xref: /optee_os/core/crypto.mk (revision f5a70e3efb80be4b9bff2c9c811ddc139058e05a) 
1CFG_CRYPTO ?= y
2# Select small code size in the crypto library if applicable (for instance
3# LibTomCrypt has -DLTC_SMALL_CODE)
4# Note: the compiler flag -Os is not set here but by CFG_CC_OPTIMIZE_FOR_SIZE
5CFG_CRYPTO_SIZE_OPTIMIZATION ?= y
6
7ifeq (y,$(CFG_CRYPTO))
8
9# Ciphers
10CFG_CRYPTO_AES ?= y
11CFG_CRYPTO_DES ?= y
12CFG_CRYPTO_SM4 ?= y
13
14# Cipher block modes
15CFG_CRYPTO_ECB ?= y
16CFG_CRYPTO_CBC ?= y
17CFG_CRYPTO_CTR ?= y
18CFG_CRYPTO_CTS ?= y
19CFG_CRYPTO_XTS ?= y
20
21# Message authentication codes
22CFG_CRYPTO_HMAC ?= y
23CFG_CRYPTO_CMAC ?= y
24CFG_CRYPTO_CBC_MAC ?= y
25
26# Hashes
27CFG_CRYPTO_MD5 ?= y
28CFG_CRYPTO_SHA1 ?= y
29CFG_CRYPTO_SHA224 ?= y
30CFG_CRYPTO_SHA256 ?= y
31CFG_CRYPTO_SHA384 ?= y
32CFG_CRYPTO_SHA512 ?= y
33CFG_CRYPTO_SHA512_256 ?= y
34CFG_CRYPTO_SM3 ?= y
35
36# Asymmetric ciphers
37CFG_CRYPTO_DSA ?= y
38CFG_CRYPTO_RSA ?= y
39CFG_CRYPTO_DH ?= y
40# ECC includes ECDSA and ECDH
41CFG_CRYPTO_ECC ?= y
42ifeq ($(CFG_CRYPTOLIB_NAME),tomcrypt)
43CFG_CRYPTO_SM2_PKE ?= y
44CFG_CRYPTO_SM2_DSA ?= y
45CFG_CRYPTO_SM2_KEP ?= y
46endif
47ifeq ($(CFG_CRYPTOLIB_NAME)-$(CFG_CRYPTO_SM2_PKE),mbedtls-y)
48$(error Error: CFG_CRYPTO_SM2_PKE=y requires CFG_CRYPTOLIB_NAME=tomcrypt)
49endif
50ifeq ($(CFG_CRYPTOLIB_NAME)-$(CFG_CRYPTO_SM2_DSA),mbedtls-y)
51$(error Error: CFG_CRYPTO_SM2_DSA=y requires CFG_CRYPTOLIB_NAME=tomcrypt)
52endif
53ifeq ($(CFG_CRYPTOLIB_NAME)-$(CFG_CRYPTO_SM2_KEP),mbedtls-y)
54$(error Error: CFG_CRYPTO_SM2_KEP=y requires CFG_CRYPTOLIB_NAME=tomcrypt)
55endif
56
57# Authenticated encryption
58CFG_CRYPTO_CCM ?= y
59CFG_CRYPTO_GCM ?= y
60# Default uses the OP-TEE internal AES-GCM implementation
61CFG_CRYPTO_AES_GCM_FROM_CRYPTOLIB ?= n
62
63endif
64
65ifeq ($(CFG_WITH_PAGER),y)
66ifneq ($(CFG_CRYPTO_SHA256),y)
67$(warning Warning: Enabling CFG_CRYPTO_SHA256 [required by CFG_WITH_PAGER])
68CFG_CRYPTO_SHA256:=y
69endif
70endif
71
72$(eval $(call cryp-enable-all-depends,CFG_WITH_SOFTWARE_PRNG, AES ECB SHA256))
73
74ifeq ($(CFG_CRYPTO_WITH_CE),y)
75
76$(call force,CFG_AES_GCM_TABLE_BASED,n,conflicts with CFG_CRYPTO_WITH_CE)
77
78# CFG_HWSUPP_PMULT_64 defines whether the CPU supports polynomial multiplies
79# of 64-bit values (Aarch64: PMULL/PMULL2 with the 1Q specifier; Aarch32:
80# VMULL.P64). These operations are part of the Cryptographic Extensions, so
81# assume they are implicitly contained in CFG_CRYPTO_WITH_CE=y.
