1# SPDX-License-Identifier: GPL-2.0 2 3aflags-thumb2-$(CONFIG_THUMB2_KERNEL) := -U__thumb2__ -D__thumb2__=1 4 5quiet_cmd_perlasm = PERLASM $@ 6 cmd_perlasm = $(PERL) $(<) > $(@) 7 8quiet_cmd_perlasm_with_args = PERLASM $@ 9 cmd_perlasm_with_args = $(PERL) $(<) void $(@) 10 11ppc64-perlasm-flavour-y := linux-ppc64 12ppc64-perlasm-flavour-$(CONFIG_PPC64_ELF_ABI_V2) := linux-ppc64-elfv2 13ppc64-perlasm-flavour-$(CONFIG_CPU_LITTLE_ENDIAN) := linux-ppc64le 14 15obj-$(CONFIG_KUNIT) += tests/ 16 17obj-$(CONFIG_CRYPTO_HASH_INFO) += hash_info.o 18 19obj-$(CONFIG_CRYPTO_LIB_UTILS) += libcryptoutils.o 20libcryptoutils-y := memneq.o utils.o 21 22################################################################################ 23 24obj-$(CONFIG_CRYPTO_LIB_AES) += libaes.o 25libaes-y := aes.o 26ifeq ($(CONFIG_CRYPTO_LIB_AES_ARCH),y) 27CFLAGS_aes.o += -I$(src)/$(SRCARCH) 28 29libaes-$(CONFIG_ARM) += arm/aes-cipher-core.o 30libaes-$(CONFIG_ARM64) += arm64/aes-cipher-core.o \ 31 arm64/aes-ce-core.o \ 32 arm64/aes-ce.o \ 33 arm64/aes-neon.o 34 35ifeq ($(CONFIG_PPC),y) 36ifeq ($(CONFIG_SPE),y) 37libaes-y += powerpc/aes-spe-core.o \ 38 powerpc/aes-spe-keys.o \ 39 powerpc/aes-spe-modes.o \ 40 powerpc/aes-tab-4k.o 41else 42libaes-y += powerpc/aesp8-ppc.o 43quiet_cmd_perlasm_aes = PERLASM $@ 44 cmd_perlasm_aes = $(PERL) $< $(ppc64-perlasm-flavour-y) $@ 45# Use if_changed instead of cmd, in case the flavour changed. 46$(obj)/powerpc/aesp8-ppc.S: $(src)/powerpc/aesp8-ppc.pl FORCE 47 $(call if_changed,perlasm_aes) 48targets += powerpc/aesp8-ppc.S 49OBJECT_FILES_NON_STANDARD_powerpc/aesp8-ppc.o := y 50endif # !CONFIG_SPE 51endif # CONFIG_PPC 52 53libaes-$(CONFIG_RISCV) += riscv/aes-riscv64-zvkned.o 54ifneq ($(CONFIG_CRYPTO_LIB_AES_CTR),) 55libaes-$(CONFIG_RISCV) += riscv/aes-riscv64-zvkned-zvkb.o 56endif 57ifneq ($(CONFIG_CRYPTO_LIB_AES_XTS),) 58libaes-$(CONFIG_RISCV) += riscv/aes-riscv64-zvkned-zvbb-zvkg.o 59endif 60 61libaes-$(CONFIG_SPARC) += sparc/aes_asm.o 62 63libaes-$(CONFIG_X86) += x86/aes-aesni.o 64ifneq ($(CONFIG_CRYPTO_LIB_AES_CTR),) 65libaes-$(CONFIG_X86_64) += x86/aes-ctr-avx-x86_64.o 66endif 67ifneq ($(CONFIG_CRYPTO_LIB_AES_XTS),) 68libaes-$(CONFIG_X86_64) += x86/aes-xts-avx-x86_64.o 69endif 70endif # CONFIG_CRYPTO_LIB_AES_ARCH 71 72# clean-files must be defined unconditionally 73clean-files += powerpc/aesp8-ppc.S 74 75################################################################################ 76 77obj-$(CONFIG_CRYPTO_LIB_AESCFB) += libaescfb.o 78libaescfb-y := aescfb.o 79 80obj-$(CONFIG_CRYPTO_LIB_ARC4) += libarc4.o 81libarc4-y := arc4.o 82 83obj-$(CONFIG_CRYPTO_LIB_GF128MUL) += gf128mul.o 84 85################################################################################ 86 87obj-$(CONFIG_CRYPTO_LIB_BLAKE2B) += libblake2b.o 88libblake2b-y := blake2b.o 89ifeq ($(CONFIG_CRYPTO_LIB_BLAKE2B_ARCH),y) 90CFLAGS_blake2b.o += -I$(src)/$(SRCARCH) 