~mdw / catacomb / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
symm/gcm.h, symm/gcm-def.h: Implement the GCM authenticated encryption mode.
[catacomb] / symm / Makefile.am
CommitLineData
0f00dc4c
MW		 1### -*-makefile-*-
2###
3### Build script for symmetric cryptography
4###
5### (c) 2013 Straylight/Edgeware
6###
7
8###----- Licensing notice ---------------------------------------------------
9###
10### This file is part of Catacomb.
11###
12### Catacomb is free software; you can redistribute it and/or modify
13### it under the terms of the GNU Library General Public License as
14### published by the Free Software Foundation; either version 2 of the
15### License, or (at your option) any later version.
16###
17### Catacomb is distributed in the hope that it will be useful,
18### but WITHOUT ANY WARRANTY; without even the implied warranty of
19### MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
20### GNU Library General Public License for more details.
21###
22### You should have received a copy of the GNU Library General Public
23### License along with Catacomb; if not, write to the Free
24### Software Foundation, Inc., 59 Temple Place - Suite 330, Boston,
25### MA 02111-1307, USA.
26
27include $(top_srcdir)/vars.am
28
29noinst_LTLIBRARIES = libsymm.la
30libsymm_la_SOURCES =
31nodist_libsymm_la_SOURCES =
32
33TEST_LIBS = libsymm.la
34
57f459eb
MW		 35noinst_LTLIBRARIES += libsymmtest.la
36libsymmtest_la_SOURCES =
37libsymmtest_la_CFLAGS = $(AM_CFLAGS) -DSRCDIR=\"$(srcdir)\"
38TEST_LIBS += libsymmtest.la
39
e5b61a8d 40VPATH += $(srcdir)/modes
0f00dc4c
MW		 41
42###--------------------------------------------------------------------------
43### Autogenerated lists.
44
45## Fancy template substitutions.
46multigen = $(PYTHON) $(srcdir)/multigen
47EXTRA_DIST += multigen
48
49## The heart of this is an enormous cross-product of crypto primitives and
50## the corresponding modes of operation. Rather than write it out longhand,
51## we generate it using `multigen'. Unfortunately, this needs to be done
52## at the Automake level, which causes some interesting bootstrapping
53## problems.
24497005
MW		 54##
55## Of course, now that we have this machinery for the complicated modes
56## generation, we might as well use it for simpler things.
0f00dc4c 57include modes.am
24497005 58include stubs.am
0f00dc4c
MW		 59
60EXTRA_DIST += modes.am.in modes.am
24497005 61EXTRA_DIST += stubs.am.in stubs.am
0f00dc4c 62MAINTAINERCLEANFILES += $(srcdir)/modes.am
24497005 63MAINTAINERCLEANFILES += $(srcdir)/stubs.am
0f00dc4c
MW		 64
65## Generate the lists.
77843a37 66$(srcdir)/modes.am: modes.am.in Makefile.am
0f00dc4c
MW		 67 $(AM_V_GEN)$(multigen) -g $(srcdir)/modes.am.in $(srcdir)/modes.am \
68 blkc="$(BLKCS)" \
69 blkcmode="$(BLKCMODES)" \
70 blkcciphermode="$(BLKCCIPHERMODES)" \
96a5a09c 71 blkcaeadmode="$(BLKCAEADMODES)" \
34981755 72 blkcmacmode="$(BLKCMACMODES)" \
0f00dc4c
MW		 73 hash="$(HASHES)" \
74 hashmode="$(HASHMODES)" \
75 hashciphermode="$(HASHCIPHERMODES)" \
76 hashmacmode="$(HASHMACMODES)"
24497005
MW		 77$(srcdir)/stubs.am: stubs.am.in Makefile.am
78 $(AM_V_GEN)$(multigen) -g $(srcdir)/stubs.am.in $(srcdir)/stubs.am \
e91853c1 79 descr,hname,base="$(STUBS_HDR)" cname,cbase="$(STUBS_SRC)"
0f00dc4c
MW		 80
81## Initialize lists of known classes.
82ALL_CIPHERS = $(CIPHER_MODES)
96a5a09c 83ALL_AEADS = $(AEAD_MODES)
0f00dc4c
MW		 84ALL_HASHES = $(HASHES)
85ALL_MACS = $(MAC_MODES)
86
24497005
MW		 87## Stub headers and sources.
88STUBS_HDR =
89STUBS_SRC =
90
0f00dc4c
MW		 91###--------------------------------------------------------------------------
92### Block ciphers.
93
94BLKCS =
95BLKCMODES =
96
97BLKCCIPHERMODES =
98BLKCMODES += $(BLKCCIPHERMODES)
99
96a5a09c
MW		 100BLKCAEADMODES =
101BLKCMODES += $(BLKCAEADMODES)
102
34981755
MW		 103BLKCMACMODES =
104BLKCMODES += $(BLKCMACMODES)
105
0f00dc4c
MW		 106## A tool for translating the AES-contest test vectors into a form our test
107## rigs understand.
108EXTRA_DIST += aes-trans
109
110## Block cipher utility macros, mainly used in mode implementations.
111pkginclude_HEADERS += blkc.h
112
113## Source code and headers for the block ciphers.
