1b511431dSJan Engelhardt 2b511431dSJan Engelhardtmenuconfig CRYPTO_HW 3b511431dSJan Engelhardt bool "Hardware crypto devices" 4b511431dSJan Engelhardt default y 506bfb7ebSJan Engelhardt ---help--- 606bfb7ebSJan Engelhardt Say Y here to get to see options for hardware crypto devices and 706bfb7ebSJan Engelhardt processors. This option alone does not add any kernel code. 806bfb7ebSJan Engelhardt 906bfb7ebSJan Engelhardt If you say N, all options in this submenu will be skipped and disabled. 10b511431dSJan Engelhardt 11b511431dSJan Engelhardtif CRYPTO_HW 121da177e4SLinus Torvalds 131da177e4SLinus Torvaldsconfig CRYPTO_DEV_PADLOCK 14d158325eSHerbert Xu tristate "Support for VIA PadLock ACE" 152f817418SHerbert Xu depends on X86 && !UML 161da177e4SLinus Torvalds help 171da177e4SLinus Torvalds Some VIA processors come with an integrated crypto engine 181da177e4SLinus Torvalds (so called VIA PadLock ACE, Advanced Cryptography Engine) 191191f0a4SMichal Ludvig that provides instructions for very fast cryptographic 201191f0a4SMichal Ludvig operations with supported algorithms. 211da177e4SLinus Torvalds 221da177e4SLinus Torvalds The instructions are used only when the CPU supports them. 235644bda5SMichal Ludvig Otherwise software encryption is used. 245644bda5SMichal Ludvig 251da177e4SLinus Torvaldsconfig CRYPTO_DEV_PADLOCK_AES 261191f0a4SMichal Ludvig tristate "PadLock driver for AES algorithm" 271da177e4SLinus Torvalds depends on CRYPTO_DEV_PADLOCK 2828ce728aSHerbert Xu select CRYPTO_BLKCIPHER 297dc748e4SSebastian Siewior select CRYPTO_AES 301da177e4SLinus Torvalds help 311da177e4SLinus Torvalds Use VIA PadLock for AES algorithm. 321da177e4SLinus Torvalds 331191f0a4SMichal Ludvig Available in VIA C3 and newer CPUs. 341191f0a4SMichal Ludvig 351191f0a4SMichal Ludvig If unsure say M. The compiled module will be 364737f097SPavel Machek called padlock-aes. 371191f0a4SMichal Ludvig 386c833275SMichal Ludvigconfig CRYPTO_DEV_PADLOCK_SHA 396c833275SMichal Ludvig tristate "PadLock driver for SHA1 and SHA256 algorithms" 406c833275SMichal Ludvig depends on CRYPTO_DEV_PADLOCK 41bbbee467SHerbert Xu select CRYPTO_HASH 426c833275SMichal Ludvig select CRYPTO_SHA1 436c833275SMichal Ludvig select CRYPTO_SHA256 446c833275SMichal Ludvig help 456c833275SMichal Ludvig Use VIA PadLock for SHA1/SHA256 algorithms. 466c833275SMichal Ludvig 476c833275SMichal Ludvig Available in VIA C7 and newer processors. 486c833275SMichal Ludvig 496c833275SMichal Ludvig If unsure say M. The compiled module will be 504737f097SPavel Machek called padlock-sha. 516c833275SMichal Ludvig 529fe757b0SJordan Crouseconfig CRYPTO_DEV_GEODE 539fe757b0SJordan Crouse tristate "Support for the Geode LX AES engine" 54f6259deaSSimon Arlott depends on X86_32 && PCI 559fe757b0SJordan Crouse select CRYPTO_ALGAPI 569fe757b0SJordan Crouse select CRYPTO_BLKCIPHER 579fe757b0SJordan Crouse help 589fe757b0SJordan Crouse Say 'Y' here to use the AMD Geode LX processor on-board AES 593dde6ad8SDavid Sterba engine for the CryptoAPI AES algorithm. 