91libblake2b-$(CONFIG_ARM) += arm/blake2b-neon-core.o 92endif # CONFIG_CRYPTO_LIB_BLAKE2B_ARCH 93 94################################################################################ 95 96# blake2s is used by the /dev/random driver which is always builtin 97obj-y += blake2s.o 98ifeq ($(CONFIG_CRYPTO_LIB_BLAKE2S_ARCH),y) 99CFLAGS_blake2s.o += -I$(src)/$(SRCARCH) 100obj-$(CONFIG_ARM) += arm/blake2s-core.o 101obj-$(CONFIG_X86) += x86/blake2s-core.o 102endif 103 104################################################################################ 105 106# chacha20_block() is used by the /dev/random driver which is always builtin 107obj-y += chacha-block-generic.o 108 109obj-$(CONFIG_CRYPTO_LIB_CHACHA) += libchacha.o 110libchacha-y := chacha.o 111 112ifeq ($(CONFIG_CRYPTO_LIB_CHACHA_ARCH),y) 113CFLAGS_chacha.o += -I$(src)/$(SRCARCH) 114 115ifeq ($(CONFIG_ARM),y) 116libchacha-y += arm/chacha-scalar-core.o 117libchacha-$(CONFIG_KERNEL_MODE_NEON) += arm/chacha-neon-core.o 118endif 119 120libchacha-$(CONFIG_ARM64) += arm64/chacha-neon-core.o 121 122ifeq ($(CONFIG_MIPS),y) 123libchacha-y += mips/chacha-core.o 124AFLAGS_mips/chacha-core.o += -O2 # needed to fill branch delay slots 125endif 126 127libchacha-$(CONFIG_PPC) += powerpc/chacha-p10le-8x.o 128libchacha-$(CONFIG_RISCV) += riscv/chacha-riscv64-zvkb.o 129libchacha-$(CONFIG_S390) += s390/chacha-s390.o 130libchacha-$(CONFIG_X86) += x86/chacha-ssse3-x86_64.o \ 131 x86/chacha-avx2-x86_64.o \ 132 x86/chacha-avx512vl-x86_64.o 133endif # CONFIG_CRYPTO_LIB_CHACHA_ARCH 134 135################################################################################ 136 137obj-$(CONFIG_CRYPTO_LIB_CHACHA20POLY1305) += libchacha20poly1305.o 138libchacha20poly1305-y += chacha20poly1305.o 139 140################################################################################ 141 142obj-$(CONFIG_CRYPTO_LIB_CURVE25519) += libcurve25519.o 143libcurve25519-y := curve25519.o 144 145# Disable GCOV in odd or sensitive code 146GCOV_PROFILE_curve25519.o := n 147 148ifeq ($(CONFIG_ARCH_SUPPORTS_INT128),y) 149libcurve25519-$(CONFIG_CRYPTO_LIB_CURVE25519_GENERIC) += curve25519-hacl64.o 150else 151libcurve25519-$(CONFIG_CRYPTO_LIB_CURVE25519_GENERIC) += curve25519-fiat32.o 152endif 153# clang versions prior to 18 may blow out the stack with KASAN 154ifeq ($(CONFIG_CC_IS_CLANG)_$(call clang-min-version, 180000),y_) 155KASAN_SANITIZE_curve25519-hacl64.o := n 156endif 157 158ifeq ($(CONFIG_CRYPTO_LIB_CURVE25519_ARCH),y) 159CFLAGS_curve25519.o += -I$(src)/$(SRCARCH) 160libcurve25519-$(CONFIG_ARM) += arm/curve25519-core.o 161libcurve25519-$(CONFIG_PPC) += powerpc/curve25519-ppc64le_asm.o 162endif 163 164################################################################################ 165 166obj-$(CONFIG_CRYPTO_LIB_DES) += libdes.o 167libdes-y := des.o 168 169################################################################################ 