1include_directories(../../include) 2 3if(ARCH STREQUAL "x86_64") 4 set( 5 BCM_ASM_SOURCES 6 7 aesni-gcm-x86_64.${ASM_EXT} 8 aesni-x86_64.${ASM_EXT} 9 ghash-ssse3-x86_64.${ASM_EXT} 10 ghash-x86_64.${ASM_EXT} 11 md5-x86_64.${ASM_EXT} 12 p256-x86_64-asm.${ASM_EXT} 13 p256_beeu-x86_64-asm.${ASM_EXT} 14 rdrand-x86_64.${ASM_EXT} 15 rsaz-avx2.${ASM_EXT} 16 sha1-x86_64.${ASM_EXT} 17 sha256-x86_64.${ASM_EXT} 18 sha512-x86_64.${ASM_EXT} 19 vpaes-x86_64.${ASM_EXT} 20 x86_64-mont5.${ASM_EXT} 21 x86_64-mont.${ASM_EXT} 22 ) 23endif() 24 25if(ARCH STREQUAL "x86") 26 set( 27 BCM_ASM_SOURCES 28 29 aesni-x86.${ASM_EXT} 30 bn-586.${ASM_EXT} 31 co-586.${ASM_EXT} 32 ghash-ssse3-x86.${ASM_EXT} 33 ghash-x86.${ASM_EXT} 34 md5-586.${ASM_EXT} 35 sha1-586.${ASM_EXT} 36 sha256-586.${ASM_EXT} 37 sha512-586.${ASM_EXT} 38 vpaes-x86.${ASM_EXT} 39 x86-mont.${ASM_EXT} 40 ) 41endif() 42 43if(ARCH STREQUAL "arm") 44 set( 45 BCM_ASM_SOURCES 46 47 aesv8-armx.${ASM_EXT} 48 armv4-mont.${ASM_EXT} 49 bsaes-armv7.${ASM_EXT} 50 ghash-armv4.${ASM_EXT} 51 ghashv8-armx.${ASM_EXT} 52 sha1-armv4-large.${ASM_EXT} 53 sha256-armv4.${ASM_EXT} 54 sha512-armv4.${ASM_EXT} 55 vpaes-armv7.${ASM_EXT} 56 ) 57endif() 58 59if(ARCH STREQUAL "aarch64") 60 set( 61 BCM_ASM_SOURCES 62 63 aesv8-armx.${ASM_EXT} 64 armv8-mont.${ASM_EXT} 65 ghash-neon-armv8.${ASM_EXT} 66 ghashv8-armx.${ASM_EXT} 67 sha1-armv8.${ASM_EXT} 68 sha256-armv8.${ASM_EXT} 69 sha512-armv8.${ASM_EXT} 70 vpaes-armv8.${ASM_EXT} 71 ) 72endif() 73 74if(ARCH STREQUAL "ppc64le") 75 set( 76 BCM_ASM_SOURCES 77 78 aesp8-ppc.${ASM_EXT} 79 ghashp8-ppc.${ASM_EXT} 80 ) 81endif() 82 83perlasm(aesni-gcm-x86_64.${ASM_EXT} modes/asm/aesni-gcm-x86_64.pl) 84perlasm(aesni-x86_64.${ASM_EXT} aes/asm/aesni-x86_64.pl) 85perlasm(aesni-x86.${ASM_EXT} aes/asm/aesni-x86.pl) 86perlasm(aesp8-ppc.${ASM_EXT} aes/asm/aesp8-ppc.pl) 87perlasm(aesv8-armx.${ASM_EXT} aes/asm/aesv8-armx.pl) 88perlasm(armv4-mont.${ASM_EXT} bn/asm/armv4-mont.pl) 89perlasm(armv8-mont.${ASM_EXT} bn/asm/armv8-mont.pl) 90perlasm(bn-586.${ASM_EXT} bn/asm/bn-586.pl) 91perlasm(bsaes-armv7.${ASM_EXT} aes/asm/bsaes-armv7.pl) 92perlasm(co-586.${ASM_EXT} bn/asm/co-586.pl) 93perlasm(ghash-armv4.${ASM_EXT} modes/asm/ghash-armv4.pl) 94perlasm(ghashp8-ppc.${ASM_EXT} modes/asm/ghashp8-ppc.pl) 95perlasm(ghashv8-armx.${ASM_EXT} modes/asm/ghashv8-armx.pl) 96perlasm(ghash-neon-armv8.${ASM_EXT} modes/asm/ghash-neon-armv8.pl) 97perlasm(ghash-ssse3-x86_64.${ASM_EXT} modes/asm/ghash-ssse3-x86_64.pl) 98perlasm(ghash-ssse3-x86.${ASM_EXT} modes/asm/ghash-ssse3-x86.pl) 99perlasm(ghash-x86_64.${ASM_EXT} modes/asm/ghash-x86_64.pl) 100perlasm(ghash-x86.${ASM_EXT} modes/asm/ghash-x86.pl) 101perlasm(md5-586.${ASM_EXT} md5/asm/md5-586.pl) 102perlasm(md5-x86_64.${ASM_EXT} md5/asm/md5-x86_64.pl) 103perlasm(p256-x86_64-asm.${ASM_EXT} ec/asm/p256-x86_64-asm.pl) 104perlasm(p256_beeu-x86_64-asm.