| # |
| # For a description of the syntax of this configuration file, |
| # see the file kconfig-language.txt in the NuttX tools repository. |
| # |
| |
| config CRYPTO |
| bool "Crypto API support" |
| default n |
| ---help--- |
| Enable or disable Crypto API features |
| |
| if CRYPTO |
| |
| config CRYPTO_AES |
| bool "AES cypher support" |
| default n |
| |
| config CRYPTO_ALGTEST |
| bool "Perform automatic crypto algorithms test on startup" |
| default n |
| |
| if CRYPTO_ALGTEST |
| |
| config CRYPTO_AES128_DISABLE |
| bool "Omit 128-bit AES tests" |
| default n |
| |
| config CRYPTO_AES192_DISABLE |
| bool "Omit 192-bit AES tests" |
| default n |
| |
| config CRYPTO_AES256_DISABLE |
| bool "Omit 256-bit AES tests" |
| default n |
| |
| endif # CRYPTO_ALGTEST |
| |
| config CRYPTO_CRYPTODEV |
| bool "cryptodev support" |
| depends on ALLOW_BSD_COMPONENTS |
| default n |
| |
| config CRYPTO_CRYPTODEV_SOFTWARE_CRYPTO |
| bool "cryptodev software cipher support" |
| depends on CRYPTO_CRYPTODEV && CRYPTO_SW_AES |
| select CRYPTO_CURVE25519 |
| default n |
| |
| config CRYPTO_CRYPTODEV_SOFTWARE_KEYMGMT |
| bool "cryptodev software key management support" |
| depends on CRYPTO_CRYPTODEV && !MTD_CONFIG_NONE |
| select CRYPTO_CURVE25519 |
| default n |
| |
| if CRYPTO_CRYPTODEV_SOFTWARE_KEYMGMT |
| |
| config CRYPTO_CRYPTODEV_SOFTWARE_KEYMGMT_DEVICE |
| string "device of trusted storage" |
| default "/dev/nvs" |
| |
| config CRYPTO_CRYPTODEV_SOFTWARE_KEYMGMT_NSLOTS |
| int "Maximum number of key in cache" |
| default 4 |
| |
| config CRYPTO_CRYPTODEV_SOFTWARE_KEYMGMT_BUFSIZE |
| int "Maximum size of key buffer in cache (bytes)" |
| default 64 |
| |
| config CRYPTO_CRYPTODEV_SOFTWARE_KEYMGMT_NKEYS |
| int "Maximum number of key in flash" |
| default 32 |
| |
| endif # CRYPTO_CRYPTODEV_SOFTWARE_KEYMGMT |
| |
| config CRYPTO_CRYPTODEV_HARDWARE |
| bool "cryptodev hardware support" |
| depends on CRYPTO_CRYPTODEV |
| default n |
| |
| config CRYPTO_SW_AES |
| bool "Software AES library" |
| depends on ALLOW_BSD_COMPONENTS |
| default n |
| ---help--- |
| Enable the software AES library as described in |
| include/nuttx/crypto/aes.h |
| |
| TODO: Adapt interfaces so that they are consistent with H/W AES |
| implementations. This needs to support up_aesinitialize() and |
| aes_cypher() per include/nuttx/crypto/crypto.h. |
| |
| config CRYPTO_RANDOM_POOL |
| bool "Entropy pool and strong random number generator" |
| select CRYPTO_IDGEN |
| select CRYPTO_CURVE25519 |
| default n |
| ---help--- |
| Entropy pool gathers environmental noise from device drivers, |
| user-space, etc., and returns good random numbers, suitable |
| for cryptographic use. Based on entropy pool design from |
| *BSDs and uses BLAKE2Xs algorithm for CSPRNG output. |
| |
| NOTE: May not actually be cyptographically secure, if |
| not enough entropy is made available to the entropy pool. |
| |
| config CRYPTO_CURVE25519 |
| bool |
| default n |
| |
| config CRYPTO_IDGEN |
| bool |
| default n |
| |
| if CRYPTO_RANDOM_POOL |
| |
| config CRYPTO_RANDOM_POOL_COLLECT_IRQ_RANDOMNESS |
| bool "Use interrupts to feed timing randomness to entropy pool" |
| default y |
| ---help--- |
| Feed entropy pool with interrupt randomness from interrupt |
| dispatch function 'irq_dispatch'. This adds some overhead |
| for every interrupt handled. |
| |
| endif # CRYPTO_RANDOM_POOL |
| |
| endif # CRYPTO |
