diff options
author | Sebastian Siewior <sebastian@breakpoint.cc> | 2008-04-05 09:04:48 -0400 |
---|---|---|
committer | Herbert Xu <herbert@gondor.apana.org.au> | 2008-04-20 22:19:34 -0400 |
commit | 584fffc8b1965cc09ebc4b7608bafcbf12ad5244 (patch) | |
tree | ebe4532239f556dda9770ac1e76589ac76448d1d | |
parent | 3af5b90bde5000abc739996cb03fd718e753d053 (diff) |
[CRYPTO] kconfig: Ordering cleanup
Ciphers, block modes, name it, are grouped together and sorted.
Signed-off-by: Sebastian Siewior <sebastian@breakpoint.cc>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
-rw-r--r-- | crypto/Kconfig | 645 |
1 files changed, 329 insertions, 316 deletions
diff --git a/crypto/Kconfig b/crypto/Kconfig index edd00c5307a4..864456c140fe 100644 --- a/crypto/Kconfig +++ b/crypto/Kconfig | |||
@@ -19,6 +19,8 @@ menuconfig CRYPTO | |||
19 | 19 | ||
20 | if CRYPTO | 20 | if CRYPTO |
21 | 21 | ||
22 | comment "Crypto core or helper" | ||
23 | |||
22 | config CRYPTO_ALGAPI | 24 | config CRYPTO_ALGAPI |
23 | tristate | 25 | tristate |
24 | help | 26 | help |
@@ -32,15 +34,6 @@ config CRYPTO_BLKCIPHER | |||
32 | tristate | 34 | tristate |
33 | select CRYPTO_ALGAPI | 35 | select CRYPTO_ALGAPI |
34 | 36 | ||
35 | config CRYPTO_SEQIV | ||
36 | tristate "Sequence Number IV Generator" | ||
37 | select CRYPTO_AEAD | ||
38 | select CRYPTO_BLKCIPHER | ||
39 | help | ||
40 | This IV generator generates an IV based on a sequence number by | ||
41 | xoring it with a salt. This algorithm is mainly useful for CTR | ||
42 | and similar modes. | ||
43 | |||
44 | config CRYPTO_HASH | 37 | config CRYPTO_HASH |
45 | tristate | 38 | tristate |
46 | select CRYPTO_ALGAPI | 39 | select CRYPTO_ALGAPI |
@@ -52,24 +45,15 @@ config CRYPTO_MANAGER | |||
52 | Create default cryptographic template instantiations such as | 45 | Create default cryptographic template instantiations such as |
53 | cbc(aes). | 46 | cbc(aes). |
54 | 47 | ||
55 | config CRYPTO_HMAC | 48 | config CRYPTO_GF128MUL |
56 | tristate "HMAC support" | 49 | tristate "GF(2^128) multiplication functions (EXPERIMENTAL)" |
57 | select CRYPTO_HASH | ||
58 | select CRYPTO_MANAGER | ||
59 | help | ||
60 | HMAC: Keyed-Hashing for Message Authentication (RFC2104). | ||
61 | This is required for IPSec. | ||
62 | |||
63 | config CRYPTO_XCBC | ||
64 | tristate "XCBC support" | ||
65 | depends on EXPERIMENTAL | 50 | depends on EXPERIMENTAL |
66 | select CRYPTO_HASH | ||
67 | select CRYPTO_MANAGER | ||
68 | help | 51 | help |
69 | XCBC: Keyed-Hashing with encryption algorithm | 52 | Efficient table driven implementation of multiplications in the |
70 | http://www.ietf.org/rfc/rfc3566.txt | 53 | field GF(2^128). This is needed by some cypher modes. This |
71 | http://csrc.nist.gov/encryption/modes/proposedmodes/ | 54 | option will be selected automatically if you select such a |
72 | xcbc-mac/xcbc-mac-spec.pdf | 55 | cipher mode. Only select this option by hand if you expect to load |
56 | an external module that requires these functions. | ||
73 | 57 | ||
74 | config CRYPTO_NULL | 58 | config CRYPTO_NULL |
75 | tristate "Null algorithms" | 59 | tristate "Null algorithms" |
@@ -78,107 +62,98 @@ config CRYPTO_NULL | |||
78 | help | 62 | help |
79 | These are 'Null' algorithms, used by IPsec, which do nothing. | 63 | These are 'Null' algorithms, used by IPsec, which do nothing. |
80 | 64 | ||
81 | config CRYPTO_MD4 | 65 | config CRYPTO_CRYPTD |
82 | tristate "MD4 digest algorithm" | 66 | tristate "Software async crypto daemon" |
83 | select CRYPTO_ALGAPI | 67 | select CRYPTO_BLKCIPHER |
68 | select CRYPTO_MANAGER | ||
84 | help | 69 | help |
85 | MD4 message digest algorithm (RFC1320). | 70 | This is a generic software asynchronous crypto daemon that |
71 | converts an arbitrary synchronous software crypto algorithm | ||
72 | into an asynchronous algorithm that executes in a kernel thread. | ||
86 | 73 | ||
87 | config CRYPTO_MD5 | 74 | config CRYPTO_AUTHENC |
88 | tristate "MD5 digest algorithm" | 75 | tristate "Authenc support" |
89 | select CRYPTO_ALGAPI | 76 | select CRYPTO_AEAD |
77 | select CRYPTO_BLKCIPHER | ||
78 | select CRYPTO_MANAGER | ||
79 | select CRYPTO_HASH | ||
90 | help | 80 | help |
91 | MD5 message digest algorithm (RFC1321). | 81 | Authenc: Combined mode wrapper for IPsec. |
82 | This is required for IPSec. | ||
92 | 83 | ||
93 | config CRYPTO_SHA1 | 84 | config CRYPTO_TEST |
94 | tristate "SHA1 digest algorithm" | 85 | tristate "Testing module" |
86 | depends on m | ||
95 | select CRYPTO_ALGAPI | 87 | select CRYPTO_ALGAPI |
88 | select CRYPTO_AEAD | ||
89 | select CRYPTO_BLKCIPHER | ||
96 | help | 90 | help |
97 | SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2). | 91 | Quick & dirty crypto test module. |
