258         select CRYPTO_HASH
 259         help
 260           Castagnoli, et al Cyclic Redundancy-Check Algorithm.  Used
 261           by iSCSI for header and data digests and by others.
 262           See Castagnoli93.  Module will be crc32c.
 263
 264 config CRYPTO_CRC32C_INTEL
 265         tristate "CRC32c INTEL hardware acceleration"
 266         depends on X86
 267         select CRYPTO_HASH
 268         help
 269           In Intel processor with SSE4.2 supported, the processor will
 270           support CRC32C implementation using hardware accelerated CRC32
 271           instruction. This option will create 'crc32c-intel' module,
 272           which will enable any routine to use the CRC32 instruction to
 273           gain performance compared with software implementation.
 274           Module will be crc32c-intel.
 275
 276 config CRYPTO_MD4
 277         tristate "MD4 digest algorithm"
 278         select CRYPTO_ALGAPI
 279         help
 280           MD4 message digest algorithm (RFC1320).
 281
 282 config CRYPTO_MD5
 283         tristate "MD5 digest algorithm"
 284         select CRYPTO_ALGAPI
 285         help
 286           MD5 message digest algorithm (RFC1321).
 287
 288 config CRYPTO_MICHAEL_MIC
 289         tristate "Michael MIC keyed digest algorithm"
 290         select CRYPTO_ALGAPI
 291         help
 292           Michael MIC is used for message integrity protection in TKIP
 293           (IEEE 802.11i). This algorithm is required for TKIP, but it
 294           should not be used for other purposes because of the weakness
 295           of the algorithm.
 296
 297 config CRYPTO_RMD128
 298         tristate "RIPEMD-128 digest algorithm"
 299         select CRYPTO_ALGAPI
 300         help
 301           RIPEMD-128 (ISO/IEC 10118-3:2004).
 302
 303           RIPEMD-128 is a 128-bit cryptographic hash function. It should only
 304           to be used as a secure replacement for RIPEMD. For other use cases
 305           RIPEMD-160 should be used.
 306
 307           Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
 308           See <http://home.esat.kuleuven.be/~bosselae/ripemd160.html>
 309
 310 config CRYPTO_RMD160
 311         tristate "RIPEMD-160 digest algorithm"
 312         select CRYPTO_ALGAPI
 313         help
 314           RIPEMD-160 (ISO/IEC 10118-3:2004).
 315
 316           RIPEMD-160 is a 160-bit cryptographic hash function. It is intended
 317           to be used as a secure replacement for the 128-bit hash functions
 318           MD4, MD5 and it's predecessor RIPEMD
 319           (not to be confused with RIPEMD-128).
 320
 321           It's speed is comparable to SHA1 and there are no known attacks
 322           against RIPEMD-160.
 323
 324           Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
 325           See <http://home.esat.kuleuven.be/~bosselae/ripemd160.html>
 326
 327 config CRYPTO_RMD256
 328         tristate "RIPEMD-256 digest algorithm"
 329         select CRYPTO_ALGAPI
 330         help
 331           RIPEMD-256 is an optional extension of RIPEMD-128 with a
 332           256 bit hash. It is intended for applications that require
 333           longer hash-results, without needing a larger security level
 334           (than RIPEMD-128).
 335
 336           Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
 337           See <http://home.esat.kuleuven.be/~bosselae/ripemd160.html>
 338
 339 config CRYPTO_RMD320
 340         tristate "RIPEMD-320 digest algorithm"
 341         select CRYPTO_ALGAPI
 342         help
 343           RIPEMD-320 is an optional extension of RIPEMD-160 with a
 344           320 bit hash. It is intended for applications that require
 345           longer hash-results, without needing a larger security level
 346           (than RIPEMD-160).
 347
 348           Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
 349           See <http://home.esat.kuleuven.be/~bosselae/ripemd160.html>
 350
 351 config CRYPTO_SHA1
 352         tristate "SHA1 digest algorithm"
 353         select CRYPTO_ALGAPI
 354         help
 355           SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2).
 356
 357 config CRYPTO_SHA256
 358         tristate "SHA224 and SHA256 digest algorithm"
 359         select CRYPTO_ALGAPI
 360         help
 361           SHA256 secure hash standard (DFIPS 180-2).
 362
 363           This version of SHA implements a 256 bit hash with 128 bits of
 364           security against collision attacks.
 365
 366           This code also includes SHA-224, a 224 bit hash with 112 bits
 367           of security against collision attacks.
 368
 369 config CRYPTO_SHA512
 370         tristate "SHA384 and SHA512 digest algorithms"
 371         select CRYPTO_ALGAPI
 372         help
 373           SHA512 secure hash standard (DFIPS 180-2).
 374
 375           This version of SHA implements a 512 bit hash with 256 bits of
 376           security against collision attacks.
