1CFG_CRYPTO ?= y 2# Select small code size in the crypto library if applicable (for instance 3# LibTomCrypt has -DLTC_SMALL_CODE) 4# Note: the compiler flag -Os is not set here but by CFG_CC_OPT_LEVEL 5CFG_CRYPTO_SIZE_OPTIMIZATION ?= y 6 7ifeq (y,$(CFG_CRYPTO)) 8 9# Ciphers 10CFG_CRYPTO_AES ?= y 11CFG_CRYPTO_DES ?= y 12CFG_CRYPTO_SM4 ?= y 13 14# Cipher block modes 15CFG_CRYPTO_ECB ?= y 16CFG_CRYPTO_CBC ?= y 17CFG_CRYPTO_CTR ?= y 18CFG_CRYPTO_CTS ?= y 19CFG_CRYPTO_XTS ?= y 20 21# Message authentication codes 22CFG_CRYPTO_HMAC ?= y 23CFG_CRYPTO_CMAC ?= y 24CFG_CRYPTO_CBC_MAC ?= y 25# Instead of calling the AES CBC encryption function for each 16 byte block of 26# input, bundle a maximum of N blocks when possible. A maximum of N*16 bytes of 27# temporary data are allocated on the heap. 28# Minimum value is 1. 29CFG_CRYPTO_CBC_MAC_BUNDLE_BLOCKS ?= 64 30 31# Hashes 32CFG_CRYPTO_MD5 ?= y 33CFG_CRYPTO_SHA1 ?= y 34CFG_CRYPTO_SHA224 ?= y 35CFG_CRYPTO_SHA256 ?= y 36CFG_CRYPTO_SHA384 ?= y 37CFG_CRYPTO_SHA512 ?= y 38CFG_CRYPTO_SHA512_256 ?= y 39CFG_CRYPTO_SM3 ?= y 40 41# Asymmetric ciphers 42CFG_CRYPTO_DSA ?= y 43CFG_CRYPTO_RSA ?= y 44CFG_CRYPTO_DH ?= y 45# ECC includes ECDSA and ECDH 46CFG_CRYPTO_ECC ?= y 47CFG_CRYPTO_SM2_PKE ?= y 48CFG_CRYPTO_SM2_DSA ?= y 49CFG_CRYPTO_SM2_KEP ?= y 50CFG_CRYPTO_ED25519 ?= y 51CFG_CRYPTO_X25519 ?= y 52 53# Authenticated encryption 54CFG_CRYPTO_CCM ?= y 55CFG_CRYPTO_GCM ?= y 56# Default uses the OP-TEE internal AES-GCM implementation 57CFG_CRYPTO_AES_GCM_FROM_CRYPTOLIB ?= n 58 59endif 60 61ifeq ($(CFG_WITH_PAGER),y) 62ifneq ($(CFG_CRYPTO_SHA256),y) 63$(warning Warning: Enabling CFG_CRYPTO_SHA256 [required by CFG_WITH_PAGER]) 64CFG_CRYPTO_SHA256:=y 65endif 66endif 67 68$(eval $(call cryp-enable-all-depends,CFG_WITH_SOFTWARE_PRNG, AES ECB SHA256)) 69 70ifeq ($(CFG_CRYPTO_WITH_CE82),y) 71$(call force,CFG_CRYPTO_WITH_CE,y,required with CFG_CRYPTO_WITH_CE82) 72CFG_CRYPTO_SHA512_ARM_CE ?= $(CFG_CRYPTO_SHA512) 73CFG_CORE_CRYPTO_SHA512_ACCEL ?= $(CFG_CRYPTO_SHA512_ARM_CE) 74endif 75 76ifeq ($(CFG_CRYPTO_WITH_CE),y) 77 78$(call force,CFG_AES_GCM_TABLE_BASED,n,conflicts with CFG_CRYPTO_WITH_CE) 79 80# CFG_HWSUPP_PMULT_64 defines whether the CPU supports polynomial multiplies 81# of 64-bit values (Aarch64: PMULL/PMULL2 with the 1Q specifier; Aarch32: 82# VMULL.P64). These operations are part of the Cryptographic Extensions, so 83# assume they are implicitly contained in CFG_CRYPTO_WITH_CE=y. 84CFG_HWSUPP_PMULT_64 ?