98 | 92 | ||
99 | config CRYPTO_SHA256 | 93 | comment "Authenticated Encryption with Associated Data" |
100 | tristate "SHA224 and SHA256 digest algorithm" | ||
101 | select CRYPTO_ALGAPI | ||
102 | help | ||
103 | SHA256 secure hash standard (DFIPS 180-2). | ||
104 | |||
105 | This version of SHA implements a 256 bit hash with 128 bits of | ||
106 | security against collision attacks. | ||
107 | 94 | ||
108 | This code also includes SHA-224, a 224 bit hash with 112 bits | 95 | config CRYPTO_CCM |
109 | of security against collision attacks. | 96 | tristate "CCM support" |
110 | 97 | select CRYPTO_CTR | |
111 | config CRYPTO_SHA512 | 98 | select CRYPTO_AEAD |
112 | tristate "SHA384 and SHA512 digest algorithms" | ||
113 | select CRYPTO_ALGAPI | ||
114 | help | 99 | help |
115 | SHA512 secure hash standard (DFIPS 180-2). | 100 | Support for Counter with CBC MAC. Required for IPsec. |
116 | |||
117 | This version of SHA implements a 512 bit hash with 256 bits of | ||
118 | security against collision attacks. | ||
119 | |||
120 | This code also includes SHA-384, a 384 bit hash with 192 bits | ||
121 | of security against collision attacks. | ||
122 | 101 | ||
123 | config CRYPTO_WP512 | 102 | config CRYPTO_GCM |
124 | tristate "Whirlpool digest algorithms" | 103 | tristate "GCM/GMAC support" |
125 | select CRYPTO_ALGAPI | 104 | select CRYPTO_CTR |
105 | select CRYPTO_AEAD | ||
106 | select CRYPTO_GF128MUL | ||
126 | help | 107 | help |
127 | Whirlpool hash algorithm 512, 384 and 256-bit hashes | 108 | Support for Galois/Counter Mode (GCM) and Galois Message |
128 | 109 | Authentication Code (GMAC). Required for IPSec. | |
129 | Whirlpool-512 is part of the NESSIE cryptographic primitives. | ||
130 | Whirlpool will be part of the ISO/IEC 10118-3:2003(E) standard | ||
131 | |||
132 | See also: | ||
133 | <http://planeta.terra.com.br/informatica/paulobarreto/WhirlpoolPage.html> | ||
134 | 110 | ||
135 | config CRYPTO_TGR192 | 111 | config CRYPTO_SEQIV |
136 | tristate "Tiger digest algorithms" | 112 | tristate "Sequence Number IV Generator" |
137 | select CRYPTO_ALGAPI | 113 | select CRYPTO_AEAD |
114 | select CRYPTO_BLKCIPHER | ||
138 | help | 115 | help |
139 | Tiger hash algorithm 192, 160 and 128-bit hashes | 116 | This IV generator generates an IV based on a sequence number by |
140 | 117 | xoring it with a salt. This algorithm is mainly useful for CTR | |
141 | Tiger is a hash function optimized for 64-bit processors while | ||
142 | still having decent performance on 32-bit processors. | ||
143 | Tiger was developed by Ross Anderson and Eli Biham. | ||
144 | 118 | ||
145 | See also: | 119 | comment "Block modes" |
146 | <http://www.cs.technion.ac.il/~biham/Reports/Tiger/>. | ||
147 | 120 | ||
148 | config CRYPTO_GF128MUL | 121 | config CRYPTO_CBC |
149 | tristate "GF(2^128) multiplication functions (EXPERIMENTAL)" | 122 | tristate "CBC support" |
150 | depends on EXPERIMENTAL | ||
151 | help | ||
152 | Efficient table driven implementation of multiplications in the | ||
153 | field GF(2^128). This is needed by some cypher modes. This | ||
154 | option will be selected automatically if you select such a | ||
155 | cipher mode. Only select this option by hand if you expect to load | ||
156 | an external module that requires these functions. | ||
157 | |||
158 | config CRYPTO_ECB | ||
159 | tristate "ECB support" | ||
160 | select CRYPTO_BLKCIPHER | 123 | select CRYPTO_BLKCIPHER |
161 | select CRYPTO_MANAGER | 124 | select CRYPTO_MANAGER |
162 | help | 125 | help |
163 | ECB: Electronic CodeBook mode | 126 | CBC: Cipher Block Chaining mode |
164 | This is the simplest block cipher algorithm. It simply encrypts | 127 | This block cipher algorithm is required for IPSec. |
165 | the input block by block. | ||
166 | 128 | ||
167 | config CRYPTO_CBC | 129 | config CRYPTO_CTR |
168 | tristate "CBC support" | 130 | tristate "CTR support" |
169 | select CRYPTO_BLKCIPHER | 131 | select CRYPTO_BLKCIPHER |
132 | select CRYPTO_SEQIV | ||
170 | select CRYPTO_MANAGER | 133 | select CRYPTO_MANAGER |
171 | help | 134 | help |
172 | CBC: Cipher Block Chaining mode | 135 | CTR: Counter mode |
173 | This block cipher algorithm is required for IPSec. | 136 | This block cipher algorithm is required for IPSec. |
174 | 137 | ||
175 | config CRYPTO_PCBC | 138 | config CRYPTO_CTS |
176 | tristate "PCBC support" | 139 | tristate "CTS support" |
140 | select CRYPTO_BLKCIPHER | ||
141 | help | ||
142 | CTS: Cipher Text Stealing | ||
143 | This is the Cipher Text Stealing mode as described by | ||
144 | Section 8 of rfc2040 and referenced by rfc3962. | ||
145 | (rfc3962 includes errata information in its Appendix A) | ||
146 | This mode is required for Kerberos gss mechanism support | ||
