backends.mk

#
# Copyright (C) 2017 - 2024, Stephan Mueller <smueller@chronox.de>
#
############### CONFIGURE BACKEND ACVP2CAVS ##################

ifeq (acvp2cavs,$(firstword $(MAKECMDGOALS)))
	C_SRCS += backends/backend_acvp2cavs.c
endif

############### CONFIGURE BACKEND CAVS2ACVP ##################

ifeq (cavs2acvp,$(firstword $(MAKECMDGOALS)))
	C_SRCS += backends/backend_cavs2acvp.c
endif

################## CONFIGURE BACKEND KCAPI ###################

ifeq (kcapi,$(firstword $(MAKECMDGOALS)))
	C_SRCS += backends/backend_kcapi.c
	LIBRARIES += gcrypt gpg-error
endif

################## CONFIGURE BACKEND KCAPI_LRNG ###################

ifeq (kcapi_lrng,$(firstword $(MAKECMDGOALS)))
	C_SRCS += backends/backend_kcapi_lrng.c
endif

################## CONFIGURE BACKEND LIBKCAPI ################

ifeq (libkcapi,$(firstword $(MAKECMDGOALS)))
	C_SRCS += backends/backend_libkcapi.c
	C_SRCS += backends/backend_libkcapi_rsakeys.c

	# Enable RSA support
	CFLAGS += -DLIBKCAPI_RSA_ENABLED

	# Enable ECDSA support
	CFLAGS += -DLIBKCAPI_ECDSA_ENABLED

	# Enable ECDH support
	CFLAGS += -DLIBKCAPI_ECDH_ENABLED

	# Enable DRBG support
	CFLAGS += -DLIBKCAPI_DRBG_ENABLED

	LIBRARIES += kcapi
endif

################## CONFIGURE BACKEND LIBGCRYPT ################

ifeq (libgcrypt,$(firstword $(MAKECMDGOALS)))
	C_SRCS += backends/backend_libgcrypt.c
#	CFLAGS += #-I/home/$(shell echo $$USER)/hacking/sources/libs/include
#	LDFLAGS += -L/home/$(shell echo $$USER)/hacking/sources-nosync/libs/lib
	LIBRARIES += gcrypt gpg-error
endif

################## CONFIGURE BACKEND NETTLE ################

ifeq (nettle,$(firstword $(MAKECMDGOALS)))
	C_SRCS += backends/backend_nettle.c
	LIBRARIES += nettle
endif

################## CONFIGURE BACKEND GNUTLS ################
GNUTLS_INTERNAL_HEADERS = backend_interfaces/gnutls/

ifeq (gnutls,$(firstword $(MAKECMDGOALS)))
	C_SRCS += backends/backend_gnutls.c
	INCLUDE_DIRS += $(GNUTLS_INTERNAL_HEADERS)
	LIBRARIES += gnutls hogweed nettle gmp
endif

################## CONFIGURE BACKEND OPENSSL ################

ifeq (openssl,$(firstword $(MAKECMDGOALS)))
	# Detect Openssl-3
	STR := $(shell openssl version)
	SUB := $(shell echo "OpenSSL 3")
	ifneq (,$(findstring $(SUB),$(STR)))
		C_SRCS += backends/backend_openssl3.c
	else
		C_SRCS += backends/backend_openssl.c
	endif

	C_SRCS += backends/backend_openssl_common.c
	LIBRARIES += crypto ssl
endif

################## CONFIGURE SHARED LIBRARY ################

ifeq (shlib,$(firstword $(MAKECMDGOALS)))
    CFLAGS += -fPIC -shared
endif

################## CONFIGURE SHARED STATIC LIBRARY ################

ifeq (shlib_static,$(firstword $(MAKECMDGOALS)))
    CFLAGS += -static
    CFLAGS += -DNO_MAIN -DNO_COLORS
endif

################## CONFIGURE BACKEND CommonCrypto ################

ifeq (commoncrypto,$(firstword $(MAKECMDGOALS)))
	INCLUDE_DIRS += backend_interfaces/commoncrypto
	C_SRCS += backends/backend_commoncrypto.c
endif

######################################################

## CONFIGURE BACKEND CoreCrypto using the CoreCrypto cavs_dispatch interface ##

ifeq (corecrypto-dispatch,$(firstword $(MAKECMDGOALS)))
	C_SRCS += backends/backend_corecrypto_dispatch.c
	CFLAGS += -Wno-gnu-union-cast -Wno-ignored-qualifiers -Wno-pedantic -Wno-strict-aliasing
	INCLUDE_DIRS += /Users/sm/Desktop/acvp/corecrypto/DerivedData/corecrypto/Build/Products/Debug/usr/local/include \
			../corecrypto \
			backend_interfaces/corecrypto \
			/home/sm/hacking/sources-nosync/apple/corecrypto-ios11
endif