= y 85 86CFG_CRYPTO_SHA256_ARM_CE ?= $(CFG_CRYPTO_SHA256) 87CFG_CORE_CRYPTO_SHA256_ACCEL ?= $(CFG_CRYPTO_SHA256_ARM_CE) 88CFG_CRYPTO_SHA1_ARM_CE ?= $(CFG_CRYPTO_SHA1) 89CFG_CORE_CRYPTO_SHA1_ACCEL ?= $(CFG_CRYPTO_SHA1_ARM_CE) 90CFG_CRYPTO_AES_ARM_CE ?= $(CFG_CRYPTO_AES) 91CFG_CORE_CRYPTO_AES_ACCEL ?= $(CFG_CRYPTO_AES_ARM_CE) 92 93else #CFG_CRYPTO_WITH_CE 94 95CFG_AES_GCM_TABLE_BASED ?= y 96 97endif #!CFG_CRYPTO_WITH_CE 98 99 100# Cryptographic extensions can only be used safely when OP-TEE knows how to 101# preserve the VFP context 102ifeq ($(CFG_CRYPTO_SHA256_ARM32_CE),y) 103$(call force,CFG_WITH_VFP,y,required by CFG_CRYPTO_SHA256_ARM32_CE) 104endif 105ifeq ($(CFG_CRYPTO_SHA256_ARM64_CE),y) 106$(call force,CFG_WITH_VFP,y,required by CFG_CRYPTO_SHA256_ARM64_CE) 107endif 108ifeq ($(CFG_CRYPTO_SHA1_ARM_CE),y) 109$(call force,CFG_WITH_VFP,y,required by CFG_CRYPTO_SHA1_ARM_CE) 110endif 111ifeq ($(CFG_CRYPTO_AES_ARM_CE),y) 112$(call force,CFG_WITH_VFP,y,required by CFG_CRYPTO_AES_ARM_CE) 113endif 114 115cryp-enable-all-depends = $(call cfg-enable-all-depends,$(strip $(1)),$(foreach v,$(2),CFG_CRYPTO_$(v))) 116$(eval $(call cryp-enable-all-depends,CFG_REE_FS, AES ECB CTR HMAC SHA256 GCM)) 117$(eval $(call cryp-enable-all-depends,CFG_RPMB_FS, AES ECB CTR HMAC SHA256 GCM)) 118 119# Dependency checks: warn and disable some features if dependencies are not met 120 121cryp-dep-one = $(call cfg-depends-one,CFG_CRYPTO_$(strip $(1)),$(patsubst %, CFG_CRYPTO_%,$(strip $(2)))) 122cryp-dep-all = $(call cfg-depends-all,CFG_CRYPTO_$(strip $(1)),$(patsubst %, CFG_CRYPTO_%,$(strip $(2)))) 123 124$(eval $(call cryp-dep-one, ECB, AES DES)) 125$(eval $(call cryp-dep-one, CBC, AES DES)) 126$(eval $(call cryp-dep-one, CTR, AES)) 127# CTS is implemented with ECB and CBC 128$(eval $(call cryp-dep-all, CTS, AES ECB CBC)) 129$(eval $(call cryp-dep-one, XTS, AES)) 130$(eval $(call cryp-dep-one, HMAC, AES DES)) 131$(eval $(call cryp-dep-one, HMAC, MD5 SHA1 SHA224 SHA256 SHA384 SHA512)) 132$(eval $(call cryp-dep-one, CMAC, AES)) 133$(eval $(call cryp-dep-one, CBC_MAC, AES DES)) 134$(eval $(call cryp-dep-one, CCM, AES)) 135$(eval $(call cryp-dep-one, GCM, AES)) 136# If no AES cipher mode is left, disable AES 137$(eval $(call cryp-dep-one, AES, ECB CBC CTR CTS XTS)) 138# If no DES cipher mode is left, disable DES 139$(eval $(call cryp-dep-one, DES, ECB CBC)) 140# SM2 is Elliptic Curve Cryptography, it uses some generic ECC