609fe757b0SJordan Crouse 619fe757b0SJordan Crouse To compile this driver as a module, choose M here: the module 629fe757b0SJordan Crouse will be called geode-aes. 639fe757b0SJordan Crouse 6461d48c2cSMartin Schwidefskyconfig ZCRYPT 6561d48c2cSMartin Schwidefsky tristate "Support for PCI-attached cryptographic adapters" 6661d48c2cSMartin Schwidefsky depends on S390 6761d48c2cSMartin Schwidefsky select ZCRYPT_MONOLITHIC if ZCRYPT="y" 682f7c8bd6SRalph Wuerthner select HW_RANDOM 6961d48c2cSMartin Schwidefsky help 7061d48c2cSMartin Schwidefsky Select this option if you want to use a PCI-attached cryptographic 7161d48c2cSMartin Schwidefsky adapter like: 7261d48c2cSMartin Schwidefsky + PCI Cryptographic Accelerator (PCICA) 7361d48c2cSMartin Schwidefsky + PCI Cryptographic Coprocessor (PCICC) 7461d48c2cSMartin Schwidefsky + PCI-X Cryptographic Coprocessor (PCIXCC) 7561d48c2cSMartin Schwidefsky + Crypto Express2 Coprocessor (CEX2C) 7661d48c2cSMartin Schwidefsky + Crypto Express2 Accelerator (CEX2A) 7761d48c2cSMartin Schwidefsky 7861d48c2cSMartin Schwidefskyconfig ZCRYPT_MONOLITHIC 7961d48c2cSMartin Schwidefsky bool "Monolithic zcrypt module" 8057a4955fSHeiko Carstens depends on ZCRYPT 8161d48c2cSMartin Schwidefsky help 824737f097SPavel Machek Select this option if you want to have a single module z90crypt, 8361d48c2cSMartin Schwidefsky that contains all parts of the crypto device driver (ap bus, 8461d48c2cSMartin Schwidefsky request router and all the card drivers). 8561d48c2cSMartin Schwidefsky 863f5615e0SJan Glauberconfig CRYPTO_SHA1_S390 873f5615e0SJan Glauber tristate "SHA1 digest algorithm" 883f5615e0SJan Glauber depends on S390 89563f346dSHerbert Xu select CRYPTO_HASH 903f5615e0SJan Glauber help 913f5615e0SJan Glauber This is the s390 hardware accelerated implementation of the 923f5615e0SJan Glauber SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2). 933f5615e0SJan Glauber 943f5615e0SJan Glauberconfig CRYPTO_SHA256_S390 953f5615e0SJan Glauber tristate "SHA256 digest algorithm" 963f5615e0SJan Glauber depends on S390 97563f346dSHerbert Xu select CRYPTO_HASH 983f5615e0SJan Glauber help 993f5615e0SJan Glauber This is the s390 hardware accelerated implementation of the 1003f5615e0SJan Glauber SHA256 secure hash standard (DFIPS 180-2). 1013f5615e0SJan Glauber 1023f5615e0SJan Glauber This version of SHA implements a 256 bit hash with 128 bits of 1033f5615e0SJan Glauber security against collision attacks. 1043f5615e0SJan Glauber 105291dc7c0SJan Glauberconfig CRYPTO_SHA512_S390 1064e2c6d7fSJan Glauber tristate "SHA384 and SHA512 digest algorithm" 107291dc7c0SJan Glauber depends on S390 108563f346dSHerbert Xu select CRYPTO_HASH 109291dc7c0SJan Glauber help 110291dc7c0SJan Glauber This is the s390 hardware accelerated implementation of the 111291dc7c0SJan Glauber SHA512 secure hash standard. 112291dc7c0SJan Glauber 113291dc7c0SJan Glauber This version of SHA implements a 512 bit hash with 256 bits of 1144e2c6d7fSJan Glauber security against collision attacks. The code also includes SHA-384, 1154e2c6d7fSJan Glauber a 384 bit hash with 192 bits of security against collision attacks. 