• Home
  • Line#
  • Scopes#
  • Navigate#
  • Raw
  • Download
1add_subdirectory(fipsmodule)
2
3if(FIPS_DELOCATE OR FIPS_SHARED)
4  SET_SOURCE_FILES_PROPERTIES(fipsmodule/bcm.o PROPERTIES EXTERNAL_OBJECT true)
5  SET_SOURCE_FILES_PROPERTIES(fipsmodule/bcm.o PROPERTIES GENERATED true)
6
7  set(
8    CRYPTO_FIPS_OBJECTS
9
10    fipsmodule/bcm.o
11  )
12endif()
13
14set(
15  CRYPTO_SOURCES_ASM
16  curve25519/asm/x25519-asm-arm.S
17  hrss/asm/poly_rq_mul.S
18  poly1305/poly1305_arm_asm.S
19  ../third_party/fiat/asm/fiat_curve25519_adx_mul.S
20  ../third_party/fiat/asm/fiat_curve25519_adx_square.S
21  ../third_party/fiat/asm/fiat_p256_adx_mul.S
22  ../third_party/fiat/asm/fiat_p256_adx_sqr.S
23)
24perlasm(CRYPTO_SOURCES aarch64 chacha/chacha-armv8 chacha/asm/chacha-armv8.pl)
25perlasm(CRYPTO_SOURCES aarch64 cipher_extra/chacha20_poly1305_armv8 cipher_extra/asm/chacha20_poly1305_armv8.pl)
26perlasm(CRYPTO_SOURCES aarch64 test/trampoline-armv8 test/asm/trampoline-armv8.pl)
27perlasm(CRYPTO_SOURCES arm chacha/chacha-armv4 chacha/asm/chacha-armv4.pl)
28perlasm(CRYPTO_SOURCES arm test/trampoline-armv4 test/asm/trampoline-armv4.pl)
29perlasm(CRYPTO_SOURCES x86 chacha/chacha-x86 chacha/asm/chacha-x86.pl)
30perlasm(CRYPTO_SOURCES x86 test/trampoline-x86 test/asm/trampoline-x86.pl)
31perlasm(CRYPTO_SOURCES x86_64 chacha/chacha-x86_64 chacha/asm/chacha-x86_64.pl)
32perlasm(CRYPTO_SOURCES x86_64 cipher_extra/aes128gcmsiv-x86_64 cipher_extra/asm/aes128gcmsiv-x86_64.pl)
33perlasm(CRYPTO_SOURCES x86_64 cipher_extra/chacha20_poly1305_x86_64 cipher_extra/asm/chacha20_poly1305_x86_64.pl)
34perlasm(CRYPTO_SOURCES x86_64 test/trampoline-x86_64 test/asm/trampoline-x86_64.pl)
35
36add_custom_command(
37  OUTPUT err_data.c
38  COMMAND ${GO_EXECUTABLE} run err_data_generate.go > ${CMAKE_CURRENT_BINARY_DIR}/err_data.c
39  DEPENDS
40  err/err_data_generate.go
41  err/asn1.errordata
42  err/bio.errordata
43  err/bn.errordata
44  err/cipher.errordata
45  err/conf.errordata
46  err/dh.errordata
47  err/digest.errordata
48  err/dsa.errordata
49  err/ecdh.errordata
50  err/ecdsa.errordata
51  err/ec.errordata
52  err/engine.errordata
53  err/evp.errordata
54  err/hkdf.errordata
55  err/obj.errordata
56  err/pem.errordata
57  err/pkcs7.errordata
58  err/pkcs8.errordata
59  err/rsa.errordata
60  err/ssl.errordata
61  err/trust_token.errordata
62  err/x509.errordata
63  err/x509v3.errordata
64  WORKING_DIRECTORY ${CMAKE_CURRENT_SOURCE_DIR}/err
65)
66
67add_library(
68  crypto
69
70  asn1/a_bitstr.c
71  asn1/a_bool.c
72  asn1/a_d2i_fp.c
73  asn1/a_dup.c
74  asn1/a_gentm.c
75  asn1/a_i2d_fp.c
76  asn1/a_int.c
77  asn1/a_mbstr.c
78  asn1/a_object.c
79  asn1/a_octet.c
80  asn1/a_strex.c
81  asn1/a_strnid.c
82  asn1/a_time.c
83  asn1/a_type.c
84  asn1/a_utctm.c
85  asn1/asn1_lib.c
86  asn1/asn1_par.c
87  asn1/asn_pack.c
88  asn1/f_int.c
89  asn1/f_string.c
90  asn1/tasn_dec.c
91  asn1/tasn_enc.c
92  asn1/tasn_fre.c
93  asn1/tasn_new.c
94  asn1/tasn_typ.c
95  asn1/tasn_utl.c
96  asn1/posix_time.c
97  base64/base64.c
98  bio/bio.c
99  bio/bio_mem.c
100  bio/connect.c
101  bio/errno.c
102  bio/fd.c
