3 bool "Hardware crypto devices"
6 Say Y here to get to see options for hardware crypto devices and
7 processors. This option alone does not add any kernel code.
9 If you say N, all options in this submenu will be skipped and disabled.
13 config CRYPTO_DEV_PADLOCK
14 tristate "Support for VIA PadLock ACE"
15 depends on X86 && !UML
17 Some VIA processors come with an integrated crypto engine
18 (so called VIA PadLock ACE, Advanced Cryptography Engine)
19 that provides instructions for very fast cryptographic
20 operations with supported algorithms.
22 The instructions are used only when the CPU supports them.
23 Otherwise software encryption is used.
25 config CRYPTO_DEV_PADLOCK_AES
26 tristate "PadLock driver for AES algorithm"
27 depends on CRYPTO_DEV_PADLOCK
28 select CRYPTO_BLKCIPHER
31 Use VIA PadLock for AES algorithm.
33 Available in VIA C3 and newer CPUs.
35 If unsure say M. The compiled module will be
38 config CRYPTO_DEV_PADLOCK_SHA
39 tristate "PadLock driver for SHA1 and SHA256 algorithms"
40 depends on CRYPTO_DEV_PADLOCK
45 Use VIA PadLock for SHA1/SHA256 algorithms.
47 Available in VIA C7 and newer processors.
49 If unsure say M. The compiled module will be
52 config CRYPTO_DEV_GEODE
53 tristate "Support for the Geode LX AES engine"
54 depends on X86_32 && PCI
56 select CRYPTO_BLKCIPHER
58 Say 'Y' here to use the AMD Geode LX processor on-board AES
59 engine for the CryptoAPI AES algorithm.
61 To compile this driver as a module, choose M here: the module
62 will be called geode-aes.
65 tristate "Support for s390 cryptographic adapters"
69 Select this option if you want to enable support for
70 s390 cryptographic adapters like:
71 + PCI-X Cryptographic Coprocessor (PCIXCC)
72 + Crypto Express 2,3,4 or 5 Coprocessor (CEXxC)
73 + Crypto Express 2,3,4 or 5 Accelerator (CEXxA)
74 + Crypto Express 4 or 5 EP11 Coprocessor (CEXxP)
76 config ZCRYPT_MULTIDEVNODES
77 bool "Support for multiple zcrypt device nodes"
82 With this option enabled the zcrypt device driver can
83 provide multiple devices nodes in /dev. Each device
84 node can get customized to limit access and narrow
85 down the use of the available crypto hardware.
88 tristate "Kernel API for protected key handling"
92 With this option enabled the pkey kernel module provides an API
93 for creation and handling of protected keys. Other parts of the
94 kernel or userspace applications may use these functions.
96 Select this option if you want to enable the kernel and userspace
97 API for proteced key handling.
99 Please note that creation of protected keys from secure keys
100 requires to have at least one CEX card in coprocessor mode
101 available at runtime.
103 config CRYPTO_PAES_S390
104 tristate "PAES cipher algorithms"
109 select CRYPTO_BLKCIPHER
111 This is the s390 hardware accelerated implementation of the
112 AES cipher algorithms for use with protected key.
114 Select this option if you want to use the paes cipher
115 for example to use protected key encrypted devices.
117 config CRYPTO_SHA1_S390
118 tristate "SHA1 digest algorithm"
122 This is the s390 hardware accelerated implementation of the
123 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2).