170 171obj-$(CONFIG_CRYPTO_LIB_GF128HASH) += libgf128hash.o 172libgf128hash-y := gf128hash.o 173ifeq ($(CONFIG_CRYPTO_LIB_GF128HASH_ARCH),y) 174CFLAGS_gf128hash.o += -I$(src)/$(SRCARCH) 175libgf128hash-$(CONFIG_ARM) += arm/ghash-neon-core.o 176libgf128hash-$(CONFIG_ARM64) += arm64/ghash-neon-core.o \ 177 arm64/polyval-ce-core.o 178 179ifeq ($(CONFIG_PPC),y) 180libgf128hash-y += powerpc/ghashp8-ppc.o 181quiet_cmd_perlasm_ghash = PERLASM $@ 182 cmd_perlasm_ghash = $(PERL) $< $(ppc64-perlasm-flavour-y) $@ 183$(obj)/powerpc/ghashp8-ppc.S: $(src)/powerpc/ghashp8-ppc.pl FORCE 184 $(call if_changed,perlasm_ghash) 185targets += powerpc/ghashp8-ppc.S 186OBJECT_FILES_NON_STANDARD_powerpc/ghashp8-ppc.o := y 187endif 188 189libgf128hash-$(CONFIG_RISCV) += riscv/ghash-riscv64-zvkg.o 190libgf128hash-$(CONFIG_X86) += x86/ghash-pclmul.o \ 191 x86/polyval-pclmul-avx.o 192endif # CONFIG_CRYPTO_LIB_GF128HASH_ARCH 193 194# clean-files must be defined unconditionally 195clean-files += powerpc/ghashp8-ppc.S 196 197################################################################################ 198 199obj-$(CONFIG_CRYPTO_LIB_MD5) += libmd5.o 200libmd5-y := md5.o 201 202################################################################################ 203 204obj-$(CONFIG_CRYPTO_LIB_MLDSA) += libmldsa.o 205libmldsa-y := mldsa.o 206 207################################################################################ 208 209obj-$(CONFIG_CRYPTO_LIB_NH) += libnh.o 210libnh-y := nh.o 211ifeq ($(CONFIG_CRYPTO_LIB_NH_ARCH),y) 212CFLAGS_nh.o += -I$(src)/$(SRCARCH) 213libnh-$(CONFIG_ARM) += arm/nh-neon-core.o 214libnh-$(CONFIG_ARM64) += arm64/nh-neon-core.o 215libnh-$(CONFIG_X86) += x86/nh-sse2.o x86/nh-avx2.o 216endif 217 218################################################################################ 219 220obj-$(CONFIG_CRYPTO_LIB_POLY1305) += libpoly1305.o 221libpoly1305-y := poly1305.o 222ifeq ($(CONFIG_ARCH_SUPPORTS_INT128),y) 223libpoly1305-$(CONFIG_CRYPTO_LIB_POLY1305_GENERIC) += poly1305-donna64.o 224else 225libpoly1305-$(CONFIG_CRYPTO_LIB_POLY1305_GENERIC) += poly1305-donna32.o 226endif 227 228ifeq ($(CONFIG_CRYPTO_LIB_POLY1305_ARCH),y) 229CFLAGS_poly1305.o += -I$(src)/$(SRCARCH) 230 231ifeq ($(CONFIG_ARM),y) 232libpoly1305-y += arm/poly1305-core.o 233$(obj)/arm/poly1305-core.S: $(src)/arm/poly1305-armv4.pl 234 $(call cmd,perlasm) 235# massage the perlasm code a bit so we only get the NEON routine if we need it 236poly1305-aflags-$(CONFIG_CPU_V7) := -U__LINUX_ARM_ARCH__ -D__LINUX_ARM_ARCH__=5 237poly1305-aflags-$(CONFIG_KERNEL_MODE_NEON) := -U__LINUX_ARM_ARCH__ -D__LINUX_ARM_ARCH__=7 238AFLAGS_arm/poly1305-core.o += $(poly1305-aflags-y) $(aflags-thumb2-y) 239endif 240 241ifeq ($(CONFIG_ARM64),y) 242libpoly1305-y += arm64/poly1305-core.o 243$(obj)/arm64/poly1305-core.S: $(src)/arm64/poly1305-armv8.pl 244 $(call cmd,perlasm_with_args) 245endif 246 247ifeq ($(CONFIG_MIPS),y) 248libpoly1305-y += mips/poly1305-core.o 249poly1305-perlasm-flavour-$(CONFIG_32BIT) := o32 250poly1305-perlasm-flavour-$(CONFIG_64BIT) := 64 251quiet_cmd_perlasm_poly1305 = PERLASM $@ 252 cmd_perlasm_poly1305 = $(PERL) $< $(poly1305-perlasm-flavour-y) $@ 253# Use if_changed instead of cmd, in case the flavour changed. 