######################################################

################## CONFIGURE BACKEND CoreCrypto ################

ifeq (corecrypto,$(firstword $(MAKECMDGOALS)))
	C_SRCS += backends/backend_corecrypto.c
	CFLAGS += -Wno-gnu-union-cast -Wno-ignored-qualifiers -Wno-pedantic
	# TODO: The include pointer into ccmode is only needed to access
	# the CTR VNG implementation - do we want to claim it?
	INCLUDE_DIRS += /Users/sm/Desktop/acvp/corecrypto/DerivedData/corecrypto/Build/Products/Debug/usr/local/include \
			../corecrypto/ccmode/corecrypto/ \
			../corecrypto/cc/
endif

######################################################

################## CONFIGURE BACKEND OpenSSH ################

ifeq (openssh,$(firstword $(MAKECMDGOALS)))
	C_SRCS += backends/backend_openssh.c
endif

######################################################

################## CONFIGURE BACKEND Strongswan ################

ifeq (strongswan,$(firstword $(MAKECMDGOALS)))
	C_SRCS += backends/backend_strongswan.c
endif

######################################################

################## CONFIGURE BACKEND Libreswan ################

ifeq (libreswan,$(firstword $(MAKECMDGOALS)))
	C_SRCS += backends/backend_libreswan.c
endif

######################################################

################## CONFIGURE BACKEND NSS ################

ifeq (nss,$(firstword $(MAKECMDGOALS)))
	C_SRCS += backends/backend_pkcs11.c backends/backend_nss.c $(wildcard backend_interfaces/pkcs11/*.c)
	# This is needed for PKCS 11 backend
	LIBRARIES += dl
	INCLUDE_DIRS += /usr/include/nss3			\
			/usr/include/nspr4			\
			backend_interfaces/pkcs11
	# This is for the NSS backend
	LIBRARIES += freebl3 nss3 softokn3 plc4 nspr4 nssutil3
endif

######################################################

################## CONFIGURE BACKEND ACVPProxy ########

ifeq (acvpproxy,$(firstword $(MAKECMDGOALS)))
	C_SRCS += backends/backend_acvpproxy.c ../acvpproxy/lib/hash/sha256.c ../acvpproxy/lib/hash/sha512.c ../acvpproxy/lib/hash/hmac.c ../acvpproxy/lib/hash/sha3.c
	INCLUDE_DIRS += ../acvpproxy/lib/hash
endif

################## CONFIGURE BACKEND libsodium ########

ifeq (libsodium,$(firstword $(MAKECMDGOALS)))
	C_SRCS += backends/backend_libsodium.c
	CFLAGS += -DSODIUM
	LIBRARIES += sodium
endif

################## CONFIGURE BACKEND libnacl ########

ifeq (libnacl,$(firstword $(MAKECMDGOALS)))
	C_SRCS += backends/backend_libsodium.c
	LIBRARIES += nacl
endif

################## CONFIGURE BACKEND BoringSSL ########

ifeq (boringssl,$(firstword $(MAKECMDGOALS)))
	C_SRCS += backends/backend_boringssl.c
	CFLAGS += -std=gnu11
	LIBRARIES += crypto
	# Comment out if decrepit ciphers are not available.
	CFLAGS += -DBORINGSSL_DECREPIT_ENABLED
	LIBRARIES += decrepit
endif

################## CONFIGURE BACKEND BoringSSL for Apple ########

BORINGSSL_LIB_A := /home/sm/hacking/repos/boringssl/build/crypto/libcrypto.a

ifeq (apple-boringssl,$(firstword $(MAKECMDGOALS)))
	C_SRCS += backends/backend_apple_boringssl.c
	CFLAGS :=-Wextra -Wall -O2 -Wno-long-long -Werror -DACVP_PARSER_IUT=\"$(firstword $(MAKECMDGOALS))\" -Wno-gnu-zero-variadic-macro-arguments -D_FORTIFY_SOURCE=2 -fstack-protector-strong -fwrapv --param ssp-buffer-size=4
	INCLUDE_DIRS += /home/sm/hacking/repos/boringssl/include	\
			/home/sm/hacking/repos/boringssl
	LDFLAGS :=-Wl,-z,relro,-z,now
	LDFLAGS += $(BORINGSSL_LIB_A) -lpthread
endif

