1b511431dSJan Engelhardt 2b511431dSJan Engelhardtmenuconfig CRYPTO_HW 3b511431dSJan Engelhardt bool "Hardware crypto devices" 4b511431dSJan Engelhardt default y 506bfb7ebSJan Engelhardt ---help--- 606bfb7ebSJan Engelhardt Say Y here to get to see options for hardware crypto devices and 706bfb7ebSJan Engelhardt processors. This option alone does not add any kernel code. 806bfb7ebSJan Engelhardt 906bfb7ebSJan Engelhardt If you say N, all options in this submenu will be skipped and disabled. 10b511431dSJan Engelhardt 11b511431dSJan Engelhardtif CRYPTO_HW 121da177e4SLinus Torvalds 131da177e4SLinus Torvaldsconfig CRYPTO_DEV_PADLOCK 14d158325eSHerbert Xu tristate "Support for VIA PadLock ACE" 15b00296fbSAl Viro depends on X86_32 && !UML 16cce9e06dSHerbert Xu select CRYPTO_ALGAPI 171da177e4SLinus Torvalds help 181da177e4SLinus Torvalds Some VIA processors come with an integrated crypto engine 191da177e4SLinus Torvalds (so called VIA PadLock ACE, Advanced Cryptography Engine) 201191f0a4SMichal Ludvig that provides instructions for very fast cryptographic 211191f0a4SMichal Ludvig operations with supported algorithms. 221da177e4SLinus Torvalds 231da177e4SLinus Torvalds The instructions are used only when the CPU supports them. 245644bda5SMichal Ludvig Otherwise software encryption is used. 255644bda5SMichal Ludvig 261da177e4SLinus Torvaldsconfig CRYPTO_DEV_PADLOCK_AES 271191f0a4SMichal Ludvig tristate "PadLock driver for AES algorithm" 281da177e4SLinus Torvalds depends on CRYPTO_DEV_PADLOCK 2928ce728aSHerbert Xu select CRYPTO_BLKCIPHER 301da177e4SLinus Torvalds help 311da177e4SLinus Torvalds Use VIA PadLock for AES algorithm. 321da177e4SLinus Torvalds 331191f0a4SMichal Ludvig Available in VIA C3 and newer CPUs. 341191f0a4SMichal Ludvig 351191f0a4SMichal Ludvig If unsure say M. The compiled module will be 361191f0a4SMichal Ludvig called padlock-aes.ko 371191f0a4SMichal Ludvig 386c833275SMichal Ludvigconfig CRYPTO_DEV_PADLOCK_SHA 396c833275SMichal Ludvig tristate "PadLock driver for SHA1 and SHA256 algorithms" 406c833275SMichal Ludvig depends on CRYPTO_DEV_PADLOCK 416c833275SMichal Ludvig select CRYPTO_SHA1 426c833275SMichal Ludvig select CRYPTO_SHA256 436c833275SMichal Ludvig help 446c833275SMichal Ludvig Use VIA PadLock for SHA1/SHA256 algorithms. 456c833275SMichal Ludvig 466c833275SMichal Ludvig Available in VIA C7 and newer processors. 476c833275SMichal Ludvig 486c833275SMichal Ludvig If unsure say M. The compiled module will be 496c833275SMichal Ludvig called padlock-sha.ko 506c833275SMichal Ludvig 519fe757b0SJordan Crouseconfig CRYPTO_DEV_GEODE 529fe757b0SJordan Crouse tristate "Support for the Geode LX AES engine" 53f6259deaSSimon Arlott depends on X86_32 && PCI 549fe757b0SJordan Crouse select CRYPTO_ALGAPI 559fe757b0SJordan Crouse select CRYPTO_BLKCIPHER 569fe757b0SJordan Crouse help 579fe757b0SJordan Crouse Say 'Y' here to use the AMD Geode LX processor on-board AES 583dde6ad8SDavid Sterba engine for the CryptoAPI AES algorithm. 599fe757b0SJordan Crouse 609fe757b0SJordan Crouse To compile this driver as a module, choose M here: the module 619fe757b0SJordan Crouse will be called geode-aes. 629fe757b0SJordan Crouse 6361d48c2cSMartin Schwidefskyconfig ZCRYPT 6461d48c2cSMartin Schwidefsky tristate "Support for PCI-attached cryptographic adapters" 6561d48c2cSMartin Schwidefsky depends on S390 6661d48c2cSMartin Schwidefsky select ZCRYPT_MONOLITHIC if ZCRYPT="y" 672f7c8bd6SRalph Wuerthner select HW_RANDOM 6861d48c2cSMartin Schwidefsky help 6961d48c2cSMartin Schwidefsky Select this option if you want to use a PCI-attached cryptographic 7061d48c2cSMartin Schwidefsky adapter like: 7161d48c2cSMartin Schwidefsky + PCI Cryptographic Accelerator (PCICA) 7261d48c2cSMartin Schwidefsky + PCI Cryptographic Coprocessor (PCICC) 7361d48c2cSMartin Schwidefsky + PCI-X Cryptographic Coprocessor (PCIXCC) 7461d48c2cSMartin Schwidefsky + Crypto Express2 Coprocessor (CEX2C) 7561d48c2cSMartin Schwidefsky + Crypto Express2 Accelerator (CEX2A) 7661d48c2cSMartin Schwidefsky 7761d48c2cSMartin Schwidefskyconfig ZCRYPT_MONOLITHIC 7861d48c2cSMartin Schwidefsky bool "Monolithic zcrypt module" 7961d48c2cSMartin Schwidefsky depends on ZCRYPT="m" 8061d48c2cSMartin Schwidefsky help 8161d48c2cSMartin Schwidefsky Select this option if you want to have a single module z90crypt.ko 8261d48c2cSMartin Schwidefsky that contains all parts of the crypto device driver (ap bus, 8361d48c2cSMartin Schwidefsky request router and all the card drivers). 