114libsymm_la_SOURCES += $(BLKC_C)
115pkginclude_HEADERS += $(BLKC_H)
116
117## Schneier's `Blowfish' block cipher.
118BLKCS += blowfish
c9cfa678
MW		 119nodist_libsymm_la_SOURCES += ../precomp/symm/blowfish-tab.c
120PRECOMPS += $(precomp)/symm/blowfish-tab.c
e5b61a8d 121PRECOMP_PROGS += blowfish-mktab
0f00dc4c 122blowfish_mktab_CPPFLAGS = $(AM_CPPFLAGS) -DQUIET
e5b61a8d 123if !CROSS_COMPILING
c9cfa678
MW		 124$(precomp)/symm/blowfish-tab.c:
125 $(AM_V_at)$(MKDIR_P) $(precomp)/symm
ba57d652 126 $(AM_V_at)$(MAKE) blowfish-mktab$(EXEEXT)
c9cfa678
MW		 127 $(AM_V_GEN)./blowfish-mktab >$(precomp)/symm/blowfish-tab.c.new && \
128 mv $(precomp)/symm/blowfish-tab.c.new \
129 $(precomp)/symm/blowfish-tab.c
e5b61a8d 130endif
0f00dc4c
MW		 131
132## Adams and Tavares' `CAST' block ciphers.
133BLKCS += cast128 cast256
e5b61a8d 134libsymm_la_SOURCES += cast-s.c cast-sk.c cast-base.h
3c8d8c60 135cast256.log: t/cast256
ea054059 136EXTRA_DIST += t/cast256.aes t/cast256.local
0f00dc4c 137MAINTAINERCLEANFILES += $(srcdir)/t/cast256
ea054059
MW		 138t/cast256: t/cast256.aes t/cast256.local
139 $(AM_V_GEN)cd $(srcdir) && \
140 { ./aes-trans CAST256 <t/cast256.aes && \
141 cat t/cast256.local; \
142 } >t/cast256.new && \
143 mv t/cast256.new t/cast256
0f00dc4c
MW		 144
145## IBM's `DES' block cipher, by Feistel, Coppersmith, and others.
146BLKCS += des des3
c9cfa678
MW		 147libsymm_la_SOURCES += des-base.h
148nodist_libsymm_la_SOURCES += ../precomp/symm/des-tab.c
149PRECOMPS += $(precomp)/symm/des-tab.c
e5b61a8d
MW		 150PRECOMP_PROGS += des-mktab
151if !CROSS_COMPILING
c9cfa678
MW		 152$(precomp)/symm/des-tab.c:
153 $(AM_V_at)$(MKDIR_P) $(precomp)/symm
ba57d652 154 $(AM_V_at)$(MAKE) des-mktab$(EXEEXT)
c9cfa678
MW		 155 $(AM_V_GEN)./des-mktab >$(precomp)/symm/des-tab.c.new && \
156 mv $(precomp)/symm/des-tab.c.new $(precomp)/symm/des-tab.c
e5b61a8d 157endif
0f00dc4c
MW		 158
159## Rivest's `DESX' variant, with pre- and post-whitening.
160BLKCS += desx
e5b61a8d 161libsymm_la_SOURCES += desx-tab.c
0f00dc4c
MW		 162
163## Lai and Massey's IDEA.
164BLKCS += idea
165
166## IBM's `MARS' block cipher.
167BLKCS += mars
c9cfa678
MW		 168nodist_libsymm_la_SOURCES += ../precomp/symm/mars-tab.c
169PRECOMPS += $(precomp)/symm/mars-tab.c
e5b61a8d
MW		 170PRECOMP_PROGS += mars-mktab
171if !CROSS_COMPILING
c9cfa678
MW		 172$(precomp)/symm/mars-tab.c:
173 $(AM_V_at)$(MKDIR_P) $(precomp)/symm
ba57d652 174 $(AM_V_at)$(MAKE) mars-mktab$(EXEEXT)
c9cfa678
MW		 175 $(AM_V_GEN)./mars-mktab >$(precomp)/symm/mars-tab.c.new && \
176 mv $(precomp)/symm/mars-tab.c.new $(precomp)/symm/mars-tab.c
e5b61a8d 177endif
3c8d8c60 178mars.log: t/mars
ea054059 179EXTRA_DIST += t/mars.aes t/mars.local
0f00dc4c 180MAINTAINERCLEANFILES += $(srcdir)/t/mars
ea054059
MW		 181t/mars: t/mars.aes t/mars.local
182 $(AM_V_GEN)cd $(srcdir) && \
183 { ./aes-trans Mars <t/mars.aes && \
184 cat t/mars.local; \
185 } >t/mars.new && \
186 mv t/mars.new t/mars
0f00dc4c
MW		 187
188## Daemen, Peeters, Van Assche and Rijmen's `Noekeon'.
189BLKCS += noekeon
190
191## Rivest's `RC2' block cipher.
192BLKCS += rc2
e5b61a8d 193libsymm_la_SOURCES += rc2-tab.c
0f00dc4c
MW		 194
195## Rivest's `RC5'.