 377
 378           This code also includes SHA-384, a 384 bit hash with 192 bits
 379           of security against collision attacks.
 380
 381 config CRYPTO_TGR192
 382         tristate "Tiger digest algorithms"
 383         select CRYPTO_ALGAPI
 384         help
 385           Tiger hash algorithm 192, 160 and 128-bit hashes
 386
 387           Tiger is a hash function optimized for 64-bit processors while
 388           still having decent performance on 32-bit processors.
 389           Tiger was developed by Ross Anderson and Eli Biham.
 390
 391           See also:
 392           <http://www.cs.technion.ac.il/~biham/Reports/Tiger/>.
 393
 394 config CRYPTO_WP512
 395         tristate "Whirlpool digest algorithms"
 396         select CRYPTO_ALGAPI
 397         help
 398           Whirlpool hash algorithm 512, 384 and 256-bit hashes
 399
 400           Whirlpool-512 is part of the NESSIE cryptographic primitives.
 401           Whirlpool will be part of the ISO/IEC 10118-3:2003(E) standard
 402
 403           See also:
 404           <http://planeta.terra.com.br/informatica/paulobarreto/WhirlpoolPage.html>
 405
 406 comment "Ciphers"
 407
 408 config CRYPTO_AES
 409         tristate "AES cipher algorithms"
 410         select CRYPTO_ALGAPI
 411         help
 412           AES cipher algorithms (FIPS-197). AES uses the Rijndael
 413           algorithm.
 414
 415           Rijndael appears to be consistently a very good performer in
 416           both hardware and software across a wide range of computing
 417           environments regardless of its use in feedback or non-feedback
 418           modes. Its key setup time is excellent, and its key agility is
 419           good. Rijndael's very low memory requirements make it very well
 420           suited for restricted-space environments, in which it also
 421           demonstrates excellent performance. Rijndael's operations are
 422           among the easiest to defend against power and timing attacks.
 423
 424           The AES specifies three key sizes: 128, 192 and 256 bits
 425
 426           See <http://csrc.nist.gov/CryptoToolkit/aes/> for more information.
 427
 428 config CRYPTO_AES_586
 429         tristate "AES cipher algorithms (i586)"
 430         depends on (X86 || UML_X86) && !64BIT
 431         select CRYPTO_ALGAPI
 432         select CRYPTO_AES
 433         help
 434           AES cipher algorithms (FIPS-197). AES uses the Rijndael
 435           algorithm.
 436
 437           Rijndael appears to be consistently a very good performer in
 438           both hardware and software across a wide range of computing
 439           environments regardless of its use in feedback or non-feedback
 440           modes. Its key setup time is excellent, and its key agility is
 441           good. Rijndael's very low memory requirements make it very well
 442           suited for restricted-space environments, in which it also
 443           demonstrates excellent performance. Rijndael's operations are
 444           among the easiest to defend against power and timing attacks.
 445
 446           The AES specifies three key sizes: 128, 192 and 256 bits
 447
 448           See <http://csrc.nist.gov/encryption/aes/> for more information.
 449
 450 config CRYPTO_AES_X86_64
 451         tristate "AES cipher algorithms (x86_64)"
 452         depends on (X86 || UML_X86) && 64BIT
 453         select CRYPTO_ALGAPI
 454         select CRYPTO_AES
 455         help
 456           AES cipher algorithms (FIPS-197). AES uses the Rijndael
 457           algorithm.
 458
 459           Rijndael appears to be consistently a very good performer in
 460           both hardware and software across a wide range of computing
 461           environments regardless of its use in feedback or non-feedback
 462           modes. Its key setup time is excellent, and its key agility is
 463           good. Rijndael's very low memory requirements make it very well
 464           suited for restricted-space environments, in which it also
 465           demonstrates excellent performance. Rijndael's operations are
 466           among the easiest to defend against power and timing attacks.
 467
 468           The AES specifies three key sizes: 128, 192 and 256 bits
 469
 470           See <http://csrc.nist.gov/encryption/aes/> for more information.
 471
 472 config CRYPTO_ANUBIS
 473         tristate "Anubis cipher algorithm"
 474         select CRYPTO_ALGAPI
 475         help
 476           Anubis cipher algorithm.
 477
 478           Anubis is a variable key length cipher which can use keys from
 479           128 bits to 320 bits in length.  It was evaluated as a entrant
 480           in the NESSIE competition.
 481
 482           See also:
 483           <https://www.cosic.esat.kuleuven.ac.be/nessie/reports/>
 484           <http://planeta.terra.com.br/informatica/paulobarreto/AnubisPage.html>
 485
 486 config CRYPTO_ARC4
 487         tristate "ARC4 cipher algorithm"
 488         select CRYPTO_ALGAPI
 489         help
 490           ARC4 cipher algorithm.
 491
 492           ARC4 is a stream cipher using keys ranging from 8 bits to 2048
 493           bits in length.  This algorithm is required for driver-based
 494           WEP, but it should not be for other purposes because of the
 495           weakness of the algorithm.
