freebsd-skq/sys/modules/crypto/Makefile

# $FreeBSD$

.PATH:	${.CURDIR}/../../opencrypto
.PATH:	${.CURDIR}/../../crypto
.PATH:	${.CURDIR}/../../crypto/blowfish
.PATH:	${.CURDIR}/../../crypto/camellia
.PATH:	${.CURDIR}/../../crypto/des
.PATH:	${.CURDIR}/../../crypto/rijndael
.PATH:	${.CURDIR}/../../crypto/sha2
.PATH:	${.CURDIR}/../../crypto/siphash

KMOD	= crypto
SRCS	= crypto.c cryptodev_if.c
SRCS	+= criov.c cryptosoft.c xform.c
SRCS	+= cast.c cryptodeflate.c rmd160.c rijndael-alg-fst.c rijndael-api.c
SRCS	+= skipjack.c bf_enc.c bf_ecb.c bf_skey.c
SRCS	+= camellia.c camellia-api.c
SRCS	+= des_ecb.c des_enc.c des_setkey.c
SRCS	+= sha1.c sha2.c sha256c.c
SRCS	+= siphash.c
SRCS	+= gmac.c gfmult.c
SRCS	+= opt_param.h cryptodev_if.h bus_if.h device_if.h
SRCS	+= opt_ddb.h

.include <bsd.kmod.mk>
Module-ize the 'core' crypto stuff. This may still need to be compiled into the kernel by default (if required), but other modules can now depend() on this. Fix inter-module dependancy. Earlier version OK'ed by: sam 2002-10-16 14:31:34 +00:00			`# $FreeBSD$`