147 | for AES encryption. | ||
148 | |||
149 | config CRYPTO_ECB | ||
150 | tristate "ECB support" | ||
177 | select CRYPTO_BLKCIPHER | 151 | select CRYPTO_BLKCIPHER |
178 | select CRYPTO_MANAGER | 152 | select CRYPTO_MANAGER |
179 | help | 153 | help |
180 | PCBC: Propagating Cipher Block Chaining mode | 154 | ECB: Electronic CodeBook mode |
181 | This block cipher algorithm is required for RxRPC. | 155 | This is the simplest block cipher algorithm. It simply encrypts |
156 | the input block by block. | ||
182 | 157 | ||
183 | config CRYPTO_LRW | 158 | config CRYPTO_LRW |
184 | tristate "LRW support (EXPERIMENTAL)" | 159 | tristate "LRW support (EXPERIMENTAL)" |
@@ -193,6 +168,14 @@ config CRYPTO_LRW | |||
193 | The first 128, 192 or 256 bits in the key are used for AES and the | 168 | The first 128, 192 or 256 bits in the key are used for AES and the |
194 | rest is used to tie each cipher block to its logical position. | 169 | rest is used to tie each cipher block to its logical position. |
195 | 170 | ||
171 | config CRYPTO_PCBC | ||
172 | tristate "PCBC support" | ||
173 | select CRYPTO_BLKCIPHER | ||
174 | select CRYPTO_MANAGER | ||
175 | help | ||
176 | PCBC: Propagating Cipher Block Chaining mode | ||
177 | This block cipher algorithm is required for RxRPC. | ||
178 | |||
196 | config CRYPTO_XTS | 179 | config CRYPTO_XTS |
197 | tristate "XTS support (EXPERIMENTAL)" | 180 | tristate "XTS support (EXPERIMENTAL)" |
198 | depends on EXPERIMENTAL | 181 | depends on EXPERIMENTAL |
@@ -204,160 +187,134 @@ config CRYPTO_XTS | |||
204 | key size 256, 384 or 512 bits. This implementation currently | 187 | key size 256, 384 or 512 bits. This implementation currently |
205 | can't handle a sectorsize which is not a multiple of 16 bytes. | 188 | can't handle a sectorsize which is not a multiple of 16 bytes. |
206 | 189 | ||
207 | config CRYPTO_CTR | 190 | comment "Hash modes" |
208 | tristate "CTR support" | 191 | |
209 | select CRYPTO_BLKCIPHER | 192 | config CRYPTO_HMAC |
210 | select CRYPTO_SEQIV | 193 | tristate "HMAC support" |
194 | select CRYPTO_HASH | ||
211 | select CRYPTO_MANAGER | 195 | select CRYPTO_MANAGER |
212 | help | 196 | help |
213 | CTR: Counter mode | 197 | HMAC: Keyed-Hashing for Message Authentication (RFC2104). |
214 | This block cipher algorithm is required for IPSec. | 198 | This is required for IPSec. |
215 | 199 | ||
216 | config CRYPTO_CTS | 200 | config CRYPTO_XCBC |
217 | tristate "CTS support" | 201 | tristate "XCBC support" |
218 | select CRYPTO_BLKCIPHER | 202 | depends on EXPERIMENTAL |
203 | select CRYPTO_HASH | ||
204 | select CRYPTO_MANAGER | ||
219 | help | 205 | help |
220 | CTS: Cipher Text Stealing | 206 | XCBC: Keyed-Hashing with encryption algorithm |
221 | This is the Cipher Text Stealing mode as described by | 207 | http://www.ietf.org/rfc/rfc3566.txt |
222 | Section 8 of rfc2040 and referenced by rfc3962. | 208 | http://csrc.nist.gov/encryption/modes/proposedmodes/ |
223 | (rfc3962 includes errata information in its Appendix A) | 209 | xcbc-mac/xcbc-mac-spec.pdf |
224 | This mode is required for Kerberos gss mechanism support | ||
225 | for AES encryption. | ||
226 | 210 | ||
227 | config CRYPTO_GCM | 211 | comment "Digest" |
228 | tristate "GCM/GMAC support" | ||
229 | select CRYPTO_CTR | ||
230 | select CRYPTO_AEAD | ||
231 | select CRYPTO_GF128MUL | ||
232 | help | ||
233 | Support for Galois/Counter Mode (GCM) and Galois Message | ||
234 | Authentication Code (GMAC). Required for IPSec. | ||
235 | 212 | ||
236 | config CRYPTO_CCM | 213 | config CRYPTO_CRC32C |
237 | tristate "CCM support" | 214 | tristate "CRC32c CRC algorithm" |
238 | select CRYPTO_CTR | 215 | select CRYPTO_ALGAPI |
239 | select CRYPTO_AEAD | 216 | select LIBCRC32C |
240 | help | 217 | help |
241 | Support for Counter with CBC MAC. Required for IPsec. | 218 | Castagnoli, et al Cyclic Redundancy-Check Algorithm. Used |
219 | by iSCSI for header and data digests and by others. | ||
220 | See Castagnoli93. This implementation uses lib/libcrc32c. | ||
221 | Module will be crc32c. | ||
242 | 222 | ||
243 | config CRYPTO_CRYPTD | 223 | config CRYPTO_MD4 |
244 | tristate "Software async crypto daemon" | 224 | tristate "MD4 digest algorithm" |
245 | select CRYPTO_BLKCIPHER | 225 | select CRYPTO_ALGAPI |
246 | select CRYPTO_MANAGER | ||
247 | help | 226 | help |
248 | This is a generic software asynchronous crypto daemon that | 227 | MD4 message digest algorithm (RFC1320). |
249 | converts an arbitrary synchronous software crypto algorithm | ||
250 | into an asynchronous algorithm that executes in a kernel thread. | ||
251 | 228 | ||
252 | config CRYPTO_DES | 229 | config CRYPTO_MD5 |