 496
 497 config CRYPTO_BLOWFISH
 498         tristate "Blowfish cipher algorithm"
 499         select CRYPTO_ALGAPI
 500         help
 501           Blowfish cipher algorithm, by Bruce Schneier.
 502
 503           This is a variable key length cipher which can use keys from 32
 504           bits to 448 bits in length.  It's fast, simple and specifically
 505           designed for use on "large microprocessors".
 506
 507           See also:
 508           <http://www.schneier.com/blowfish.html>
 509
 510 config CRYPTO_CAMELLIA
 511         tristate "Camellia cipher algorithms"
 512         depends on CRYPTO
 513         select CRYPTO_ALGAPI
 514         help
 515           Camellia cipher algorithms module.
 516
 517           Camellia is a symmetric key block cipher developed jointly
 518           at NTT and Mitsubishi Electric Corporation.
 519
 520           The Camellia specifies three key sizes: 128, 192 and 256 bits.
 521
 522           See also:
 523           <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
 524
 525 config CRYPTO_CAST5
 526         tristate "CAST5 (CAST-128) cipher algorithm"
 527         select CRYPTO_ALGAPI
 528         help
 529           The CAST5 encryption algorithm (synonymous with CAST-128) is
 530           described in RFC2144.
 531
 532 config CRYPTO_CAST6
 533         tristate "CAST6 (CAST-256) cipher algorithm"
 534         select CRYPTO_ALGAPI
 535         help
 536           The CAST6 encryption algorithm (synonymous with CAST-256) is
 537           described in RFC2612.
 538
 539 config CRYPTO_DES
 540         tristate "DES and Triple DES EDE cipher algorithms"
 541         select CRYPTO_ALGAPI
 542         help
 543           DES cipher algorithm (FIPS 46-2), and Triple DES EDE (FIPS 46-3).
 544
 545 config CRYPTO_FCRYPT
 546         tristate "FCrypt cipher algorithm"
 547         select CRYPTO_ALGAPI
 548         select CRYPTO_BLKCIPHER
 549         help
 550           FCrypt algorithm used by RxRPC.
 551
 552 config CRYPTO_KHAZAD
 553         tristate "Khazad cipher algorithm"
 554         select CRYPTO_ALGAPI
 555         help
 556           Khazad cipher algorithm.
 557
 558           Khazad was a finalist in the initial NESSIE competition.  It is
 559           an algorithm optimized for 64-bit processors with good performance
 560           on 32-bit processors.  Khazad uses an 128 bit key size.
 561
 562           See also:
 563           <http://planeta.terra.com.br/informatica/paulobarreto/KhazadPage.html>
 564
 565 config CRYPTO_SALSA20
 566         tristate "Salsa20 stream cipher algorithm (EXPERIMENTAL)"
 567         depends on EXPERIMENTAL
 568         select CRYPTO_BLKCIPHER
 569         help
 570           Salsa20 stream cipher algorithm.
 571
 572           Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
 573           Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
 574
 575           The Salsa20 stream cipher algorithm is designed by Daniel J.
 576           Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
 577
 578 config CRYPTO_SALSA20_586
 579         tristate "Salsa20 stream cipher algorithm (i586) (EXPERIMENTAL)"
 580         depends on (X86 || UML_X86) && !64BIT
 581         depends on EXPERIMENTAL
 582         select CRYPTO_BLKCIPHER
 583         help
 584           Salsa20 stream cipher algorithm.
 585
 586           Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
 587           Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
 588
 589           The Salsa20 stream cipher algorithm is designed by Daniel J.
 590           Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
 591
 592 config CRYPTO_SALSA20_X86_64
 593         tristate "Salsa20 stream cipher algorithm (x86_64) (EXPERIMENTAL)"
 594         depends on (X86 || UML_X86) && 64BIT
 595         depends on EXPERIMENTAL
 596         select CRYPTO_BLKCIPHER
 597         help
 598           Salsa20 stream cipher algorithm.
 599
 600           Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
 601           Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
 602
 603           The Salsa20 stream cipher algorithm is designed by Daniel J.
 604           Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
 605
 606 config CRYPTO_SEED
 607         tristate "SEED cipher algorithm"
 608         select CRYPTO_ALGAPI
 609         help
 610           SEED cipher algorithm (RFC4269).
 611
 612           SEED is a 128-bit symmetric key block cipher that has been
 613           developed by KISA (Korea Information Security Agency) as a
 614           national standard encryption algorithm of the Republic of Korea.