103  bio/file.c
104  bio/hexdump.c
105  bio/pair.c
106  bio/printf.c
107  bio/socket.c
108  bio/socket_helper.c
109  blake2/blake2.c
110  bn_extra/bn_asn1.c
111  bn_extra/convert.c
112  buf/buf.c
113  bytestring/asn1_compat.c
114  bytestring/ber.c
115  bytestring/cbb.c
116  bytestring/cbs.c
117  bytestring/unicode.c
118  chacha/chacha.c
119  cipher_extra/cipher_extra.c
120  cipher_extra/derive_key.c
121  cipher_extra/e_aesctrhmac.c
122  cipher_extra/e_aesgcmsiv.c
123  cipher_extra/e_chacha20poly1305.c
124  cipher_extra/e_des.c
125  cipher_extra/e_null.c
126  cipher_extra/e_rc2.c
127  cipher_extra/e_rc4.c
128  cipher_extra/e_tls.c
129  cipher_extra/tls_cbc.c
130  conf/conf.c
131  cpu_aarch64_apple.c
132  cpu_aarch64_openbsd.c
133  cpu_aarch64_fuchsia.c
134  cpu_aarch64_linux.c
135  cpu_aarch64_sysreg.c
136  cpu_aarch64_win.c
137  cpu_arm_freebsd.c
138  cpu_arm_linux.c
139  cpu_intel.c
140  crypto.c
141  curve25519/curve25519.c
142  curve25519/curve25519_64_adx.c
143  curve25519/spake25519.c
144  des/des.c
145  dh_extra/params.c
146  dh_extra/dh_asn1.c
147  digest_extra/digest_extra.c
148  dsa/dsa.c
149  dsa/dsa_asn1.c
150  ecdh_extra/ecdh_extra.c
151  ecdsa_extra/ecdsa_asn1.c
152  ec_extra/ec_asn1.c
153  ec_extra/ec_derive.c
154  ec_extra/hash_to_curve.c
155  err/err.c
156  err_data.c
157  engine/engine.c
158  evp/evp.c
159  evp/evp_asn1.c
160  evp/evp_ctx.c
161  evp/p_dsa_asn1.c
162  evp/p_ec.c
163  evp/p_ec_asn1.c
164  evp/p_ed25519.c
165  evp/p_ed25519_asn1.c
166  evp/p_hkdf.c
167  evp/p_rsa.c
168  evp/p_rsa_asn1.c
169  evp/p_x25519.c
170  evp/p_x25519_asn1.c
171  evp/pbkdf.c
172  evp/print.c
173  evp/scrypt.c
174  evp/sign.c
175  ex_data.c
176  hpke/hpke.c
177  hrss/hrss.c
178  keccak/keccak.c
179  kyber/kyber.c
180  lhash/lhash.c
181  mem.c
182  obj/obj.c
183  obj/obj_xref.c
184  pem/pem_all.c
185  pem/pem_info.c
186  pem/pem_lib.c
187  pem/pem_oth.c
188  pem/pem_pk8.c
189  pem/pem_pkey.c
190  pem/pem_x509.c
191  pem/pem_xaux.c
192  pkcs7/pkcs7.c
193  pkcs7/pkcs7_x509.c
194  pkcs8/pkcs8.c
195  pkcs8/pkcs8_x509.c
196  pkcs8/p5_pbev2.c
197  poly1305/poly1305.c
198  poly1305/poly1305_arm.c
199  poly1305/poly1305_vec.c
200  pool/pool.c
201  rand_extra/deterministic.c
202  rand_extra/forkunsafe.c
203  rand_extra/getentropy.c
204  rand_extra/ios.c
205  rand_extra/passive.c
206  rand_extra/rand_extra.c
207  rand_extra/trusty.c
208  rand_extra/windows.c
209  rc4/rc4.c
210  refcount.c
211  rsa_extra/rsa_asn1.c
212  rsa_extra/rsa_crypt.c
213  rsa_extra/rsa_print.c
214  spx/address.c
215  spx/fors.c
216  spx/merkle.c
217  spx/spx.c
218  spx/thash.c
219  spx/spx_util.c
220  spx/wots.c
221  stack/stack.c
222  siphash/siphash.c
223  thread.c
224  thread_none.c
225  thread_pthread.c
226  thread_win.c
227  trust_token/pmbtoken.c
228  trust_token/trust_token.c
229  trust_token/voprf.c
230  x509/a_digest.c
231  x509/a_sign.c
232  x509/a_verify.c
233  x509/algorithm.c
234  x509/asn1_gen.c
235  x509/by_dir.c
236  x509/by_file.c
237  x509/i2d_pr.c
238  x509/name_print.c
239  x509/policy.c
240  x509/rsa_pss.c
241  x509/t_crl.c
242  x509/t_req.c
243  x509/t_x509.c
244  x509/t_x509a.c