196BLKCS += rc5
197
198## Daemen and Rijmen's `Rijndael' block cipher, selected as AES.
199BLKCS += rijndael rijndael192 rijndael256
200libsymm_la_SOURCES += rijndael-base.h rijndael-base.c
226639f3 201if CPUFAM_X86
0f23f75f
MW		 202libsymm_la_SOURCES += rijndael-x86ish-aesni.S
203endif
204if CPUFAM_AMD64
205libsymm_la_SOURCES += rijndael-x86ish-aesni.S
226639f3 206endif
26e182fc
MW		 207if HAVE_AS_ARMV8_CRYPTO
208if CPUFAM_ARMEL
209libsymm_la_SOURCES += rijndael-arm-crypto.S
210endif
211endif
e492db88
MW		 212if CPUFAM_ARM64
213libsymm_la_SOURCES += rijndael-arm64-crypto.S
214endif
c9cfa678
MW		 215nodist_libsymm_la_SOURCES += ../precomp/symm/rijndael-tab.c
216PRECOMPS += $(precomp)/symm/rijndael-tab.c
e5b61a8d
MW		 217PRECOMP_PROGS += rijndael-mktab
218if !CROSS_COMPILING
c9cfa678
MW		 219$(precomp)/symm/rijndael-tab.c:
220 $(AM_V_at)$(MKDIR_P) $(precomp)/symm
ba57d652 221 $(AM_V_at)$(MAKE) rijndael-mktab$(EXEEXT)
c9cfa678
MW		 222 $(AM_V_GEN)./rijndael-mktab >$(precomp)/symm/rijndael-tab.c.new && \
223 mv $(precomp)/symm/rijndael-tab.c.new \
224 $(precomp)/symm/rijndael-tab.c
e5b61a8d 225endif
3c8d8c60 226rijndael.log: t/rijndael
ea054059 227EXTRA_DIST += t/rijndael.aes t/rijndael.local
0f00dc4c 228MAINTAINERCLEANFILES += $(srcdir)/t/rijndael
ea054059
MW		 229t/rijndael: t/rijndael.aes t/rijndael.local
230 $(AM_V_GEN)cd $(srcdir) && \
231 { ./aes-trans Rijndael <t/rijndael.aes && \
232 cat t/rijndael.local; \
233 } >t/rijndael.new && \
234 mv t/rijndael.new t/rijndael
0f00dc4c
MW		 235
236## Massey's `SAFER' block ciphers.
237BLKCS += safer safersk
c9cfa678
MW		 238nodist_libsymm_la_SOURCES += ../precomp/symm/safer-tab.c
239PRECOMPS += $(precomp)/symm/safer-tab.c
e5b61a8d 240PRECOMP_PROGS += safer-mktab
24497005 241STUBS_HDR += SAFER-SK,safersk,safer
84924d42 242STUBS_SRC += safersk,safer
e5b61a8d 243if !CROSS_COMPILING
c9cfa678
MW		 244$(precomp)/symm/safer-tab.c:
245 $(AM_V_at)$(MKDIR_P) $(precomp)/symm
ba57d652 246 $(AM_V_at)$(MAKE) safer-mktab$(EXEEXT)
c9cfa678
MW		 247 $(AM_V_GEN)./safer-mktab >$(precomp)/symm/safer-tab.c.new && \
248 mv $(precomp)/symm/safer-tab.c.new \
249 $(precomp)/symm/safer-tab.c
e5b61a8d 250endif
0f00dc4c
MW		 251
252## Anderson, Biham and Knudsen's `Serpent' block cipher.
253BLKCS += serpent
254libsymm_la_SOURCES += serpent-sbox.h
e5b61a8d 255check_PROGRAMS += serpent-check
0f00dc4c 256TESTS += serpent-check
3c8d8c60 257serpent.log: t/serpent
ea054059 258EXTRA_DIST += t/serpent.aes t/serpent.local
0f00dc4c 259MAINTAINERCLEANFILES += $(srcdir)/t/serpent
ea054059
MW		 260t/serpent: t/serpent.aes t/serpent.local
261 $(AM_V_GEN)cd $(srcdir) && \
262 { ./aes-trans Serpent -v rev=1 <t/serpent.aes && \
263 cat t/serpent.local; \
264 } >t/serpent.new && \
265 mv t/serpent.new t/serpent
0f00dc4c
MW		 266
267## The National Security Agency's `Skipjack' block cipher. You don't want to
268## use this.
269BLKCS += skipjack
e5b61a8d 270libsymm_la_SOURCES += skipjack-tab.c
0f00dc4c
MW		 271
272## Daemen and Rijmen's `Square' block cipher.
273BLKCS += square
c9cfa678
MW		 274nodist_libsymm_la_SOURCES += ../precomp/symm/square-tab.c
275PRECOMPS += $(precomp)/symm/square-tab.c
e5b61a8d
MW		 276PRECOMP_PROGS += square-mktab
277if !CROSS_COMPILING
c9cfa678
MW		 278$(precomp)/symm/square-tab.c:
279 $(AM_V_at)$(MKDIR_P) $(precomp)/symm
ba57d652 280 $(AM_V_at)$(MAKE) square-mktab$(EXEEXT)
c9cfa678
MW		 281 $(AM_V_GEN)./square-mktab >$(precomp)/symm/square-tab.c.new && \
282 mv $(precomp)/symm/square-tab.c.new \
283 $(precomp)/symm/square-tab.c
e5b61a8d 284endif
0f00dc4c
MW		 285
286## Wheeler and Needham's `TEA' and `XTEA' block ciphers.