125 It is available as of z990.
127 config CRYPTO_SHA256_S390
128 tristate "SHA256 digest algorithm"
132 This is the s390 hardware accelerated implementation of the
133 SHA256 secure hash standard (DFIPS 180-2).
135 It is available as of z9.
137 config CRYPTO_SHA512_S390
138 tristate "SHA384 and SHA512 digest algorithm"
142 This is the s390 hardware accelerated implementation of the
143 SHA512 secure hash standard.
145 It is available as of z10.
147 config CRYPTO_DES_S390
148 tristate "DES and Triple DES cipher algorithms"
151 select CRYPTO_BLKCIPHER
154 This is the s390 hardware accelerated implementation of the
155 DES cipher algorithm (FIPS 46-2), and Triple DES EDE (FIPS 46-3).
157 As of z990 the ECB and CBC mode are hardware accelerated.
158 As of z196 the CTR mode is hardware accelerated.
160 config CRYPTO_AES_S390
161 tristate "AES cipher algorithms"
164 select CRYPTO_BLKCIPHER
166 This is the s390 hardware accelerated implementation of the
167 AES cipher algorithms (FIPS-197).
169 As of z9 the ECB and CBC modes are hardware accelerated
171 As of z10 the ECB and CBC modes are hardware accelerated
172 for all AES key sizes.
173 As of z196 the CTR mode is hardware accelerated for all AES
174 key sizes and XTS mode is hardware accelerated for 256 and
178 tristate "Pseudo random number generator device driver"
182 Select this option if you want to use the s390 pseudo random number
183 generator. The PRNG is part of the cryptographic processor functions
184 and uses triple-DES to generate secure random numbers like the
185 ANSI X9.17 standard. User-space programs access the
186 pseudo-random-number device through the char device /dev/prandom.
188 It is available as of z9.
190 config CRYPTO_GHASH_S390
191 tristate "GHASH digest algorithm"
195 This is the s390 hardware accelerated implementation of the
196 GHASH message digest algorithm for GCM (Galois/Counter Mode).
198 It is available as of z196.
200 config CRYPTO_CRC32_S390
201 tristate "CRC-32 algorithms"
206 Select this option if you want to use hardware accelerated
207 implementations of CRC algorithms. With this option, you
208 can optimize the computation of CRC-32 (IEEE 802.3 Ethernet)
209 and CRC-32C (Castagnoli).
211 It is available with IBM z13 or later.
213 config CRYPTO_DEV_MARVELL_CESA
214 tristate "Marvell's Cryptographic Engine driver"
215 depends on PLAT_ORION || ARCH_MVEBU
218 select CRYPTO_BLKCIPHER
222 This driver allows you to utilize the Cryptographic Engines and
223 Security Accelerator (CESA) which can be found on MVEBU and ORION
225 This driver supports CPU offload through DMA transfers.
227 config CRYPTO_DEV_NIAGARA2
228 tristate "Niagara2 Stream Processing Unit driver"
230 select CRYPTO_BLKCIPHER
237 Each core of a Niagara2 processor contains a Stream
238 Processing Unit, which itself contains several cryptographic
239 sub-units. One set provides the Modular Arithmetic Unit,
240 used for SSL offload. The other set provides the Cipher
241 Group, which can perform encryption, decryption, hashing,
242 checksumming, and raw copies.
244 config CRYPTO_DEV_HIFN_795X
245 tristate "Driver HIFN 795x crypto accelerator chips"
247 select CRYPTO_BLKCIPHER
248 select HW_RANDOM if CRYPTO_DEV_HIFN_795X_RNG
250 depends on !ARCH_DMA_ADDR_T_64BIT
252 This option allows you to have support for HIFN 795x crypto adapters.
254 config CRYPTO_DEV_HIFN_795X_RNG
255 bool "HIFN 795x random number generator"
256 depends on CRYPTO_DEV_HIFN_795X
258 Select this option if you want to enable the random number generator
259 on the HIFN 795x crypto adapters.
261 source drivers/crypto/caam/Kconfig
263 config CRYPTO_DEV_TALITOS
264 tristate "Talitos Freescale Security Engine (SEC)"
266 select CRYPTO_AUTHENC
267 select CRYPTO_BLKCIPHER
272 Say 'Y' here to use the Freescale Security Engine (SEC)
273 to offload cryptographic algorithm computation.
275 The Freescale SEC is present on PowerQUICC 'E' processors, such
276 as the MPC8349E and MPC8548E.