1164e2c6d7fSJan Glauber 117291dc7c0SJan Glauber 1183f5615e0SJan Glauberconfig CRYPTO_DES_S390 1193f5615e0SJan Glauber tristate "DES and Triple DES cipher algorithms" 1203f5615e0SJan Glauber depends on S390 1213f5615e0SJan Glauber select CRYPTO_ALGAPI 1223f5615e0SJan Glauber select CRYPTO_BLKCIPHER 1233f5615e0SJan Glauber help 1243f5615e0SJan Glauber This us the s390 hardware accelerated implementation of the 1253f5615e0SJan Glauber DES cipher algorithm (FIPS 46-2), and Triple DES EDE (FIPS 46-3). 1263f5615e0SJan Glauber 1273f5615e0SJan Glauberconfig CRYPTO_AES_S390 1283f5615e0SJan Glauber tristate "AES cipher algorithms" 1293f5615e0SJan Glauber depends on S390 1303f5615e0SJan Glauber select CRYPTO_ALGAPI 1313f5615e0SJan Glauber select CRYPTO_BLKCIPHER 1323f5615e0SJan Glauber help 1333f5615e0SJan Glauber This is the s390 hardware accelerated implementation of the 13499d97222SGerald Schaefer AES cipher algorithms (FIPS-197). 1353f5615e0SJan Glauber 13699d97222SGerald Schaefer As of z9 the ECB and CBC modes are hardware accelerated 13799d97222SGerald Schaefer for 128 bit keys. 13899d97222SGerald Schaefer As of z10 the ECB and CBC modes are hardware accelerated 13999d97222SGerald Schaefer for all AES key sizes. 14099d97222SGerald Schaefer As of z196 the XTS mode is hardware accelerated for 256 and 14199d97222SGerald Schaefer 512 bit keys. 1423f5615e0SJan Glauber 1433f5615e0SJan Glauberconfig S390_PRNG 1443f5615e0SJan Glauber tristate "Pseudo random number generator device driver" 1453f5615e0SJan Glauber depends on S390 1463f5615e0SJan Glauber default "m" 1473f5615e0SJan Glauber help 1483f5615e0SJan Glauber Select this option if you want to use the s390 pseudo random number 1493f5615e0SJan Glauber generator. The PRNG is part of the cryptographic processor functions 1503f5615e0SJan Glauber and uses triple-DES to generate secure random numbers like the 1513f5615e0SJan Glauber ANSI X9.17 standard. The PRNG is usable via the char device 1523f5615e0SJan Glauber /dev/prandom. 1533f5615e0SJan Glauber 15485a7f0acSSebastian Andrzej Siewiorconfig CRYPTO_DEV_MV_CESA 15585a7f0acSSebastian Andrzej Siewior tristate "Marvell's Cryptographic Engine" 15685a7f0acSSebastian Andrzej Siewior depends on PLAT_ORION 15785a7f0acSSebastian Andrzej Siewior select CRYPTO_ALGAPI 15885a7f0acSSebastian Andrzej Siewior select CRYPTO_AES 15985a7f0acSSebastian Andrzej Siewior select CRYPTO_BLKCIPHER2 16085a7f0acSSebastian Andrzej Siewior help 16185a7f0acSSebastian Andrzej Siewior This driver allows you to utilize the Cryptographic Engines and 16285a7f0acSSebastian Andrzej Siewior Security Accelerator (CESA) which can be found on the Marvell Orion 16385a7f0acSSebastian Andrzej Siewior and Kirkwood SoCs, such as QNAP's TS-209. 