optee_os/core/crypto.mk

1 CFG_CRYPTO ?= y
3 # LibTomCrypt has -DLTC_SMALL_CODE)
4 # Note: the compiler flag -Os is not set here but by CFG_CC_OPT_LEVEL
5 CFG_CRYPTO_SIZE_OPTIMIZATION ?= y
7 ifeq (y,$(CFG_CRYPTO))
10 # Platform crypto-driver configuration. It has a higher priority over the
17 CFG_CRYPTO_AES ?= y
18 CFG_CRYPTO_DES ?= y
19 CFG_CRYPTO_SM4 ?= y
22 CFG_CRYPTO_ECB ?= y
23 CFG_CRYPTO_CBC ?= y
24 CFG_CRYPTO_CTR ?= y
25 CFG_CRYPTO_CTS ?= y
26 CFG_CRYPTO_XTS ?= y
29 CFG_CRYPTO_HMAC ?= y
30 CFG_CRYPTO_CMAC ?= y
31 CFG_CRYPTO_CBC_MAC ?= y
39 CFG_CRYPTO_MD5 ?= y
40 CFG_CRYPTO_SHA1 ?= y
41 CFG_CRYPTO_SHA224 ?= y
42 CFG_CRYPTO_SHA256 ?= y
43 CFG_CRYPTO_SHA384 ?= y
44 CFG_CRYPTO_SHA512 ?= y
45 CFG_CRYPTO_SHA512_256 ?= y
46 CFG_CRYPTO_SM3 ?= y
47 CFG_CRYPTO_SHA3_224 ?= y
48 CFG_CRYPTO_SHA3_256 ?= y
49 CFG_CRYPTO_SHA3_384 ?= y
50 CFG_CRYPTO_SHA3_512 ?= y
52 # Extendable-Output Functions (XOF)
53 CFG_CRYPTO_SHAKE128 ?= y
54 CFG_CRYPTO_SHAKE256 ?= y
57 CFG_CRYPTO_DSA ?= y
58 CFG_CRYPTO_RSA ?= y
59 CFG_CRYPTO_DH ?= y
61 CFG_CRYPTO_ECC ?= y
62 CFG_CRYPTO_SM2_PKE ?= y
63 CFG_CRYPTO_SM2_DSA ?= y
64 CFG_CRYPTO_SM2_KEP ?= y
65 CFG_CRYPTO_ED25519 ?= y
66 CFG_CRYPTO_X25519 ?= y
69 CFG_CRYPTO_CCM ?= y
70 CFG_CRYPTO_GCM ?= y
71 # Default uses the OP-TEE internal AES-GCM implementation
80 CFG_WITH_SOFTWARE_PRNG ?= y
89 ifeq ($(CFG_WITH_PAGER),y)
90 ifneq ($(CFG_CRYPTO_SHA256),y)
92 CFG_CRYPTO_SHA256:=y
96 $(eval $(call cryp-enable-all-depends,CFG_WITH_SOFTWARE_PRNG, AES ECB SHA256))
98 ifeq ($(CFG_CRYPTO_WITH_CE82),y)
99 $(call force,CFG_CRYPTO_WITH_CE,y,required with CFG_CRYPTO_WITH_CE82)
102 CFG_CRYPTO_SHA3_ARM_CE ?= $(call cfg-one-enabled, CFG_CRYPTO_SHA3_224 \
115 ifeq ($(CFG_CRYPTO_WITH_CE),y)
120 # of 64-bit values (Aarch64: PMULL/PMULL2 with the 1Q specifier; Aarch32:
122 # assume they are implicitly contained in CFG_CRYPTO_WITH_CE=y.
123 CFG_HWSUPP_PMULT_64 ?= y
137 CFG_AES_GCM_TABLE_BASED ?= y
142 # Cryptographic extensions can only be used safely when OP-TEE knows how to
144 ifeq ($(CFG_CRYPTO_SHA256_ARM32_CE),y)
145 $(call force,CFG_WITH_VFP,y,required by CFG_CRYPTO_SHA256_ARM32_CE)
147 ifeq ($(CFG_CRYPTO_SHA256_ARM64_CE),y)
148 $(call force,CFG_WITH_VFP,y,required by CFG_CRYPTO_SHA256_ARM64_CE)
150 ifeq ($(CFG_CRYPTO_SHA1_ARM_CE),y)
151 $(call force,CFG_WITH_VFP,y,required by CFG_CRYPTO_SHA1_ARM_CE)
153 ifeq ($(CFG_CRYPTO_AES_ARM_CE),y)
154 $(call force,CFG_WITH_VFP,y,required by CFG_CRYPTO_AES_ARM_CE)
156 ifeq ($(CFG_CORE_CRYPTO_SM4_ACCEL),y)
157 $(call force,CFG_WITH_VFP,y,required by CFG_CORE_CRYPTO_SM4_ACCEL)
159 cryp-enable-all-depends = $(call cfg-enable-all-depends,$(strip $(1)),$(foreach v,$(2),CFG_CRYPTO_$…
160 $(eval $(call cryp-enable-all-depends,CFG_REE_FS, AES ECB CTR HMAC SHA256 GCM))
161 $(eval $(call cryp-enable-all-depends,CFG_RPMB_FS, AES ECB CTR HMAC SHA256 GCM))
165 cryp-dep-one = $(call cfg-depends-one,CFG_CRYPTO_$(strip $(1)),$(patsubst %, CFG_CRYPTO_%,$(strip $…
