| 
									
										
										
										
											2007-07-15 23:39:36 -07:00
										 |  |  | 
 | 
					
						
							|  |  |  | menuconfig CRYPTO_HW | 
					
						
							|  |  |  | 	bool "Hardware crypto devices" | 
					
						
							|  |  |  | 	default y | 
					
						
							| 
									
										
										
										
											2007-08-18 12:56:21 +02:00
										 |  |  | 	---help--- | 
					
						
							|  |  |  | 	  Say Y here to get to see options for hardware crypto devices and | 
					
						
							|  |  |  | 	  processors. This option alone does not add any kernel code. | 
					
						
							|  |  |  | 
 | 
					
						
							|  |  |  | 	  If you say N, all options in this submenu will be skipped and disabled. | 
					
						
							| 
									
										
										
										
											2007-07-15 23:39:36 -07:00
										 |  |  | 
 | 
					
						
							|  |  |  | if CRYPTO_HW | 
					
						
							| 
									
										
										
										
											2005-04-16 15:20:36 -07:00
										 |  |  | 
 | 
					
						
							|  |  |  | config CRYPTO_DEV_PADLOCK | 
					
						
							| 
									
										
										
										
											2007-05-18 13:17:22 +10:00
										 |  |  | 	tristate "Support for VIA PadLock ACE" | 
					
						
							| 
									
										
										
										
											2007-12-01 12:16:29 -08:00
										 |  |  | 	depends on X86_32 && !UML | 
					
						
							| 
									
										
										
										
											2006-08-21 21:08:13 +10:00
										 |  |  | 	select CRYPTO_ALGAPI | 
					
						
							| 
									
										
										
										
											2005-04-16 15:20:36 -07:00
										 |  |  | 	help | 
					
						
							|  |  |  | 	  Some VIA processors come with an integrated crypto engine | 
					
						
							|  |  |  | 	  (so called VIA PadLock ACE, Advanced Cryptography Engine) | 
					
						
							| 
									
										
										
										
											2006-08-06 22:46:20 +10:00
										 |  |  | 	  that provides instructions for very fast cryptographic | 
					
						
							|  |  |  | 	  operations with supported algorithms. | 
					
						
							| 
									
										
										
										
											2005-04-16 15:20:36 -07:00
										 |  |  | 	   | 
					
						
							|  |  |  | 	  The instructions are used only when the CPU supports them. | 
					
						
							| 
									
										
										
										
											2006-08-06 22:50:30 +10:00
										 |  |  | 	  Otherwise software encryption is used. | 
					
						
							|  |  |  | 
 | 
					
						
							| 
									
										
										
										
											2005-04-16 15:20:36 -07:00
										 |  |  | config CRYPTO_DEV_PADLOCK_AES | 
					
						
							| 
									
										
										
										
											2006-08-06 22:46:20 +10:00
										 |  |  | 	tristate "PadLock driver for AES algorithm" | 
					
						
							| 
									
										
										
										
											2005-04-16 15:20:36 -07:00
										 |  |  | 	depends on CRYPTO_DEV_PADLOCK | 
					
						
							| 
									
										
										
										
											2006-08-21 21:38:42 +10:00
										 |  |  | 	select CRYPTO_BLKCIPHER | 
					
						
							| 
									
										
										
										
											2008-04-01 21:24:50 +08:00
										 |  |  | 	select CRYPTO_AES | 
					
						
							| 
									
										
										
										
											2005-04-16 15:20:36 -07:00
										 |  |  | 	help | 
					
						
							|  |  |  | 	  Use VIA PadLock for AES algorithm. | 
					
						
							|  |  |  | 
 | 
					
						
							| 
									
										
										
										
											2006-08-06 22:46:20 +10:00
										 |  |  | 	  Available in VIA C3 and newer CPUs. | 
					
						
							|  |  |  | 
 | 
					
						
							|  |  |  | 	  If unsure say M. The compiled module will be | 
					
						
							|  |  |  | 	  called padlock-aes.ko | 
					
						
							|  |  |  | 
 | 
					
						
							| 
									
										
										
