1CFG_CRYPTO ?= y 2 3ifeq (y,$(CFG_CRYPTO)) 4 5# Ciphers 6CFG_CRYPTO_AES ?= y 7CFG_CRYPTO_DES ?= y 8 9# Cipher block modes 10CFG_CRYPTO_ECB ?= y 11CFG_CRYPTO_CBC ?= y 12CFG_CRYPTO_CTR ?= y 13CFG_CRYPTO_CTS ?= y 14CFG_CRYPTO_XTS ?= y 15 16# Message authentication codes 17CFG_CRYPTO_HMAC ?= y 18CFG_CRYPTO_CMAC ?= y 19CFG_CRYPTO_CBC_MAC ?= y 20 21# Hashes 22CFG_CRYPTO_MD5 ?= y 23CFG_CRYPTO_SHA1 ?= y 24CFG_CRYPTO_SHA224 ?= y 25CFG_CRYPTO_SHA256 ?= y 26CFG_CRYPTO_SHA384 ?= y 27CFG_CRYPTO_SHA512 ?= y 28 29# Asymmetric ciphers 30CFG_CRYPTO_DSA ?= y 31CFG_CRYPTO_RSA ?= y 32CFG_CRYPTO_DH ?= y 33CFG_CRYPTO_ECC ?= y 34 35# Authenticated encryption 36CFG_CRYPTO_CCM ?= y 37CFG_CRYPTO_GCM ?= y 38 39endif 40 41ifeq ($(CFG_WITH_PAGER),y) 42ifneq ($(CFG_CRYPTO_SHA256),y) 43ifneq ($(CFG_CRYPTO_SHA256_ARM32_CE),y) 44$(warning Warning: Enabling CFG_CRYPTO_SHA256 [required by CFG_WITH_PAGER]) 45CFG_CRYPTO_SHA256:=y 46endif 47endif 48endif 49 50# Cryptographic extensions can only be used safely when OP-TEE knows how to 51# preserve the VFP context 52ifeq ($(CFG_CRYPTO_SHA256_ARM32_CE),y) 53$(call force,CFG_WITH_VFP,y,required by CFG_CRYPTO_SHA256_ARM32_CE) 54endif 55ifeq ($(CFG_CRYPTO_SHA256_ARM64_CE),y) 56$(call force,CFG_WITH_VFP,y,required by CFG_CRYPTO_SHA256_ARM64_CE) 57endif 58ifeq ($(CFG_CRYPTO_SHA1_ARM32_CE),y) 59$(call force,CFG_WITH_VFP,y,required by CFG_CRYPTO_SHA1_ARM32_CE) 60endif 61ifeq ($(CFG_CRYPTO_SHA1_ARM64_CE),y) 62$(call force,CFG_WITH_VFP,y,required by CFG_CRYPTO_SHA1_ARM64_CE) 63endif 64ifeq ($(CFG_CRYPTO_AES_ARM64_CE),y) 65$(call force,CFG_WITH_VFP,y,required by CFG_CRYPTO_AES_ARM64_CE) 66endif 67 68cryp-enable-all-depends = $(call cfg-enable-all-depends,$(strip $(1)),$(foreach v,$(2),CFG_CRYPTO_$(v))) 69$(eval $(call cryp-enable-all-depends,CFG_ENC_FS, AES ECB CTR HMAC SHA256 GCM)) 70 71# Dependency checks: warn and disable some features if dependencies are not met 72 73cryp-dep-one = $(call cfg-depends-one,CFG_CRYPTO_$(strip $(1)),$(patsubst %, CFG_CRYPTO_%,$(strip $(2)))) 74cryp-dep-all = $(call cfg-depends-all,CFG_CRYPTO_$(strip $(1)),$(patsubst %, CFG_CRYPTO_%,$(strip $(2)))) 75 76$(eval $(call cryp-dep-one, ECB, AES DES)) 77$(eval $(call cryp-dep-one, CBC, AES DES)) 78$(eval $(call cryp-dep-one, CTR, AES)) 79# CTS is implemented with ECB and CBC 80$(eval $(call cryp-dep-all, CTS, AES ECB CBC)) 81$(eval $(call cryp-dep-one, XTS, AES)) 82$(eval $(call cryp-dep-one, HMAC, AES DES)) 83$(eval $(call cryp-dep-one, HMAC, MD5 SHA1 SHA224 SHA256 SHA384 SHA512)) 84$(eval $(call cryp-dep-one, CMAC, AES)) 85$(eval $(call cryp-dep-one, CBC_MAC, AES DES)) 86$(eval $(call cryp-dep-one, CCM, AES)) 87$(eval $(call cryp-dep-one, GCM, AES)) 88# If no AES cipher mode is left, disable AES 89$(eval $(call cryp-dep-one, AES, ECB CBC CTR CTS XTS)) 90# If no DES cipher mode is left, disable DES 91$(eval $(call cryp-dep-one, DES, ECB CBC)) 92 93cryp-one-enabled = $(call cfg-one-enabled,$(foreach v,$(1),CFG_CRYPTO_$(v))) 94cryp-all-enabled = $(call cfg-all-enabled,$(foreach v,$(1),CFG_CRYPTO_$(v))) 95 96_CFG_CRYPTO_WITH_ACIPHER := $(call cryp-one-enabled, RSA DSA DH ECC) 97_CFG_CRYPTO_WITH_AUTHENC := $(and $(filter y,$(CFG_CRYPTO_AES)), $(call cryp-one-enabled, CCM GCM)) 98_CFG_CRYPTO_WITH_CIPHER := $(call cryp-one-enabled, AES DES) 99_CFG_CRYPTO_WITH_HASH := $(call cryp-one-enabled, MD5 SHA1 SHA224 SHA256 SHA384 SHA512) 100_CFG_CRYPTO_WITH_MAC := $(call cryp-one-enabled, HMAC CMAC CBC_MAC) 101_CFG_CRYPTO_WITH_CBC := $(call cryp-one-enabled, CBC CBC_MAC) 102_CFG_CRYPTO_WITH_ASN1 := $(call cryp-one-enabled, RSA DSA ECC) 103_CFG_CRYPTO_WITH_FORTUNA_PRNG := $(call cryp-all-enabled, AES SHA256) 104 105cppflags-lib-$(libtomcrypt_with_optimize_size) += -DLTC_SMALL_CODE -DLTC_NO_FAST 106 107global-incdirs-y += include 108 109subdirs-y += src 110