82CFG_HWSUPP_PMULT_64 ?= y
83
84ifeq ($(CFG_ARM32_core),y)
85CFG_CRYPTO_AES_ARM32_CE ?= $(CFG_CRYPTO_AES)
86CFG_CRYPTO_SHA1_ARM32_CE ?= $(CFG_CRYPTO_SHA1)
87CFG_CRYPTO_SHA256_ARM32_CE ?= $(CFG_CRYPTO_SHA256)
88endif
89
90ifeq ($(CFG_ARM64_core),y)
91CFG_CRYPTO_AES_ARM64_CE ?= $(CFG_CRYPTO_AES)
92CFG_CRYPTO_SHA1_ARM64_CE ?= $(CFG_CRYPTO_SHA1)
93CFG_CRYPTO_SHA256_ARM64_CE ?= $(CFG_CRYPTO_SHA256)
94endif
95
96else #CFG_CRYPTO_WITH_CE
97
98CFG_AES_GCM_TABLE_BASED ?= y
99
100endif #!CFG_CRYPTO_WITH_CE
101
102
103# Cryptographic extensions can only be used safely when OP-TEE knows how to
104# preserve the VFP context
105ifeq ($(CFG_CRYPTO_SHA256_ARM32_CE),y)
106$(call force,CFG_WITH_VFP,y,required by CFG_CRYPTO_SHA256_ARM32_CE)
107endif
108ifeq ($(CFG_CRYPTO_SHA256_ARM64_CE),y)
109$(call force,CFG_WITH_VFP,y,required by CFG_CRYPTO_SHA256_ARM64_CE)
110endif
111ifeq ($(CFG_CRYPTO_SHA1_ARM32_CE),y)
112$(call force,CFG_WITH_VFP,y,required by CFG_CRYPTO_SHA1_ARM32_CE)
113endif
114ifeq ($(CFG_CRYPTO_SHA1_ARM64_CE),y)
115$(call force,CFG_WITH_VFP,y,required by CFG_CRYPTO_SHA1_ARM64_CE)
116endif
117ifeq ($(CFG_CRYPTO_AES_ARM64_CE),y)
118$(call force,CFG_WITH_VFP,y,required by CFG_CRYPTO_AES_ARM64_CE)
119endif
120
121cryp-enable-all-depends = $(call cfg-enable-all-depends,$(strip $(1)),$(foreach v,$(2),CFG_CRYPTO_$(v)))
122$(eval $(call cryp-enable-all-depends,CFG_REE_FS, AES ECB CTR HMAC SHA256 GCM))
123$(eval $(call cryp-enable-all-depends,CFG_RPMB_FS, AES ECB CTR HMAC SHA256 GCM))
124
125# Dependency checks: warn and disable some features if dependencies are not met
126
127cryp-dep-one = $(call cfg-depends-one,CFG_CRYPTO_$(strip $(1)),$(patsubst %, CFG_CRYPTO_%,$(strip $(2))))
128cryp-dep-all = $(call cfg-depends-all,CFG_CRYPTO_$(strip $(1)),$(patsubst %, CFG_CRYPTO_%,$(strip $(2))))
129
130$(eval $(call cryp-dep-one, ECB, AES DES))
131$(eval $(call cryp-dep-one, CBC, AES DES))
132$(eval $(call cryp-dep-one, CTR, AES))
133# CTS is implemented with ECB and CBC
134$(eval $(call cryp-dep-all, CTS, AES ECB CBC))
135$(eval $(call cryp-dep-one, XTS, AES))
136$(eval $(call cryp-dep-one, HMAC, AES DES))
137$(eval $(call cryp-dep-one, HMAC, MD5 SHA1 SHA224 SHA256 SHA384 SHA512))
138$(eval $(call cryp-dep-one, CMAC, AES))
139$(eval $(call cryp-dep-one, CBC_MAC, AES DES))
140$(eval $(call cryp-dep-one, CCM, AES))
141$(eval $(call cryp-dep-one, GCM, AES))
142# If no AES cipher mode is left, disable AES
143$(eval $(call cryp-dep-one, AES, ECB CBC CTR CTS XTS))
144# If no DES cipher mode is left, disable DES
145$(eval $(call cryp-dep-one, DES, ECB CBC))
146# SM2 is Elliptic Curve Cryptography, it uses some generic ECC functions
147$(eval $(call cryp-dep-one, SM2_PKE, ECC))
148$(eval $(call cryp-dep-one, SM2_DSA, ECC))
149$(eval $(call cryp-dep-one, SM2_KEP, ECC))
150
151###############################################################
152# libtomcrypt (LTC) specifics, phase #1
153# LTC is only configured via _CFG_CORE_LTC_ prefixed variables
154#
155# _CFG_CORE_LTC_xxx_DESC means that LTC will only register the
156# descriptor of the algorithm, not provide a
157# crypt_xxx_alloc_ctx() function.
158###############################################################
159
160# If LTC is the cryptolib, pull configuration from CFG_CRYPTO_xxx
161ifeq ($(CFG_CRYPTOLIB_NAME),tomcrypt)
162# dsa_make_params() needs all three SHA-2 algorithms.
