1# This version of librecrypto is from LibreSSL 2.include "Makefile.inc" 3 4LIB= private_crypto 5SHLIB_MAJOR= 46 6PRIVATELIB= shpub 7 8SHLIBDIR?= /lib 9WARNS?= 2 10NO_STRICT_ALIASING= 11 12INCS+= aes.h asn1.h asn1t.h bio.h blowfish.h bn.h 13INCS+= buffer.h camellia.h cast.h chacha.h cmac.h comp.h conf.h 14INCS+= conf_api.h crypto.h curve25519.h des.h dh.h dsa.h dso.h 15INCS+= ec.h ecdh.h ecdsa.h err.h evp.h 16INCS+= hkdf.h hmac.h idea.h lhash.h md4.h md5.h modes.h 17INCS+= obj_mac.h objects.h ocsp.h 18INCS+= opensslconf.h opensslfeatures.h opensslv.h ossl_typ.h 19INCS+= pem.h pem2.h pkcs12.h pkcs7.h poly1305.h rand.h rc2.h rc4.h 20INCS+= ripemd.h rsa.h safestack.h sha.h sm3.h sm4.h stack.h 21INCS+= ts.h txt_db.h ui.h whrlpool.h x509.h x509_vfy.h x509v3.h 22INCSDIR= ${INCLUDEDIR}/priv/openssl 23# explicitly disabled: engine.h 24# not needed: ui_compat.h 25 26CFLAGS+= -I${LCRYPTO_SRC}/modes -I${LCRYPTO_SRC}/asn1 27CFLAGS+= -I${LCRYPTO_SRC}/bn -I${LCRYPTO_SRC}/ec -I${LCRYPTO_SRC}/ecdsa 28CFLAGS+= -I${LCRYPTO_SRC}/ecdh -I${LCRYPTO_SRC}/cms 29CFLAGS+= -I${LCRYPTO_SRC}/evp -I${.OBJDIR} 30 31CFLAGS+= -DLIBRESSL_INTERNAL -D__BEGIN_HIDDEN_DECLS= -D__END_HIDDEN_DECLS= 32CFLAGS+= -D__STRICT_ALIGNMENT 33 34# Local sources: 35# Replacement for malloc-wrapper.c, base tools depend on CRYPTO_free() here: 36# contrib/ldns/host2str.c OPENSSL_free(), unused (only if USE_GOST) 37# lib/libfetch/common.c OPENSSL_free() 38# lib/libtelnet/pk.c OPENSSL_free() 39# usr.bin/dc/bcode.c OPENSSL_free(), unused (only if DEBUGGING) 40# usr.bin/newkey/generic.c OPENSSL_free() 41# contrib/wpa_supplicant/src/crypto/tls_openssl.c OPENSSL_malloc() XXX 42# XXX: is this really needed? wouldn't be easier to just use malloc-wrapper.c? 43SRCS_LOCAL= CRYPTO_free.c CRYPTO_malloc.c 44 45# Do not use ASM if -flto for now 46.if ${CFLAGS:M-flto} 47CFLAGS+= -DOPENSSL_NO_ASM 48NOASM_AES= aes_cbc.c aes_core.c 49NOASM_CAMELLIA= camellia.c cmll_cbc.c 50NOASM_RC4= rc4_enc.c rc4_skey.c 51NOASM_WHRLPOOL= wp_block.c 52.else 53FLAGS_GROUPS= asms asm 54 55asms_FLAGS= -DHAVE_GNU_STACK 56asms_FLAGS_FILES=${ASM_X86_64_ELF} 57 58asm_FLAGS= -DOPENSSL_CPUID_OBJ 59asm_FLAGS+= -DAES_ASM -DBSAES_ASM -DVPAES_ASM 60asm_FLAGS+= -DOPENSSL_IA32_SSE2 61asm_FLAGS+= -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m 