16485a7f0acSSebastian Andrzej Siewior 16585a7f0acSSebastian Andrzej Siewior Currently the driver supports AES in ECB and CBC mode without DMA. 16685a7f0acSSebastian Andrzej Siewior 1670a625fd2SDavid S. Millerconfig CRYPTO_DEV_NIAGARA2 1680a625fd2SDavid S. Miller tristate "Niagara2 Stream Processing Unit driver" 16950e78161SDavid S. Miller select CRYPTO_DES 1700a625fd2SDavid S. Miller select CRYPTO_ALGAPI 1710a625fd2SDavid S. Miller depends on SPARC64 1720a625fd2SDavid S. Miller help 1730a625fd2SDavid S. Miller Each core of a Niagara2 processor contains a Stream 1740a625fd2SDavid S. Miller Processing Unit, which itself contains several cryptographic 1750a625fd2SDavid S. Miller sub-units. One set provides the Modular Arithmetic Unit, 1760a625fd2SDavid S. Miller used for SSL offload. The other set provides the Cipher 1770a625fd2SDavid S. Miller Group, which can perform encryption, decryption, hashing, 1780a625fd2SDavid S. Miller checksumming, and raw copies. 1790a625fd2SDavid S. Miller 180f7d0561eSEvgeniy Polyakovconfig CRYPTO_DEV_HIFN_795X 181f7d0561eSEvgeniy Polyakov tristate "Driver HIFN 795x crypto accelerator chips" 182c3041f9cSEvgeniy Polyakov select CRYPTO_DES 183f7d0561eSEvgeniy Polyakov select CRYPTO_ALGAPI 184653ebd9cSHerbert Xu select CRYPTO_BLKCIPHER 185946fef4eSHerbert Xu select HW_RANDOM if CRYPTO_DEV_HIFN_795X_RNG 1862707b937SJan Glauber depends on PCI 187f7d0561eSEvgeniy Polyakov help 188f7d0561eSEvgeniy Polyakov This option allows you to have support for HIFN 795x crypto adapters. 189f7d0561eSEvgeniy Polyakov 190946fef4eSHerbert Xuconfig CRYPTO_DEV_HIFN_795X_RNG 191946fef4eSHerbert Xu bool "HIFN 795x random number generator" 192946fef4eSHerbert Xu depends on CRYPTO_DEV_HIFN_795X 193946fef4eSHerbert Xu help 194946fef4eSHerbert Xu Select this option if you want to enable the random number generator 195946fef4eSHerbert Xu on the HIFN 795x crypto adapters. 196f7d0561eSEvgeniy Polyakov 1978e8ec596SKim Phillipssource drivers/crypto/caam/Kconfig 1988e8ec596SKim Phillips 1999c4a7965SKim Phillipsconfig CRYPTO_DEV_TALITOS 2009c4a7965SKim Phillips tristate "Talitos Freescale Security Engine (SEC)" 2019c4a7965SKim Phillips select CRYPTO_ALGAPI 2029c4a7965SKim Phillips select CRYPTO_AUTHENC 2039c4a7965SKim Phillips select HW_RANDOM 2049c4a7965SKim Phillips depends on FSL_SOC 2059c4a7965SKim Phillips help 2069c4a7965SKim Phillips Say 'Y' here to use the Freescale Security Engine (SEC) 2079c4a7965SKim Phillips to offload cryptographic algorithm computation. 2089c4a7965SKim Phillips 2099c4a7965SKim Phillips The Freescale SEC is present on PowerQUICC 'E' processors, such 2109c4a7965SKim Phillips as the MPC8349E and MPC8548E. 2119c4a7965SKim Phillips 2129c4a7965SKim Phillips To compile this driver as a module, choose M here: the module 2139c4a7965SKim Phillips will be called talitos. 2149c4a7965SKim Phillips 21581bef015SChristian Hohnstaedtconfig CRYPTO_DEV_IXP4XX 21681bef015SChristian Hohnstaedt tristate "Driver for IXP4xx crypto hardware acceleration" 21781bef015SChristian Hohnstaedt depends on ARCH_IXP4XX 21881bef015SChristian Hohnstaedt select CRYPTO_DES 21981bef015SChristian Hohnstaedt select CRYPTO_ALGAPI 220090657e4SImre Kaloz select CRYPTO_AUTHENC 22181bef015SChristian Hohnstaedt select CRYPTO_BLKCIPHER 22281bef015SChristian Hohnstaedt help 22381bef015SChristian Hohnstaedt Driver for the IXP4xx NPE crypto engine. 