 615           It is a 16 round block cipher with the key size of 128 bit.
 616
 617           See also:
 618           <http://www.kisa.or.kr/kisa/seed/jsp/seed_eng.jsp>
 619
 620 config CRYPTO_SERPENT
 621         tristate "Serpent cipher algorithm"
 622         select CRYPTO_ALGAPI
 623         help
 624           Serpent cipher algorithm, by Anderson, Biham & Knudsen.
 625
 626           Keys are allowed to be from 0 to 256 bits in length, in steps
 627           of 8 bits.  Also includes the 'Tnepres' algorithm, a reversed
 628           variant of Serpent for compatibility with old kerneli.org code.
 629
 630           See also:
 631           <http://www.cl.cam.ac.uk/~rja14/serpent.html>
 632
 633 config CRYPTO_TEA
 634         tristate "TEA, XTEA and XETA cipher algorithms"
 635         select CRYPTO_ALGAPI
 636         help
 637           TEA cipher algorithm.
 638
 639           Tiny Encryption Algorithm is a simple cipher that uses
 640           many rounds for security.  It is very fast and uses
 641           little memory.
 642
 643           Xtendend Tiny Encryption Algorithm is a modification to
 644           the TEA algorithm to address a potential key weakness
 645           in the TEA algorithm.
 646
 647           Xtendend Encryption Tiny Algorithm is a mis-implementation
 648           of the XTEA algorithm for compatibility purposes.
 649
 650 config CRYPTO_TWOFISH
 651         tristate "Twofish cipher algorithm"
 652         select CRYPTO_ALGAPI
 653         select CRYPTO_TWOFISH_COMMON
 654         help
 655           Twofish cipher algorithm.
 656
 657           Twofish was submitted as an AES (Advanced Encryption Standard)
 658           candidate cipher by researchers at CounterPane Systems.  It is a
 659           16 round block cipher supporting key sizes of 128, 192, and 256
 660           bits.
 661
 662           See also:
 663           <http://www.schneier.com/twofish.html>
 664
 665 config CRYPTO_TWOFISH_COMMON
 666         tristate
 667         help
 668           Common parts of the Twofish cipher algorithm shared by the
 669           generic c and the assembler implementations.
 670
 671 config CRYPTO_TWOFISH_586
 672         tristate "Twofish cipher algorithms (i586)"
 673         depends on (X86 || UML_X86) && !64BIT
 674         select CRYPTO_ALGAPI
 675         select CRYPTO_TWOFISH_COMMON
 676         help
 677           Twofish cipher algorithm.
 678
 679           Twofish was submitted as an AES (Advanced Encryption Standard)
 680           candidate cipher by researchers at CounterPane Systems.  It is a
 681           16 round block cipher supporting key sizes of 128, 192, and 256
 682           bits.
 683
 684           See also:
 685           <http://www.schneier.com/twofish.html>
 686
 687 config CRYPTO_TWOFISH_X86_64
 688         tristate "Twofish cipher algorithm (x86_64)"
 689         depends on (X86 || UML_X86) && 64BIT
 690         select CRYPTO_ALGAPI
 691         select CRYPTO_TWOFISH_COMMON
 692         help
 693           Twofish cipher algorithm (x86_64).
 694
 695           Twofish was submitted as an AES (Advanced Encryption Standard)
 696           candidate cipher by researchers at CounterPane Systems.  It is a
 697           16 round block cipher supporting key sizes of 128, 192, and 256
 698           bits.
 699
 700           See also:
 701           <http://www.schneier.com/twofish.html>
 702
 703 comment "Compression"
 704
 705 config CRYPTO_DEFLATE
 706         tristate "Deflate compression algorithm"
 707         select CRYPTO_ALGAPI
 708         select ZLIB_INFLATE
 709         select ZLIB_DEFLATE
 710         help
 711           This is the Deflate algorithm (RFC1951), specified for use in
 712           IPSec with the IPCOMP protocol (RFC3173, RFC2394).
 713
 714           You will most probably want this if using IPSec.
 715
 716 config CRYPTO_LZO
 717         tristate "LZO compression algorithm"
 718         select CRYPTO_ALGAPI
 719         select LZO_COMPRESS
 720         select LZO_DECOMPRESS
 721         help
 722           This is the LZO algorithm.
 723
 724 comment "Random Number Generation"
 725
 726 config CRYPTO_ANSI_CPRNG
 727         tristate "Pseudo Random Number Generation for Cryptographic modules"
 728         select CRYPTO_AES
 729         select CRYPTO_RNG
 730         select CRYPTO_FIPS
 731         help
 732           This option enables the generic pseudo random number generator
 733           for cryptographic modules.  Uses the Algorithm specified in
 734           ANSI X9.31 A.2.4
 735
 736 source "drivers/crypto/Kconfig"
 737
 738 endif   # if CRYPTO