62asm_FLAGS+= -DGHASH_ASM 63asm_FLAGS+= -DMD5_ASM 64asm_FLAGS+= -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM 65asm_FLAGS+= -DWHIRLPOOL_ASM 66# unavailable: -DRSA_ASM 67asm_FLAGS_FILES= cryptlib.c 68asm_FLAGS_FILES+= aes_core.c e_aes.c e_aes_cbc_hmac_sha1.c 69asm_FLAGS_FILES+= e_aes.c gcm128.c 70asm_FLAGS_FILES+= bn_asm.c bn_exp.c bn_mont.c ec_cvt.c bn_gf2m.c 71asm_FLAGS_FILES+= gcm128.c 72asm_FLAGS_FILES+= md5_dgst.c 73asm_FLAGS_FILES+= sha1dgst.c sha256.c sha512.c 74asm_FLAGS_FILES+= wp_block.c 75 76ASM_X86_64_AES= aes-elf-x86_64.S bsaes-elf-x86_64.S vpaes-elf-x86_64.S \ 77 aesni-elf-x86_64.S aesni-sha1-elf-x86_64.S 78ASM_X86_64_BN= modexp512-elf-x86_64.S mont-elf-x86_64.S \ 79 mont5-elf-x86_64.S gf2m-elf-x86_64.S 80ASM_X86_64_CAMELLIA= cmll-elf-x86_64.S 81ASM_X86_64_MD5= md5-elf-x86_64.S 82ASM_X86_64_MODES= ghash-elf-x86_64.S 83ASM_X86_64_RC4= rc4-elf-x86_64.S rc4-md5-elf-x86_64.S 84ASM_X86_64_SHA= sha1-elf-x86_64.S sha256-elf-x86_64.S sha512-elf-x86_64.S 85ASM_X86_64_WHRLPOOL= wp-elf-x86_64.S 86ASM_X86_64_ELF= ${ASM_X86_64_AES} ${ASM_X86_64_BN} ${ASM_X86_64_CAMELLIA} \ 87 ${ASM_X86_64_MD5} ${ASM_X86_64_MODES} ${ASM_X86_64_RC4} \ 88 ${ASM_X86_64_SHA} ${ASM_X86_64_WHRLPOOL} cpuid-elf-x86_64.S 89NOASM_AES= 90NOASM_CAMELLIA= 91NOASM_RC4= 92NOASM_WHRLPOOL= 93.endif 94 95# Based on vendor libcrypto_la_SOURCES definitions with subdirectories stripped out 96 97SRC_TOP= cpt_err.c cryptlib.c crypto_init.c crypto_lock.c cversion.c \ 98 ex_data.c mem_dbg.c o_init.c o_time.c 99# not needed: mem_clr.c o_str.c malloc-wrapper.c(?) 100SRC_AES= aes_ige.c aes_misc.c aes_wrap.c ${NOASM_AES} 101# not needed: aes_cfb.c aes_ctr.c aes_ecb.c aes_ofb.c 102SRC_ASN1= a_bitstr.c a_bool.c a_d2i_fp.c a_digest.c a_dup.c a_enum.c \ 103 a_i2d_fp.c a_int.c a_mbstr.c a_object.c a_octet.c a_print.c \ 104 a_sign.c a_strex.c a_strnid.c a_time.c \ 105 a_time_tm.c a_type.c a_utf8.c a_verify.c ameth_lib.c \ 106 asn1_err.c asn1_gen.c asn1_lib.c asn1_par.c asn_mime.c \ 107 asn_moid.c asn_pack.c bio_asn1.c bio_ndef.c d2i_pr.c \ 108 evp_asn1.c f_int.c f_string.c i2d_pr.c \ 109 n_pkey.c nsseq.c p5_pbe.c p5_pbev2.c p8_pkey.c \ 110 t_crl.c t_pkey.c t_req.c t_spki.c t_x509.c t_x509a.c \ 111 tasn_dec.c tasn_enc.c tasn_fre.c tasn_new.c