freebsd-nq/sbin/gbde/Makefile

# $FreeBSD$

PROG=	gbde
SRCS=	gbde.c template.c
SRCS+=	geom_enc.c
SRCS+=	rijndael-alg-fst.c
SRCS+=	rijndael-api-fst.c
SRCS+=	sha2.c
SRCS+=	g_bde_lock.c

# rijndael-fst.c does evil casting things which results in warnings on
# 64 bit machines, the test-vectors check out however, so it works right.
.if ${MACHINE_ARCH} == "i386"
WARNS?=	5
.else
WARNS?=	3
.endif

CFLAGS+= -I${.CURDIR}/../../sys
.PATH:	${.CURDIR}/../../sys/geom \
	${.CURDIR}/../../sys/geom/bde \
	${.CURDIR}/../../sys/crypto/rijndael \
	${.CURDIR}/../../sys/crypto/sha2

CLEANFILES+= template.c

MAN=	gbde.8
LDADD=	-lmd  -lutil -lgeom -lbsdxml -lsbuf

.include <bsd.prog.mk>

template.c:	template.txt
	file2c 'const char template[] = {' ',0};' \
		< ${.CURDIR}/template.txt > template.c

test:	${PROG}
	sh ${.CURDIR}/test.sh
Complete the Geom Based Disk Encryption: Add the OAM utility. Sponsored by: DARPA and NAI Labs 2002-10-20 11:16:13 +00:00			`# $FreeBSD$`

			`PROG= gbde`
			`SRCS= gbde.c template.c`
			`SRCS+= geom_enc.c`
			`SRCS+= rijndael-alg-fst.c`
			`SRCS+= rijndael-api-fst.c`
Run a revision on the GBDE encryption facility. Replace ARC4 with SHA2-512. Change lock-structure encoding to use random ordering rather for obscurity. Encrypt lock-structure with AES/256 instead of AES/128. Change kkey derivation to be MD5 hash based. Watch for malloc(M_NOWAIT) failures and ditch our cache when they happen. Remove clause 3 of the license with NAI Labs consent. Many thanks to "Lucky Green" <shamrock@cypherpunks.to> and "David Wagner" <daw@cs.berkeley.edu>, for code reading, inputs and suggestions. This code has still not been stared at for 10 years by a gang of hard-core cryptographers. Discretion advised. NB: These changes result in the on-disk format changing: dump/restore needed. Sponsored by: DARPA & NAI Labs. 2002-11-04 09:27:01 +00:00			`SRCS+= sha2.c`
Complete the Geom Based Disk Encryption: Add the OAM utility. Sponsored by: DARPA and NAI Labs 2002-10-20 11:16:13 +00:00			`SRCS+= g_bde_lock.c`

Solve another bug in the mapping code: correctly skip lock sectors. Make sure sector zero is protected if it contains metadata. Lower WARNS for gbde to 3 on non-i386 archs. rijndael-fst is evil but appearntly does the right thing and passes the test-vectors. MFC Candidate. 2002-12-18 22:11:54 +00:00			`# rijndael-fst.c does evil casting things which results in warnings on`
			`# 64 bit machines, the test-vectors check out however, so it works right.`
			`.if ${MACHINE_ARCH} == "i386"`
A couple of stylistic improvements. 2002-12-17 19:16:10 +00:00			`WARNS?= 5`
Solve another bug in the mapping code: correctly skip lock sectors. Make sure sector zero is protected if it contains metadata. Lower WARNS for gbde to 3 on non-i386 archs. rijndael-fst is evil but appearntly does the right thing and passes the test-vectors. MFC Candidate. 2002-12-18 22:11:54 +00:00			`.else`
			`WARNS?= 3`
			`.endif`
A couple of stylistic improvements. 2002-12-17 19:16:10 +00:00
I overlooked an absolute path. Submitted by: Henric Jungheim <henric@attbi.com> 2002-10-21 05:25:02 +00:00			`CFLAGS+= -I${.CURDIR}/../../sys`
Run a revision on the GBDE encryption facility. Replace ARC4 with SHA2-512. Change lock-structure encoding to use random ordering rather for obscurity. Encrypt lock-structure with AES/256 instead of AES/128. Change kkey derivation to be MD5 hash based. Watch for malloc(M_NOWAIT) failures and ditch our cache when they happen. Remove clause 3 of the license with NAI Labs consent. Many thanks to "Lucky Green" <shamrock@cypherpunks.to> and "David Wagner" <daw@cs.berkeley.edu>, for code reading, inputs and suggestions. This code has still not been stared at for 10 years by a gang of hard-core cryptographers. Discretion advised. NB: These changes result in the on-disk format changing: dump/restore needed. Sponsored by: DARPA & NAI Labs. 2002-11-04 09:27:01 +00:00			`.PATH: ${.CURDIR}/../../sys/geom \`
			`${.CURDIR}/../../sys/geom/bde \`
			`${.CURDIR}/../../sys/crypto/rijndael \`
			`${.CURDIR}/../../sys/crypto/sha2`
Complete the Geom Based Disk Encryption: Add the OAM utility. Sponsored by: DARPA and NAI Labs 2002-10-20 11:16:13 +00:00
			`CLEANFILES+= template.c`

			`MAN= gbde.8`
Use new GEOM OAM. Kernels have supported this for a number of days, so people should be OK. 2003-03-31 18:38:31 +00:00			`LDADD= -lmd -lutil -lgeom -lbsdxml -lsbuf`
Complete the Geom Based Disk Encryption: Add the OAM utility. Sponsored by: DARPA and NAI Labs 2002-10-20 11:16:13 +00:00
			`.include <bsd.prog.mk>`

			`template.c: template.txt`
			`file2c 'const char template[] = {' ',0};' \`
			`< ${.CURDIR}/template.txt > template.c`

			`test: ${PROG}`
			`sh ${.CURDIR}/test.sh`