################## CONFIGURE BACKEND Botan ########

ifeq (botan,$(firstword $(MAKECMDGOALS)))
	C_SRCS += backends/backend_botan.c
	INCLUDE_DIRS += /usr/include/botan-2
	LIBRARIES += botan-2
endif

################## CONFIGURE BACKEND BouncyCastle ########

ifeq (bouncycastle,$(firstword $(MAKECMDGOALS)))
	BC_DEVEL_DIR := /usr/lib/jvm/default
	BC_JAVAC := $(BC_DEVEL_DIR)/bin/javac
	BC_BACKEND_DIR := ${CURDIR}/backend_interfaces/bouncycastle
	BC_LIB_FILE := bc-fips-1.0.2.3.jar

	CFLAGS += -Wno-pedantic -DBC_BACKEND_DIR=\"$(BC_BACKEND_DIR)\" -DBC_LIB_FILE=\"$(BC_LIB_FILE)\"
	C_SRCS += backends/backend_bouncycastle.c
	INCLUDE_DIRS += $(BC_DEVEL_DIR)/include $(BC_DEVEL_DIR)/include/linux
	LIBRARY_DIRS += $(BC_DEVEL_DIR)/lib/server
	LIBRARY_DIRS += $(BC_DEVEL_DIR)/jre/lib/amd64/server
	LIBRARIES += jvm
endif

################## CONFIGURE BACKEND libica ########

ifeq (libica,$(firstword $(MAKECMDGOALS)))
	CFLAGS += -Wno-strict-aliasing
	C_SRCS += backends/backend_libica.c
	LIBRARIES += ica crypto
	INCLUDE_DIRS += backend_interfaces/libica/
	INCLUDE_DIRS += backend_interfaces/cpacf/
endif

################## CONFIGURE BACKEND CPACF ########

ifeq (cpacf,$(firstword $(MAKECMDGOALS)))
	CFLAGS += -Wno-strict-aliasing
	C_SRCS += backends/backend_cpacf.c
	C_SRCS += backend_interfaces/cpacf/sha_common.c
	INCLUDE_DIRS += backend_interfaces/cpacf/
endif

################## CONFIGURE BACKEND LRNG ########

ifeq (lrng,$(firstword $(MAKECMDGOALS)))
	C_SRCS += backends/backend_lrng.c
endif

################## CONFIGURE BACKEND Jitter RNG ##

ifeq (jent,$(firstword $(MAKECMDGOALS)))
	JENT_SRC := /home/sm/hacking/sources/jitterentropy/jitterentropy-library
	CFLAGS += -O0 -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=0 -std=gnu11
	C_SRCS += backends/backend_jent.c
	INCLUDE_DIRS += $(JENT_SRC) $(JENT_SRC)/src
	LIBRARIES += pthread
endif

################## CONFIGURE BACKEND Leancrypto ################

ifeq (leancrypto,$(firstword $(MAKECMDGOALS)))
	C_SRCS += backends/backend_leancrypto.c
	INCLUDE_DIRS += backend_interfaces/leancrypto/
	ifeq ($(uname -m),x86_64)
		CFLAGS += -mavx2 -mbmi2 -mpopcnt
	endif
	LIBRARIES += leancrypto
endif

################## CONFIGURE BACKEND ippcrypto ################

ifeq (ippcrypto,$(firstword $(MAKECMDGOALS)))
	C_SRCS += backends/backend_ippcrypto.c
	INCLUDE_DIRS += $(IPPCRYPTOROOT)/include
	INCLUDE_DIRS += $(OPENSSL_ROOT_DIR)/include/

	ifeq ($(uname -m),x86_64)
		CFLAGS += -mavx2 -mbmi2 -mpopcnt -g
	endif
	CFLAGS += -Wno-uninitialized -DIPPCP_PREVIEW_LMS

	# Static link for lnx
	ifeq ($(UNAME_S),Linux)
		LDFLAGS += $(IPPCRYPTOROOT)/lib/libippcp.a
		LIBRARIES += crypto ssl
	else
		LDFLAGS += -L $(IPPCRYPTOROOT)/lib/ -L $(OPENSSL_ROOT_DIR)/lib/
		LIBRARIES += crypto ssl ippcp
	endif
	LDFLAGS += -L $(OPENSSL_ROOT_DIR)/lib64/
	LD_LIBRARY_PATH += $(OPENSSL_ROOT_DIR)/lib64/

endif

################## CONFIGURE BACKEND cryptomb ################

ifeq (cryptomb,$(firstword $(MAKECMDGOALS)))
	C_SRCS += backends/backend_cryptomb.c
	INCLUDE_DIRS += $(IPPCRYPTOROOT)/include
	INCLUDE_DIRS += $(OPENSSL_ROOT_DIR)/include/