tasn_prn.c \ 112 tasn_typ.c tasn_utl.c x_algor.c x_attrib.c x_bignum.c \ 113 x_crl.c x_exten.c x_info.c x_long.c x_name.c x_nx509.c \ 114 x_pkey.c x_pubkey.c x_req.c x_sig.c x_spki.c \ 115 x_val.c x_x509.c x_x509a.c 116# not needed: d2i_pu.c f_enum.c i2d_pu.c t_bitst.c 117SRC_BF= bf_cfb64.c bf_ecb.c bf_enc.c bf_ofb64.c bf_skey.c 118SRC_BIO= b_dump.c b_posix.c b_print.c b_sock.c bf_buff.c bf_nbio.c \ 119 bio_cb.c bio_err.c bio_lib.c bss_acpt.c \ 120 bss_conn.c bss_dgram.c bss_fd.c bss_file.c \ 121 bss_mem.c bss_null.c bss_sock.c 122# not needed: bf_null.c bio_meth.c bss_bio.c bss_log.c 123SRC_BN= bn_add.c bn_asm.c bn_blind.c bn_const.c bn_ctx.c \ 124 bn_div.c bn_err.c bn_exp.c bn_exp2.c bn_gcd.c bn_gf2m.c \ 125 bn_kron.c bn_lib.c bn_mod.c bn_mont.c bn_mul.c \ 126 bn_nist.c bn_prime.c bn_print.c bn_rand.c bn_recp.c \ 127 bn_shift.c bn_sqr.c bn_sqrt.c bn_word.c 128# not needed: bn_depr.c bn_mpi.c bn_x931p.c 129SRC_BUFFER= buf_err.c buffer.c 130# not needed: buf_str.c 131SRC_CAMELLIA= cmll_cfb.c cmll_ctr.c cmll_ecb.c cmll_misc.c \ 132 cmll_ofb.c ${NOASM_CAMELLIA} 133# not needed but included: cmll_ctr.c 134SRC_CAST= c_cfb64.c c_ecb.c c_enc.c c_ofb64.c c_skey.c 135SRC_CHACHA= chacha.c 136SRC_CMAC= cm_ameth.c cm_pmeth.c cmac.c 137SRC_CMS= cms_asn1.c cms_cd.c cms_enc.c cms_err.c cms_io.c cms_pwri.c \ 138 cms_smime.c cms_att.c cms_dd.c cms_env.c cms_ess.c cms_kari.c \ 139 cms_lib.c cms_sd.c 140SRC_COMP= 141# not needed: c_rle.c c_zlib.c comp_err.c comp_lib.c 142SRC_CONF= conf_api.c conf_def.c conf_err.c conf_lib.c \ 143 conf_mall.c conf_mod.c conf_sap.c 144SRC_CURVE25519= curve25519-generic.c curve25519.c 145SRC_DES= cbc_enc.c cfb64ede.c cfb64enc.c cfb_enc.c \ 146 des_enc.c ecb3_enc.c ecb_enc.c \ 147 fcrypt.c fcrypt_b.c ofb64ede.c ofb64enc.c \ 148 rand_key.c set_key.c xcbc_enc.c 149# not needed: cbc_cksm.c ede_cbcm_enc.c enc_read.c enc_writ.c 150# not needed: ofb_enc.c pcbc_enc.c qud_cksm.c str2key.c 151SRC_DH= dh_ameth.c dh_asn1.c dh_check.c dh_err.c dh_gen.c \ 152 dh_key.c dh_lib.c dh_pmeth.c dh_prn.c 153# deprecated: dh_depr.c 154# needed: dh_prn.c (for openssh/kexdhc.c) 155SRC_DSA= dsa_ameth.c dsa_asn1.c dsa_err.c dsa_gen.c \ 156 dsa_key.c dsa_lib.c dsa_ossl.c dsa_pmeth.c dsa_prn.c \ 157 dsa_sign.c dsa_vrf.c dsa_depr.c dsa_meth.c 