freebsd-skq/sbin/gbde/Makefile

# $FreeBSD$

PROG=	gbde
SRCS=	gbde.c template.c
SRCS+=	rijndael-alg-fst.c
SRCS+=	rijndael-api-fst.c
SRCS+=	sha2.c
SRCS+=	g_bde_lock.c

# rijndael-fst.c does evil casting things which results in warnings on
# 64 bit machines, the test-vectors check out however, so it works right.
.if ${MACHINE_CPUARCH} != "i386"
WARNS?=	3
.endif

CFLAGS+= -I${.CURDIR}/../../sys
.PATH:	${.CURDIR}/../../sys/geom/bde \
	${.CURDIR}/../../sys/crypto/rijndael \
	${.CURDIR}/../../sys/crypto/sha2

CLEANFILES+= template.c

MAN=	gbde.8
DPADD=	${LIBMD} ${LIBUTIL} ${LIBGEOM}
LDADD=	-lmd -lutil -lgeom

template.c: template.txt
	file2c 'const char template[] = {' ',0};' \
		< ${.CURDIR}/template.txt > template.c

test: ${PROG}
	sh ${.CURDIR}/test.sh ${.CURDIR}

.include <bsd.prog.mk>
Complete the Geom Based Disk Encryption: Add the OAM utility. Sponsored by: DARPA and NAI Labs 2002-10-20 11:16:13 +00:00			`# $FreeBSD$`

			`PROG= gbde`
			`SRCS= gbde.c template.c`
			`SRCS+= rijndael-alg-fst.c`
			`SRCS+= rijndael-api-fst.c`
Run a revision on the GBDE encryption facility. Replace ARC4 with SHA2-512. Change lock-structure encoding to use random ordering rather for obscurity. Encrypt lock-structure with AES/256 instead of AES/128. Change kkey derivation to be MD5 hash based. Watch for malloc(M_NOWAIT) failures and ditch our cache when they happen. Remove clause 3 of the license with NAI Labs consent. Many thanks to "Lucky Green" <shamrock@cypherpunks.to> and "David Wagner" <daw@cs.berkeley.edu>, for code reading, inputs and suggestions. This code has still not been stared at for 10 years by a gang of hard-core cryptographers. Discretion advised. NB: These changes result in the on-disk format changing: dump/restore needed. Sponsored by: DARPA & NAI Labs. 2002-11-04 09:27:01 +00:00			`SRCS+= sha2.c`
Complete the Geom Based Disk Encryption: Add the OAM utility. Sponsored by: DARPA and NAI Labs 2002-10-20 11:16:13 +00:00			`SRCS+= g_bde_lock.c`

Solve another bug in the mapping code: correctly skip lock sectors. Make sure sector zero is protected if it contains metadata. Lower WARNS for gbde to 3 on non-i386 archs. rijndael-fst is evil but appearntly does the right thing and passes the test-vectors. MFC Candidate. 2002-12-18 22:11:54 +00:00			`# rijndael-fst.c does evil casting things which results in warnings on`
			`# 64 bit machines, the test-vectors check out however, so it works right.`
MFtbemd: Prefer MACHNE_CPUARCH to MACHINE_ARCH in most contexts where you want to test of all the CPUs of a given family conform. 2010-08-23 22:24:11 +00:00			`.if ${MACHINE_CPUARCH} != "i386"`
Solve another bug in the mapping code: correctly skip lock sectors. Make sure sector zero is protected if it contains metadata. Lower WARNS for gbde to 3 on non-i386 archs. rijndael-fst is evil but appearntly does the right thing and passes the test-vectors. MFC Candidate. 2002-12-18 22:11:54 +00:00			`WARNS?= 3`
			`.endif`
A couple of stylistic improvements. 2002-12-17 19:16:10 +00:00
I overlooked an absolute path. Submitted by: Henric Jungheim <henric@attbi.com> 2002-10-21 05:25:02 +00:00			`CFLAGS+= -I${.CURDIR}/../../sys`
Don't pull in geom_enc.c any more. 2003-04-03 12:36:56 +00:00			`.PATH: ${.CURDIR}/../../sys/geom/bde \`
Run a revision on the GBDE encryption facility. Replace ARC4 with SHA2-512. Change lock-structure encoding to use random ordering rather for obscurity. Encrypt lock-structure with AES/256 instead of AES/128. Change kkey derivation to be MD5 hash based. Watch for malloc(M_NOWAIT) failures and ditch our cache when they happen. Remove clause 3 of the license with NAI Labs consent. Many thanks to "Lucky Green" <shamrock@cypherpunks.to> and "David Wagner" <daw@cs.berkeley.edu>, for code reading, inputs and suggestions. This code has still not been stared at for 10 years by a gang of hard-core cryptographers. Discretion advised. NB: These changes result in the on-disk format changing: dump/restore needed. Sponsored by: DARPA & NAI Labs. 2002-11-04 09:27:01 +00:00			`${.CURDIR}/../../sys/crypto/rijndael \`
			`${.CURDIR}/../../sys/crypto/sha2`
Complete the Geom Based Disk Encryption: Add the OAM utility. Sponsored by: DARPA and NAI Labs 2002-10-20 11:16:13 +00:00
			`CLEANFILES+= template.c`

			`MAN= gbde.8`
Moved libgeom.so dependencies to where they belong. Reviewed by: phk Approved by: re (scottl) 2003-05-17 19:05:17 +00:00			`DPADD= ${LIBMD} ${LIBUTIL} ${LIBGEOM}`
			`LDADD= -lmd -lutil -lgeom`
Complete the Geom Based Disk Encryption: Add the OAM utility. Sponsored by: DARPA and NAI Labs 2002-10-20 11:16:13 +00:00
Normalize, fix ``make checkdpadd''. 2003-04-16 11:54:11 +00:00			`template.c: template.txt`
Complete the Geom Based Disk Encryption: Add the OAM utility. Sponsored by: DARPA and NAI Labs 2002-10-20 11:16:13 +00:00			`file2c 'const char template[] = {' ',0};' \`
			`< ${.CURDIR}/template.txt > template.c`

Normalize, fix ``make checkdpadd''. 2003-04-16 11:54:11 +00:00			`test: ${PROG}`
Make the regression test run also with obj directories. 2003-10-17 19:52:07 +00:00			`sh ${.CURDIR}/test.sh ${.CURDIR}`
Normalize, fix ``make checkdpadd''. 2003-04-16 11:54:11 +00:00
			`.include <bsd.prog.mk>`