${ASM_EXT} ec/asm/p256_beeu-x86_64-asm.pl) 105perlasm(rdrand-x86_64.${ASM_EXT} rand/asm/rdrand-x86_64.pl) 106perlasm(rsaz-avx2.${ASM_EXT} bn/asm/rsaz-avx2.pl) 107perlasm(sha1-586.${ASM_EXT} sha/asm/sha1-586.pl) 108perlasm(sha1-armv4-large.${ASM_EXT} sha/asm/sha1-armv4-large.pl) 109perlasm(sha1-armv8.${ASM_EXT} sha/asm/sha1-armv8.pl) 110perlasm(sha1-x86_64.${ASM_EXT} sha/asm/sha1-x86_64.pl) 111perlasm(sha256-586.${ASM_EXT} sha/asm/sha256-586.pl) 112perlasm(sha256-armv4.${ASM_EXT} sha/asm/sha256-armv4.pl) 113perlasm(sha256-armv8.${ASM_EXT} sha/asm/sha512-armv8.pl) 114perlasm(sha256-x86_64.${ASM_EXT} sha/asm/sha512-x86_64.pl) 115perlasm(sha512-586.${ASM_EXT} sha/asm/sha512-586.pl) 116perlasm(sha512-armv4.${ASM_EXT} sha/asm/sha512-armv4.pl) 117perlasm(sha512-armv8.${ASM_EXT} sha/asm/sha512-armv8.pl) 118perlasm(sha512-x86_64.${ASM_EXT} sha/asm/sha512-x86_64.pl) 119perlasm(vpaes-armv7.${ASM_EXT} aes/asm/vpaes-armv7.pl) 120perlasm(vpaes-armv8.${ASM_EXT} aes/asm/vpaes-armv8.pl) 121perlasm(vpaes-x86_64.${ASM_EXT} aes/asm/vpaes-x86_64.pl) 122perlasm(vpaes-x86.${ASM_EXT} aes/asm/vpaes-x86.pl) 123perlasm(x86_64-mont5.${ASM_EXT} bn/asm/x86_64-mont5.pl) 124perlasm(x86_64-mont.${ASM_EXT} bn/asm/x86_64-mont.pl) 125perlasm(x86-mont.${ASM_EXT} bn/asm/x86-mont.pl) 126 127function(cpreprocess dest src) 128 set(TARGET "") 129 if(CMAKE_ASM_COMPILER_TARGET) 130 set(TARGET "--target=${CMAKE_ASM_COMPILER_TARGET}") 131 endif() 132 133 add_custom_command( 134 OUTPUT ${dest} 135 COMMAND ${CMAKE_ASM_COMPILER} ${TARGET} $CMAKE_ASM_FLAGS -E ${src} -I${PROJECT_SOURCE_DIR}/include > ${dest} 136 DEPENDS 137 ${src} 138 ${PROJECT_SOURCE_DIR}/include/openssl/arm_arch.h 139 WORKING_DIRECTORY . 140 ) 141endfunction() 142 143if(FIPS_DELOCATE) 144 if(FIPS_SHARED) 145 error("Can't set both delocate and shared mode for FIPS build") 146 endif() 147 148 if(OPENSSL_NO_ASM) 149 # If OPENSSL_NO_ASM was defined then ASM will not have been enabled, but in 150 # FIPS mode we have to have it because the module build requires going via 151 # textual assembly. 152 enable_language(ASM) 153 endif() 154 155 add_library( 156 bcm_c_generated_asm 157 158 STATIC 159 160 bcm.c 161 ) 162 163 if(ARCH STREQUAL "aarch64") 164 # Perlasm output on Aarch64 needs to pass through the C preprocessor before 165 # it can be parsed by delocate. 166 foreach(asm ${BCM_ASM_SOURCES}) 167 cpreprocess(${asm}.s ${asm}) 168 list(APPEND BCM_ASM_PROCESSED_SOURCES "${asm}.s") 169 endforeach() 170 else() 171 # No preprocessing is required on other platforms. 