1 # SPDX-License-Identifier: GPL-2.0-only << 2 # 1 # 3 # XFRM configuration 2 # XFRM configuration 4 # 3 # 5 config XFRM 4 config XFRM 6 bool !! 5 bool 7 depends on INET !! 6 depends on NET 8 select GRO_CELLS << 9 select SKB_EXTENSIONS << 10 7 11 config XFRM_OFFLOAD << 12 bool << 13 << 14 config XFRM_ALGO << 15 tristate << 16 select XFRM << 17 select CRYPTO << 18 select CRYPTO_AEAD << 19 select CRYPTO_HASH << 20 select CRYPTO_SKCIPHER << 21 << 22 if INET << 23 config XFRM_USER 8 config XFRM_USER 24 tristate "Transformation user configur !! 9 tristate "IPsec user configuration interface" 25 select XFRM_ALGO !! 10 depends on INET && XFRM 26 help !! 11 ---help--- 27 Support for Transformation(XFRM) use !! 12 Support for IPsec user configuration interface used 28 like IPsec used by native Linux tool !! 13 by native Linux tools. 29 14 30 If unsure, say Y. 15 If unsure, say Y. 31 16 32 config XFRM_USER_COMPAT << 33 tristate "Compatible ABI support" << 34 depends on XFRM_USER && COMPAT_FOR_U64 << 35 HAVE_EFFICIENT_UNALIGNED_ACCES << 36 select WANT_COMPAT_NETLINK_MESSAGES << 37 help << 38 Transformation(XFRM) user configurat << 39 used by compatible Linux application << 40 << 41 If unsure, say N. << 42 << 43 config XFRM_INTERFACE << 44 tristate "Transformation virtual inter << 45 depends on XFRM && IPV6 << 46 help << 47 This provides a virtual interface to << 48 << 49 If unsure, say N. << 50 << 51 config XFRM_SUB_POLICY << 52 bool "Transformation sub policy suppor << 53 depends on XFRM << 54 help << 55 Support sub policy for developers. B << 56 one, two policies can be applied to << 57 Policy which lives shorter time in k << 58 << 59 If unsure, say N. << 60 << 61 config XFRM_MIGRATE << 62 bool "Transformation migrate database" << 63 depends on XFRM << 64 help << 65 A feature to update locator(s) of a << 66 association dynamically. This featu << 67 instance, in a Mobile IPv6 environme << 68 where mobile nodes change their atta << 69 << 70 If unsure, say N. << 71 << 72 config XFRM_STATISTICS << 73 bool "Transformation statistics" << 74 depends on XFRM && PROC_FS << 75 help << 76 This statistics is not a SNMP/MIB sp << 77 statistics about transformation erro << 78 at packet processing for developer. << 79 << 80 If unsure, say N. << 81 << 82 # This option selects XFRM_ALGO along with the << 83 # RFC 8221 lists as MUST be implemented. << 84 config XFRM_AH << 85 tristate << 86 select XFRM_ALGO << 87 select CRYPTO << 88 select CRYPTO_HMAC << 89 select CRYPTO_SHA256 << 90 << 91 # This option selects XFRM_ALGO along with the << 92 # algorithms that RFC 8221 lists as MUST be im << 93 config XFRM_ESP << 94 tristate << 95 select XFRM_ALGO << 96 select CRYPTO << 97 select CRYPTO_AES << 98 select CRYPTO_AUTHENC << 99 select CRYPTO_CBC << 100 select CRYPTO_ECHAINIV << 101 select CRYPTO_GCM << 102 select CRYPTO_HMAC << 103 select CRYPTO_SEQIV << 104 select CRYPTO_SHA256 << 105 << 106 config XFRM_IPCOMP << 107 tristate << 108 select XFRM_ALGO << 109 select CRYPTO << 110 select CRYPTO_DEFLATE << 111 << 112 config NET_KEY << 113 tristate "PF_KEY sockets" << 114 select XFRM_ALGO << 115 help << 116 PF_KEYv2 socket family, compatible t << 117 They are required if you are going t << 118 from KAME. << 119 << 120 Say Y unless you know what you are d << 121 << 122 config NET_KEY_MIGRATE << 123 bool "PF_KEY MIGRATE" << 124 depends on NET_KEY << 125 select XFRM_MIGRATE << 126 help << 127 Add a PF_KEY MIGRATE message to PF_K << 128 The PF_KEY MIGRATE message is used t << 129 locator(s) of a given IPsec security << 130 This feature is required, for instan << 131 environment with IPsec configuration << 132 change their attachment point to the << 133 information can be found in the inte << 134 <draft-sugimoto-mip6-pfkey-migrate>. << 135 << 136 If unsure, say N. << 137 << 138 config XFRM_ESPINTCP << 139 bool << 140 << 141 endif # INET <<
Linux® is a registered trademark of Linus Torvalds in the United States and other countries.
TOMOYO® is a registered trademark of NTT DATA CORPORATION.