xref: /optee_os/core/crypto.mk (revision 7dfcefda2cd455765172b4b300155797a42dee38) 
1CFG_CRYPTO ?= y
2# Select small code size in the crypto library if applicable (for instance
3# LibTomCrypt has -DLTC_SMALL_CODE)
4# Note: the compiler flag -Os is not set here but by CFG_CC_OPT_LEVEL
5CFG_CRYPTO_SIZE_OPTIMIZATION ?= y
6
7ifeq (y,$(CFG_CRYPTO))
8
9# Ciphers
10CFG_CRYPTO_AES ?= y
11CFG_CRYPTO_DES ?= y
12CFG_CRYPTO_SM4 ?= y
13
14# Cipher block modes
15CFG_CRYPTO_ECB ?= y
16CFG_CRYPTO_CBC ?= y
17CFG_CRYPTO_CTR ?= y
18CFG_CRYPTO_CTS ?= y
19CFG_CRYPTO_XTS ?= y
20
21# Message authentication codes
22CFG_CRYPTO_HMAC ?= y
23CFG_CRYPTO_CMAC ?= y
24CFG_CRYPTO_CBC_MAC ?= y
25# Instead of calling the AES CBC encryption function for each 16 byte block of
26# input, bundle a maximum of N blocks when possible. A maximum of N*16 bytes of
27# temporary data are allocated on the heap.
28# Minimum value is 1.
29CFG_CRYPTO_CBC_MAC_BUNDLE_BLOCKS ?= 64
30
31# Hashes
32CFG_CRYPTO_MD5 ?= y
33CFG_CRYPTO_SHA1 ?= y
34CFG_CRYPTO_SHA224 ?= y
35CFG_CRYPTO_SHA256 ?= y
36CFG_CRYPTO_SHA384 ?= y
37CFG_CRYPTO_SHA512 ?= y
38CFG_CRYPTO_SHA512_256 ?= y
39CFG_CRYPTO_SM3 ?= y
40
41# Asymmetric ciphers
42CFG_CRYPTO_DSA ?= y
43CFG_CRYPTO_RSA ?= y
44CFG_CRYPTO_DH ?= y
45# ECC includes ECDSA and ECDH
46CFG_CRYPTO_ECC ?= y
47CFG_CRYPTO_SM2_PKE ?= y
48CFG_CRYPTO_SM2_DSA ?= y
49CFG_CRYPTO_SM2_KEP ?= y
50CFG_CRYPTO_ED25519 ?= y
51CFG_CRYPTO_X25519 ?= y
52
53# Authenticated encryption
54CFG_CRYPTO_CCM ?= y
55CFG_CRYPTO_GCM ?= y
56# Default uses the OP-TEE internal AES-GCM implementation
57CFG_CRYPTO_AES_GCM_FROM_CRYPTOLIB ?= n
58
59endif
60
61ifeq ($(CFG_WITH_PAGER),y)
62ifneq ($(CFG_CRYPTO_SHA256),y)
63$(warning Warning: Enabling CFG_CRYPTO_SHA256 [required by CFG_WITH_PAGER])
64CFG_CRYPTO_SHA256:=y
65endif
66endif
67
68$(eval $(call cryp-enable-all-depends,CFG_WITH_SOFTWARE_PRNG, AES ECB SHA256))
69
70ifeq ($(CFG_CRYPTO_WITH_CE82),y)
71$(call force,CFG_CRYPTO_WITH_CE,y,required with CFG_CRYPTO_WITH_CE82)
72CFG_CRYPTO_SHA512_ARM_CE ?= $(CFG_CRYPTO_SHA512)
73CFG_CORE_CRYPTO_SHA512_ACCEL ?= $(CFG_CRYPTO_SHA512_ARM_CE)
74CFG_CRYPTO_SM3_ARM_CE ?= $(CFG_CRYPTO_SM3)
75CFG_CORE_CRYPTO_SM3_ACCEL ?= $(CFG_CRYPTO_SM3_ARM_CE)
76endif
77
78ifeq ($(CFG_CRYPTO_WITH_CE),y)
79
80$(call force,CFG_AES_GCM_TABLE_BASED,n,conflicts with CFG_CRYPTO_WITH_CE)
81
82# CFG_HWSUPP_PMULT_64 defines whether the CPU supports polynomial multiplies
83# of 64-bit values (Aarch64: PMULL/PMULL2 with the 1Q specifier; Aarch32:
84# VMULL.P64). These operations are part of the Cryptographic Extensions, so
85# assume they are implicitly contained in CFG_CRYPTO_WITH_CE=y.