253 | tristate "DES and Triple DES EDE cipher algorithms" | 230 | tristate "MD5 digest algorithm" |
254 | select CRYPTO_ALGAPI | 231 | select CRYPTO_ALGAPI |
255 | help | 232 | help |
256 | DES cipher algorithm (FIPS 46-2), and Triple DES EDE (FIPS 46-3). | 233 | MD5 message digest algorithm (RFC1321). |
257 | 234 | ||
258 | config CRYPTO_FCRYPT | 235 | config CRYPTO_MICHAEL_MIC |
259 | tristate "FCrypt cipher algorithm" | 236 | tristate "Michael MIC keyed digest algorithm" |
260 | select CRYPTO_ALGAPI | 237 | select CRYPTO_ALGAPI |
261 | select CRYPTO_BLKCIPHER | ||
262 | help | 238 | help |
263 | FCrypt algorithm used by RxRPC. | 239 | Michael MIC is used for message integrity protection in TKIP |
240 | (IEEE 802.11i). This algorithm is required for TKIP, but it | ||
241 | should not be used for other purposes because of the weakness | ||
242 | of the algorithm. | ||
264 | 243 | ||
265 | config CRYPTO_BLOWFISH | 244 | config CRYPTO_SHA1 |
266 | tristate "Blowfish cipher algorithm" | 245 | tristate "SHA1 digest algorithm" |
267 | select CRYPTO_ALGAPI | 246 | select CRYPTO_ALGAPI |
268 | help | 247 | help |
269 | Blowfish cipher algorithm, by Bruce Schneier. | 248 | SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2). |
270 | |||
271 | This is a variable key length cipher which can use keys from 32 | ||
272 | bits to 448 bits in length. It's fast, simple and specifically | ||
273 | designed for use on "large microprocessors". | ||
274 | |||
275 | See also: | ||
276 | <http://www.schneier.com/blowfish.html> | ||
277 | 249 | ||
278 | config CRYPTO_TWOFISH | 250 | config CRYPTO_SHA256 |
279 | tristate "Twofish cipher algorithm" | 251 | tristate "SHA224 and SHA256 digest algorithm" |
280 | select CRYPTO_ALGAPI | 252 | select CRYPTO_ALGAPI |
281 | select CRYPTO_TWOFISH_COMMON | ||
282 | help | 253 | help |
283 | Twofish cipher algorithm. | 254 | SHA256 secure hash standard (DFIPS 180-2). |
284 | |||
285 | Twofish was submitted as an AES (Advanced Encryption Standard) | ||
286 | candidate cipher by researchers at CounterPane Systems. It is a | ||
287 | 16 round block cipher supporting key sizes of 128, 192, and 256 | ||
288 | bits. | ||
289 | |||
290 | See also: | ||
291 | <http://www.schneier.com/twofish.html> | ||
292 | 255 | ||
293 | config CRYPTO_TWOFISH_COMMON | 256 | This version of SHA implements a 256 bit hash with 128 bits of |
294 | tristate | 257 | security against collision attacks. |
295 | help | ||
296 | Common parts of the Twofish cipher algorithm shared by the | ||
297 | generic c and the assembler implementations. | ||
298 | 258 | ||
299 | config CRYPTO_TWOFISH_586 | 259 | This code also includes SHA-224, a 224 bit hash with 112 bits |
300 | tristate "Twofish cipher algorithms (i586)" | 260 | of security against collision attacks. |
301 | depends on (X86 || UML_X86) && !64BIT | 261 | |
262 | config CRYPTO_SHA512 | ||
263 | tristate "SHA384 and SHA512 digest algorithms" | ||
302 | select CRYPTO_ALGAPI | 264 | select CRYPTO_ALGAPI |
303 | select CRYPTO_TWOFISH_COMMON | ||
304 | help | 265 | help |
305 | Twofish cipher algorithm. | 266 | SHA512 secure hash standard (DFIPS 180-2). |
306 | 267 | ||
307 | Twofish was submitted as an AES (Advanced Encryption Standard) | 268 | This version of SHA implements a 512 bit hash with 256 bits of |
308 | candidate cipher by researchers at CounterPane Systems. It is a | 269 | security against collision attacks. |
309 | 16 round block cipher supporting key sizes of 128, 192, and 256 | ||
310 | bits. | ||
311 | 270 | ||
312 | See also: | 271 | This code also includes SHA-384, a 384 bit hash with 192 bits |
313 | <http://www.schneier.com/twofish.html> | 272 | of security against collision attacks. |
314 | 273 | ||
315 | config CRYPTO_TWOFISH_X86_64 | 274 | config CRYPTO_TGR192 |
316 | tristate "Twofish cipher algorithm (x86_64)" | 275 | tristate "Tiger digest algorithms" |
317 | depends on (X86 || UML_X86) && 64BIT | ||
318 | select CRYPTO_ALGAPI | 276 | select CRYPTO_ALGAPI |
319 | select CRYPTO_TWOFISH_COMMON | ||
320 | help | 277 | help |
321 | Twofish cipher algorithm (x86_64). | 278 | Tiger hash algorithm 192, 160 and 128-bit hashes |
322 | 279 | ||
323 | Twofish was submitted as an AES (Advanced Encryption Standard) | 280 | Tiger is a hash function optimized for 64-bit processors while |
324 | candidate cipher by researchers at CounterPane Systems. It is a | 281 | still having decent performance on 32-bit processors. |
325 | 16 round block cipher supporting key sizes of 128, 192, and 256 | 282 | Tiger was developed by Ross Anderson and Eli Biham. |
326 | bits. | ||
327 | 283 | ||
328 | See also: | 284 | See also: |
329 | <http://www.schneier.com/twofish.html> | 285 | <http://www.cs.technion.ac.il/~biham/Reports/Tiger/>. |
