2015-03-10 15:47:44 +07:00
|
|
|
|
|
|
|
menuconfig ARM_CRYPTO
|
|
|
|
bool "ARM Accelerated Cryptographic Algorithms"
|
|
|
|
depends on ARM
|
|
|
|
help
|
|
|
|
Say Y here to choose from a selection of cryptographic algorithms
|
|
|
|
implemented using ARM specific CPU features or instructions.
|
|
|
|
|
|
|
|
if ARM_CRYPTO
|
|
|
|
|
|
|
|
config CRYPTO_SHA1_ARM
|
|
|
|
tristate "SHA1 digest algorithm (ARM-asm)"
|
|
|
|
select CRYPTO_SHA1
|
|
|
|
select CRYPTO_HASH
|
|
|
|
help
|
|
|
|
SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented
|
|
|
|
using optimized ARM assembler.
|
|
|
|
|
|
|
|
config CRYPTO_SHA1_ARM_NEON
|
|
|
|
tristate "SHA1 digest algorithm (ARM NEON)"
|
|
|
|
depends on KERNEL_MODE_NEON
|
|
|
|
select CRYPTO_SHA1_ARM
|
|
|
|
select CRYPTO_SHA1
|
|
|
|
select CRYPTO_HASH
|
|
|
|
help
|
|
|
|
SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented
|
|
|
|
using optimized ARM NEON assembly, when NEON instructions are
|
|
|
|
available.
|
|
|
|
|
2015-03-10 15:47:45 +07:00
|
|
|
config CRYPTO_SHA1_ARM_CE
|
|
|
|
tristate "SHA1 digest algorithm (ARM v8 Crypto Extensions)"
|
|
|
|
depends on KERNEL_MODE_NEON
|
|
|
|
select CRYPTO_SHA1_ARM
|
|
|
|
select CRYPTO_HASH
|
|
|
|
help
|
|
|
|
SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented
|
|
|
|
using special ARMv8 Crypto Extensions.
|
2015-03-10 15:47:46 +07:00
|
|
|
|
|
|
|
config CRYPTO_SHA2_ARM_CE
|
|
|
|
tristate "SHA-224/256 digest algorithm (ARM v8 Crypto Extensions)"
|
|
|
|
depends on KERNEL_MODE_NEON
|
2015-04-09 17:55:43 +07:00
|
|
|
select CRYPTO_SHA256_ARM
|
2015-03-10 15:47:46 +07:00
|
|
|
select CRYPTO_HASH
|
|
|
|
help
|
|
|
|
SHA-256 secure hash standard (DFIPS 180-2) implemented
|
|
|
|
using special ARMv8 Crypto Extensions.
|
2015-03-10 15:47:45 +07:00
|
|
|
|
2015-04-03 17:03:40 +07:00
|
|
|
config CRYPTO_SHA256_ARM
|
|
|
|
tristate "SHA-224/256 digest algorithm (ARM-asm and NEON)"
|
|
|
|
select CRYPTO_HASH
|
2015-04-11 15:48:44 +07:00
|
|
|
depends on !CPU_V7M
|
2015-04-03 17:03:40 +07:00
|
|
|
help
|
|
|
|
SHA-256 secure hash standard (DFIPS 180-2) implemented
|
|
|
|
using optimized ARM assembler and NEON, when available.
|
|
|
|
|
2015-05-08 15:46:21 +07:00
|
|
|
config CRYPTO_SHA512_ARM
|
|
|
|
tristate "SHA-384/512 digest algorithm (ARM-asm and NEON)"
|
2015-03-10 15:47:44 +07:00
|
|
|
select CRYPTO_HASH
|
2015-05-08 15:46:21 +07:00
|
|
|
depends on !CPU_V7M
|
2015-03-10 15:47:44 +07:00
|
|
|
help
|
|
|
|
SHA-512 secure hash standard (DFIPS 180-2) implemented
|
2015-05-08 15:46:21 +07:00
|
|
|
using optimized ARM assembler and NEON, when available.
