xref: /optee_os/core/lib/libtomcrypt/sub.mk (revision 75200110483dcee11cdcf4cef3d0ac4d92f63c14) 
1CFG_CRYPTO ?= y
2CFG_CRYPTO_SIZE_OPTIMIZATION ?= y
3
4ifeq (y,$(CFG_CRYPTO))
5
6# Ciphers
7CFG_CRYPTO_AES ?= y
8CFG_CRYPTO_DES ?= y
9
10# Cipher block modes
11CFG_CRYPTO_ECB ?= y
12CFG_CRYPTO_CBC ?= y
13CFG_CRYPTO_CTR ?= y
14CFG_CRYPTO_CTS ?= y
15CFG_CRYPTO_XTS ?= y
16
17# Message authentication codes
18CFG_CRYPTO_HMAC ?= y
19CFG_CRYPTO_CMAC ?= y
20CFG_CRYPTO_CBC_MAC ?= y
21
22# Hashes
23CFG_CRYPTO_MD5 ?= y
24CFG_CRYPTO_SHA1 ?= y
25CFG_CRYPTO_SHA224 ?= y
26CFG_CRYPTO_SHA256 ?= y
27CFG_CRYPTO_SHA384 ?= y
28CFG_CRYPTO_SHA512 ?= y
29
30# Asymmetric ciphers
31CFG_CRYPTO_DSA ?= y
32CFG_CRYPTO_RSA ?= y
33CFG_CRYPTO_DH ?= y
34CFG_CRYPTO_ECC ?= y
35
36# Authenticated encryption
37CFG_CRYPTO_CCM ?= y
38CFG_CRYPTO_GCM ?= y
39
40endif
41
42ifeq ($(CFG_WITH_PAGER),y)
43ifneq ($(CFG_CRYPTO_SHA256),y)
44$(warning Warning: Enabling CFG_CRYPTO_SHA256 [required by CFG_WITH_PAGER])
45CFG_CRYPTO_SHA256:=y
46endif
47endif
48
49ifeq ($(CFG_CRYPTO_WITH_CE),y)
50ifeq ($(CFG_ARM32_core),y)
51CFG_CRYPTO_AES_ARM32_CE ?= $(CFG_CRYPTO_AES)
52CFG_CRYPTO_SHA1_ARM32_CE ?= $(CFG_CRYPTO_SHA1)
53CFG_CRYPTO_SHA256_ARM32_CE ?= $(CFG_CRYPTO_SHA256)
54endif
55ifeq ($(CFG_ARM64_core),y)
56CFG_CRYPTO_AES_ARM64_CE ?= $(CFG_CRYPTO_AES)
57CFG_CRYPTO_SHA1_ARM64_CE ?= $(CFG_CRYPTO_SHA1)
58CFG_CRYPTO_SHA256_ARM64_CE ?= $(CFG_CRYPTO_SHA256)
59endif
60endif
61
62# Cryptographic extensions can only be used safely when OP-TEE knows how to
63# preserve the VFP context
64ifeq ($(CFG_CRYPTO_SHA256_ARM32_CE),y)
65$(call force,CFG_WITH_VFP,y,required by CFG_CRYPTO_SHA256_ARM32_CE)
66endif
67ifeq ($(CFG_CRYPTO_SHA256_ARM64_CE),y)
68$(call force,CFG_WITH_VFP,y,required by CFG_CRYPTO_SHA256_ARM64_CE)
69endif
70ifeq ($(CFG_CRYPTO_SHA1_ARM32_CE),y)
71$(call force,CFG_WITH_VFP,y,required by CFG_CRYPTO_SHA1_ARM32_CE)
72endif
73ifeq ($(CFG_CRYPTO_SHA1_ARM64_CE),y)
74$(call force,CFG_WITH_VFP,y,required by CFG_CRYPTO_SHA1_ARM64_CE)
75endif
76ifeq ($(CFG_CRYPTO_AES_ARM64_CE),y)
77$(call force,CFG_WITH_VFP,y,required by CFG_CRYPTO_AES_ARM64_CE)
78endif
79
80cryp-enable-all-depends = $(call cfg-enable-all-depends,$(strip $(1)),$(foreach v,$(2),CFG_CRYPTO_$(v)))
81$(eval $(call cryp-enable-all-depends,CFG_REE_FS, AES ECB CTR HMAC SHA256 GCM))