166 cryp-dep-all = $(call cfg-depends-all,CFG_CRYPTO_$(strip $(1)),$(patsubst %, CFG_CRYPTO_%,$(strip $…
168 $(eval $(call cryp-dep-one, ECB, AES DES))
169 $(eval $(call cryp-dep-one, CBC, AES DES))
170 $(eval $(call cryp-dep-one, CTR, AES))
172 $(eval $(call cryp-dep-all, CTS, AES ECB CBC))
173 $(eval $(call cryp-dep-one, XTS, AES))
174 $(eval $(call cryp-dep-one, HMAC, AES DES))
175 $(eval $(call cryp-dep-one, HMAC, MD5 SHA1 SHA224 SHA256 SHA384 SHA512))
176 $(eval $(call cryp-dep-one, CMAC, AES))
177 $(eval $(call cryp-dep-one, CBC_MAC, AES DES))
178 $(eval $(call cryp-dep-one, CCM, AES))
179 $(eval $(call cryp-dep-one, GCM, AES))
181 $(eval $(call cryp-dep-one, AES, ECB CBC CTR CTS XTS))
183 $(eval $(call cryp-dep-one, DES, ECB CBC))
185 $(eval $(call cryp-dep-one, SM2_PKE, ECC))
186 $(eval $(call cryp-dep-one, SM2_DSA, ECC))
187 $(eval $(call cryp-dep-one, SM2_KEP, ECC))
200 # dsa_make_params() needs all three SHA-2 algorithms.
202 $(eval $(call cryp-dep-all, DSA, SHA256 SHA384 SHA512))
205 core-ltc-vars = AES DES
206 core-ltc-vars += ECB CBC CTR CTS XTS
207 core-ltc-vars += MD5 SHA1 SHA224 SHA256 SHA384 SHA512 SHA512_256
208 core-ltc-vars += SHA3_224 SHA3_256 SHA3_384 SHA3_512 SHAKE128 SHAKE256
209 core-ltc-vars += HMAC CMAC CBC_MAC
210 core-ltc-vars += CCM
211 ifeq ($(CFG_CRYPTO_AES_GCM_FROM_CRYPTOLIB),y)
212 core-ltc-vars += GCM
214 core-ltc-vars += RSA DSA DH ECC
215 core-ltc-vars += SIZE_OPTIMIZATION
216 core-ltc-vars += SM2_PKE
217 core-ltc-vars += SM2_DSA
218 core-ltc-vars += SM2_KEP
219 core-ltc-vars += ED25519 X25519
221 $(foreach v, $(core-ltc-vars), $(eval _CFG_CORE_LTC_$(v) := $(CFG_CRYPTO_$(v))))
244 _CFG_CORE_LTC_AES := $(call cfg-one-enabled, CFG_CRYPTO_XTS CFG_CRYPTO_CCM \
261 _CFG_CORE_LTC_MD5_DESC := $(call cfg-one-enabled, _CFG_CORE_LTC_MD5_DESC \
263 _CFG_CORE_LTC_SHA1_DESC := $(call cfg-one-enabled, _CFG_CORE_LTC_SHA1_DESC \
265 _CFG_CORE_LTC_SHA224_DESC := $(call cfg-one-enabled, _CFG_CORE_LTC_SHA224_DESC \
267 _CFG_CORE_LTC_SHA256_DESC := $(call cfg-one-enabled, _CFG_CORE_LTC_SHA256_DESC \
270 _CFG_CORE_LTC_SHA384_DESC := $(call cfg-one-enabled, _CFG_CORE_LTC_SHA384_DESC \
272 _CFG_CORE_LTC_SHA512_DESC := $(call cfg-one-enabled, _CFG_CORE_LTC_SHA512_DESC \
275 _CFG_CORE_LTC_AES_DESC := $(call cfg-one-enabled, _CFG_CORE_LTC_AES_DESC \
278 _CFG_CORE_LTC_SHA3_DESC := $(call cfg-one-enabled, _CFG_CORE_LTC_SHA3_224 \
289 _CFG_CORE_LTC_OPTEE_THREAD := y
296 ltc-one-enabled = $(call cfg-one-enabled,$(foreach v,$(1),_CFG_CORE_LTC_$(v)))
297 _CFG_CORE_LTC_ACIPHER := $(call ltc-one-enabled, RSA DSA DH ECC)
298 _CFG_CORE_LTC_HASH := $(call ltc-one-enabled, MD5 SHA1 SHA224 SHA256 SHA384 \
301 ifeq ($(CFG_CRYPTO_HMAC),y)
302 _CFG_CORE_LTC_HMAC := $(call ltc-one-enabled, MD5 SHA1 SHA224 SHA256 SHA384 \
307 _CFG_CORE_LTC_CBC := $(call ltc-one-enabled, CBC CBC_MAC)
308 _CFG_CORE_LTC_ASN1 := $(call ltc-one-enabled, RSA DSA ECC)
309 _CFG_CORE_LTC_EC25519 := $(call ltc-one-enabled, ED25519 X25519)
314 CFG_CRYPTO_RSASSA_NA1 ?= y