86CFG_HWSUPP_PMULT_64 ?= y
87
88CFG_CRYPTO_SHA256_ARM_CE ?= $(CFG_CRYPTO_SHA256)
89CFG_CORE_CRYPTO_SHA256_ACCEL ?= $(CFG_CRYPTO_SHA256_ARM_CE)
90CFG_CRYPTO_SHA1_ARM_CE ?= $(CFG_CRYPTO_SHA1)
91CFG_CORE_CRYPTO_SHA1_ACCEL ?= $(CFG_CRYPTO_SHA1_ARM_CE)
92CFG_CRYPTO_AES_ARM_CE ?= $(CFG_CRYPTO_AES)
93CFG_CORE_CRYPTO_AES_ACCEL ?= $(CFG_CRYPTO_AES_ARM_CE)
94
95else #CFG_CRYPTO_WITH_CE
96
97CFG_AES_GCM_TABLE_BASED ?= y
98
99endif #!CFG_CRYPTO_WITH_CE
100
101
102# Cryptographic extensions can only be used safely when OP-TEE knows how to
103# preserve the VFP context
104ifeq ($(CFG_CRYPTO_SHA256_ARM32_CE),y)
105$(call force,CFG_WITH_VFP,y,required by CFG_CRYPTO_SHA256_ARM32_CE)
106endif
107ifeq ($(CFG_CRYPTO_SHA256_ARM64_CE),y)
108$(call force,CFG_WITH_VFP,y,required by CFG_CRYPTO_SHA256_ARM64_CE)
109endif
110ifeq ($(CFG_CRYPTO_SHA1_ARM_CE),y)
111$(call force,CFG_WITH_VFP,y,required by CFG_CRYPTO_SHA1_ARM_CE)
112endif
113ifeq ($(CFG_CRYPTO_AES_ARM_CE),y)
114$(call force,CFG_WITH_VFP,y,required by CFG_CRYPTO_AES_ARM_CE)
115endif
116
117cryp-enable-all-depends = $(call cfg-enable-all-depends,$(strip $(1)),$(foreach v,$(2),CFG_CRYPTO_$(v)))
118$(eval $(call cryp-enable-all-depends,CFG_REE_FS, AES ECB CTR HMAC SHA256 GCM))
119$(eval $(call cryp-enable-all-depends,CFG_RPMB_FS, AES ECB CTR HMAC SHA256 GCM))
120
121# Dependency checks: warn and disable some features if dependencies are not met
122
123cryp-dep-one = $(call cfg-depends-one,CFG_CRYPTO_$(strip $(1)),$(patsubst %, CFG_CRYPTO_%,$(strip $(2))))
124cryp-dep-all = $(call cfg-depends-all,CFG_CRYPTO_$(strip $(1)),$(patsubst %, CFG_CRYPTO_%,$(strip $(2))))
125
126$(eval $(call cryp-dep-one, ECB, AES DES))
127$(eval $(call cryp-dep-one, CBC, AES DES))
128$(eval $(call cryp-dep-one, CTR, AES))
129# CTS is implemented with ECB and CBC
130$(eval $(call cryp-dep-all, CTS, AES ECB CBC))
131$(eval $(call cryp-dep-one, XTS, AES))
132$(eval $(call cryp-dep-one, HMAC, AES DES))
133$(eval $(call cryp-dep-one, HMAC, MD5 SHA1 SHA224 SHA256 SHA384 SHA512))
134$(eval $(call cryp-dep-one, CMAC, AES))
135$(eval $(call cryp-dep-one, CBC_MAC, AES DES))
136$(eval $(call cryp-dep-one, CCM, AES))
137$(eval $(call cryp-dep-one, GCM, AES))
138# If no AES cipher mode is left, disable AES
139$(eval $(call cryp-dep-one, AES, ECB CBC CTR CTS XTS))
140# If no DES cipher mode is left, disable DES
141$(eval $(call cryp-dep-one, DES, ECB CBC))
142# SM2 is Elliptic Curve Cryptography, it uses some generic ECC functions
143$(eval $(call cryp-dep-one, SM2_PKE, ECC))
144$(eval $(call cryp-dep-one, SM2_DSA, ECC))
145$(eval $(call cryp-dep-one, SM2_KEP, ECC))
146
147###############################################################
148# libtomcrypt (LTC) specifics, phase #1
149# LTC is only configured via _CFG_CORE_LTC_ prefixed variables
150#
151# _CFG_CORE_LTC_xxx_DESC means that LTC will only register the
152# descriptor of the algorithm, not provide a
153# crypt_xxx_alloc_ctx() function.
