xref: /openbmc/linux/drivers/crypto/Kconfig (revision f15cbe6f)
1
2menuconfig CRYPTO_HW
3	bool "Hardware crypto devices"
4	default y
5	---help---
6	  Say Y here to get to see options for hardware crypto devices and
7	  processors. This option alone does not add any kernel code.
8
9	  If you say N, all options in this submenu will be skipped and disabled.
10
11if CRYPTO_HW
12
13config CRYPTO_DEV_PADLOCK
14	tristate "Support for VIA PadLock ACE"
15	depends on X86_32 && !UML
16	select CRYPTO_ALGAPI
17	help
18	  Some VIA processors come with an integrated crypto engine
19	  (so called VIA PadLock ACE, Advanced Cryptography Engine)
20	  that provides instructions for very fast cryptographic
21	  operations with supported algorithms.
22
23	  The instructions are used only when the CPU supports them.
24	  Otherwise software encryption is used.
25
26config CRYPTO_DEV_PADLOCK_AES
27	tristate "PadLock driver for AES algorithm"
28	depends on CRYPTO_DEV_PADLOCK
29	select CRYPTO_BLKCIPHER
30	select CRYPTO_AES
31	help
32	  Use VIA PadLock for AES algorithm.
33
34	  Available in VIA C3 and newer CPUs.
35
36	  If unsure say M. The compiled module will be
37	  called padlock-aes.ko
38
39config CRYPTO_DEV_PADLOCK_SHA
40	tristate "PadLock driver for SHA1 and SHA256 algorithms"
41	depends on CRYPTO_DEV_PADLOCK
42	select CRYPTO_SHA1
43	select CRYPTO_SHA256
44	help
45	  Use VIA PadLock for SHA1/SHA256 algorithms.
46
47	  Available in VIA C7 and newer processors.
48
49	  If unsure say M. The compiled module will be
50	  called padlock-sha.ko
51
52config CRYPTO_DEV_GEODE
53	tristate "Support for the Geode LX AES engine"
54	depends on X86_32 && PCI
55	select CRYPTO_ALGAPI
56	select CRYPTO_BLKCIPHER
57	help
58	  Say 'Y' here to use the AMD Geode LX processor on-board AES
59	  engine for the CryptoAPI AES algorithm.
60
61	  To compile this driver as a module, choose M here: the module
62	  will be called geode-aes.
63
64config ZCRYPT
65	tristate "Support for PCI-attached cryptographic adapters"
66	depends on S390
67	select ZCRYPT_MONOLITHIC if ZCRYPT="y"
68	select HW_RANDOM
69	help
70	  Select this option if you want to use a PCI-attached cryptographic
71	  adapter like:
72	  + PCI Cryptographic Accelerator (PCICA)
73	  + PCI Cryptographic Coprocessor (PCICC)
74	  + PCI-X Cryptographic Coprocessor (PCIXCC)
75	  + Crypto Express2 Coprocessor (CEX2C)
76	  + Crypto Express2 Accelerator (CEX2A)
77
78config ZCRYPT_MONOLITHIC
79	bool "Monolithic zcrypt module"
80	depends on ZCRYPT="m"
81	help
82	  Select this option if you want to have a single module z90crypt.ko
83	  that contains all parts of the crypto device driver (ap bus,
84	  request router and all the card drivers).
85
86config CRYPTO_SHA1_S390
87	tristate "SHA1 digest algorithm"
88	depends on S390
89	select CRYPTO_ALGAPI
90	help
91	  This is the s390 hardware accelerated implementation of the
92	  SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2).
93
94config CRYPTO_SHA256_S390
95	tristate "SHA256 digest algorithm"
96	depends on S390
97	select CRYPTO_ALGAPI
98	help
99	  This is the s390 hardware accelerated implementation of the
100	  SHA256 secure hash standard (DFIPS 180-2).
101
102	  This version of SHA implements a 256 bit hash with 128 bits of
103	  security against collision attacks.