287BLKCS += tea xtea
288
289## Schneier, Kelsey, Whiting, Wagner, Hall and Ferguson's `Twofish' block
290## cipher.
291BLKCS += twofish
c9cfa678
MW		 292nodist_libsymm_la_SOURCES += ../precomp/symm/twofish-tab.c
293PRECOMPS += $(precomp)/symm/twofish-tab.c
e5b61a8d
MW		 294PRECOMP_PROGS += twofish-mktab
295if !CROSS_COMPILING
c9cfa678
MW		 296$(precomp)/symm/twofish-tab.c:
297 $(AM_V_at)$(MKDIR_P) $(precomp)/symm
ba57d652 298 $(AM_V_at)$(MAKE) twofish-mktab$(EXEEXT)
c9cfa678
MW		 299 $(AM_V_GEN)./twofish-mktab >$(precomp)/symm/twofish-tab.c.new && \
300 mv $(precomp)/symm/twofish-tab.c.new \
301 $(precomp)/symm/twofish-tab.c
e5b61a8d 302endif
3c8d8c60 303twofish.log: t/twofish
ea054059 304EXTRA_DIST += t/twofish.aes t/twofish.local
0f00dc4c 305MAINTAINERCLEANFILES += $(srcdir)/t/twofish
ea054059
MW		 306t/twofish: t/twofish.aes t/twofish.local
307 $(AM_V_GEN)cd $(srcdir) && \
308 { ./aes-trans Twofish <t/twofish.aes && \
309 cat t/twofish.local; \
310 } >t/twofish.new && \
311 mv t/twofish.new t/twofish
0f00dc4c
MW		 312
313## The old NIST modes for DES.
314BLKCCIPHERMODES += cbc cfb ecb ofb
315
316## Counter mode.
317BLKCCIPHERMODES += counter
318
ea054059
MW		 319## CMAC mode.
320BLKCMACMODES += cmac
321
2964c388 322## Various AEAD modes.
50df5733
MW		 323BLKCAEADMODES += eax gcm
324libsymm_la_SOURCES += gcm.c
2964c388 325
0f00dc4c
MW		 326###--------------------------------------------------------------------------
327### Hash functions.
328
329HASHES =
330HASHMODES =
331
332HASHCIPHERMODES =
333HASHMODES += $(HASHCIPHERMODES)
334
335HASHMACMODES =
336HASHMODES += $(HASHMACMODES)
337
338## Common definitions for hash functions.
339pkginclude_HEADERS += hash.h
340
341## Source code and headers for the hash functions.
342libsymm_la_SOURCES += $(HASH_C)
343pkginclude_HEADERS += $(HASH_H)
344
345## Lim and KISA's `HAS-160', recommended for use with KCDSA.
346HASHES += has160
347
348## Rivest's `MD' series of hash functions
349HASHES += md2 md4 md5
e5b61a8d 350libsymm_la_SOURCES += md2-tab.c
0f00dc4c
MW		 351
352## Dobbertin, Bosselaers and Preneel's `RIPEMD' suite.
353HASHES += rmd128 rmd160 rmd256 rmd320
354
355## The National Security Agency's `SHA-1' hash function.
356HASHES += sha
357
358## The National Security Agency's `SHA-2' suite.
359HASHES += sha224 sha256
12a5df42 360HASHES += sha384 sha512 sha512/224 sha512/256
24497005
MW		 361STUBS_HDR += SHA-224,sha224,sha256
362STUBS_HDR += SHA-384,sha384,sha512
12a5df42
MW		 363STUBS_HDR += SHA-512/256,sha512-256,sha512
364STUBS_HDR += SHA-512/224,sha512-224,sha512
84924d42
MW		 365STUBS_SRC += sha224,sha256
366STUBS_SRC += sha384,sha512
12a5df42
MW		 367STUBS_SRC += sha512-256,sha512
368STUBS_SRC += sha512-224,sha512
0f00dc4c
MW		 369
370## Anderson and Biham's `Tiger' hash function.
371HASHES += tiger
c9cfa678
MW		 372libsymm_la_SOURCES += tiger-base.h
373nodist_libsymm_la_SOURCES += ../precomp/symm/tiger-tab.c
374PRECOMPS += $(precomp)/symm/tiger-tab.c
e5b61a8d
MW		 375PRECOMP_PROGS += tiger-mktab
376if !CROSS_COMPILING
c9cfa678
MW		 377$(precomp)/symm/tiger-tab.c:
378 $(AM_V_at)$(MKDIR_P) $(precomp)/symm
ba57d652 379 $(AM_V_at)$(MAKE) tiger-mktab$(EXEEXT)
c9cfa678
MW		 380 $(AM_V_GEN)./tiger-mktab >$(precomp)/symm/tiger-tab.c.new && \
381 mv $(precomp)/symm/tiger-tab.c.new \
382 $(precomp)/symm/tiger-tab.c
e5b61a8d 383endif
0f00dc4c
MW		 384
385## Barreto and Rijmen's `Whirlpool' hash function.