|
2015-03-10 15:47:44 +07:00
|
|
|
|
|
|
|
config CRYPTO_AES_ARM
|
|
|
|
tristate "AES cipher algorithms (ARM-asm)"
|
|
|
|
depends on ARM
|
|
|
|
select CRYPTO_ALGAPI
|
|
|
|
select CRYPTO_AES
|
|
|
|
help
|
|
|
|
Use optimized AES assembler routines for ARM platforms.
|
|
|
|
|
|
|
|
AES cipher algorithms (FIPS-197). AES uses the Rijndael
|
|
|
|
algorithm.
|
|
|
|
|
|
|
|
Rijndael appears to be consistently a very good performer in
|
|
|
|
both hardware and software across a wide range of computing
|
|
|
|
environments regardless of its use in feedback or non-feedback
|
|
|
|
modes. Its key setup time is excellent, and its key agility is
|
|
|
|
good. Rijndael's very low memory requirements make it very well
|
|
|
|
suited for restricted-space environments, in which it also
|
|
|
|
demonstrates excellent performance. Rijndael's operations are
|
|
|
|
among the easiest to defend against power and timing attacks.
|
|
|
|
|
|
|
|
The AES specifies three key sizes: 128, 192 and 256 bits
|
|
|
|
|
|
|
|
See <http://csrc.nist.gov/encryption/aes/> for more information.
|
|
|
|
|
|
|
|
config CRYPTO_AES_ARM_BS
|
|
|
|
tristate "Bit sliced AES using NEON instructions"
|
|
|
|
depends on KERNEL_MODE_NEON
|
|
|
|
select CRYPTO_ALGAPI
|
|
|
|
select CRYPTO_AES_ARM
|
|
|
|
select CRYPTO_ABLK_HELPER
|
|
|
|
help
|
|
|
|
Use a faster and more secure NEON based implementation of AES in CBC,
|
|
|
|
CTR and XTS modes
|
|
|
|
|
|
|
|
Bit sliced AES gives around 45% speedup on Cortex-A15 for CTR mode
|
|
|
|
and for XTS mode encryption, CBC and XTS mode decryption speedup is
|
|
|
|
around 25%. (CBC encryption speed is not affected by this driver.)
|
|
|
|
This implementation does not rely on any lookup tables so it is
|
|
|
|
believed to be invulnerable to cache timing attacks.
|
|
|
|
|
2015-03-10 15:47:47 +07:00
|
|
|
config CRYPTO_AES_ARM_CE
|
|
|
|
tristate "Accelerated AES using ARMv8 Crypto Extensions"
|
|
|
|
depends on KERNEL_MODE_NEON
|
|
|
|
select CRYPTO_ALGAPI
|
2016-11-29 14:08:40 +07:00
|
|
|
select CRYPTO_SIMD
|
2015-03-10 15:47:47 +07:00
|
|
|
help
|
|
|
|
Use an implementation of AES in CBC, CTR and XTS modes that uses
|
|
|
|
ARMv8 Crypto Extensions
|
|
|
|
|
2015-03-10 15:47:48 +07:00
|
|
|
config CRYPTO_GHASH_ARM_CE
|
|
|
|
tristate "PMULL-accelerated GHASH using ARMv8 Crypto Extensions"
|
|
|
|
depends on KERNEL_MODE_NEON
|
|
|
|
select CRYPTO_HASH
|
|
|
|
select CRYPTO_CRYPTD
|
|
|
|
help
|
|
|
|
Use an implementation of GHASH (used by the GCM AEAD chaining mode)
|
|
|
|
that uses the 64x64 to 128 bit polynomial multiplication (vmull.p64)
|
|
|
|
that is part of the ARMv8 Crypto Extensions
|
|
|
|
|
2015-03-10 15:47:44 +07:00
|
|
|
endif
|