104
105config CRYPTO_SHA512_S390
106	tristate "SHA384 and SHA512 digest algorithm"
107	depends on S390
108	select CRYPTO_ALGAPI
109	help
110	  This is the s390 hardware accelerated implementation of the
111	  SHA512 secure hash standard.
112
113	  This version of SHA implements a 512 bit hash with 256 bits of
114	  security against collision attacks. The code also includes SHA-384,
115	  a 384 bit hash with 192 bits of security against collision attacks.
116
117
118config CRYPTO_DES_S390
119	tristate "DES and Triple DES cipher algorithms"
120	depends on S390
121	select CRYPTO_ALGAPI
122	select CRYPTO_BLKCIPHER
123	help
124	  This us the s390 hardware accelerated implementation of the
125	  DES cipher algorithm (FIPS 46-2), and Triple DES EDE (FIPS 46-3).
126
127config CRYPTO_AES_S390
128	tristate "AES cipher algorithms"
129	depends on S390
130	select CRYPTO_ALGAPI
131	select CRYPTO_BLKCIPHER
132	help
133	  This is the s390 hardware accelerated implementation of the
134	  AES cipher algorithms (FIPS-197). AES uses the Rijndael
135	  algorithm.
136
137	  Rijndael appears to be consistently a very good performer in
138	  both hardware and software across a wide range of computing
139	  environments regardless of its use in feedback or non-feedback
140	  modes. Its key setup time is excellent, and its key agility is
141	  good. Rijndael's very low memory requirements make it very well
142	  suited for restricted-space environments, in which it also
143	  demonstrates excellent performance. Rijndael's operations are
144	  among the easiest to defend against power and timing attacks.
145
146	  On s390 the System z9-109 currently only supports the key size
147	  of 128 bit.
148
149config S390_PRNG
150	tristate "Pseudo random number generator device driver"
151	depends on S390
152	default "m"
153	help
154	  Select this option if you want to use the s390 pseudo random number
155	  generator. The PRNG is part of the cryptographic processor functions
156	  and uses triple-DES to generate secure random numbers like the
157	  ANSI X9.17 standard. The PRNG is usable via the char device
158	  /dev/prandom.
159
160config CRYPTO_DEV_HIFN_795X
161	tristate "Driver HIFN 795x crypto accelerator chips"
162	select CRYPTO_DES
163	select CRYPTO_ALGAPI
164	select CRYPTO_BLKCIPHER
165	select HW_RANDOM if CRYPTO_DEV_HIFN_795X_RNG
166	depends on PCI
167	help
168	  This option allows you to have support for HIFN 795x crypto adapters.
169
170config CRYPTO_DEV_HIFN_795X_RNG
171	bool "HIFN 795x random number generator"
172	depends on CRYPTO_DEV_HIFN_795X
173	help
174	  Select this option if you want to enable the random number generator
175	  on the HIFN 795x crypto adapters.
176
177config CRYPTO_DEV_TALITOS
178	tristate "Talitos Freescale Security Engine (SEC)"
179	select CRYPTO_ALGAPI
180	select CRYPTO_AUTHENC
181	select HW_RANDOM
182	depends on FSL_SOC
183	help
184	  Say 'Y' here to use the Freescale Security Engine (SEC)
185	  to offload cryptographic algorithm computation.
186
187	  The Freescale SEC is present on PowerQUICC 'E' processors, such
188	  as the MPC8349E and MPC8548E.
189
190	  To compile this driver as a module, choose M here: the module
191	  will be called talitos.
192
193config CRYPTO_DEV_IXP4XX
194	tristate "Driver for IXP4xx crypto hardware acceleration"
195	depends on ARCH_IXP4XX
196	select CRYPTO_DES
197	select CRYPTO_ALGAPI
198	select CRYPTO_AUTHENC
199	select CRYPTO_BLKCIPHER
200	help
201	  Driver for the IXP4xx NPE crypto engine.
202
203endif # CRYPTO_HW
204