158# deprecated: dsa_depr.c (needed for contrib/ldns/keys.c) 159# not needed but included: dsa_meth.c 160SRC_DSO= dso_err.c dso_lib.c dso_null.c dso_openssl.c 161# explictly disabled: dso_dlfcn.c 162SRC_EC= ec2_mult.c ec2_oct.c ec2_smpl.c ec_ameth.c ec_asn1.c \ 163 ec_check.c ec_curve.c ec_cvt.c ec_err.c ec_key.c ec_kmeth.c \ 164 ec_lib.c ec_mult.c ec_oct.c ec_pmeth.c ec_print.c \ 165 eck_prn.c ecp_mont.c ecp_nist.c ecp_oct.c ecp_smpl.c 166SRC_ECDH= ecdh_kdf.c ech_err.c ech_key.c ech_lib.c 167SRC_ECDSA= ecs_asn1.c ecs_err.c ecs_lib.c ecs_ossl.c ecs_sign.c ecs_vrf.c 168SRC_ENGINE= # explicitly disabled 169#SRC_ENGINE= eng_all.c eng_cnf.c eng_ctrl.c eng_dyn.c eng_err.c eng_fat.c \ 170# eng_init.c eng_lib.c eng_list.c eng_openssl.c eng_pkey.c \ 171# eng_table.c tb_asnmth.c tb_cipher.c tb_dh.c tb_digest.c \ 172# tb_dsa.c tb_ecdh.c tb_ecdsa.c tb_eckey.c tb_pkmeth.c \ 173# tb_rand.c tb_rsa.c tb_store.c 174SRC_ERR= err.c err_all.c err_prn.c 175SRC_EVP= bio_b64.c bio_enc.c bio_md.c c_all.c digest.c e_aes.c \ 176 e_aes_cbc_hmac_sha1.c e_bf.c e_camellia.c e_cast.c e_chacha.c \ 177 e_chacha20poly1305.c e_des.c e_des3.c e_gost2814789.c \ 178 e_idea.c e_null.c e_rc2.c e_rc4.c e_rc4_hmac_md5.c e_sm4.c \ 179 e_xcbc_d.c encode.c evp_aead.c evp_enc.c evp_err.c evp_key.c \ 180 evp_lib.c evp_pbe.c evp_pkey.c m_dss.c m_dss1.c m_ecdsa.c \ 181 m_gost2814789.c m_gostr341194.c m_md4.c m_md5.c m_md5_sha1.c \ 182 m_ripemd.c m_sha1.c m_sigver.c m_sm3.c m_streebog.c m_wp.c \ 183 names.c p5_crpt.c p5_crpt2.c p_lib.c p_sign.c p_verify.c \ 184 pmeth_fn.c pmeth_gn.c pmeth_lib.c 185# not needed: e_old.c m_null.c p_dec.c p_enc.c p_open.c p_seal.c 186SRC_GOST= gost2814789.c gost89_keywrap.c gost89_params.c gost89imit_ameth.c \ 187 gost89imit_pmeth.c gost_asn1.c gost_err.c gostr341001.c \ 188 gostr341001_ameth.c gostr341001_key.c gostr341001_params.c \ 189 gostr341001_pmeth.c gostr341194.c streebog.c 190SRC_HKDF= hkdf.c 191SRC_HMAC= hm_ameth.c hm_pmeth.c hmac.c 192SRC_IDEA= i_cbc.c i_cfb64.c i_ecb.c i_ofb64.c i_skey.c 193SRC_LHASH= lh_stats.c lhash.c 194SRC_MD4= md4_dgst.c md4_one.c 195SRC_MD5= md5_dgst.c md5_one.c 196SRC_MODES= cbc128.c ccm128.c cfb128.c ctr128.c gcm128.c \ 197 ofb128.c xts128.c 198# not needed: cts128.c 199SRC_OBJECTS= o_names.c obj_dat.c