254$(obj)/mips/poly1305-core.S: $(src)/mips/poly1305-mips.pl FORCE 255 $(call if_changed,perlasm_poly1305) 256targets += mips/poly1305-core.S 257endif 258 259libpoly1305-$(CONFIG_PPC) += powerpc/poly1305-p10le_64.o 260 261ifeq ($(CONFIG_RISCV),y) 262libpoly1305-y += riscv/poly1305-core.o 263poly1305-perlasm-flavour-$(CONFIG_32BIT) := 32 264poly1305-perlasm-flavour-$(CONFIG_64BIT) := 64 265quiet_cmd_perlasm_poly1305 = PERLASM $@ 266 cmd_perlasm_poly1305 = $(PERL) $< $(poly1305-perlasm-flavour-y) $@ 267# Use if_changed instead of cmd, in case the flavour changed. 268$(obj)/riscv/poly1305-core.S: $(src)/riscv/poly1305-riscv.pl FORCE 269 $(call if_changed,perlasm_poly1305) 270targets += riscv/poly1305-core.S 271AFLAGS_riscv/poly1305-core.o += -Dpoly1305_init=poly1305_block_init 272endif 273 274ifeq ($(CONFIG_X86),y) 275libpoly1305-y += x86/poly1305-x86_64-cryptogams.o 276$(obj)/x86/poly1305-x86_64-cryptogams.S: $(src)/x86/poly1305-x86_64-cryptogams.pl 277 $(call cmd,perlasm) 278endif 279 280endif # CONFIG_CRYPTO_LIB_POLY1305_ARCH 281 282# clean-files must be defined unconditionally 283clean-files += arm/poly1305-core.S \ 284 arm64/poly1305-core.S \ 285 mips/poly1305-core.S \ 286 riscv/poly1305-core.S \ 287 x86/poly1305-x86_64-cryptogams.S 288 289################################################################################ 290 291obj-$(CONFIG_CRYPTO_LIB_SHA1) += libsha1.o 292libsha1-y := sha1.o 293ifeq ($(CONFIG_CRYPTO_LIB_SHA1_ARCH),y) 294CFLAGS_sha1.o += -I$(src)/$(SRCARCH) 295ifeq ($(CONFIG_ARM),y) 296libsha1-y += arm/sha1-armv4-large.o 297libsha1-$(CONFIG_KERNEL_MODE_NEON) += arm/sha1-armv7-neon.o \ 298 arm/sha1-ce-core.o 299endif 300libsha1-$(CONFIG_ARM64) += arm64/sha1-ce-core.o 301ifeq ($(CONFIG_PPC),y) 302libsha1-y += powerpc/sha1-powerpc-asm.o 303libsha1-$(CONFIG_SPE) += powerpc/sha1-spe-asm.o 304endif 305libsha1-$(CONFIG_SPARC) += sparc/sha1_asm.o 306libsha1-$(CONFIG_X86) += x86/sha1-ssse3-and-avx.o \ 307 x86/sha1-avx2-asm.o \ 308 x86/sha1-ni-asm.o 309endif # CONFIG_CRYPTO_LIB_SHA1_ARCH 310 311################################################################################ 312 313obj-$(CONFIG_CRYPTO_LIB_SHA256) += libsha256.o 314libsha256-y := sha256.o 315ifeq ($(CONFIG_CRYPTO_LIB_SHA256_ARCH),y) 316CFLAGS_sha256.o += -I$(src)/$(SRCARCH) 317 318ifeq ($(CONFIG_ARM),y) 319libsha256-y += arm/sha256-ce.o arm/sha256-core.o 320$(obj)/arm/sha256-core.S: $(src)/arm/sha256-armv4.pl 321 $(call cmd,perlasm) 322AFLAGS_arm/sha256-core.o += $(aflags-thumb2-y) 323endif 