| # Copyright (C) 2015 The Android Open Source Project. |
| # |
| # Permission to use, copy, modify, and/or distribute this software for any |
| # purpose with or without fee is hereby granted, provided that the above |
| # copyright notice and this permission notice appear in all copies. |
| # |
| # THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES |
| # WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF |
| # MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY |
| # SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES |
| # WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION |
| # OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN |
| # CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. |
| |
| # This file is not used in the Android build process! It's used only by Trusty. |
| |
| |
| LOCAL_DIR := $(GET_LOCAL_DIR) |
| LOCAL_PATH := $(GET_LOCAL_DIR) |
| |
| MODULE := $(LOCAL_DIR) |
| |
| TARGET_ARCH := $(ARCH) |
| TARGET_2ND_ARCH := $(ARCH) |
| |
| # Reset local variables |
| LOCAL_CFLAGS := |
| LOCAL_C_INCLUDES := |
| LOCAL_SRC_FILES := |
| LOCAL_SRC_FILES_$(TARGET_ARCH) := |
| LOCAL_SRC_FILES_$(TARGET_2ND_ARCH) := |
| LOCAL_CFLAGS_$(TARGET_ARCH) := |
| LOCAL_CFLAGS_$(TARGET_2ND_ARCH) := |
| LOCAL_ADDITIONAL_DEPENDENCIES := |
| |
| # get target_c_flags, target_c_includes, target_src_files |
| MODULE_SRCDEPS += $(LOCAL_DIR)/crypto-sources.mk |
| include $(LOCAL_DIR)/crypto-sources.mk |
| |
| # Some files in BoringSSL use OS functions that aren't supported by Trusty. The |
| # easiest way to deal with them is not to include them. As long as no path to |
| # the functions defined in these files exists, the linker will be happy. If |
| # such a path is created, it'll be a link-time error and something more complex |
| # may need to be considered. |
| LOCAL_SRC_FILES := $(filter-out src/crypto/bio/connect.c,$(LOCAL_SRC_FILES)) |
| LOCAL_SRC_FILES := $(filter-out src/crypto/bio/fd.c,$(LOCAL_SRC_FILES)) |
| LOCAL_SRC_FILES := $(filter-out src/crypto/bio/file.c,$(LOCAL_SRC_FILES)) |
| LOCAL_SRC_FILES := $(filter-out src/crypto/bio/socket.c,$(LOCAL_SRC_FILES)) |
| LOCAL_SRC_FILES := $(filter-out src/crypto/bio/socket_helper.c,$(LOCAL_SRC_FILES)) |
| LOCAL_SRC_FILES := $(filter-out src/crypto/x509/by_dir.c,$(LOCAL_SRC_FILES)) |
| |
| # BoringSSL detects Trusty based on this define and does things like switch to |
| # no-op threading functions. |
| MODULE_CFLAGS += -DTRUSTY |
| |
| # The AOSP stdatomic.h clang header does not build against musl. Disable C11 |
| # atomics. |
| MODULE_CFLAGS += -D__STDC_NO_ATOMICS__ |
| |
| # Define static armcap based on lk build variables |
| MODULE_STATIC_ARMCAP := -DOPENSSL_STATIC_ARMCAP |
| toarmcap = $(if $(filter-out 0 false,$(2)),-DOPENSSL_STATIC_ARMCAP_$(1),) |
| MODULE_STATIC_ARMCAP += $(call toarmcap,NEON,$(USE_ARM_V7_NEON)) |
| MODULE_STATIC_ARMCAP += $(call toarmcap,AES,$(USE_ARM_V8_AES)) |
| MODULE_STATIC_ARMCAP += $(call toarmcap,PMULL,$(USE_ARM_V8_PMULL)) |
| MODULE_STATIC_ARMCAP += $(call toarmcap,SHA1,$(USE_ARM_V8_SHA1)) |
| MODULE_STATIC_ARMCAP += $(call toarmcap,SHA256,$(USE_ARM_V8_SHA2)) |
| MODULE_CFLAGS += $(MODULE_STATIC_ARMCAP) |
| MODULE_ASMFLAGS += $(MODULE_STATIC_ARMCAP) |
| |
| ifeq (false,$(call TOBOOL,$(ALLOW_FP_USE))) |
| # chacha, ghash, vpaes, sha1, and sha256 assembly files use neon instructions, |
| # which we aren't allowed to do in the kernel if ALLOW_FP_USE is disabled. This |
| # means that the kernel can't use these functions, but we don't need to for now. |
| # If someone ever tries to, we will get missing symbols during linking. |
| LOCAL_SRC_FILES_$(ARCH) := $(filter-out linux-aarch64/crypto/chacha/chacha-armv8.S,$(LOCAL_SRC_FILES_$(ARCH))) |
| LOCAL_SRC_FILES_$(ARCH) := $(filter-out linux-aarch64/crypto/fipsmodule/ghash-neon-armv8.S,$(LOCAL_SRC_FILES_$(ARCH))) |
| LOCAL_SRC_FILES_$(ARCH) := $(filter-out linux-aarch64/crypto/fipsmodule/vpaes-armv8.S,$(LOCAL_SRC_FILES_$(ARCH))) |
| LOCAL_SRC_FILES_$(ARCH) := $(filter-out linux-aarch64/crypto/fipsmodule/sha1-armv8.S,$(LOCAL_SRC_FILES_$(ARCH))) |
| LOCAL_SRC_FILES_$(ARCH) := $(filter-out linux-aarch64/crypto/fipsmodule/sha256-armv8.S,$(LOCAL_SRC_FILES_$(ARCH))) |
| LOCAL_SRC_FILES_$(ARCH) := $(filter-out linux-aarch64/crypto/test/trampoline-armv8.S,$(LOCAL_SRC_FILES_$(ARCH))) |
| endif |
| |
| MODULE_SRCS += $(addprefix $(LOCAL_DIR)/,$(LOCAL_SRC_FILES)) |
| MODULE_SRCS += $(addprefix $(LOCAL_DIR)/,$(LOCAL_SRC_FILES_$(ARCH))) |
| |
| MODULE_INCLUDES += $(LOCAL_DIR)/src/crypto |
| |
| MODULE_EXPORT_INCLUDES += $(LOCAL_DIR)/src/include |
| |
| MODULE_LIBRARY_DEPS += \ |
| trusty/user/base/lib/openssl-stubs \ |
| |
| include make/library.mk |