functions 141$(eval $(call cryp-dep-one, SM2_PKE, ECC)) 142$(eval $(call cryp-dep-one, SM2_DSA, ECC)) 143$(eval $(call cryp-dep-one, SM2_KEP, ECC)) 144 145############################################################### 146# libtomcrypt (LTC) specifics, phase #1 147# LTC is only configured via _CFG_CORE_LTC_ prefixed variables 148# 149# _CFG_CORE_LTC_xxx_DESC means that LTC will only register the 150# descriptor of the algorithm, not provide a 151# crypt_xxx_alloc_ctx() function. 152############################################################### 153 154# If LTC is the cryptolib, pull configuration from CFG_CRYPTO_xxx 155ifeq ($(CFG_CRYPTOLIB_NAME),tomcrypt) 156# dsa_make_params() needs all three SHA-2 algorithms. 157# Disable DSA if any is missing. 158$(eval $(call cryp-dep-all, DSA, SHA256 SHA384 SHA512)) 159 160# Assign _CFG_CORE_LTC_xxx based on CFG_CRYPTO_yyy 161core-ltc-vars = AES DES 162core-ltc-vars += ECB CBC CTR CTS XTS 163core-ltc-vars += MD5 SHA1 SHA224 SHA256 SHA384 SHA512 SHA512_256 164core-ltc-vars += HMAC CMAC CBC_MAC 165core-ltc-vars += CCM 166ifeq ($(CFG_CRYPTO_AES_GCM_FROM_CRYPTOLIB),y) 167core-ltc-vars += GCM 168endif 169core-ltc-vars += RSA DSA DH ECC 170core-ltc-vars += SIZE_OPTIMIZATION 171core-ltc-vars += SM2_PKE 172core-ltc-vars += SM2_DSA 173core-ltc-vars += SM2_KEP 174core-ltc-vars += ED25519 X25519 175# Assigned selected CFG_CRYPTO_xxx as _CFG_CORE_LTC_xxx 176$(foreach v, $(core-ltc-vars), $(eval _CFG_CORE_LTC_$(v) := $(CFG_CRYPTO_$(v)))) 177_CFG_CORE_LTC_MPI := $(CFG_CORE_MBEDTLS_MPI) 178_CFG_CORE_LTC_AES_ACCEL := $(CFG_CORE_CRYPTO_AES_ACCEL) 179_CFG_CORE_LTC_SHA1_ACCEL := $(CFG_CORE_CRYPTO_SHA1_ACCEL) 180_CFG_CORE_LTC_SHA256_ACCEL := $(CFG_CORE_CRYPTO_SHA256_ACCEL) 181_CFG_CORE_LTC_SHA512_ACCEL := $(CFG_CORE_CRYPTO_SHA512_ACCEL) 182endif 183 184############################################################### 185# mbedtls specifics 186############################################################### 187 188ifeq ($(CFG_CRYPTOLIB_NAME),mbedtls) 189# mbedtls has to be complemented with some algorithms by LTC 190# Specify the algorithms here 191_CFG_CORE_LTC_DSA := $(CFG_CRYPTO_DSA) 192_CFG_CORE_LTC_MPI := $(CFG_CRYPTO_DSA) 193_CFG_CORE_LTC_SHA256_DESC := $(CFG_CRYPTO_DSA) 194_CFG_CORE_LTC_SHA384_DESC := $(CFG_CRYPTO_DSA) 195_CFG_CORE_LTC_SHA512_DESC := $(CFG_CRYPTO_DSA) 196_CFG_CORE_LTC_XTS := $(CFG_CRYPTO_XTS) 197_CFG_CORE_LTC_CCM := $(CFG_CRYPTO_CCM) 198_CFG_CORE_LTC_AES_DESC := $(call