obj_err.c obj_lib.c obj_xref.c 200SRC_OCSP= ocsp_asn.c ocsp_cl.c ocsp_err.c ocsp_ext.c ocsp_ht.c \ 201 ocsp_lib.c ocsp_prn.c ocsp_srv.c ocsp_vfy.c 202SRC_PEM= pem_all.c pem_err.c pem_info.c pem_lib.c pem_oth.c pem_pk8.c \ 203 pem_pkey.c pem_x509.c pem_xaux.c pvkfmt.c 204# not needed: pem_seal.c pem_sign.c 205SRC_PKCS12= p12_add.c p12_asn.c p12_attr.c p12_crpt.c p12_crt.c \ 206 p12_decr.c p12_init.c p12_key.c p12_kiss.c p12_mutl.c \ 207 p12_p8d.c p12_p8e.c p12_utl.c pk12err.c 208# not needed: p12_npas.c 209SRC_PKCS7= pk7_asn1.c pk7_attr.c pk7_doit.c pk7_lib.c \ 210 pk7_mime.c pk7_smime.c pkcs7err.c 211# not needed: bio_pk7.c 212SRC_POLY1305= poly1305.c 213SRC_RAND= rand_err.c rand_lib.c 214# not needed: randfile.c 215SRC_RC2= rc2_cbc.c rc2_ecb.c rc2_skey.c rc2cfb64.c rc2ofb64.c 216SRC_RC4= ${NOASM_RC4} 217SRC_RIPEMD= rmd_dgst.c rmd_one.c 218SRC_RSA= rsa_ameth.c rsa_asn1.c rsa_chk.c rsa_crpt.c rsa_depr.c \ 219 rsa_eay.c rsa_err.c rsa_gen.c rsa_lib.c rsa_meth.c rsa_none.c \ 220 rsa_oaep.c rsa_pk1.c rsa_pmeth.c rsa_prn.c rsa_pss.c \ 221 rsa_sign.c rsa_x931.c 222# deprecated but needed: rsa_depr.c (for openssh/sshkey.c) 223# not needed: rsa_saos.c 224SRC_SHA= sha1_one.c sha1dgst.c sha256.c sha512.c 225SRC_SM3= sm3.c 226SRC_SM4= sm4.c 227SRC_STACK= stack.c 228SRC_TS= ts_asn1.c ts_conf.c ts_err.c ts_lib.c ts_req_print.c \ 229 ts_req_utils.c ts_rsp_print.c ts_rsp_sign.c ts_rsp_utils.c \ 230 ts_rsp_verify.c ts_verify_ctx.c 231SRC_TXT_DB= txt_db.c 232SRC_UI= ui_err.c ui_lib.c ui_openssl.c 233# not needed: ui_util.c 234SRC_WHRLPOOL= wp_dgst.c ${NOASM_WHRLPOOL} 235SRC_X509= by_dir.c by_file.c by_mem.c x509_att.c x509_cmp.c x509_d2.c \ 236 x509_def.c x509_err.c x509_ext.c x509_lu.c x509_obj.c \ 237 x509_r2x.c x509_req.c x509_set.c x509_trs.c x509_txt.c \ 238 x509_v3.c x509_vfy.c x509_vpm.c x509cset.c x509name.c \ 239 x509rset.c x509spki.c x509type.c x_all.c 240# not needed but included: x509_r2x.c 241SRC_X509V3= pcy_cache.c pcy_data.c pcy_lib.c pcy_map.c pcy_node.c \ 242 pcy_tree.c v3_akey.c v3_akeya.c v3_alt.c v3_bcons.c \ 243 v3_bitst.c v3_conf.c v3_cpols.c v3_crld.c v3_enum.c \ 244 v3_extku.c v3_genn.c v3_ia5.c v3_info.c v3_int.c v3_lib.c \ 245 v3_ncons.c v3_ocsp.c v3_pci.c v3_pcia.c v3_pcons.c v3_pku.c \ 246 v3_pmaps.c v3_prn.c v3_purp.c