386HASHES += whirlpool whirlpool256
c9cfa678
MW		 387nodist_libsymm_la_SOURCES += ../precomp/symm/whirlpool-tab.c
388PRECOMPS += $(precomp)/symm/whirlpool-tab.c
e5b61a8d 389PRECOMP_PROGS += whirlpool-mktab
24497005 390STUBS_HDR += Whirlpool-256,whirlpool256,whirlpool
84924d42 391STUBS_SRC += whirlpool256,whirlpool
e5b61a8d 392if !CROSS_COMPILING
c9cfa678
MW		 393$(precomp)/symm/whirlpool-tab.c:
394 $(AM_V_at)$(MKDIR_P) $(precomp)/symm
ba57d652 395 $(AM_V_at)$(MAKE) whirlpool-mktab$(EXEEXT)
c9cfa678
MW		 396 $(AM_V_GEN)./whirlpool-mktab \
397 >$(precomp)/symm/whirlpool-tab.c.new && \
398 mv $(precomp)/symm/whirlpool-tab.c.new \
399 $(precomp)/symm/whirlpool-tab.c
e5b61a8d 400endif
0f00dc4c 401
a905c0d6
MW		 402## Bertoni, Daemen, Peeters, and Van Assche's `Keccak', selected as the basis
403## for SHA-3.
404pkginclude_HEADERS += keccak1600.h
405libsymm_la_SOURCES += keccak1600.c
406TESTS += keccak1600.t$(EXEEXT)
407EXTRA_DIST += t/keccak1600
408
78b4ea88
MW		 409pkginclude_HEADERS += sha3.h
410libsymm_la_SOURCES += sha3.c
411
412HASHES += sha3-224 sha3-256 sha3-384 sha3-512
413STUBS_HDR += SHA3-224,sha3-224,sha3
414STUBS_HDR += SHA3-256,sha3-256,sha3
415STUBS_HDR += SHA3-384,sha3-384,sha3
416STUBS_HDR += SHA3-512,sha3-512,sha3
417STUBS_SRC += sha3-224,sha3
418STUBS_SRC += sha3-256,sha3
419STUBS_SRC += sha3-384,sha3
420STUBS_SRC += sha3-512,sha3
421
422STUBS_HDR += SHAKE128,shake128,sha3
423STUBS_HDR += SHAKE256,shake256,sha3
424
425STUBS_HDR += SHAKE128-XOF,shake128-xof,sha3
426STUBS_HDR += SHAKE256-XOF,shake256-xof,sha3
427
428STUBS_HDR += KMAC128,kmac128,sha3
429STUBS_HDR += KMAC256,kmac256,sha3
430
431ALL_HASHES += shake128 shake256
432ALL_CIPHERS += shake128-xof shake256-xof
433ALL_MACS += kmac128 kmac256
434
435TESTS += sha3.t$(EXEEXT)
436SHA3_TESTS = t/SHA3_224ShortMsg.rsp
437SHA3_TESTS += t/SHA3_224LongMsg.rsp
438SHA3_TESTS += t/SHA3_256ShortMsg.rsp
439SHA3_TESTS += t/SHA3_256LongMsg.rsp
440SHA3_TESTS += t/SHA3_384ShortMsg.rsp
441SHA3_TESTS += t/SHA3_384LongMsg.rsp
442SHA3_TESTS += t/SHA3_512ShortMsg.rsp
443SHA3_TESTS += t/SHA3_512LongMsg.rsp
444SHA3_TESTS += t/SHA3_224Monte.rsp
445SHA3_TESTS += t/SHA3_256Monte.rsp
446SHA3_TESTS += t/SHA3_384Monte.rsp
447SHA3_TESTS += t/SHA3_512Monte.rsp
448SHA3_TESTS += t/SHAKE128ShortMsg.rsp
449SHA3_TESTS += t/SHAKE128LongMsg.rsp
450SHA3_TESTS += t/SHAKE128VariableOut.rsp
451SHA3_TESTS += t/SHAKE256ShortMsg.rsp
452SHA3_TESTS += t/SHAKE256LongMsg.rsp
453SHA3_TESTS += t/SHAKE256VariableOut.rsp
454EXTRA_DIST += $(SHA3_TESTS) sha3-trans t/sha3.local t/sha3
455MAINTAINERCLEANFILES += $(srcdir)/t/sha3
456sha3.log: t/sha3
457$(srcdir)/t/sha3: $(SHA3_TESTS) sha3-trans t/sha3.local
458 $(AM_V_GEN)cd $(srcdir) && \
459 { ./sha3-trans $(SHA3_TESTS); \
460 cat t/sha3.local; } >t/sha3.new && \
461 mv t/sha3.new t/sha3
462
0f00dc4c
MW		 463## Bellare, Canetti and Krawczyk's `HMAC' mode for message authentication.
464HASHMACMODES += hmac
465
466## MGF1, used in OAEP and PSS.