278 To compile this driver as a module, choose M here: the module
279 will be called talitos.
281 config CRYPTO_DEV_TALITOS1
282 bool "SEC1 (SEC 1.0 and SEC Lite 1.2)"
283 depends on CRYPTO_DEV_TALITOS
284 depends on PPC_8xx || PPC_82xx
287 Say 'Y' here to use the Freescale Security Engine (SEC) version 1.0
288 found on MPC82xx or the Freescale Security Engine (SEC Lite)
289 version 1.2 found on MPC8xx
291 config CRYPTO_DEV_TALITOS2
292 bool "SEC2+ (SEC version 2.0 or upper)"
293 depends on CRYPTO_DEV_TALITOS
294 default y if !PPC_8xx
296 Say 'Y' here to use the Freescale Security Engine (SEC)
297 version 2 and following as found on MPC83xx, MPC85xx, etc ...
299 config CRYPTO_DEV_IXP4XX
300 tristate "Driver for IXP4xx crypto hardware acceleration"
301 depends on ARCH_IXP4XX && IXP4XX_QMGR && IXP4XX_NPE
304 select CRYPTO_AUTHENC
305 select CRYPTO_BLKCIPHER
307 Driver for the IXP4xx NPE crypto engine.
309 config CRYPTO_DEV_PPC4XX
310 tristate "Driver AMCC PPC4xx crypto accelerator"
311 depends on PPC && 4xx
318 select CRYPTO_BLKCIPHER
320 This option allows you to have support for AMCC crypto acceleration.
322 config HW_RANDOM_PPC4XX
323 bool "PowerPC 4xx generic true random number generator support"
324 depends on CRYPTO_DEV_PPC4XX && HW_RANDOM
327 This option provides the kernel-side support for the TRNG hardware
328 found in the security function of some PowerPC 4xx SoCs.
330 config CRYPTO_DEV_OMAP
331 tristate "Support for OMAP crypto HW accelerators"
332 depends on ARCH_OMAP2PLUS
334 OMAP processors have various crypto HW accelerators. Select this if
335 you want to use the OMAP modules for any of the crypto algorithms.
339 config CRYPTO_DEV_OMAP_SHAM
340 tristate "Support for OMAP MD5/SHA1/SHA2 hw accelerator"
341 depends on ARCH_OMAP2PLUS
348 OMAP processors have MD5/SHA1/SHA2 hw accelerator. Select this if you
349 want to use the OMAP module for MD5/SHA1/SHA2 algorithms.
351 config CRYPTO_DEV_OMAP_AES
352 tristate "Support for OMAP AES hw engine"
353 depends on ARCH_OMAP2 || ARCH_OMAP3 || ARCH_OMAP2PLUS
355 select CRYPTO_BLKCIPHER
362 OMAP processors have AES module accelerator. Select this if you
363 want to use the OMAP module for AES algorithms.
365 config CRYPTO_DEV_OMAP_DES
366 tristate "Support for OMAP DES/3DES hw engine"
367 depends on ARCH_OMAP2PLUS
369 select CRYPTO_BLKCIPHER
372 OMAP processors have DES/3DES module accelerator. Select this if you
373 want to use the OMAP module for DES and 3DES algorithms. Currently
374 the ECB and CBC modes of operation are supported by the driver. Also
375 accesses made on unaligned boundaries are supported.
377 endif # CRYPTO_DEV_OMAP
379 config CRYPTO_DEV_PICOXCELL
380 tristate "Support for picoXcell IPSEC and Layer2 crypto engines"
381 depends on (ARCH_PICOXCELL || COMPILE_TEST) && HAVE_CLK
384 select CRYPTO_AUTHENC
385 select CRYPTO_BLKCIPHER
391 This option enables support for the hardware offload engines in the
392 Picochip picoXcell SoC devices. Select this for IPSEC ESP offload
393 and for 3gpp Layer 2 ciphering support.