245  x509/x509.c
246  x509/x509_att.c
247  x509/x509_cmp.c
248  x509/x509_d2.c
249  x509/x509_def.c
250  x509/x509_ext.c
251  x509/x509_lu.c
252  x509/x509_obj.c
253  x509/x509_req.c
254  x509/x509_set.c
255  x509/x509_trs.c
256  x509/x509_txt.c
257  x509/x509_v3.c
258  x509/x509_vfy.c
259  x509/x509_vpm.c
260  x509/x509cset.c
261  x509/x509name.c
262  x509/x509rset.c
263  x509/x509spki.c
264  x509/x_algor.c
265  x509/x_all.c
266  x509/x_attrib.c
267  x509/x_crl.c
268  x509/x_exten.c
269  x509/x_info.c
270  x509/x_name.c
271  x509/x_pkey.c
272  x509/x_pubkey.c
273  x509/x_req.c
274  x509/x_sig.c
275  x509/x_spki.c
276  x509/x_val.c
277  x509/x_x509.c
278  x509/x_x509a.c
279  x509v3/v3_akey.c
280  x509v3/v3_akeya.c
281  x509v3/v3_alt.c
282  x509v3/v3_bcons.c
283  x509v3/v3_bitst.c
284  x509v3/v3_conf.c
285  x509v3/v3_cpols.c
286  x509v3/v3_crld.c
287  x509v3/v3_enum.c
288  x509v3/v3_extku.c
289  x509v3/v3_genn.c
290  x509v3/v3_ia5.c
291  x509v3/v3_info.c
292  x509v3/v3_int.c
293  x509v3/v3_lib.c
294  x509v3/v3_ncons.c
295  x509v3/v3_ocsp.c
296  x509v3/v3_pcons.c
297  x509v3/v3_pmaps.c
298  x509v3/v3_prn.c
299  x509v3/v3_purp.c
300  x509v3/v3_skey.c
301  x509v3/v3_utl.c
302
303  $<TARGET_OBJECTS:fipsmodule>
304  ${CRYPTO_FIPS_OBJECTS}
305)
306if(OPENSSL_ASM)
307  target_sources(crypto PRIVATE ${CRYPTO_SOURCES_ASM})
308endif()
309if(OPENSSL_NASM)
310  target_sources(crypto PRIVATE ${CRYPTO_SOURCES_NASM})
311endif()
312target_include_directories(crypto PUBLIC
313  $<BUILD_INTERFACE:${PROJECT_SOURCE_DIR}/include>
314  $<INSTALL_INTERFACE:include>
315)
316install_if_enabled(TARGETS crypto EXPORT OpenSSLTargets ${INSTALL_DESTINATION_DEFAULT})
317set_property(TARGET crypto PROPERTY EXPORT_NAME Crypto)
318
319if(FIPS_SHARED)
320  # Rewrite libcrypto.so to inject the correct module hash value. This assumes
321  # UNIX-style library naming, but we only support FIPS mode on Linux anyway.
322  add_custom_command(
323    TARGET crypto POST_BUILD
324    COMMAND ${GO_EXECUTABLE} run
325    ${CMAKE_CURRENT_SOURCE_DIR}/../util/fipstools/inject_hash/inject_hash.go
326    -o libcrypto.so -in-object libcrypto.so
327    # The DEPENDS argument to a POST_BUILD rule appears to be ignored. Thus
328    # go_executable isn't used (as it doesn't get built), but we list this
329    # dependency anyway in case it starts working in some CMake version.
330    DEPENDS ../util/fipstools/inject_hash/inject_hash.go
331    WORKING_DIRECTORY ${CMAKE_CURRENT_BINARY_DIR}
332  )
333endif()
334
335add_dependencies(crypto boringssl_prefix_symbols)
336
337if(FIPS_DELOCATE OR FIPS_SHARED)
338  add_dependencies(crypto bcm_o_target)
339endif()
340
341set_target_properties(crypto PROPERTIES LINKER_LANGUAGE C)
342
343if(WIN32)
344  target_link_libraries(crypto ws2_32)
345endif()
346
347if(NOT ANDROID)
348  find_package(Threads REQUIRED)
349  target_link_libraries(crypto Threads::Threads)
350endif()
351
352# Every target depends on crypto, so we add libcxx as a dependency here to
353# simplify injecting it everywhere.
354if(USE_CUSTOM_LIBCXX)
355  target_link_libraries(crypto libcxx)
356endif()
357