467HASHCIPHERMODES += mgf
468
469###--------------------------------------------------------------------------
470### Other symmetric primitives.
471
472## The CRC32 algorithm, which is useful, but has no worthwhile security.
473pkginclude_HEADERS += crc32.h
474libsymm_la_SOURCES += crc32.c
475ALL_HASHES += crc32=gcrc32
476
477## Rivest's `RC4' stream cipher.
478pkginclude_HEADERS += rc4.h
479libsymm_la_SOURCES += rc4.c
ba57d652 480TESTS += rc4.t$(EXEEXT)
0f00dc4c
MW		 481EXTRA_DIST += t/rc4
482ALL_CIPHERS += rc4
483
484## Coppersmith and Rogaway's `SEAL' pseudorandom function.
485pkginclude_HEADERS += seal.h
486libsymm_la_SOURCES += seal.c
ba57d652 487TESTS += seal.t$(EXEEXT)
0f00dc4c
MW		 488EXTRA_DIST += t/seal
489ALL_CIPHERS += seal
490
194e93f2
MW		 491## Bernstein's `Salsa20' stream cipher. Most of the test vectors come from
492## the eSTREAM project, captured by the Internet Archive's Wayback Machine at
493##
494## http://web.archive.org/web/20070814004154/http://www.ecrypt.eu.org/stream/svn/viewcvs.cgi/ecrypt/trunk/submissions/salsa20.tar.gz?view=tar
495##
496## and automatically converted into the format we want.
497EXTRA_DIST += salsa20-tvconv
498pkginclude_HEADERS += salsa20.h salsa20-core.h
499libsymm_la_SOURCES += salsa20.c
e10e6494 500if CPUFAM_X86
0f23f75f
MW		 501libsymm_la_SOURCES += salsa20-x86ish-sse2.S
502endif
503if CPUFAM_AMD64
504libsymm_la_SOURCES += salsa20-x86ish-sse2.S
e10e6494 505endif
704d59c8
MW		 506if CPUFAM_ARMEL
507libsymm_la_SOURCES += salsa20-arm-neon.S
508endif
e492db88
MW		 509if CPUFAM_ARM64
510libsymm_la_SOURCES += salsa20-arm64.S
511endif
ba57d652 512TESTS += salsa20.t$(EXEEXT)
194e93f2 513ALL_CIPHERS += salsa20 salsa2012 salsa208
1778ca95 514ALL_CIPHERS += salsa20-ietf salsa2012-ietf salsa208-ietf
194e93f2
MW		 515ALL_CIPHERS += xsalsa20 xsalsa2012 xsalsa208
516STUBS_HDR += Salsa20/12,salsa2012,salsa20
517STUBS_HDR += Salsa20/8,salsa208,salsa20
1778ca95
MW		 518STUBS_HDR += Salsa20-IETF,salsa20-ietf,salsa20
519STUBS_HDR += Salsa20/12-IETF,salsa2012-ietf,salsa20
520STUBS_HDR += Salsa20/8-IETF,salsa208-ietf,salsa20
194e93f2
MW		 521STUBS_HDR += XSalsa20,xsalsa20,salsa20
522STUBS_HDR += XSalsa20/12,xsalsa2012,salsa20
523STUBS_HDR += XSalsa20/8,xsalsa208,salsa20
524EXTRA_DIST += t/salsa20
525MAINTAINERCLEANFILES += t/salsa20
3c8d8c60 526salsa20.log: t/salsa20
194e93f2
MW		 527SALSA20_ESTREAM_TV = t/salsa20.estream
528SALSA20_ESTREAM_TV += t/salsa2012.estream
529SALSA20_ESTREAM_TV += t/salsa208.estream
530EXTRA_DIST += t/salsa20.local $(SALSA20_ESTREAM_TV)
531t/salsa20: salsa20-tvconv t/salsa20.local $(SALSA20_ESTREAM_TV)
532 $(AM_V_GEN)cd $(srcdir) && \
533 { echo "### GENERATED by salsa20-tvconv" && \
534 cat t/salsa20.local && \
535 ./salsa20-tvconv $(SALSA20_ESTREAM_TV); \
536 } >t/salsa20.new && \
537 mv t/salsa20.new t/salsa20
538
55d81656
MW		 539## Bernstein's `ChaCha' stream cipher.