										
											2006-07-12 12:29:38 +10:00
										 |  |  | config CRYPTO_DEV_PADLOCK_SHA | 
					
						
							|  |  |  | 	tristate "PadLock driver for SHA1 and SHA256 algorithms" | 
					
						
							|  |  |  | 	depends on CRYPTO_DEV_PADLOCK | 
					
						
							|  |  |  | 	select CRYPTO_SHA1 | 
					
						
							|  |  |  | 	select CRYPTO_SHA256 | 
					
						
							|  |  |  | 	help | 
					
						
							|  |  |  | 	  Use VIA PadLock for SHA1/SHA256 algorithms. | 
					
						
							|  |  |  | 
 | 
					
						
							|  |  |  | 	  Available in VIA C7 and newer processors. | 
					
						
							|  |  |  | 
 | 
					
						
							|  |  |  | 	  If unsure say M. The compiled module will be | 
					
						
							|  |  |  | 	  called padlock-sha.ko | 
					
						
							|  |  |  | 
 | 
					
						
							| 
									
										
										
										
											2006-10-04 18:48:57 +10:00
										 |  |  | config CRYPTO_DEV_GEODE | 
					
						
							|  |  |  | 	tristate "Support for the Geode LX AES engine" | 
					
						
							| 
									
										
										
										
											2007-05-02 22:08:26 +10:00
										 |  |  | 	depends on X86_32 && PCI | 
					
						
							| 
									
										
										
										
											2006-10-04 18:48:57 +10:00
										 |  |  | 	select CRYPTO_ALGAPI | 
					
						
							|  |  |  | 	select CRYPTO_BLKCIPHER | 
					
						
							|  |  |  | 	help | 
					
						
							|  |  |  | 	  Say 'Y' here to use the AMD Geode LX processor on-board AES | 
					
						
							| 
									
										
										
										
											2007-05-09 07:12:20 +02:00
										 |  |  | 	  engine for the CryptoAPI AES algorithm. | 
					
						
							| 
									
										
										
										
											2006-10-04 18:48:57 +10:00
										 |  |  | 
 | 
					
						
							|  |  |  | 	  To compile this driver as a module, choose M here: the module | 
					
						
							|  |  |  | 	  will be called geode-aes. | 
					
						
							|  |  |  | 
 | 
					
						
							| 
									
										
										
										
											2007-05-10 15:46:00 +02:00
										 |  |  | config ZCRYPT | 
					
						
							|  |  |  | 	tristate "Support for PCI-attached cryptographic adapters" | 
					
						
							|  |  |  | 	depends on S390 | 
					
						
							|  |  |  | 	select ZCRYPT_MONOLITHIC if ZCRYPT="y" | 
					
						
							| 
									
										
										
										
											2008-04-17 07:46:15 +02:00
										 |  |  | 	select HW_RANDOM | 
					
						
							| 
									
										
										
										
											2007-05-10 15:46:00 +02:00
										 |  |  | 	help | 
					
						
							|  |  |  | 	  Select this option if you want to use a PCI-attached cryptographic | 
					
						
							|  |  |  | 	  adapter like: | 
					
						
							|  |  |  | 	  + PCI Cryptographic Accelerator (PCICA) | 
					
						
							|  |  |  | 	  + PCI Cryptographic Coprocessor (PCICC) | 
					
						
							|  |  |  | 	  + PCI-X Cryptographic Coprocessor (PCIXCC) | 
					
						
							|  |  |  | 	  + Crypto Express2 Coprocessor (CEX2C) | 
					
						
							|  |  |  | 	  + Crypto Express2 Accelerator (CEX2A) | 
					
						
							|  |  |  | 
 | 
					
						
							|  |  |  | config ZCRYPT_MONOLITHIC | 
					
						
							|  |  |  | 	bool "Monolithic zcrypt module" | 
					
						
							|  |  |  | 	depends on ZCRYPT="m" | 
					
						
							|  |  |  | 	help | 
					
						
							|  |  |  | 	  Select this option if you want to have a single module z90crypt.ko | 
					
						
							|  |  |  | 	  that contains all parts of the crypto device driver (ap bus, | 
					
						
							|  |  |  | 	  request router and all the card drivers). | 
					
						
							|  |  |  | 
 | 
					
						
							| 
									
										
										