395 Saying m here will build a module named pipcoxcell_crypto.
397 config CRYPTO_DEV_SAHARA
398 tristate "Support for SAHARA crypto accelerator"
399 depends on ARCH_MXC && OF
400 select CRYPTO_BLKCIPHER
404 This option enables support for the SAHARA HW crypto accelerator
405 found in some Freescale i.MX chips.
407 config CRYPTO_DEV_MXC_SCC
408 tristate "Support for Freescale Security Controller (SCC)"
409 depends on ARCH_MXC && OF
410 select CRYPTO_BLKCIPHER
413 This option enables support for the Security Controller (SCC)
414 found in Freescale i.MX25 chips.
416 config CRYPTO_DEV_EXYNOS_RNG
417 tristate "EXYNOS HW pseudo random number generator support"
418 depends on ARCH_EXYNOS || COMPILE_TEST
422 This driver provides kernel-side support through the
423 cryptographic API for the pseudo random number generator hardware
424 found on Exynos SoCs.
426 To compile this driver as a module, choose M here: the
427 module will be called exynos-rng.
431 config CRYPTO_DEV_S5P
432 tristate "Support for Samsung S5PV210/Exynos crypto accelerator"
433 depends on ARCH_S5PV210 || ARCH_EXYNOS || COMPILE_TEST
436 select CRYPTO_BLKCIPHER
438 This option allows you to have support for S5P crypto acceleration.
439 Select this to offload Samsung S5PV210 or S5PC110, Exynos from AES
440 algorithms execution.
442 config CRYPTO_DEV_EXYNOS_HASH
443 bool "Support for Samsung Exynos HASH accelerator"
444 depends on CRYPTO_DEV_S5P
445 depends on !CRYPTO_DEV_EXYNOS_RNG && CRYPTO_DEV_EXYNOS_RNG!=m
450 Select this to offload Exynos from HASH MD5/SHA1/SHA256.
451 This will select software SHA1, MD5 and SHA256 as they are
452 needed for small and zero-size messages.
453 HASH algorithms will be disabled if EXYNOS_RNG
454 is enabled due to hw conflict.
457 bool "Support for IBM PowerPC Nest (NX) cryptographic acceleration"
460 This enables support for the NX hardware cryptographic accelerator
461 coprocessor that is in IBM PowerPC P7+ or later processors. This
462 does not actually enable any drivers, it only allows you to select
463 which acceleration type (encryption and/or compression) to enable.
466 source "drivers/crypto/nx/Kconfig"
469 config CRYPTO_DEV_UX500
470 tristate "Driver for ST-Ericsson UX500 crypto hardware acceleration"
471 depends on ARCH_U8500
473 Driver for ST-Ericsson UX500 crypto engine.
476 source "drivers/crypto/ux500/Kconfig"
477 endif # if CRYPTO_DEV_UX500
479 config CRYPTO_DEV_ATMEL_AUTHENC
480 tristate "Support for Atmel IPSEC/SSL hw accelerator"
481 depends on ARCH_AT91 || COMPILE_TEST
482 select CRYPTO_AUTHENC
483 select CRYPTO_DEV_ATMEL_AES
484 select CRYPTO_DEV_ATMEL_SHA
486 Some Atmel processors can combine the AES and SHA hw accelerators
487 to enhance support of IPSEC/SSL.
488 Select this if you want to use the Atmel modules for
489 authenc(hmac(shaX),Y(cbc)) algorithms.
491 config CRYPTO_DEV_ATMEL_AES
492 tristate "Support for Atmel AES hw accelerator"
493 depends on ARCH_AT91 || COMPILE_TEST
496 select CRYPTO_BLKCIPHER
498 Some Atmel processors have AES hw accelerator.
499 Select this if you want to use the Atmel module for
502 To compile this driver as a module, choose M here: the module
503 will be called atmel-aes.