540pkginclude_HEADERS += chacha.h chacha-core.h
541libsymm_la_SOURCES += chacha.c
e10e6494 542if CPUFAM_X86
0f23f75f
MW		 543libsymm_la_SOURCES += chacha-x86ish-sse2.S
544endif
545if CPUFAM_AMD64
546libsymm_la_SOURCES += chacha-x86ish-sse2.S
e10e6494 547endif
704d59c8
MW		 548if CPUFAM_ARMEL
549libsymm_la_SOURCES += chacha-arm-neon.S
550endif
e492db88
MW		 551if CPUFAM_ARM64
552libsymm_la_SOURCES += chacha-arm64.S
553endif
ba57d652 554TESTS += chacha.t$(EXEEXT)
55d81656
MW		 555EXTRA_DIST += t/chacha
556ALL_CIPHERS += chacha20 chacha12 chacha8
1778ca95 557ALL_CIPHERS += chacha20-ietf chacha12-ietf chacha8-ietf
55d81656
MW		 558ALL_CIPHERS += xchacha20 xchacha12 xchacha8
559STUBS_HDR += ChaCha20,chacha20,chacha
560STUBS_HDR += ChaCha12,chacha12,chacha
561STUBS_HDR += ChaCha8,chacha8,chacha
1778ca95
MW		 562STUBS_HDR += ChaCha20-IETF,chacha20-ietf,chacha
563STUBS_HDR += ChaCha12-IETF,chacha12-ietf,chacha
564STUBS_HDR += ChaCha8-IETF,chacha8-ietf,chacha
55d81656
MW		 565STUBS_HDR += XChaCha20,xchacha20,chacha
566STUBS_HDR += XChaCha12,xchacha12,chacha
567STUBS_HDR += XChaCha8,xchacha8,chacha
568
57496a50
MW		 569## Bernstein's `Poly1305' message authentication code.
570pkginclude_HEADERS += poly1305.h
571libsymm_la_SOURCES += poly1305.c
572TESTS += poly1305.t$(EXEEXT)
573TESTS += poly1305-p11.t$(EXEEXT)
574EXTRA_DIST += t/poly1305
575
576check_PROGRAMS += poly1305-p11.t
577poly1305_p11_t_SOURCES = poly1305.c
578poly1305_p11_t_CPPFLAGS = $(AM_CPPFLAGS) -DTEST_RIG -DSRCDIR="\"$(srcdir)\""
579poly1305_p11_t_CPPFLAGS += -DPOLY1305_IMPL=11
580poly1305_p11_t_LDADD = $(TEST_LIBS) $(top_builddir)/libcatacomb.la
581poly1305_p11_t_LDADD += $(mLib_LIBS) $(CATACOMB_LIBS) $(LIBS)
582
aac19f0d
MW		 583## Combining Salsa20/ChaCha with Poly1305.
584pkginclude_HEADERS += latinpoly.h latinpoly-def.h
585libsymm_la_SOURCES += latinpoly.c chacha-poly1305.c salsa20-poly1305.c
586libsymmtest_la_SOURCES += latinpoly-test.c latinpoly-test.h
587
588ALL_AEADS += chacha20-poly1305 salsa20-poly1305
589ALL_AEADS += chacha12-poly1305 salsa2012-poly1305
590ALL_AEADS += chacha8-poly1305 salsa208-poly1305
591STUBS_HDR += ChaCha20-Poly1305,chacha20-poly1305,latinpoly
592STUBS_HDR += ChaCha12-Poly1305,chacha12-poly1305,latinpoly
593STUBS_HDR += ChaCha8-Poly1305,chacha8-poly1305,latinpoly
594STUBS_HDR += Salsa20-Poly1305,salsa20-poly1305,latinpoly
595STUBS_HDR += Salsa20/12-Poly1305,salsa2012-poly1305,latinpoly
596STUBS_HDR += Salsa20/8-Poly1305,salsa208-poly1305,latinpoly
597TESTS += chacha-poly1305.t$(EXEEXT)
598TESTS += salsa20-poly1305.t$(EXEEXT)
599
0f00dc4c
MW		 600###--------------------------------------------------------------------------
601### Autogenerated mode implementations.
602
603## The master stamp file, indicating that we generated all of the sources.
0f00dc4c 604EXTRA_DIST += mode.h.in mode.c.in
e5b61a8d
MW		 605EXTRA_DIST += modes/gen-stamp
606MAINTAINERCLEANFILES += modes/gen-stamp
77843a37 607modes/gen-stamp: Makefile.am
e5b61a8d 608 $(AM_V_at)$(MKDIR_P) $(srcdir)/modes
0f00dc4c 609 $(AM_V_GEN)$(multigen) -g $(srcdir)/mode.c.in \
aaae9cab 610 $(srcdir)/modes/@{base:f}-@mode.c \
0f00dc4c
MW		 611 base="$(BLKCS)" mode="$(BLKCMODES)"
612 $(AM_V_at)$(multigen) -g $(srcdir)/mode.h.in \
aaae9cab 613 $(srcdir)/modes/@{base:f}-@mode.h \
0f00dc4c
MW		 614 base="$(BLKCS)" mode="$(BLKCMODES)"
615 $(AM_V_at)$(multigen) -g $(srcdir)/mode.c.in \
aaae9cab 616 $(srcdir)/modes/@{base:f}-@mode.c \
0f00dc4c
MW		 617 base="$(HASHES)" mode="$(HASHMODES)"
618 $(AM_V_at)$(multigen) -g $(srcdir)/mode.h.in \
aaae9cab 619 $(srcdir)/modes/@{base:f}-@mode.h \
0f00dc4c 620 base="$(HASHES)" mode="$(HASHMODES)"
e5b61a8d 621 $(AM_V_at)touch $(srcdir)/modes/gen-stamp
0f00dc4c
MW		 622
623## The individual mode interfaces and implementations.
624pkginclude_HEADERS += $(MODE_H)
625
626## Generated implementations.