										
											2008-01-26 14:11:07 +01:00
										 |  |  | config CRYPTO_SHA1_S390 | 
					
						
							|  |  |  | 	tristate "SHA1 digest algorithm" | 
					
						
							|  |  |  | 	depends on S390 | 
					
						
							|  |  |  | 	select CRYPTO_ALGAPI | 
					
						
							|  |  |  | 	help | 
					
						
							|  |  |  | 	  This is the s390 hardware accelerated implementation of the | 
					
						
							|  |  |  | 	  SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2). | 
					
						
							|  |  |  | 
 | 
					
						
							|  |  |  | config CRYPTO_SHA256_S390 | 
					
						
							|  |  |  | 	tristate "SHA256 digest algorithm" | 
					
						
							|  |  |  | 	depends on S390 | 
					
						
							|  |  |  | 	select CRYPTO_ALGAPI | 
					
						
							|  |  |  | 	help | 
					
						
							|  |  |  | 	  This is the s390 hardware accelerated implementation of the | 
					
						
							|  |  |  | 	  SHA256 secure hash standard (DFIPS 180-2). | 
					
						
							|  |  |  | 
 | 
					
						
							|  |  |  | 	  This version of SHA implements a 256 bit hash with 128 bits of | 
					
						
							|  |  |  | 	  security against collision attacks. | 
					
						
							|  |  |  | 
 | 
					
						
							| 
									
										
										
										
											2008-03-06 19:52:00 +08:00
										 |  |  | config CRYPTO_SHA512_S390 | 
					
						
							| 
									
										
										
										
											2008-03-06 19:53:50 +08:00
										 |  |  | 	tristate "SHA384 and SHA512 digest algorithm" | 
					
						
							| 
									
										
										
										
											2008-03-06 19:52:00 +08:00
										 |  |  | 	depends on S390 | 
					
						
							|  |  |  | 	select CRYPTO_ALGAPI | 
					
						
							|  |  |  | 	help | 
					
						
							|  |  |  | 	  This is the s390 hardware accelerated implementation of the | 
					
						
							|  |  |  | 	  SHA512 secure hash standard. | 
					
						
							|  |  |  | 
 | 
					
						
							|  |  |  | 	  This version of SHA implements a 512 bit hash with 256 bits of | 
					
						
							| 
									
										
										
										
											2008-03-06 19:53:50 +08:00
										 |  |  | 	  security against collision attacks. The code also includes SHA-384, | 
					
						
							|  |  |  | 	  a 384 bit hash with 192 bits of security against collision attacks. | 
					
						
							|  |  |  | 
 | 
					
						
							| 
									
										
										
										
											2008-03-06 19:52:00 +08:00
										 |  |  | 
 | 
					
						
							| 
									
										
										
										
											2008-01-26 14:11:07 +01:00
										 |  |  | config CRYPTO_DES_S390 | 
					
						
							|  |  |  | 	tristate "DES and Triple DES cipher algorithms" | 
					
						
							|  |  |  | 	depends on S390 | 
					
						
							|  |  |  | 	select CRYPTO_ALGAPI | 
					
						
							|  |  |  | 	select CRYPTO_BLKCIPHER | 
					
						
							|  |  |  | 	help | 
					
						
							|  |  |  | 	  This us the s390 hardware accelerated implementation of the | 
					
						
							|  |  |  | 	  DES cipher algorithm (FIPS 46-2), and Triple DES EDE (FIPS 46-3). | 
					