163# Disable DSA if any is missing.
164$(eval $(call cryp-dep-all, DSA, SHA256 SHA384 SHA512))
165
166# Assign _CFG_CORE_LTC_xxx based on CFG_CRYPTO_yyy
167core-ltc-vars = AES DES
168core-ltc-vars += ECB CBC CTR CTS XTS
169core-ltc-vars += MD5 SHA1 SHA224 SHA256 SHA384 SHA512 SHA512_256
170core-ltc-vars += HMAC CMAC CBC_MAC
171core-ltc-vars += CCM
172ifeq ($(CFG_CRYPTO_AES_GCM_FROM_CRYPTOLIB),y)
173core-ltc-vars += GCM
174endif
175core-ltc-vars += RSA DSA DH ECC
176core-ltc-vars += AES_ARM64_CE AES_ARM32_CE
177core-ltc-vars += SHA1_ARM32_CE SHA1_ARM64_CE
178core-ltc-vars += SHA256_ARM32_CE SHA256_ARM64_CE
179core-ltc-vars += SIZE_OPTIMIZATION
180core-ltc-vars += SM2_PKE
181core-ltc-vars += SM2_DSA
182core-ltc-vars += SM2_KEP
183# Assigned selected CFG_CRYPTO_xxx as _CFG_CORE_LTC_xxx
184$(foreach v, $(core-ltc-vars), $(eval _CFG_CORE_LTC_$(v) := $(CFG_CRYPTO_$(v))))
185_CFG_CORE_LTC_MPI := $(CFG_CORE_MBEDTLS_MPI)
186endif
187
188###############################################################
189# mbedtls specifics
190###############################################################
191
192ifeq ($(CFG_CRYPTOLIB_NAME),mbedtls)
193# mbedtls has to be complemented with some algorithms by LTC
194# Specify the algorithms here
195_CFG_CORE_LTC_DSA := $(CFG_CRYPTO_DSA)
196_CFG_CORE_LTC_MPI := $(CFG_CRYPTO_DSA)
197_CFG_CORE_LTC_SHA256_DESC := $(CFG_CRYPTO_DSA)
198_CFG_CORE_LTC_SHA384_DESC := $(CFG_CRYPTO_DSA)
199_CFG_CORE_LTC_SHA512_DESC := $(CFG_CRYPTO_DSA)
200_CFG_CORE_LTC_XTS := $(CFG_CRYPTO_XTS)
201_CFG_CORE_LTC_CCM := $(CFG_CRYPTO_CCM)
202_CFG_CORE_LTC_AES_DESC := $(call cfg-one-enabled, CFG_CRYPTO_XTS CFG_CRYPTO_CCM)
203endif
204
205###############################################################
206# libtomcrypt (LTC) specifics, phase #2
207###############################################################
208
209# Assign system variables
210_CFG_CORE_LTC_CE := $(CFG_CRYPTO_WITH_CE)
211_CFG_CORE_LTC_VFP := $(CFG_WITH_VFP)
212_CFG_CORE_LTC_BIGNUM_MAX_BITS := $(CFG_CORE_BIGNUM_MAX_BITS)
213_CFG_CORE_LTC_PAGER := $(CFG_WITH_PAGER)
214_CFG_CORE_LTC_OPTEE_THREAD := $(CFG_LTC_OPTEE_THREAD)
215_CFG_CORE_LTC_HWSUPP_PMULL := $(CFG_HWSUPP_PMULL)
216
217# Assign aggregated variables
218ltc-one-enabled = $(call cfg-one-enabled,$(foreach v,$(1),_CFG_CORE_LTC_$(v)))
219_CFG_CORE_LTC_ACIPHER := $(call ltc-one-enabled, RSA DSA DH ECC)
220_CFG_CORE_LTC_AUTHENC := $(and $(filter y,$(_CFG_CORE_LTC_AES) \
221					  $(_CFG_CORE_LTC_AES_DESC)), \
222			       $(filter y,$(call ltc-one-enabled, CCM GCM)))
223_CFG_CORE_LTC_CIPHER := $(call ltc-one-enabled, AES AES_DESC DES)
224_CFG_CORE_LTC_HASH := $(call ltc-one-enabled, MD5 SHA1 SHA224 SHA256 SHA384 \
225					      SHA512)
226_CFG_CORE_LTC_MAC := $(call ltc-one-enabled, HMAC CMAC CBC_MAC)
227_CFG_CORE_LTC_CBC := $(call ltc-one-enabled, CBC CBC_MAC)
228_CFG_CORE_LTC_ASN1 := $(call ltc-one-enabled, RSA DSA ECC)
229