172 set(BCM_ASM_PROCESSED_SOURCES ${BCM_ASM_SOURCES}) 173 endif() 174 175 add_dependencies(bcm_c_generated_asm global_target) 176 177 set_target_properties(bcm_c_generated_asm PROPERTIES COMPILE_OPTIONS "-S") 178 set_target_properties(bcm_c_generated_asm PROPERTIES POSITION_INDEPENDENT_CODE ON) 179 180 go_executable(delocate boringssl.googlesource.com/boringssl/util/fipstools/delocate) 181 add_custom_command( 182 OUTPUT bcm-delocated.S 183 COMMAND ./delocate -a $<TARGET_FILE:bcm_c_generated_asm> -o bcm-delocated.S ${BCM_ASM_PROCESSED_SOURCES} 184 DEPENDS bcm_c_generated_asm delocate ${BCM_ASM_PROCESSED_SOURCES} 185 WORKING_DIRECTORY ${CMAKE_CURRENT_BINARY_DIR} 186 ) 187 188 add_library( 189 bcm_hashunset 190 191 STATIC 192 193 bcm-delocated.S 194 ) 195 196 add_dependencies(bcm_hashunset global_target) 197 198 set_target_properties(bcm_hashunset PROPERTIES POSITION_INDEPENDENT_CODE ON) 199 set_target_properties(bcm_hashunset PROPERTIES LINKER_LANGUAGE C) 200 201 set(MAYBE_INJECT_HASH_SHA256_FLAG "") 202 # If building with OPENSSL_NO_ASM then ARCH will be "generic", but we still 203 # need to use SHA-256. Since this only matters for FIPS, we only need to 204 # worry about the Linux spelling of AArch64. 205 if (ARCH STREQUAL "aarch64" OR CMAKE_SYSTEM_PROCESSOR STREQUAL "aarch64") 206 set(MAYBE_INJECT_HASH_SHA256_FLAG "-sha256") 207 endif() 208 209 go_executable(inject_hash 210 boringssl.googlesource.com/boringssl/util/fipstools/inject_hash) 211 add_custom_command( 212 OUTPUT bcm.o 213 COMMAND ./inject_hash -o bcm.o -in-archive $<TARGET_FILE:bcm_hashunset> ${MAYBE_INJECT_HASH_SHA256_FLAG} 214 DEPENDS bcm_hashunset inject_hash 215 WORKING_DIRECTORY ${CMAKE_CURRENT_BINARY_DIR} 216 ) 217 218 # The outputs of add_custom_command cannot be referenced outside of the 219 # CMakeLists.txt that defines it. Thus we have to wrap bcm.o in a custom target 220 # so that crypto can depend on it. 221 add_custom_target(bcm_o_target DEPENDS bcm.o) 222 223 add_library( 224 fipsmodule 225 226 OBJECT 227 228 fips_shared_support.c 229 ) 230 231 add_dependencies(fipsmodule global_target) 232 233 set_target_properties(fipsmodule PROPERTIES LINKER_LANGUAGE C) 234elseif(FIPS_SHARED) 235 if(NOT BUILD_SHARED_LIBS) 236 error("FIPS_SHARED set but not BUILD_SHARED_LIBS") 237 endif() 238 239 add_library( 240 fipsmodule 241 242 OBJECT 243 244 fips_shared_support.c 245 ) 246 247 add_dependencies(fipsmodule global_target) 248 249 add_library( 250 bcm_library 251 252 STATIC 253 254 bcm.c 255 256 ${BCM_ASM_SOURCES} 257 ) 258 259 add_dependencies(bcm_library global_target) 260 261 add_custom_command( 262 OUTPUT bcm.o 263 COMMAND ${CMAKE_LINKER} -r -T ${CMAKE_CURRENT_SOURCE_DIR}/fips_shared.lds -o bcm.o --whole-archive $<TARGET_FILE:bcm_library> 264 DEPENDS bcm_library fips_shared.lds 265 WORKING_DIRECTORY ${CMAKE_CURRENT_BINARY_DIR} 266 ) 267 268 add_custom_target(bcm_o_target DEPENDS bcm.o) 269else() 270 add_library( 271 fipsmodule 272 273 OBJECT 274 275 bcm.c 276 fips_shared_support.c 277 278 ${BCM_ASM_SOURCES} 279 ) 280 281 add_dependencies(fipsmodule global_target) 282endif() 283