154###############################################################
155
156# If LTC is the cryptolib, pull configuration from CFG_CRYPTO_xxx
157ifeq ($(CFG_CRYPTOLIB_NAME),tomcrypt)
158# dsa_make_params() needs all three SHA-2 algorithms.
159# Disable DSA if any is missing.
160$(eval $(call cryp-dep-all, DSA, SHA256 SHA384 SHA512))
161
162# Assign _CFG_CORE_LTC_xxx based on CFG_CRYPTO_yyy
163core-ltc-vars = AES DES
164core-ltc-vars += ECB CBC CTR CTS XTS
165core-ltc-vars += MD5 SHA1 SHA224 SHA256 SHA384 SHA512 SHA512_256
166core-ltc-vars += SHA3_224 SHA3_256 SHA3_384 SHA3_512 SHAKE128 SHAKE256
167core-ltc-vars += HMAC CMAC CBC_MAC
168core-ltc-vars += CCM
169ifeq ($(CFG_CRYPTO_AES_GCM_FROM_CRYPTOLIB),y)
170core-ltc-vars += GCM
171endif
172core-ltc-vars += RSA DSA DH ECC
173core-ltc-vars += SIZE_OPTIMIZATION
174core-ltc-vars += SM2_PKE
175core-ltc-vars += SM2_DSA
176core-ltc-vars += SM2_KEP
177core-ltc-vars += ED25519 X25519
178# Assigned selected CFG_CRYPTO_xxx as _CFG_CORE_LTC_xxx
179$(foreach v, $(core-ltc-vars), $(eval _CFG_CORE_LTC_$(v) := $(CFG_CRYPTO_$(v))))
180_CFG_CORE_LTC_MPI := $(CFG_CORE_MBEDTLS_MPI)
181_CFG_CORE_LTC_AES_ACCEL := $(CFG_CORE_CRYPTO_AES_ACCEL)
182_CFG_CORE_LTC_SHA1_ACCEL := $(CFG_CORE_CRYPTO_SHA1_ACCEL)
183_CFG_CORE_LTC_SHA256_ACCEL := $(CFG_CORE_CRYPTO_SHA256_ACCEL)
184_CFG_CORE_LTC_SHA512_ACCEL := $(CFG_CORE_CRYPTO_SHA512_ACCEL)
185endif
186
187###############################################################
188# mbedtls specifics
189###############################################################
190
191ifeq ($(CFG_CRYPTOLIB_NAME),mbedtls)
192# mbedtls has to be complemented with some algorithms by LTC
193# Specify the algorithms here
194_CFG_CORE_LTC_DSA := $(CFG_CRYPTO_DSA)
195_CFG_CORE_LTC_MPI := $(CFG_CRYPTO_DSA)
196_CFG_CORE_LTC_SHA256_DESC := $(CFG_CRYPTO_DSA)
197_CFG_CORE_LTC_SHA384_DESC := $(CFG_CRYPTO_DSA)
198_CFG_CORE_LTC_SHA512_DESC := $(CFG_CRYPTO_DSA)
199_CFG_CORE_LTC_XTS := $(CFG_CRYPTO_XTS)
200_CFG_CORE_LTC_CCM := $(CFG_CRYPTO_CCM)
201_CFG_CORE_LTC_AES_DESC := $(call cfg-one-enabled, CFG_CRYPTO_XTS CFG_CRYPTO_CCM)
202_CFG_CORE_LTC_X25519 := $(CFG_CRYPTO_X25519)
203_CFG_CORE_LTC_ED25519 := $(CFG_CRYPTO_ED25519)
204_CFG_CORE_LTC_SHA3_224 := $(CFG_CRYPTO_SHA3_224)
205_CFG_CORE_LTC_SHA3_256 := $(CFG_CRYPTO_SHA3_256)
206_CFG_CORE_LTC_SHA3_384 := $(CFG_CRYPTO_SHA3_384)
207_CFG_CORE_LTC_SHA3_512 := $(CFG_CRYPTO_SHA3_512)
208_CFG_CORE_LTC_SHAKE128 := $(CFG_CRYPTO_SHAKE128)
209_CFG_CORE_LTC_SHAKE256 := $(CFG_CRYPTO_SHAKE256)
210_CFG_CORE_LTC_HMAC := $(call cfg-one-enabled, _CFG_CORE_LTC_SHA3_224 \
211			_CFG_CORE_LTC_SHA3_256 _CFG_CORE_LTC_SHA3_384 \
212			_CFG_CORE_LTC_SHA3_512)