			`.PATH: ${.CURDIR}/../../opencrypto`
			`.PATH: ${.CURDIR}/../../crypto`
			`.PATH: ${.CURDIR}/../../crypto/blowfish`
Add siphash.c. While here, sort. 2014-03-06 00:37:16 +00:00			`.PATH: ${.CURDIR}/../../crypto/camellia`
Module-ize the 'core' crypto stuff. This may still need to be compiled into the kernel by default (if required), but other modules can now depend() on this. Fix inter-module dependancy. Earlier version OK'ed by: sam 2002-10-16 14:31:34 +00:00			`.PATH: ${.CURDIR}/../../crypto/des`
just use crypto/rijndael, and nuke opencrypto/rindael.[ch]. the two became almost identical since latest KAME merge. Discussed with: sam 2005-03-11 17:24:46 +00:00			`.PATH: ${.CURDIR}/../../crypto/rijndael`
Module-ize the 'core' crypto stuff. This may still need to be compiled into the kernel by default (if required), but other modules can now depend() on this. Fix inter-module dependancy. Earlier version OK'ed by: sam 2002-10-16 14:31:34 +00:00			`.PATH: ${.CURDIR}/../../crypto/sha2`
Add siphash.c. While here, sort. 2014-03-06 00:37:16 +00:00			`.PATH: ${.CURDIR}/../../crypto/siphash`
Module-ize the 'core' crypto stuff. This may still need to be compiled into the kernel by default (if required), but other modules can now depend() on this. Fix inter-module dependancy. Earlier version OK'ed by: sam 2002-10-16 14:31:34 +00:00
			`KMOD = crypto`
catchup w/ crypto changes 2007-03-21 14:39:39 +00:00			`SRCS = crypto.c cryptodev_if.c`
Push m_apply() and m_getptr() up into the colleciton of standard mbuf routines, and purge them from opencrypto. Reviewed by: sam Obtained from: NetBSD Sponsored by: spc.org 2003-12-15 21:49:41 +00:00			`SRCS += criov.c cryptosoft.c xform.c`
Chase down cryptodeflate.c change from r259109. 2013-12-09 02:06:52 +00:00			`SRCS += cast.c cryptodeflate.c rmd160.c rijndael-alg-fst.c rijndael-api.c`
List low-level Blowfish ECB module in the SRCS. It looks like it was dropped by accident (and it would be inconvenient to implement it otherwise because it uses internal non-published headers). MFC after: 1 week 2010-09-12 16:28:26 +00:00			`SRCS += skipjack.c bf_enc.c bf_ecb.c bf_skey.c`
Add siphash.c. While here, sort. 2014-03-06 00:37:16 +00:00			`SRCS += camellia.c camellia-api.c`
Module-ize the 'core' crypto stuff. This may still need to be compiled into the kernel by default (if required), but other modules can now depend() on this. Fix inter-module dependancy. Earlier version OK'ed by: sam 2002-10-16 14:31:34 +00:00			`SRCS += des_ecb.c des_enc.c des_setkey.c`
I clearly didn't test the modules... add sha256c.c to the various modules that included sha2.c... 2014-03-16 01:55:30 +00:00			`SRCS += sha1.c sha2.c sha256c.c`
Add siphash.c. While here, sort. 2014-03-06 00:37:16 +00:00			`SRCS += siphash.c`
Add some new modes to OpenCrypto. These modes are AES-ICM (can be used for counter mode), and AES-GCM. Both of these modes have been added to the aesni module. Included is a set of tests to validate that the software and aesni module calculate the correct values. These use the NIST KAT test vectors. To run the test, you will need to install a soon to be committed port, nist-kat that will install the vectors. Using a port is necessary as the test vectors are around 25MB. All the man pages were updated. I have added a new man page, crypto.7, which includes a description of how to use each mode. All the new modes and some other AES modes are present. It would be good for someone else to go through and document the other modes. A new ioctl was added to support AEAD modes which AES-GCM is one of them. Without this ioctl, it is not possible to test AEAD modes from userland. Add a timing safe bcmp for use to compare MACs. Previously we were using bcmp which could leak timing info and result in the ability to forge messages. Add a minor optimization to the aesni module so that single segment mbufs don't get copied and instead are updated in place. The aesni module needs to be updated to support blocked IO so segmented mbufs don't have to be copied. We require that the IV be specified for all calls for both GCM and ICM. This is to ensure proper use of these functions. Obtained from: p4: //depot/projects/opencrypto Relnotes: yes Sponsored by: FreeBSD Foundation Sponsored by: NetGate 2014-12-12 19:56:36 +00:00			`SRCS += gmac.c gfmult.c`
catchup w/ crypto changes 2007-03-21 14:39:39 +00:00			`SRCS += opt_param.h cryptodev_if.h bus_if.h device_if.h`
- For kernel compiled only with KDTRACE_HOOKS and not any lock debugging option, unbreak the lock tracing release semantic by embedding calls to LOCKSTAT_PROFILE_RELEASE_LOCK() direclty in the inlined version of the releasing functions for mutex, rwlock and sxlock. Failing to do so skips the lockstat_probe_func invokation for unlocking. - As part of the LOCKSTAT support is inlined in mutex operation, for kernel compiled without lock debugging options, potentially every consumer must be compiled including opt_kdtrace.h. Fix this by moving KDTRACE_HOOKS into opt_global.h and remove the dependency by opt_kdtrace.h for all files, as now only KDTRACE_FRAMES is linked there and it is only used as a compile-time stub [0]. [0] immediately shows some new bug as DTRACE-derived support for debug in sfxge is broken and it was never really tested. As it was not including correctly opt_kdtrace.h before it was never enabled so it was kept broken for a while. Fix this by using a protection stub, leaving sfxge driver authors the responsibility for fixing it appropriately [1]. Sponsored by: EMC / Isilon storage division Discussed with: rstone [0] Reported by: rstone [1] Discussed with: philip 2013-11-25 07:38:45 +00:00			`SRCS += opt_ddb.h`
Add siphash.c. While here, sort. 2014-03-06 00:37:16 +00:00
Module-ize the 'core' crypto stuff. This may still need to be compiled into the kernel by default (if required), but other modules can now depend() on this. Fix inter-module dependancy. Earlier version OK'ed by: sam 2002-10-16 14:31:34 +00:00			`.include <bsd.kmod.mk>`