8461d48c2cSMartin Schwidefsky 853f5615e0SJan Glauberconfig CRYPTO_SHA1_S390 863f5615e0SJan Glauber tristate "SHA1 digest algorithm" 873f5615e0SJan Glauber depends on S390 883f5615e0SJan Glauber select CRYPTO_ALGAPI 893f5615e0SJan Glauber help 903f5615e0SJan Glauber This is the s390 hardware accelerated implementation of the 913f5615e0SJan Glauber SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2). 923f5615e0SJan Glauber 933f5615e0SJan Glauberconfig CRYPTO_SHA256_S390 943f5615e0SJan Glauber tristate "SHA256 digest algorithm" 953f5615e0SJan Glauber depends on S390 963f5615e0SJan Glauber select CRYPTO_ALGAPI 973f5615e0SJan Glauber help 983f5615e0SJan Glauber This is the s390 hardware accelerated implementation of the 993f5615e0SJan Glauber SHA256 secure hash standard (DFIPS 180-2). 1003f5615e0SJan Glauber 1013f5615e0SJan Glauber This version of SHA implements a 256 bit hash with 128 bits of 1023f5615e0SJan Glauber security against collision attacks. 1033f5615e0SJan Glauber 1043f5615e0SJan Glauberconfig CRYPTO_DES_S390 1053f5615e0SJan Glauber tristate "DES and Triple DES cipher algorithms" 1063f5615e0SJan Glauber depends on S390 1073f5615e0SJan Glauber select CRYPTO_ALGAPI 1083f5615e0SJan Glauber select CRYPTO_BLKCIPHER 1093f5615e0SJan Glauber help 1103f5615e0SJan Glauber This us the s390 hardware accelerated implementation of the 1113f5615e0SJan Glauber DES cipher algorithm (FIPS 46-2), and Triple DES EDE (FIPS 46-3). 1123f5615e0SJan Glauber 1133f5615e0SJan Glauberconfig CRYPTO_AES_S390 1143f5615e0SJan Glauber tristate "AES cipher algorithms" 1153f5615e0SJan Glauber depends on S390 1163f5615e0SJan Glauber select CRYPTO_ALGAPI 1173f5615e0SJan Glauber select CRYPTO_BLKCIPHER 1183f5615e0SJan Glauber help 1193f5615e0SJan Glauber This is the s390 hardware accelerated implementation of the 1203f5615e0SJan Glauber AES cipher algorithms (FIPS-197). AES uses the Rijndael 1213f5615e0SJan Glauber algorithm. 1223f5615e0SJan Glauber 1233f5615e0SJan Glauber Rijndael appears to be consistently a very good performer in 1243f5615e0SJan Glauber both hardware and software across a wide range of computing 1253f5615e0SJan Glauber environments regardless of its use in feedback or non-feedback 1263f5615e0SJan Glauber modes. Its key setup time is excellent, and its key agility is 1273f5615e0SJan Glauber good. Rijndael's very low memory requirements make it very well 1283f5615e0SJan Glauber suited for restricted-space environments, in which it also 1293f5615e0SJan Glauber demonstrates excellent performance. Rijndael's operations are 1303f5615e0SJan Glauber among the easiest to defend against power and timing attacks. 1313f5615e0SJan Glauber 1323f5615e0SJan Glauber On s390 the System z9-109 currently only supports the key size 1333f5615e0SJan Glauber of 128 bit. 1343f5615e0SJan Glauber 1353f5615e0SJan Glauberconfig S390_PRNG 1363f5615e0SJan Glauber tristate "Pseudo random number generator device driver" 1373f5615e0SJan Glauber depends on S390 1383f5615e0SJan Glauber default "m" 1393f5615e0SJan Glauber help 1403f5615e0SJan Glauber Select this option if you want to use the s390 pseudo random number 1413f5615e0SJan Glauber generator. The PRNG is part of the cryptographic processor functions 1423f5615e0SJan Glauber and uses triple-DES to generate secure random numbers like the 1433f5615e0SJan Glauber ANSI X9.17 standard. The PRNG is usable via the char device 1443f5615e0SJan Glauber /dev/prandom. 1453f5615e0SJan Glauber 146f7d0561eSEvgeniy Polyakovconfig CRYPTO_DEV_HIFN_795X 147f7d0561eSEvgeniy Polyakov tristate "Driver HIFN 795x crypto accelerator chips" 148c3041f9cSEvgeniy Polyakov select CRYPTO_DES 149f7d0561eSEvgeniy Polyakov select CRYPTO_ALGAPI 150653ebd9cSHerbert Xu select CRYPTO_BLKCIPHER 151946fef4eSHerbert Xu select HW_RANDOM if CRYPTO_DEV_HIFN_795X_RNG 1522707b937SJan Glauber depends on PCI 153f7d0561eSEvgeniy Polyakov help 154f7d0561eSEvgeniy Polyakov This option allows you to have support for HIFN 795x crypto adapters. 155f7d0561eSEvgeniy Polyakov 156946fef4eSHerbert Xuconfig CRYPTO_DEV_HIFN_795X_RNG 157946fef4eSHerbert Xu bool "HIFN 795x random number generator" 158946fef4eSHerbert Xu depends on CRYPTO_DEV_HIFN_795X 159946fef4eSHerbert Xu help 160946fef4eSHerbert Xu Select this option if you want to enable the random number generator 161946fef4eSHerbert Xu on the HIFN 795x crypto adapters. 162f7d0561eSEvgeniy Polyakov 163b511431dSJan Engelhardtendif # CRYPTO_HW 164