213endif
214
215###############################################################
216# libtomcrypt (LTC) specifics, phase #2
217###############################################################
218
219_CFG_CORE_LTC_SHA256_DESC := $(call cfg-one-enabled, _CFG_CORE_LTC_SHA256_DESC \
220						     _CFG_CORE_LTC_SHA224 \
221						     _CFG_CORE_LTC_SHA256)
222_CFG_CORE_LTC_SHA384_DESC := $(call cfg-one-enabled, _CFG_CORE_LTC_SHA384_DESC \
223						     _CFG_CORE_LTC_SHA384)
224_CFG_CORE_LTC_SHA512_DESC := $(call cfg-one-enabled, _CFG_CORE_LTC_SHA512_DESC \
225						     _CFG_CORE_LTC_SHA512_256 \
226						     _CFG_CORE_LTC_SHA512)
227_CFG_CORE_LTC_AES_DESC := $(call cfg-one-enabled, _CFG_CORE_LTC_AES_DESC \
228						  _CFG_CORE_LTC_AES)
229
230_CFG_CORE_LTC_SHA3 := $(call cfg-one-enabled, _CFG_CORE_LTC_SHA3_224 \
231			_CFG_CORE_LTC_SHA3_256 _CFG_CORE_LTC_SHA3_384 \
232			_CFG_CORE_LTC_SHA3_512 _CFG_CORE_LTC_SHAKE128 \
233			_CFG_CORE_LTC_SHAKE256)
234
235# Assign system variables
236_CFG_CORE_LTC_CE := $(CFG_CRYPTO_WITH_CE)
237_CFG_CORE_LTC_VFP := $(CFG_WITH_VFP)
238_CFG_CORE_LTC_BIGNUM_MAX_BITS := $(CFG_CORE_BIGNUM_MAX_BITS)
239_CFG_CORE_LTC_PAGER := $(CFG_WITH_PAGER)
240ifneq ($(CFG_NUM_THREADS),1)
241_CFG_CORE_LTC_OPTEE_THREAD := y
242else
243_CFG_CORE_LTC_OPTEE_THREAD := n
244endif
245_CFG_CORE_LTC_HWSUPP_PMULL := $(CFG_HWSUPP_PMULL)
246
247# Assign aggregated variables
248ltc-one-enabled = $(call cfg-one-enabled,$(foreach v,$(1),_CFG_CORE_LTC_$(v)))
249_CFG_CORE_LTC_ACIPHER := $(call ltc-one-enabled, RSA DSA DH ECC)
250_CFG_CORE_LTC_AUTHENC := $(and $(filter y,$(_CFG_CORE_LTC_AES_DESC)), \
251			       $(filter y,$(call ltc-one-enabled, CCM GCM)))
252_CFG_CORE_LTC_CIPHER := $(call ltc-one-enabled, AES_DESC DES)
253_CFG_CORE_LTC_HASH := $(call ltc-one-enabled, MD5 SHA1 SHA224 SHA256 SHA384 \
254					      SHA512 SHA3_224 SHA3_256 \
255					      SHA3_384 SHA3_512)
256_CFG_CORE_LTC_MAC := $(call ltc-one-enabled, HMAC CMAC CBC_MAC)
257_CFG_CORE_LTC_CBC := $(call ltc-one-enabled, CBC CBC_MAC)
258_CFG_CORE_LTC_ASN1 := $(call ltc-one-enabled, RSA DSA ECC)
259_CFG_CORE_LTC_EC25519 := $(call ltc-one-enabled, ED25519 X25519)
260
261###############################################################
262# Platform independent crypto-driver configuration
263###############################################################
264CRYPTO_MAKEFILES := $(sort $(wildcard core/drivers/crypto/*/crypto.mk))
265include $(CRYPTO_MAKEFILES)
266
267# Enable TEE_ALG_RSASSA_PKCS1_V1_5 algorithm for signing with PKCS#1 v1.5 EMSA
268# without ASN.1 around the hash.
269ifeq ($(CFG_CRYPTOLIB_NAME),tomcrypt)
270CFG_CRYPTO_RSASSA_NA1 ?= y
271endif
272