330 | 286 | ||
331 | config CRYPTO_SERPENT | 287 | config CRYPTO_WP512 |
332 | tristate "Serpent cipher algorithm" | 288 | tristate "Whirlpool digest algorithms" |
333 | select CRYPTO_ALGAPI | 289 | select CRYPTO_ALGAPI |
334 | help | 290 | help |
335 | Serpent cipher algorithm, by Anderson, Biham & Knudsen. | 291 | Whirlpool hash algorithm 512, 384 and 256-bit hashes |
336 | 292 | ||
337 | Keys are allowed to be from 0 to 256 bits in length, in steps | 293 | Whirlpool-512 is part of the NESSIE cryptographic primitives. |
338 | of 8 bits. Also includes the 'Tnepres' algorithm, a reversed | 294 | Whirlpool will be part of the ISO/IEC 10118-3:2003(E) standard |
339 | variant of Serpent for compatibility with old kerneli.org code. | ||
340 | 295 | ||
341 | See also: | 296 | See also: |
342 | <http://www.cl.cam.ac.uk/~rja14/serpent.html> | 297 | <http://planeta.terra.com.br/informatica/paulobarreto/WhirlpoolPage.html> |
298 | |||
299 | comment "Ciphers" | ||
343 | 300 | ||
344 | config CRYPTO_AES | 301 | config CRYPTO_AES |
345 | tristate "AES cipher algorithms" | 302 | tristate "AES cipher algorithms" |
346 | select CRYPTO_ALGAPI | 303 | select CRYPTO_ALGAPI |
347 | help | 304 | help |
348 | AES cipher algorithms (FIPS-197). AES uses the Rijndael | 305 | AES cipher algorithms (FIPS-197). AES uses the Rijndael |
349 | algorithm. | 306 | algorithm. |
350 | 307 | ||
351 | Rijndael appears to be consistently a very good performer in | 308 | Rijndael appears to be consistently a very good performer in |
352 | both hardware and software across a wide range of computing | 309 | both hardware and software across a wide range of computing |
353 | environments regardless of its use in feedback or non-feedback | 310 | environments regardless of its use in feedback or non-feedback |
354 | modes. Its key setup time is excellent, and its key agility is | 311 | modes. Its key setup time is excellent, and its key agility is |
355 | good. Rijndael's very low memory requirements make it very well | 312 | good. Rijndael's very low memory requirements make it very well |
356 | suited for restricted-space environments, in which it also | 313 | suited for restricted-space environments, in which it also |
357 | demonstrates excellent performance. Rijndael's operations are | 314 | demonstrates excellent performance. Rijndael's operations are |
358 | among the easiest to defend against power and timing attacks. | 315 | among the easiest to defend against power and timing attacks. |
359 | 316 | ||
360 | The AES specifies three key sizes: 128, 192 and 256 bits | 317 | The AES specifies three key sizes: 128, 192 and 256 bits |
361 | 318 | ||
362 | See <http://csrc.nist.gov/CryptoToolkit/aes/> for more information. | 319 | See <http://csrc.nist.gov/CryptoToolkit/aes/> for more information. |
363 | 320 | ||
@@ -367,19 +324,19 @@ config CRYPTO_AES_586 | |||
367 | select CRYPTO_ALGAPI | 324 | select CRYPTO_ALGAPI |
368 | select CRYPTO_AES | 325 | select CRYPTO_AES |
369 | help | 326 | help |
370 | AES cipher algorithms (FIPS-197). AES uses the Rijndael | 327 | AES cipher algorithms (FIPS-197). AES uses the Rijndael |
371 | algorithm. | 328 | algorithm. |
372 | 329 | ||
373 | Rijndael appears to be consistently a very good performer in | 330 | Rijndael appears to be consistently a very good performer in |
374 | both hardware and software across a wide range of computing | 331 | both hardware and software across a wide range of computing |
375 | environments regardless of its use in feedback or non-feedback | 332 | environments regardless of its use in feedback or non-feedback |
376 | modes. Its key setup time is excellent, and its key agility is | 333 | modes. Its key setup time is excellent, and its key agility is |
377 | good. Rijndael's very low memory requirements make it very well | 334 | good. Rijndael's very low memory requirements make it very well |
378 | suited for restricted-space environments, in which it also | 335 | suited for restricted-space environments, in which it also |
379 | demonstrates excellent performance. Rijndael's operations are | 336 | demonstrates excellent performance. Rijndael's operations are |
380 | among the easiest to defend against power and timing attacks. | 337 | among the easiest to defend against power and timing attacks. |
381 | 338 | ||
382 | The AES specifies three key sizes: 128, 192 and 256 bits | 339 | The AES specifies three key sizes: 128, 192 and 256 bits |
383 | 340 | ||
384 | See <http://csrc.nist.gov/encryption/aes/> for more information. | 341 | See <http://csrc.nist.gov/encryption/aes/> for more information. |
385 | 342 | ||
@@ -389,22 +346,75 @@ config CRYPTO_AES_X86_64 | |||