22481bef015SChristian Hohnstaedt 225049359d6SJames Hsiaoconfig CRYPTO_DEV_PPC4XX 226049359d6SJames Hsiao tristate "Driver AMCC PPC4xx crypto accelerator" 227049359d6SJames Hsiao depends on PPC && 4xx 228049359d6SJames Hsiao select CRYPTO_HASH 229049359d6SJames Hsiao select CRYPTO_ALGAPI 230049359d6SJames Hsiao select CRYPTO_BLKCIPHER 231049359d6SJames Hsiao help 232049359d6SJames Hsiao This option allows you to have support for AMCC crypto acceleration. 233049359d6SJames Hsiao 2348628e7c8SDmitry Kasatkinconfig CRYPTO_DEV_OMAP_SHAM 2358628e7c8SDmitry Kasatkin tristate "Support for OMAP SHA1/MD5 hw accelerator" 2368628e7c8SDmitry Kasatkin depends on ARCH_OMAP2 || ARCH_OMAP3 2378628e7c8SDmitry Kasatkin select CRYPTO_SHA1 2388628e7c8SDmitry Kasatkin select CRYPTO_MD5 2398628e7c8SDmitry Kasatkin help 2408628e7c8SDmitry Kasatkin OMAP processors have SHA1/MD5 hw accelerator. Select this if you 2418628e7c8SDmitry Kasatkin want to use the OMAP module for SHA1/MD5 algorithms. 2428628e7c8SDmitry Kasatkin 243537559a5SDmitry Kasatkinconfig CRYPTO_DEV_OMAP_AES 244537559a5SDmitry Kasatkin tristate "Support for OMAP AES hw engine" 245537559a5SDmitry Kasatkin depends on ARCH_OMAP2 || ARCH_OMAP3 246537559a5SDmitry Kasatkin select CRYPTO_AES 247537559a5SDmitry Kasatkin help 248537559a5SDmitry Kasatkin OMAP processors have AES module accelerator. Select this if you 249537559a5SDmitry Kasatkin want to use the OMAP module for AES algorithms. 250537559a5SDmitry Kasatkin 251ce921368SJamie Ilesconfig CRYPTO_DEV_PICOXCELL 252ce921368SJamie Iles tristate "Support for picoXcell IPSEC and Layer2 crypto engines" 253ce921368SJamie Iles depends on ARCH_PICOXCELL 254ce921368SJamie Iles select CRYPTO_AES 255ce921368SJamie Iles select CRYPTO_AUTHENC 256ce921368SJamie Iles select CRYPTO_ALGAPI 257ce921368SJamie Iles select CRYPTO_DES 258ce921368SJamie Iles select CRYPTO_CBC 259ce921368SJamie Iles select CRYPTO_ECB 260ce921368SJamie Iles select CRYPTO_SEQIV 261ce921368SJamie Iles help 262ce921368SJamie Iles This option enables support for the hardware offload engines in the 263ce921368SJamie Iles Picochip picoXcell SoC devices. Select this for IPSEC ESP offload 264ce921368SJamie Iles and for 3gpp Layer 2 ciphering support. 265ce921368SJamie Iles 266ce921368SJamie Iles Saying m here will build a module named pipcoxcell_crypto. 267ce921368SJamie Iles 268a49e490cSVladimir Zapolskiyconfig CRYPTO_DEV_S5P 269a49e490cSVladimir Zapolskiy tristate "Support for Samsung S5PV210 crypto accelerator" 270a49e490cSVladimir Zapolskiy depends on ARCH_S5PV210 271a49e490cSVladimir Zapolskiy select CRYPTO_AES 272a49e490cSVladimir Zapolskiy select CRYPTO_ALGAPI 273a49e490cSVladimir Zapolskiy select CRYPTO_BLKCIPHER 274a49e490cSVladimir Zapolskiy help 275a49e490cSVladimir Zapolskiy This option allows you to have support for S5P crypto acceleration. 276a49e490cSVladimir Zapolskiy Select this to offload Samsung S5PV210 or S5PC110 from AES 277a49e490cSVladimir Zapolskiy algorithms execution. 278a49e490cSVladimir Zapolskiy 279b511431dSJan Engelhardtendif # CRYPTO_HW 280