| # SPDX-License-Identifier: GPL-2.0-only |
| # |
| # Create a separate FIPS archive that duplicates the modules that are relevant |
| # for FIPS 140 certification as builtin objects |
| # |
| |
| sha1-ce-y := sha1-ce-glue.o sha1-ce-core.o |
| sha2-ce-y := sha2-ce-glue.o sha2-ce-core.o |
| sha512-ce-y := sha512-ce-glue.o sha512-ce-core.o |
| ghash-ce-y := ghash-ce-glue.o ghash-ce-core.o |
| aes-ce-cipher-y := aes-ce-core.o aes-ce-glue.o |
| aes-ce-blk-y := aes-glue-ce.o aes-ce.o |
| aes-neon-blk-y := aes-glue-neon.o aes-neon.o |
| sha256-arm64-y := sha256-glue.o sha256-core.o |
| sha512-arm64-y := sha512-glue.o sha512-core.o |
| aes-arm64-y := aes-cipher-core.o aes-cipher-glue.o |
| aes-neon-bs-y := aes-neonbs-core.o aes-neonbs-glue.o |
| |
| crypto-arm64-fips-src := $(srctree)/arch/arm64/crypto/ |
| crypto-arm64-fips-modules := sha1-ce.o sha2-ce.o sha512-ce.o ghash-ce.o \ |
| aes-ce-cipher.o aes-ce-blk.o aes-neon-blk.o \ |
| sha256-arm64.o sha512-arm64.o aes-arm64.o \ |
| aes-neon-bs.o |
| |
| crypto-fips-objs += $(foreach o,$(crypto-arm64-fips-modules),$($(o:.o=-y):.o=-fips-arch.o)) |
| |
| CFLAGS_aes-glue-ce-fips-arch.o := -DUSE_V8_CRYPTO_EXTENSIONS |
| |
| $(obj)/aes-glue-%-fips-arch.o: KBUILD_CFLAGS += $(FIPS140_CFLAGS) |
| $(obj)/aes-glue-%-fips-arch.o: $(crypto-arm64-fips-src)/aes-glue.c FORCE |
| $(call if_changed_rule,cc_o_c) |
| |
| $(obj)/%-fips-arch.o: KBUILD_CFLAGS += $(FIPS140_CFLAGS) |
| $(obj)/%-fips-arch.o: $(crypto-arm64-fips-src)/%.c FORCE |
| $(call if_changed_rule,cc_o_c) |
| |
| $(obj)/%-fips-arch.o: $(crypto-arm64-fips-src)/%.S FORCE |
| $(call if_changed_rule,as_o_S) |
| |
| $(obj)/%: $(crypto-arm64-fips-src)/%_shipped |
| $(call cmd,shipped) |
| |
| $(obj)/%-fips-arch.o: $(obj)/%.S FORCE |
| $(call if_changed_rule,as_o_S) |