389 | select CRYPTO_ALGAPI | 346 | select CRYPTO_ALGAPI |
390 | select CRYPTO_AES | 347 | select CRYPTO_AES |
391 | help | 348 | help |
392 | AES cipher algorithms (FIPS-197). AES uses the Rijndael | 349 | AES cipher algorithms (FIPS-197). AES uses the Rijndael |
393 | algorithm. | 350 | algorithm. |
394 | 351 | ||
395 | Rijndael appears to be consistently a very good performer in | 352 | Rijndael appears to be consistently a very good performer in |
396 | both hardware and software across a wide range of computing | 353 | both hardware and software across a wide range of computing |
397 | environments regardless of its use in feedback or non-feedback | 354 | environments regardless of its use in feedback or non-feedback |
398 | modes. Its key setup time is excellent, and its key agility is | 355 | modes. Its key setup time is excellent, and its key agility is |
399 | good. Rijndael's very low memory requirements make it very well | 356 | good. Rijndael's very low memory requirements make it very well |
400 | suited for restricted-space environments, in which it also | 357 | suited for restricted-space environments, in which it also |
401 | demonstrates excellent performance. Rijndael's operations are | 358 | demonstrates excellent performance. Rijndael's operations are |
402 | among the easiest to defend against power and timing attacks. | 359 | among the easiest to defend against power and timing attacks. |
403 | 360 | ||
404 | The AES specifies three key sizes: 128, 192 and 256 bits | 361 | The AES specifies three key sizes: 128, 192 and 256 bits |
405 | 362 | ||
406 | See <http://csrc.nist.gov/encryption/aes/> for more information. | 363 | See <http://csrc.nist.gov/encryption/aes/> for more information. |
407 | 364 | ||
365 | config CRYPTO_ANUBIS | ||
366 | tristate "Anubis cipher algorithm" | ||
367 | select CRYPTO_ALGAPI | ||
368 | help | ||
369 | Anubis cipher algorithm. | ||
370 | |||
371 | Anubis is a variable key length cipher which can use keys from | ||
372 | 128 bits to 320 bits in length. It was evaluated as a entrant | ||
373 | in the NESSIE competition. | ||
374 | |||
375 | See also: | ||
376 | <https://www.cosic.esat.kuleuven.ac.be/nessie/reports/> | ||
377 | <http://planeta.terra.com.br/informatica/paulobarreto/AnubisPage.html> | ||
378 | |||
379 | config CRYPTO_ARC4 | ||
380 | tristate "ARC4 cipher algorithm" | ||
381 | select CRYPTO_ALGAPI | ||
382 | help | ||
383 | ARC4 cipher algorithm. | ||
384 | |||
385 | ARC4 is a stream cipher using keys ranging from 8 bits to 2048 | ||
386 | bits in length. This algorithm is required for driver-based | ||
387 | WEP, but it should not be for other purposes because of the | ||
388 | weakness of the algorithm. | ||
389 | |||
390 | config CRYPTO_BLOWFISH | ||
391 | tristate "Blowfish cipher algorithm" | ||
392 | select CRYPTO_ALGAPI | ||
393 | help | ||
394 | Blowfish cipher algorithm, by Bruce Schneier. | ||
395 | |||
396 | This is a variable key length cipher which can use keys from 32 | ||
397 | bits to 448 bits in length. It's fast, simple and specifically | ||
398 | designed for use on "large microprocessors". | ||
399 | |||
400 | See also: | ||
401 | <http://www.schneier.com/blowfish.html> | ||
402 | |||
403 | config CRYPTO_CAMELLIA | ||
404 | tristate "Camellia cipher algorithms" | ||
405 | depends on CRYPTO | ||
406 | select CRYPTO_ALGAPI | ||
407 | help | ||
408 | Camellia cipher algorithms module. | ||
409 | |||
410 | Camellia is a symmetric key block cipher developed jointly | ||
411 | at NTT and Mitsubishi Electric Corporation. | ||
412 | |||
413 | The Camellia specifies three key sizes: 128, 192 and 256 bits. | ||
414 | |||
415 | See also: | ||
416 | <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html> | ||
417 | |||
408 | config CRYPTO_CAST5 | 418 | config CRYPTO_CAST5 |
409 | tristate "CAST5 (CAST-128) cipher algorithm" | 419 | tristate "CAST5 (CAST-128) cipher algorithm" |
410 | select CRYPTO_ALGAPI | 420 | select CRYPTO_ALGAPI |
@@ -419,33 +429,18 @@ config CRYPTO_CAST6 | |||
419 | The CAST6 encryption algorithm (synonymous with CAST-256) is | 429 | The CAST6 encryption algorithm (synonymous with CAST-256) is |
420 | described in RFC2612. | 430 | described in RFC2612. |
421 | 431 | ||
422 | config CRYPTO_TEA | 432 | config CRYPTO_DES |
423 | tristate "TEA, XTEA and XETA cipher algorithms" | 433 | tristate "DES and Triple DES EDE cipher algorithms" |
424 | select CRYPTO_ALGAPI | 434 | select CRYPTO_ALGAPI |
425 | help | 435 | help |
426 | TEA cipher algorithm. | 436 | DES cipher algorithm (FIPS 46-2), and Triple DES EDE (FIPS 46-3). |
427 | |||
428 | Tiny Encryption Algorithm is a simple cipher that uses | ||
429 | many rounds for security. It is very fast and uses | ||
