# SPDX-License-Identifier: GPL-2.0-only
|
#
|
# Create a separate FIPS archive that duplicates the modules that are relevant
|
# for FIPS 140 certification as builtin objects
|
#
|
|
sha1-ce-y := sha1-ce-glue.o sha1-ce-core.o
|
sha2-ce-y := sha2-ce-glue.o sha2-ce-core.o
|
sha512-ce-y := sha512-ce-glue.o sha512-ce-core.o
|
ghash-ce-y := ghash-ce-glue.o ghash-ce-core.o
|
aes-ce-cipher-y := aes-ce-core.o aes-ce-glue.o
|
aes-ce-blk-y := aes-glue-ce.o aes-ce.o
|
aes-neon-blk-y := aes-glue-neon.o aes-neon.o
|
sha256-arm64-y := sha256-glue.o sha256-core.o
|
sha512-arm64-y := sha512-glue.o sha512-core.o
|
aes-arm64-y := aes-cipher-core.o aes-cipher-glue.o
|
aes-neon-bs-y := aes-neonbs-core.o aes-neonbs-glue.o
|
|
crypto-arm64-fips-src := $(srctree)/arch/arm64/crypto/
|
crypto-arm64-fips-modules := sha1-ce.o sha2-ce.o sha512-ce.o ghash-ce.o \
|
aes-ce-cipher.o aes-ce-blk.o aes-neon-blk.o \
|
sha256-arm64.o sha512-arm64.o aes-arm64.o \
|
aes-neon-bs.o
|
|
crypto-fips-objs += $(foreach o,$(crypto-arm64-fips-modules),$($(o:.o=-y):.o=-fips-arch.o))
|
|
CFLAGS_aes-glue-ce-fips-arch.o := -DUSE_V8_CRYPTO_EXTENSIONS
|
|
$(obj)/aes-glue-%-fips-arch.o: KBUILD_CFLAGS += $(FIPS140_CFLAGS)
|
$(obj)/aes-glue-%-fips-arch.o: $(crypto-arm64-fips-src)/aes-glue.c FORCE
|
$(call if_changed_rule,cc_o_c)
|
|
$(obj)/%-fips-arch.o: KBUILD_CFLAGS += $(FIPS140_CFLAGS)
|
$(obj)/%-fips-arch.o: $(crypto-arm64-fips-src)/%.c FORCE
|
$(call if_changed_rule,cc_o_c)
|
|
$(obj)/%-fips-arch.o: $(crypto-arm64-fips-src)/%.S FORCE
|
$(call if_changed_rule,as_o_S)
|
|
$(obj)/%: $(crypto-arm64-fips-src)/%_shipped
|
$(call cmd,shipped)
|
|
$(obj)/%-fips-arch.o: $(obj)/%.S FORCE
|
$(call if_changed_rule,as_o_S)
|
