1# SPDX-License-Identifier: GPL-2.0-only 2# 3# Create a separate FIPS archive that duplicates the modules that are relevant 4# for FIPS 140 certification as builtin objects 5# 6 7sha1-ce-y := sha1-ce-glue.o sha1-ce-core.o 8sha2-ce-y := sha2-ce-glue.o sha2-ce-core.o 9sha512-ce-y := sha512-ce-glue.o sha512-ce-core.o 10ghash-ce-y := ghash-ce-glue.o ghash-ce-core.o 11aes-ce-cipher-y := aes-ce-core.o aes-ce-glue.o 12aes-ce-blk-y := aes-glue-ce.o aes-ce.o 13aes-neon-blk-y := aes-glue-neon.o aes-neon.o 14sha256-arm64-y := sha256-glue.o sha256-core.o 15sha512-arm64-y := sha512-glue.o sha512-core.o 16aes-arm64-y := aes-cipher-core.o aes-cipher-glue.o 17aes-neon-bs-y := aes-neonbs-core.o aes-neonbs-glue.o 18 19crypto-arm64-fips-src := $(srctree)/arch/arm64/crypto/ 20crypto-arm64-fips-modules := sha1-ce.o sha2-ce.o sha512-ce.o ghash-ce.o \ 21 aes-ce-cipher.o aes-ce-blk.o aes-neon-blk.o \ 22 sha256-arm64.o sha512-arm64.o aes-arm64.o \ 23 aes-neon-bs.o 24 25crypto-fips-objs += $(foreach o,$(crypto-arm64-fips-modules),$($(o:.o=-y):.o=-fips-arch.o)) 26 27CFLAGS_aes-glue-ce-fips-arch.o := -DUSE_V8_CRYPTO_EXTENSIONS 28 29$(obj)/aes-glue-%-fips-arch.o: KBUILD_CFLAGS += $(FIPS140_CFLAGS) 30$(obj)/aes-glue-%-fips-arch.o: $(crypto-arm64-fips-src)/aes-glue.c FORCE 31 $(call if_changed_rule,cc_o_c) 32 33$(obj)/%-fips-arch.o: KBUILD_CFLAGS += $(FIPS140_CFLAGS) 34$(obj)/%-fips-arch.o: $(crypto-arm64-fips-src)/%.c FORCE 35 $(call if_changed_rule,cc_o_c) 36 37$(obj)/%-fips-arch.o: $(crypto-arm64-fips-src)/%.S FORCE 38 $(call if_changed_rule,as_o_S) 39 40quiet_cmd_perlasm = PERLASM $@ 41 cmd_perlasm = $(PERL) $(<) void $(@) 42 43$(obj)/%-core.S: $(crypto-arm64-fips-src)/%-armv8.pl 44 $(call cmd,perlasm) 45 46$(obj)/sha256-core.S: $(crypto-arm64-fips-src)/sha512-armv8.pl 47 $(call cmd,perlasm) 48 49clean-files += sha256-core.S sha512-core.S 50 51$(obj)/%-fips-arch.o: $(obj)/%.S FORCE 52 $(call if_changed_rule,as_o_S) 53