505 config CRYPTO_DEV_ATMEL_TDES
506 tristate "Support for Atmel DES/TDES hw accelerator"
507 depends on ARCH_AT91 || COMPILE_TEST
509 select CRYPTO_BLKCIPHER
511 Some Atmel processors have DES/TDES hw accelerator.
512 Select this if you want to use the Atmel module for
515 To compile this driver as a module, choose M here: the module
516 will be called atmel-tdes.
518 config CRYPTO_DEV_ATMEL_SHA
519 tristate "Support for Atmel SHA hw accelerator"
520 depends on ARCH_AT91 || COMPILE_TEST
523 Some Atmel processors have SHA1/SHA224/SHA256/SHA384/SHA512
525 Select this if you want to use the Atmel module for
526 SHA1/SHA224/SHA256/SHA384/SHA512 algorithms.
528 To compile this driver as a module, choose M here: the module
529 will be called atmel-sha.
531 config CRYPTO_DEV_ATMEL_ECC
532 tristate "Support for Microchip / Atmel ECC hw accelerator"
533 depends on ARCH_AT91 || COMPILE_TEST
538 Microhip / Atmel ECC hw accelerator.
539 Select this if you want to use the Microchip / Atmel module for
542 To compile this driver as a module, choose M here: the module
543 will be called atmel-ecc.
545 config CRYPTO_DEV_CCP
546 bool "Support for AMD Secure Processor"
547 depends on ((X86 && PCI) || (ARM64 && (OF_ADDRESS || ACPI))) && HAS_IOMEM
549 The AMD Secure Processor provides support for the Cryptographic Coprocessor
550 (CCP) and the Platform Security Processor (PSP) devices.
553 source "drivers/crypto/ccp/Kconfig"
556 config CRYPTO_DEV_MXS_DCP
557 tristate "Support for Freescale MXS DCP"
558 depends on (ARCH_MXS || ARCH_MXC)
563 select CRYPTO_BLKCIPHER
566 The Freescale i.MX23/i.MX28 has SHA1/SHA256 and AES128 CBC/ECB
567 co-processor on the die.
569 To compile this driver as a module, choose M here: the module
570 will be called mxs-dcp.
572 source "drivers/crypto/qat/Kconfig"
573 source "drivers/crypto/cavium/cpt/Kconfig"
574 source "drivers/crypto/cavium/nitrox/Kconfig"
576 config CRYPTO_DEV_CAVIUM_ZIP
577 tristate "Cavium ZIP driver"
578 depends on PCI && 64BIT && (ARM64 || COMPILE_TEST)
580 Select this option if you want to enable compression/decompression
581 acceleration on Cavium's ARM based SoCs
583 config CRYPTO_DEV_QCE
584 tristate "Qualcomm crypto engine accelerator"
585 depends on ARCH_QCOM || COMPILE_TEST
593 select CRYPTO_BLKCIPHER
595 This driver supports Qualcomm crypto engine accelerator
596 hardware. To compile this driver as a module, choose M here. The
597 module will be called qcrypto.
599 config CRYPTO_DEV_QCOM_RNG
600 tristate "Qualcomm Random Number Generator Driver"
601 depends on ARCH_QCOM || COMPILE_TEST
604 This driver provides support for the Random Number
605 Generator hardware found on Qualcomm SoCs.
607 To compile this driver as a module, choose M here. The
608 module will be called qcom-rng. If unsure, say N.