cfg-one-enabled, CFG_CRYPTO_XTS CFG_CRYPTO_CCM) 199_CFG_CORE_LTC_X25519 := $(CFG_CRYPTO_X25519) 200_CFG_CORE_LTC_ED25519 := $(CFG_CRYPTO_ED25519) 201endif 202 203############################################################### 204# libtomcrypt (LTC) specifics, phase #2 205############################################################### 206 207_CFG_CORE_LTC_SHA256_DESC := $(call cfg-one-enabled, _CFG_CORE_LTC_SHA256_DESC \ 208 _CFG_CORE_LTC_SHA224 \ 209 _CFG_CORE_LTC_SHA256) 210_CFG_CORE_LTC_SHA384_DESC := $(call cfg-one-enabled, _CFG_CORE_LTC_SHA384_DESC \ 211 _CFG_CORE_LTC_SHA384) 212_CFG_CORE_LTC_SHA512_DESC := $(call cfg-one-enabled, _CFG_CORE_LTC_SHA512_DESC \ 213 _CFG_CORE_LTC_SHA512_256 \ 214 _CFG_CORE_LTC_SHA512) 215_CFG_CORE_LTC_AES_DESC := $(call cfg-one-enabled, _CFG_CORE_LTC_AES_DESC \ 216 _CFG_CORE_LTC_AES) 217 218# Assign system variables 219_CFG_CORE_LTC_CE := $(CFG_CRYPTO_WITH_CE) 220_CFG_CORE_LTC_VFP := $(CFG_WITH_VFP) 221_CFG_CORE_LTC_BIGNUM_MAX_BITS := $(CFG_CORE_BIGNUM_MAX_BITS) 222_CFG_CORE_LTC_PAGER := $(CFG_WITH_PAGER) 223ifneq ($(CFG_NUM_THREADS),1) 224_CFG_CORE_LTC_OPTEE_THREAD := y 225else 226_CFG_CORE_LTC_OPTEE_THREAD := n 227endif 228_CFG_CORE_LTC_HWSUPP_PMULL := $(CFG_HWSUPP_PMULL) 229 230# Assign aggregated variables 231ltc-one-enabled = $(call cfg-one-enabled,$(foreach v,$(1),_CFG_CORE_LTC_$(v))) 232_CFG_CORE_LTC_ACIPHER := $(call ltc-one-enabled, RSA DSA DH ECC) 233_CFG_CORE_LTC_AUTHENC := $(and $(filter y,$(_CFG_CORE_LTC_AES_DESC)), \ 234 $(filter y,$(call ltc-one-enabled, CCM GCM))) 235_CFG_CORE_LTC_CIPHER := $(call ltc-one-enabled, AES_DESC DES) 236_CFG_CORE_LTC_HASH := $(call ltc-one-enabled, MD5 SHA1 SHA224 SHA256 SHA384 \ 237 SHA512) 238_CFG_CORE_LTC_MAC := $(call ltc-one-enabled, HMAC CMAC CBC_MAC) 239_CFG_CORE_LTC_CBC := $(call ltc-one-enabled, CBC CBC_MAC) 240_CFG_CORE_LTC_ASN1 := $(call ltc-one-enabled, RSA DSA ECC) 241_CFG_CORE_LTC_EC25519 := $(call ltc-one-enabled, ED25519 X25519) 242 243############################################################### 244# Platform independent crypto-driver configuration 245############################################################### 246CRYPTO_MAKEFILES := $(sort $(wildcard core/drivers/crypto/*/crypto.mk)) 247include $(CRYPTO_MAKEFILES) 248 249# Enable TEE_ALG_RSASSA_PKCS1_V1_5 algorithm for signing with PKCS#1 v1.5 EMSA 250# without ASN.1 around the hash. 251ifeq ($(CFG_CRYPTOLIB_NAME),tomcrypt) 252CFG_CRYPTO_RSASSA_NA1 ?= y 253endif 254