324 325ifeq ($(CONFIG_ARM64),y) 326libsha256-y += arm64/sha256-ce.o arm64/sha256-core.o 327$(obj)/arm64/sha256-core.S: $(src)/arm64/sha2-armv8.pl 328 $(call cmd,perlasm_with_args) 329endif 330 331libsha256-$(CONFIG_PPC) += powerpc/sha256-spe-asm.o 332libsha256-$(CONFIG_RISCV) += riscv/sha256-riscv64-zvknha_or_zvknhb-zvkb.o 333libsha256-$(CONFIG_SPARC) += sparc/sha256_asm.o 334libsha256-$(CONFIG_X86) += x86/sha256-ssse3-asm.o \ 335 x86/sha256-avx-asm.o \ 336 x86/sha256-avx2-asm.o \ 337 x86/sha256-ni-asm.o 338endif # CONFIG_CRYPTO_LIB_SHA256_ARCH 339 340################################################################################ 341 342obj-$(CONFIG_CRYPTO_LIB_SHA512) += libsha512.o 343libsha512-y := sha512.o 344ifeq ($(CONFIG_CRYPTO_LIB_SHA512_ARCH),y) 345CFLAGS_sha512.o += -I$(src)/$(SRCARCH) 346 347ifeq ($(CONFIG_ARM),y) 348libsha512-y += arm/sha512-core.o 349$(obj)/arm/sha512-core.S: $(src)/arm/sha512-armv4.pl 350 $(call cmd,perlasm) 351AFLAGS_arm/sha512-core.o += $(aflags-thumb2-y) 352endif 353 354ifeq ($(CONFIG_ARM64),y) 355libsha512-y += arm64/sha512-ce-core.o arm64/sha512-core.o 356$(obj)/arm64/sha512-core.S: $(src)/arm64/sha2-armv8.pl 357 $(call cmd,perlasm_with_args) 358endif 359 360libsha512-$(CONFIG_RISCV) += riscv/sha512-riscv64-zvknhb-zvkb.o 361libsha512-$(CONFIG_SPARC) += sparc/sha512_asm.o 362libsha512-$(CONFIG_X86) += x86/sha512-ssse3-asm.o \ 363 x86/sha512-avx-asm.o \ 364 x86/sha512-avx2-asm.o 365endif # CONFIG_CRYPTO_LIB_SHA512_ARCH 366 367################################################################################ 368 369obj-$(CONFIG_CRYPTO_LIB_SHA3) += libsha3.o 370libsha3-y := sha3.o 371 372ifeq ($(CONFIG_CRYPTO_LIB_SHA3_ARCH),y) 373CFLAGS_sha3.o += -I$(src)/$(SRCARCH) 374libsha3-$(CONFIG_ARM64) += arm64/sha3-ce-core.o 375endif # CONFIG_CRYPTO_LIB_SHA3_ARCH 376 377################################################################################ 378 379# SipHash support is always built-in because it's used by core components such 380# as printk (for pointer hashing) and networking. 381obj-y += siphash.o 382 383################################################################################ 384 385obj-$(CONFIG_CRYPTO_LIB_SM3) += libsm3.o 386libsm3-y := sm3.o 387ifeq ($(CONFIG_CRYPTO_LIB_SM3_ARCH),y) 388CFLAGS_sm3.o += -I$(src)/$(SRCARCH) 389libsm3-$(CONFIG_ARM64) += arm64/sm3-ce-core.o \ 390 arm64/sm3-neon-core.o 391libsm3-$(CONFIG_RISCV) += riscv/sm3-riscv64-zvksh-zvkb.o 392libsm3-$(CONFIG_X86) += x86/sm3-avx-asm_64.o 393endif # CONFIG_CRYPTO_LIB_SM3_ARCH 394 395################################################################################ 396 397obj-$(CONFIG_MPILIB) += mpi/ 398 399obj-$(CONFIG_CRYPTO_SELFTESTS_FULL) += simd.o 400 401# clean-files must be defined unconditionally 402clean-files += arm/sha256-core.S arm/sha512-core.S 403clean-files += arm64/sha256-core.S arm64/sha512-core.S 404