						
							|  |  |  | 
 | 
					
						
							|  |  |  | config CRYPTO_AES_S390 | 
					
						
							|  |  |  | 	tristate "AES cipher algorithms" | 
					
						
							|  |  |  | 	depends on S390 | 
					
						
							|  |  |  | 	select CRYPTO_ALGAPI | 
					
						
							|  |  |  | 	select CRYPTO_BLKCIPHER | 
					
						
							|  |  |  | 	help | 
					
						
							|  |  |  | 	  This is the s390 hardware accelerated implementation of the | 
					
						
							|  |  |  | 	  AES cipher algorithms (FIPS-197). AES uses the Rijndael | 
					
						
							|  |  |  | 	  algorithm. | 
					
						
							|  |  |  | 
 | 
					
						
							|  |  |  | 	  Rijndael appears to be consistently a very good performer in | 
					
						
							|  |  |  | 	  both hardware and software across a wide range of computing | 
					
						
							|  |  |  | 	  environments regardless of its use in feedback or non-feedback | 
					
						
							|  |  |  | 	  modes. Its key setup time is excellent, and its key agility is | 
					
						
							|  |  |  | 	  good. Rijndael's very low memory requirements make it very well | 
					
						
							|  |  |  | 	  suited for restricted-space environments, in which it also | 
					
						
							|  |  |  | 	  demonstrates excellent performance. Rijndael's operations are | 
					
						
							|  |  |  | 	  among the easiest to defend against power and timing attacks. | 
					
						
							|  |  |  | 
 | 
					
						
							|  |  |  | 	  On s390 the System z9-109 currently only supports the key size | 
					
						
							|  |  |  | 	  of 128 bit. | 
					
						
							|  |  |  | 
 | 
					
						
							|  |  |  | config S390_PRNG | 
					
						
							|  |  |  | 	tristate "Pseudo random number generator device driver" | 
					
						
							|  |  |  | 	depends on S390 | 
					
						
							|  |  |  | 	default "m" | 
					
						
							|  |  |  | 	help | 
					
						
							|  |  |  | 	  Select this option if you want to use the s390 pseudo random number | 
					
						
							|  |  |  | 	  generator. The PRNG is part of the cryptographic processor functions | 
					
						
							|  |  |  | 	  and uses triple-DES to generate secure random numbers like the | 
					
						
							|  |  |  | 	  ANSI X9.17 standard. The PRNG is usable via the char device | 
					
						
							|  |  |  | 	  /dev/prandom. | 
					
						
							|  |  |  | 
 | 
					
						
							| 
									
										
										
										
											2007-10-26 21:31:14 +08:00
										 |  |  | config CRYPTO_DEV_HIFN_795X | 
					
						
							|  |  |  | 	tristate "Driver HIFN 795x crypto accelerator chips" | 
					
						
							| 
									
										
										
										
											2007-10-11 19:58:16 +08:00
										 |  |  | 	select CRYPTO_DES | 
					
						
							| 
									
										
										
										
											2007-10-26 21:31:14 +08:00
										 |  |  | 	select CRYPTO_ALGAPI | 
					
						
							| 
									
										
										
										
											2007-11-27 19:48:27 +08:00
										 |  |  | 	select CRYPTO_BLKCIPHER | 
					
						
							| 
									
										
										
										
											2008-01-26 09:48:44 +11:00
										 |  |  | 	select HW_RANDOM if CRYPTO_DEV_HIFN_795X_RNG | 
					
						
							| 
									
										
										
										
											2007-11-12 21:56:38 +08:00
										 |  |  | 	depends on PCI | 
					
						
							| 
									
										
										
										
											2007-10-26 21:31:14 +08:00
										 |  |  | 	help | 
					
						
							|  |  |  | 	  This option allows you to have support for HIFN 795x crypto adapters. | 
					
						
							|  |  |  | 
 | 
					
						
							| 
									
										
										
										
											2008-01-26 09:48:44 +11:00
										 |  |  | config CRYPTO_DEV_HIFN_795X_RNG | 
					
						
							|  |  |  | 	bool "HIFN 795x random number generator" | 
					
						
							|  |  |  | 	depends on CRYPTO_DEV_HIFN_795X | 
					
						
							|  |  |  | 	help | 
					
						
							|  |  |  | 	  Select this option if you want to enable the random number generator | 
					
						
							|  |  |  | 	  on the HIFN 795x crypto adapters. | 
					
						
							| 
									
										
										
										
											2007-10-26 21:31:14 +08:00
										 |  |  | 
 | 
					
						
							| 
									
										
										
										
											2007-07-15 23:39:36 -07:00
										 |  |  | endif # CRYPTO_HW |