610 config CRYPTO_DEV_VMX
611 bool "Support for VMX cryptographic acceleration instructions"
612 depends on PPC64 && VSX
614 Support for VMX cryptographic acceleration instructions.
616 source "drivers/crypto/vmx/Kconfig"
618 config CRYPTO_DEV_IMGTEC_HASH
619 tristate "Imagination Technologies hardware hash accelerator"
620 depends on MIPS || COMPILE_TEST
626 This driver interfaces with the Imagination Technologies
627 hardware hash accelerator. Supporting MD5/SHA1/SHA224/SHA256
630 config CRYPTO_DEV_SUN4I_SS
631 tristate "Support for Allwinner Security System cryptographic accelerator"
632 depends on ARCH_SUNXI && !64BIT
637 select CRYPTO_BLKCIPHER
639 Some Allwinner SoC have a crypto accelerator named
640 Security System. Select this if you want to use it.
641 The Security System handle AES/DES/3DES ciphers in CBC mode
642 and SHA1 and MD5 hash algorithms.
644 To compile this driver as a module, choose M here: the module
645 will be called sun4i-ss.
647 config CRYPTO_DEV_SUN4I_SS_PRNG
648 bool "Support for Allwinner Security System PRNG"
649 depends on CRYPTO_DEV_SUN4I_SS
652 Select this option if you want to provide kernel-side support for
653 the Pseudo-Random Number Generator found in the Security System.
655 config CRYPTO_DEV_ROCKCHIP
656 tristate "Rockchip's Cryptographic Engine driver"
657 depends on OF && ARCH_ROCKCHIP
664 select CRYPTO_BLKCIPHER
667 This driver interfaces with the hardware crypto accelerator.
668 Supporting cbc/ecb chainmode, and aes/des/des3_ede cipher mode.
670 config CRYPTO_DEV_MEDIATEK
671 tristate "MediaTek's EIP97 Cryptographic Engine driver"
672 depends on (ARM && ARCH_MEDIATEK) || COMPILE_TEST
675 select CRYPTO_BLKCIPHER
682 This driver allows you to utilize the hardware crypto accelerator
683 EIP97 which can be found on the MT7623 MT2701, MT8521p, etc ....
684 Select this if you want to use it for AES/SHA1/SHA2 algorithms.
686 source "drivers/crypto/chelsio/Kconfig"
688 source "drivers/crypto/virtio/Kconfig"
690 config CRYPTO_DEV_BCM_SPU
691 tristate "Broadcom symmetric crypto/hash acceleration support"
692 depends on ARCH_BCM_IPROC
701 This driver provides support for Broadcom crypto acceleration using the
702 Secure Processing Unit (SPU). The SPU driver registers ablkcipher,
703 ahash, and aead algorithms with the kernel cryptographic API.
705 source "drivers/crypto/stm32/Kconfig"
707 config CRYPTO_DEV_SAFEXCEL
708 tristate "Inside Secure's SafeXcel cryptographic engine driver"
710 depends on (ARM64 && ARCH_MVEBU) || (COMPILE_TEST && 64BIT)
712 select CRYPTO_AUTHENC
713 select CRYPTO_BLKCIPHER
722 This driver interfaces with the SafeXcel EIP-197 cryptographic engine
723 designed by Inside Secure. Select this if you want to use CBC/ECB
724 chain mode, AES cipher mode and SHA1/SHA224/SHA256/SHA512 hash
727 config CRYPTO_DEV_ARTPEC6
728 tristate "Support for Axis ARTPEC-6/7 hardware crypto acceleration."
729 depends on ARM && (ARCH_ARTPEC || COMPILE_TEST)
734 select CRYPTO_BLKCIPHER
741 Enables the driver for the on-chip crypto accelerator
744 To compile this driver as a module, choose M here.
746 config CRYPTO_DEV_CCREE
747 tristate "Support for ARM TrustZone CryptoCell family of security processors"
748 depends on CRYPTO && CRYPTO_HW && OF && HAS_DMA
751 select CRYPTO_BLKCIPHER
754 select CRYPTO_AUTHENC
766 Say 'Y' to enable a driver for the REE interface of the Arm
767 TrustZone CryptoCell family of processors. Currently the
768 CryptoCell 712, 710 and 630 are supported.
769 Choose this if you wish to use hardware acceleration of
770 cryptographic operations on the system REE.
773 source "drivers/crypto/hisilicon/Kconfig"