430 | little memory. | ||
431 | |||
432 | Xtendend Tiny Encryption Algorithm is a modification to | ||
433 | the TEA algorithm to address a potential key weakness | ||
434 | in the TEA algorithm. | ||
435 | |||
436 | Xtendend Encryption Tiny Algorithm is a mis-implementation | ||
437 | of the XTEA algorithm for compatibility purposes. | ||
438 | 437 | ||
439 | config CRYPTO_ARC4 | 438 | config CRYPTO_FCRYPT |
440 | tristate "ARC4 cipher algorithm" | 439 | tristate "FCrypt cipher algorithm" |
441 | select CRYPTO_ALGAPI | 440 | select CRYPTO_ALGAPI |
441 | select CRYPTO_BLKCIPHER | ||
442 | help | 442 | help |
443 | ARC4 cipher algorithm. | 443 | FCrypt algorithm used by RxRPC. |
444 | |||
445 | ARC4 is a stream cipher using keys ranging from 8 bits to 2048 | ||
446 | bits in length. This algorithm is required for driver-based | ||
447 | WEP, but it should not be for other purposes because of the | ||
448 | weakness of the algorithm. | ||
449 | 444 | ||
450 | config CRYPTO_KHAZAD | 445 | config CRYPTO_KHAZAD |
451 | tristate "Khazad cipher algorithm" | 446 | tristate "Khazad cipher algorithm" |
@@ -460,34 +455,6 @@ config CRYPTO_KHAZAD | |||
460 | See also: | 455 | See also: |
461 | <http://planeta.terra.com.br/informatica/paulobarreto/KhazadPage.html> | 456 | <http://planeta.terra.com.br/informatica/paulobarreto/KhazadPage.html> |
462 | 457 | ||
463 | config CRYPTO_ANUBIS | ||
464 | tristate "Anubis cipher algorithm" | ||
465 | select CRYPTO_ALGAPI | ||
466 | help | ||
467 | Anubis cipher algorithm. | ||
468 | |||
469 | Anubis is a variable key length cipher which can use keys from | ||
470 | 128 bits to 320 bits in length. It was evaluated as a entrant | ||
471 | in the NESSIE competition. | ||
472 | |||
473 | See also: | ||
474 | <https://www.cosic.esat.kuleuven.ac.be/nessie/reports/> | ||
475 | <http://planeta.terra.com.br/informatica/paulobarreto/AnubisPage.html> | ||
476 | |||
477 | config CRYPTO_SEED | ||
478 | tristate "SEED cipher algorithm" | ||
479 | select CRYPTO_ALGAPI | ||
480 | help | ||
481 | SEED cipher algorithm (RFC4269). | ||
482 | |||
483 | SEED is a 128-bit symmetric key block cipher that has been | ||
484 | developed by KISA (Korea Information Security Agency) as a | ||
485 | national standard encryption algorithm of the Republic of Korea. | ||
486 | It is a 16 round block cipher with the key size of 128 bit. | ||
487 | |||
488 | See also: | ||
489 | <http://www.kisa.or.kr/kisa/seed/jsp/seed_eng.jsp> | ||
490 | |||
491 | config CRYPTO_SALSA20 | 458 | config CRYPTO_SALSA20 |
492 | tristate "Salsa20 stream cipher algorithm (EXPERIMENTAL)" | 459 | tristate "Salsa20 stream cipher algorithm (EXPERIMENTAL)" |
493 | depends on EXPERIMENTAL | 460 | depends on EXPERIMENTAL |
@@ -529,69 +496,115 @@ config CRYPTO_SALSA20_X86_64 | |||
529 | The Salsa20 stream cipher algorithm is designed by Daniel J. | 496 | The Salsa20 stream cipher algorithm is designed by Daniel J. |
530 | Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html> | 497 | Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html> |
531 | 498 | ||
532 | config CRYPTO_DEFLATE | 499 | config CRYPTO_SEED |
533 | tristate "Deflate compression algorithm" | 500 | tristate "SEED cipher algorithm" |
534 | select CRYPTO_ALGAPI | 501 | select CRYPTO_ALGAPI |
535 | select ZLIB_INFLATE | ||
536 | select ZLIB_DEFLATE | ||
537 | help | 502 | help |
538 | This is the Deflate algorithm (RFC1951), specified for use in | 503 | SEED cipher algorithm (RFC4269). |
539 | IPSec with the IPCOMP protocol (RFC3173, RFC2394). | ||
540 | |||
541 | You will most probably want this if using IPSec. | ||
542 | 504 | ||
543 | config CRYPTO_MICHAEL_MIC | 505 | SEED is a 128-bit symmetric key block cipher that has been |
544 | tristate "Michael MIC keyed digest algorithm" | 506 | developed by KISA (Korea Information Security Agency) as a |
507 | national standard encryption algorithm of the Republic of Korea. | ||
508 | It is a 16 round block cipher with the key size of 128 bit. | ||
509 | |||
510 | See also: | ||
511 | <http://www.kisa.or.kr/kisa/seed/jsp/seed_eng.jsp> | ||
512 | |||
513 | config CRYPTO_SERPENT | ||
514 | tristate "Serpent cipher algorithm" | ||
545 | select CRYPTO_ALGAPI | 515 | select CRYPTO_ALGAPI |
546 | help | 516 | help |
547 | Michael MIC is used for message integrity protection in TKIP | 517 | Serpent cipher algorithm, by Anderson, Biham & Knudsen. |
548 | (IEEE 802.11i). This algorithm is required for TKIP, but it | ||
549 | should not be used for other purposes because of the weakness | ||
550 | of the algorithm. | ||
551 | 518 | ||
552 | config CRYPTO_CRC32C | 519 | Keys are allowed to be from 0 to 256 bits in length, in steps |