	ifeq ($(uname -m),x86_64)
		CFLAGS += -mavx2 -mbmi2 -mpopcnt -g
	endif
	CFLAGS += -Wno-incompatible-pointer-types

	ifeq ($(UNAME_S),Linux)
		LDFLAGS += $(IPPCRYPTOROOT)/lib/libcrypto_mb.a $(IPPCRYPTOROOT)/lib/libippcp.a
		LIBRARIES += crypto ssl
	else
		LDFLAGS += -L $(IPPCRYPTOROOT)/lib/ -L $(OPENSSL_ROOT_DIR)/lib/
		LIBRARIES += crypto ssl ippcp crypto_mb
	endif

	LDFLAGS += -L $(OPENSSL_ROOT_DIR)/lib64/ -L $(OPENSSL_ROOT_DIR)/bin/
	LD_LIBRARY_PATH += $(OPENSSL_ROOT_DIR)/lib64/
endif

################## CONFIGURE BACKEND cryptombssl ################

ifeq (cryptombssl,$(firstword $(MAKECMDGOALS)))
	C_SRCS += backends/backend_cryptombssl.c
	INCLUDE_DIRS += $(IPPCRYPTOROOT)/include
	INCLUDE_DIRS += $(OPENSSL_ROOT_DIR)/include/

	ifeq ($(uname -m),x86_64)
		CFLAGS += -mavx2 -mbmi2 -mpopcnt -g
	endif
	CFLAGS += -Wno-unused-function -Wno-incompatible-pointer-types

	ifeq ($(UNAME_S),Linux)
		LDFLAGS += $(IPPCRYPTOROOT)/lib/libcrypto_mb.a $(IPPCRYPTOROOT)/lib/libippcp.a
		LIBRARIES += crypto ssl
	else
	    LDFLAGS += -L $(IPPCRYPTOROOT)/lib/ -L $(OPENSSL_ROOT_DIR)/lib/
		LIBRARIES += crypto ssl ippcp crypto_mb
	endif

	LDFLAGS += -L $(OPENSSL_ROOT_DIR)/lib64/ -L $(OPENSSL_ROOT_DIR)/bin/
	LD_LIBRARY_PATH += $(OPENSSL_ROOT_DIR)/lib64/
endif

################## CONFIGURE BACKEND PROTOBUF ########

PROTOFILE += sha.proto sym.proto aead.proto cshake.proto hmac.proto kmac.proto
PROTOFILE += rsa.proto drbg.proto ecdh.proto ecdsa.proto kbkdf.proto pbkdf.proto
PROTOFILE += kda_hkdf.proto ml-dsa.proto ml-kem.proto eddsa.proto slh-dsa.proto
PROTOFILE_C += $(foreach profile,$(PROTOFILE),$(PROTODEFDIR)/$(profile:.proto=.pb-c.c))
PROTODEFDIR := backend_interfaces/protobuf/pb

ifeq (protobuf,$(firstword $(MAKECMDGOALS)))
	C_SRCS += backends/backend_protobuf.c
	C_SRCS += backend_interfaces/protobuf/src/protobuf-c.c
	C_SRCS += $(PROTOFILE_C)
	INCLUDE_DIRS += ./ backend_interfaces/protobuf $(PROTODEFDIR)
endif

######## CONFIGURE BACKEND mbedtls-psa ########################################
ifeq (mbedtls-psa,$(firstword $(MAKECMDGOALS)))
	C_SRCS += backends/backend_mbedtls.c
	LIBRARIES += mbedcrypto
endif
###########################################################

######## CONFIGURE BACKEND mbedtls ############################################
ifeq (mbedtls,$(firstword $(MAKECMDGOALS)))
	C_SRCS += backends/backend_mbedtls.c
	LIBRARIES += mbedcrypto
	INCLUDE_DIRS += /home/sm/hacking/libs/include
	LIBRARY_DIRS += /home/sm/hacking/libs/lib
	# Stip unneeded C files - as the proto_*.c files are loaded with the
	# constructor, the dead-code-stripping logic does not remove it.
	# The protobuf parser code is dead-code-stripped.
	C_SRCS := $(filter-out $(wildcard $(PROTODIR)/*ml-kem*.c), $(C_SRCS))
	C_SRCS := $(filter-out $(wildcard $(PROTODIR)/*ml-dsa*.c), $(C_SRCS))
	C_SRCS := $(filter-out $(wildcard $(PROTODIR)/*slh-dsa*.c), $(C_SRCS))
	C_SRCS := $(filter-out $(wildcard $(PROTODIR)/*pbkdf*.c), $(C_SRCS))
	C_SRCS := $(filter-out $(wildcard $(PROTODIR)/*sym*.c), $(C_SRCS))
	C_SRCS := $(filter-out $(wildcard $(PROTODIR)/*kmac*.c), $(C_SRCS))
	C_SRCS := $(filter-out $(wildcard $(PROTODIR)/*kbkdf*.c), $(C_SRCS))
	C_SRCS := $(filter-out $(wildcard $(PROTODIR)/*hkdf*.c), $(C_SRCS))
	C_SRCS := $(filter-out $(wildcard $(PROTODIR)/*eddsa*.c), $(C_SRCS))
	C_SRCS := $(filter-out $(wildcard $(PROTODIR)/*cshake*.c), $(C_SRCS))