v3_skey.c v3_sxnet.c v3_utl.c \ 247 v3err.c 248 249SRCS= ${ASM_X86_64_ELF} ${SRC_TOP} ${SRC_AES} ${SRC_ASN1} \ 250 ${SRC_BF} ${SRC_BIO} ${SRC_BN} ${SRC_BUFFER} ${SRC_CAMELLIA} \ 251 ${SRC_CAST} ${SRC_CHACHA} ${SRC_CMAC} ${SRC_CMS} ${SRC_COMP} \ 252 ${SRC_CONF} ${SRC_DES} ${SRC_DH} ${SRC_DSA} ${SRC_DSO} \ 253 ${SRC_EC} ${SRC_ECDH} ${SRC_ECDSA} ${SRC_ENGINE} ${SRC_ERR} \ 254 ${SRC_EVP} ${SRC_GOST} ${SRC_HMAC} ${SRC_HKDF} ${SRC_IDEA} \ 255 ${SRC_LHASH} ${SRC_MD4} ${SRC_MD5} ${SRC_MODES} \ 256 ${SRC_OBJECTS} ${SRC_OCSP} ${SRC_PEM} ${SRC_PKCS12} \ 257 ${SRC_PKCS7} ${SRC_POLY1305} ${SRC_RAND} ${SRC_RC2} \ 258 ${SRC_RIPEMD} ${SRC_RSA} ${SRC_SHA} ${SRC_STACK} ${SRC_TS} \ 259 ${SRC_TXT_DB} ${SRC_UI} ${SRC_WHRLPOOL} ${SRC_X509} \ 260 ${SRC_X509V3} ${SRC_CURVE25519} \ 261 ${SRC_RC4} ${SRC_SM3} ${SRC_SM4} 262SRCS+= ${SRCS_LOCAL} 263 264.PATH: ${LCRYPTO_SRC} \ 265 ${LCRYPTO_SRC}/aes \ 266 ${LCRYPTO_SRC}/asn1 \ 267 ${LCRYPTO_SRC}/bf \ 268 ${LCRYPTO_SRC}/bio \ 269 ${LCRYPTO_SRC}/bn \ 270 ${LCRYPTO_SRC}/buffer \ 271 ${LCRYPTO_SRC}/camellia \ 272 ${LCRYPTO_SRC}/cast \ 273 ${LCRYPTO_SRC}/chacha \ 274 ${LCRYPTO_SRC}/cmac \ 275 ${LCRYPTO_SRC}/cms \ 276 ${LCRYPTO_SRC}/conf \ 277 ${LCRYPTO_SRC}/curve25519 \ 278 ${LCRYPTO_SRC}/des \ 279 ${LCRYPTO_SRC}/dh \ 280 ${LCRYPTO_SRC}/dsa \ 281 ${LCRYPTO_SRC}/dso \ 282 ${LCRYPTO_SRC}/ec \ 283 ${LCRYPTO_SRC}/ecdh \ 284 ${LCRYPTO_SRC}/ecdsa \ 285 ${LCRYPTO_SRC}/err \ 286 ${LCRYPTO_SRC}/evp \ 287 ${LCRYPTO_SRC}/gost \ 288 ${LCRYPTO_SRC}/hmac \ 289 ${LCRYPTO_SRC}/hkdf \ 290 ${LCRYPTO_SRC}/idea \ 291 ${LCRYPTO_SRC}/lhash \ 292 ${LCRYPTO_SRC}/md4 \ 293 ${LCRYPTO_SRC}/md5 \ 294 ${LCRYPTO_SRC}/modes \ 295 ${LCRYPTO_SRC}/objects \ 296 ${LCRYPTO_SRC}/ocsp \ 297 ${LCRYPTO_SRC}/pem \ 298 ${LCRYPTO_SRC}/pkcs12 \ 299 ${LCRYPTO_SRC}/pkcs7 \ 300 ${LCRYPTO_SRC}/poly1305 \ 301 ${LCRYPTO_SRC}/rand \ 302 ${LCRYPTO_SRC}/rc2 \ 303 ${LCRYPTO_SRC}/rc4 \ 304 ${LCRYPTO_SRC}/ripemd \ 305 ${LCRYPTO_SRC}/rsa \ 306 ${LCRYPTO_SRC}/sha \ 307 ${LCRYPTO_SRC}/sm3 \ 308 ${LCRYPTO_SRC}/sm4 \ 309 ${LCRYPTO_SRC}/stack \ 310 ${LCRYPTO_SRC}/ts \ 311 ${LCRYPTO_SRC}/txt_db \ 312 ${LCRYPTO_SRC}/ui \ 313 ${LCRYPTO_SRC}/whrlpool \ 314 ${LCRYPTO_SRC}/x509 \ 315 ${LCRYPTO_SRC}/x509v3 \ 316 ${LIBRESSL_SRC}/include/openssl 317 318.include <bsd.lib.mk> 319