553 | tristate "CRC32c CRC algorithm" | 520 | of 8 bits. Also includes the 'Tnepres' algorithm, a reversed |
521 | variant of Serpent for compatibility with old kerneli.org code. | ||
522 | |||
523 | See also: | ||
524 | <http://www.cl.cam.ac.uk/~rja14/serpent.html> | ||
525 | |||
526 | config CRYPTO_TEA | ||
527 | tristate "TEA, XTEA and XETA cipher algorithms" | ||
554 | select CRYPTO_ALGAPI | 528 | select CRYPTO_ALGAPI |
555 | select LIBCRC32C | ||
556 | help | 529 | help |
557 | Castagnoli, et al Cyclic Redundancy-Check Algorithm. Used | 530 | TEA cipher algorithm. |
558 | by iSCSI for header and data digests and by others. | ||
559 | See Castagnoli93. This implementation uses lib/libcrc32c. | ||
560 | Module will be crc32c. | ||
561 | 531 | ||
562 | config CRYPTO_CAMELLIA | 532 | Tiny Encryption Algorithm is a simple cipher that uses |
563 | tristate "Camellia cipher algorithms" | 533 | many rounds for security. It is very fast and uses |
564 | depends on CRYPTO | 534 | little memory. |
535 | |||
536 | Xtendend Tiny Encryption Algorithm is a modification to | ||
537 | the TEA algorithm to address a potential key weakness | ||
538 | in the TEA algorithm. | ||
539 | |||
540 | Xtendend Encryption Tiny Algorithm is a mis-implementation | ||
541 | of the XTEA algorithm for compatibility purposes. | ||
542 | |||
543 | config CRYPTO_TWOFISH | ||
544 | tristate "Twofish cipher algorithm" | ||
565 | select CRYPTO_ALGAPI | 545 | select CRYPTO_ALGAPI |
546 | select CRYPTO_TWOFISH_COMMON | ||
566 | help | 547 | help |
567 | Camellia cipher algorithms module. | 548 | Twofish cipher algorithm. |
568 | 549 | ||
569 | Camellia is a symmetric key block cipher developed jointly | 550 | Twofish was submitted as an AES (Advanced Encryption Standard) |
570 | at NTT and Mitsubishi Electric Corporation. | 551 | candidate cipher by researchers at CounterPane Systems. It is a |
552 | 16 round block cipher supporting key sizes of 128, 192, and 256 | ||
553 | bits. | ||
571 | 554 | ||
572 | The Camellia specifies three key sizes: 128, 192 and 256 bits. | 555 | See also: |
556 | <http://www.schneier.com/twofish.html> | ||
557 | |||
558 | config CRYPTO_TWOFISH_COMMON | ||
559 | tristate | ||
560 | help | ||
561 | Common parts of the Twofish cipher algorithm shared by the | ||
562 | generic c and the assembler implementations. | ||
563 | |||
564 | config CRYPTO_TWOFISH_586 | ||
565 | tristate "Twofish cipher algorithms (i586)" | ||
566 | depends on (X86 || UML_X86) && !64BIT | ||
567 | select CRYPTO_ALGAPI | ||
568 | select CRYPTO_TWOFISH_COMMON | ||
569 | help | ||
570 | Twofish cipher algorithm. | ||
571 | |||
572 | Twofish was submitted as an AES (Advanced Encryption Standard) | ||
573 | candidate cipher by researchers at CounterPane Systems. It is a | ||
574 | 16 round block cipher supporting key sizes of 128, 192, and 256 | ||
575 | bits. | ||
573 | 576 | ||
574 | See also: | 577 | See also: |
575 | <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html> | 578 | <http://www.schneier.com/twofish.html> |
576 | 579 | ||
577 | config CRYPTO_TEST | 580 | config CRYPTO_TWOFISH_X86_64 |
578 | tristate "Testing module" | 581 | tristate "Twofish cipher algorithm (x86_64)" |
579 | depends on m | 582 | depends on (X86 || UML_X86) && 64BIT |
580 | select CRYPTO_ALGAPI | 583 | select CRYPTO_ALGAPI |
581 | select CRYPTO_AEAD | 584 | select CRYPTO_TWOFISH_COMMON |
582 | select CRYPTO_BLKCIPHER | ||
583 | help | 585 | help |
584 | Quick & dirty crypto test module. | 586 | Twofish cipher algorithm (x86_64). |
585 | 587 | ||
586 | config CRYPTO_AUTHENC | 588 | Twofish was submitted as an AES (Advanced Encryption Standard) |
587 | tristate "Authenc support" | 589 | candidate cipher by researchers at CounterPane Systems. It is a |
588 | select CRYPTO_AEAD | 590 | 16 round block cipher supporting key sizes of 128, 192, and 256 |
589 | select CRYPTO_BLKCIPHER | 591 | bits. |
590 | select CRYPTO_MANAGER | 592 | |
591 | select CRYPTO_HASH | 593 | See also: |
594 | <http://www.schneier.com/twofish.html> | ||
595 | |||
596 | comment "Compression" | ||
597 | |||
598 | config CRYPTO_DEFLATE | ||
599 | tristate "Deflate compression algorithm" | ||
600 | select CRYPTO_ALGAPI | ||
601 | select ZLIB_INFLATE | ||
602 | select ZLIB_DEFLATE | ||
592 | help | 603 | help |
593 | Authenc: Combined mode wrapper for IPsec. | 604 | This is the Deflate algorithm (RFC1951), specified for use in |
594 | This is required for IPSec. | 605 | IPSec with the IPCOMP protocol (RFC3173, RFC2394). |
606 | |||
607 | You will most probably want this if using IPSec. | ||
595 | 608 | ||
596 | config CRYPTO_LZO | 609 | config CRYPTO_LZO |
597 | tristate "LZO compression algorithm" | 610 | tristate "LZO compression algorithm" |