endif
###############################################################################


######################################################
######################################################
######################################################

C_OBJS := ${C_SRCS:.c=.o}
CXX_OBJS := ${CXX_SRCS:.cpp=.o}
OBJS := $(C_OBJS) $(CXX_OBJS)

.PHONY: clean distclean acvp2cavs cavs2acvp kcapi kcapi_lrng libkcapi libgcrypt nettle gnutls openssl nss commoncrypto corecrypto openssh strongswan libreswan acvpproxy libsodium libnacl boringssl botan bouncycastle libica cpacf lrng jent leancrypto mbedtls ippcrypto cryptomb cryptombssl protobuf shlib shlib_static default files

default:
	$(error "Usage: make <acvp2cavs|cavs2acvp|kcapi|kcapi_lrng|libkcapi|libgcrypt|nettle|gnutls|openssl|nss|commoncrypto|corecrypto-dispatch|corecypto|openssh|strongswan|libreswan|acvpproxy|libsodium|libnacl|boringssl|apple-boringssl|botan|bouncycastle|libica|cpacf|lrng|jent|leancrypto|mbedtls|mbedtls-psa|ippcrypto|cryptomb|cryptombssl|protobuf|shlib|shlib_static>")

acvp2cavs: $(NAME)
cavs2acvp: $(NAME)
kcapi: $(NAME)
kcapi_lrng: $(NAME)
libkcapi: $(NAME)
libgcrypt: $(NAME)
nettle: $(NAME)
gnutls: $(NAME)
openssl: $(NAME)
nss: $(NAME)
commoncrypto: $(NAME)
corecrypto-dispatch: $(NAME)
corecrypto: $(NAME)
openssh: $(NAME)
strongswan: $(NAME)
libreswan: $(NAME)
acvpproxy: $(NAME)
libsodium: $(NAME)
libnacl: $(NAME)
boringssl: $(NAME)
apple-boringssl: $(NAME)
botan: $(NAME)
libica: $(NAME)
cpacf: $(NAME)
lrng: $(NAME)
jent: $(NAME)
leancrypto: $(NAME)
mbedtls: $(NAME)
mbedtls-psa: $(NAME)
ippcrypto: $(NAME)
cryptomb: $(NAME)
cryptombssl: $(NAME)
protobuf: $(PROTOFILE_C) $(NAME)
shlib: $(SHLIB_NAME)
shlib_static: $(SHLIB_NAME_STATIC)
bouncycastle: $(NAME)
	$(BC_JAVAC) -cp $(BC_LIB_FILE):$(BC_BACKEND_DIR)/ $(BC_BACKEND_DIR)/bc_acvp.java

%.pb-c.c : %.proto
	protoc-c --c_out . $<

$(SHLIB_NAME_STATIC): $(OBJS)
	ar -crs $(SHLIB_NAME).a $(OBJS)
	rm $(OBJS)

$(SHLIB_NAME): $(OBJS)
	$(CC) $(OBJS) -o $(SHLIB_NAME).so $(LDFLAGS)
	rm $(OBJS)

$(OBJS): | files

$(GNUTLS_NETTLE_SRCS):
	@echo "Checked $(GNUTLS_NETTLE_SRCS)"
	@echo "GnuTLS's Nettle sources not found in gnutls_src directory"
	@echo "Copy or symlink configured sources in gnutls_src"
	@echo "Example: ln -s $(HOME)/rpmbuild/BUILD/gnutls-3.6.8 gnutls_src"
	@false

$(GNUTLS_CONFIG_SRCS):
	@echo "Checked $(GNUTLS_CONFIG_SRCS)"
	@echo "GNuTLS's source are not configured"
	@echo "Please run $(GNUTLS_SRCS)/configure with the appropriate flags"
	@false