627BUILT_SOURCES += $(GENMODES_C)
e5b61a8d 628MAINTAINERCLEANFILES += $(GENMODES_C)
ef75f314 629libsymm_la_SOURCES += $(GENMODES_C)
0f00dc4c
MW		 630$(GENMODES_C): modes/gen-stamp
631
632## Generated interfaces.
633BUILT_SOURCES += $(GENMODES_H)
e5b61a8d 634MAINTAINERCLEANFILES += $(GENMODES_H)
ef75f314 635pkginclude_HEADERS += $(GENMODES_H)
0f00dc4c
MW		 636$(GENMODES_H): modes/gen-stamp
637
57f459eb
MW		 638## Additional test machinery.
639libsymmtest_la_SOURCES += modes-test.c modes-test.h
640
0f00dc4c 641###--------------------------------------------------------------------------
24497005
MW		 642### Autogenerated stub headers.
643
644## The master stamp file.
645EXTRA_DIST += stub.h.in
646EXTRA_DIST += stubs.gen-stamp
647MAINTAINERCLEANFILES += stubs.gen-stamp
648stubs.gen-stamp: Makefile.am
649 $(AM_V_at)$(MKDIR_P) $(srcdir)/stubs
650 $(AM_V_GEN)$(multigen) -g $(srcdir)/stub.h.in \
651 $(srcdir)/@name.h descr,name,base="$(STUBS_HDR)"
652 $(AM_V_GEN)$(multigen) -g $(srcdir)/stub.c.in \
e91853c1 653 $(srcdir)/@name.c name,base="$(STUBS_SRC)"
24497005
MW		 654 $(AM_V_at)touch $(srcdir)/stubs.gen-stamp
655
656## Generated stub headers.
657BUILT_SOURCES += $(STUB_H) $(STUB_C)
658MAINTAINERCLEANFILES += $(STUB_H) $(STUB_C)
659pkginclude_HEADERS += $(STUB_H)
660$(STUB_H) $(STUB_C): stubs.gen-stamp
661
662###--------------------------------------------------------------------------
0f00dc4c
MW		 663### Tables of classes for encryption, hashing, and message authentication.
664
665## The skeleton for the class tables.
666EXTRA_DIST += gthingtab.c.in
667
668## Table of cipher classes.
669pkginclude_HEADERS += gcipher.h
670CLEANFILES += gciphertab.c
671nodist_libsymm_la_SOURCES += gciphertab.c
77843a37 672gciphertab.c: gthingtab.c.in Makefile.am
0f00dc4c
MW		 673 $(AM_V_GEN)$(multigen) -g $(srcdir)/gthingtab.c.in gciphertab.c \
674 what=gcipher cls=gccipher thing="$(ALL_CIPHERS)"
675
96a5a09c
MW		 676## Table of AEAD classes.
677pkginclude_HEADERS += gaead.h
678CLEANFILES += gaeadtab.c
679libsymm_la_SOURCES += gaead.c
680nodist_libsymm_la_SOURCES += gaeadtab.c
681gaeadtab.c: gthingtab.c.in Makefile.am
682 $(AM_V_GEN)$(multigen) -g $(srcdir)/gthingtab.c.in gaeadtab.c \
683 what=gaead cls=gcaead thing="$(ALL_AEADS)"
684
0f00dc4c
MW		 685## Table of hash classes.
686pkginclude_HEADERS += ghash.h ghash-def.h
687CLEANFILES += ghashtab.c
688nodist_libsymm_la_SOURCES += ghashtab.c
77843a37 689ghashtab.c: gthingtab.c.in Makefile.am
0f00dc4c
MW		 690 $(AM_V_GEN)$(multigen) -g $(srcdir)/gthingtab.c.in ghashtab.c \
691 what=ghash cls=gchash thing="$(ALL_HASHES)"
692
693## Table of MAC classes.
694pkginclude_HEADERS += gmac.h
695CLEANFILES += gmactab.c
696nodist_libsymm_la_SOURCES += gmactab.c
77843a37 697gmactab.c: gthingtab.c.in Makefile.am
0f00dc4c
MW		 698 $(AM_V_GEN)$(multigen) -g $(srcdir)/gthingtab.c.in gmactab.c \
699 what=gmac cls=gcmac thing="$(ALL_MACS)"
700
701###--------------------------------------------------------------------------
702### Testing.
703
704## Run the test programs.
705TESTS += $(SYMM_TESTS)
706EXTRA_DIST += $(SYMM_TEST_FILES)
57f459eb 707EXTRA_DIST += $(REGRESSION_TEST_FILES)
0f00dc4c 708
57f459eb
MW		 709t/modes/%.regress:
710 $(MAKE) modes/$*.t && \
711 mkdir -p $(srcdir)/t/modes/ && \
712 modes/$*.t -o$(srcdir)/$@.new && \
713 mv $(srcdir)/$@.new $(srcdir)/$@
0f00dc4c
MW		 714
715## Clean the debris from the `modes' subdirectory.
ba57d652 716CLEANFILES += modes/*.to modes/*.t$(EXEEXT)
0f00dc4c
MW		 717
718###----- That's all, folks --------------------------------------------------
Catacomb cryptographic library