82$(eval $(call cryp-enable-all-depends,CFG_RPMB_FS, AES ECB CTR HMAC SHA256 GCM))
83
84# Dependency checks: warn and disable some features if dependencies are not met
85
86cryp-dep-one = $(call cfg-depends-one,CFG_CRYPTO_$(strip $(1)),$(patsubst %, CFG_CRYPTO_%,$(strip $(2))))
87cryp-dep-all = $(call cfg-depends-all,CFG_CRYPTO_$(strip $(1)),$(patsubst %, CFG_CRYPTO_%,$(strip $(2))))
88
89$(eval $(call cryp-dep-one, ECB, AES DES))
90$(eval $(call cryp-dep-one, CBC, AES DES))
91$(eval $(call cryp-dep-one, CTR, AES))
92# CTS is implemented with ECB and CBC
93$(eval $(call cryp-dep-all, CTS, AES ECB CBC))
94$(eval $(call cryp-dep-one, XTS, AES))
95$(eval $(call cryp-dep-one, HMAC, AES DES))
96$(eval $(call cryp-dep-one, HMAC, MD5 SHA1 SHA224 SHA256 SHA384 SHA512))
97$(eval $(call cryp-dep-one, CMAC, AES))
98$(eval $(call cryp-dep-one, CBC_MAC, AES DES))
99$(eval $(call cryp-dep-one, CCM, AES))
100$(eval $(call cryp-dep-one, GCM, AES))
101# If no AES cipher mode is left, disable AES
102$(eval $(call cryp-dep-one, AES, ECB CBC CTR CTS XTS))
103# If no DES cipher mode is left, disable DES
104$(eval $(call cryp-dep-one, DES, ECB CBC))
105
106# dsa_make_params() needs all three SHA-2 algorithms.
107# Disable DSA if any is missing.
108$(eval $(call cryp-dep-all, DSA, SHA256 SHA384 SHA512))
109
110cryp-one-enabled = $(call cfg-one-enabled,$(foreach v,$(1),CFG_CRYPTO_$(v)))
111cryp-all-enabled = $(call cfg-all-enabled,$(foreach v,$(1),CFG_CRYPTO_$(v)))
112
113_CFG_CRYPTO_WITH_ACIPHER := $(call cryp-one-enabled, RSA DSA DH ECC)
114_CFG_CRYPTO_WITH_AUTHENC := $(and $(filter y,$(CFG_CRYPTO_AES)), $(call cryp-one-enabled, CCM GCM))
115_CFG_CRYPTO_WITH_CIPHER := $(call cryp-one-enabled, AES DES)
116_CFG_CRYPTO_WITH_HASH := $(call cryp-one-enabled, MD5 SHA1 SHA224 SHA256 SHA384 SHA512)
117_CFG_CRYPTO_WITH_MAC := $(call cryp-one-enabled, HMAC CMAC CBC_MAC)
118_CFG_CRYPTO_WITH_CBC := $(call cryp-one-enabled, CBC CBC_MAC)
119_CFG_CRYPTO_WITH_ASN1 := $(call cryp-one-enabled, RSA DSA ECC)
120_CFG_CRYPTO_WITH_FORTUNA_PRNG := $(call cryp-all-enabled, AES SHA256)
121
122cppflags-lib-$(CFG_CRYPTO_SIZE_OPTIMIZATION) += -DLTC_SMALL_CODE
123cppflags-lib-y += -DLTC_RSA_CRT_HARDENING -DLTC_RSA_BLINDING
124cflags-lib-$(CFG_CRYPTO_SIZE_OPTIMIZATION) += -Os
125
126global-incdirs-y += include
127
128subdirs-y += src
129