symm/strobe.c: Implement Hamburg's STROBE framework.
[catacomb] / symm / Makefile.am
CommitLineData
0f00dc4c
MW
1### -*-makefile-*-
2###
3### Build script for symmetric cryptography
4###
5### (c) 2013 Straylight/Edgeware
6###
7
8###----- Licensing notice ---------------------------------------------------
9###
10### This file is part of Catacomb.
11###
12### Catacomb is free software; you can redistribute it and/or modify
13### it under the terms of the GNU Library General Public License as
14### published by the Free Software Foundation; either version 2 of the
15### License, or (at your option) any later version.
16###
17### Catacomb is distributed in the hope that it will be useful,
18### but WITHOUT ANY WARRANTY; without even the implied warranty of
19### MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
20### GNU Library General Public License for more details.
21###
22### You should have received a copy of the GNU Library General Public
23### License along with Catacomb; if not, write to the Free
24### Software Foundation, Inc., 59 Temple Place - Suite 330, Boston,
25### MA 02111-1307, USA.
26
27include $(top_srcdir)/vars.am
28
29noinst_LTLIBRARIES = libsymm.la
30libsymm_la_SOURCES =
31nodist_libsymm_la_SOURCES =
32
33TEST_LIBS = libsymm.la
34
57f459eb
MW
35noinst_LTLIBRARIES += libsymmtest.la
36libsymmtest_la_SOURCES =
37libsymmtest_la_CFLAGS = $(AM_CFLAGS) -DSRCDIR=\"$(srcdir)\"
38TEST_LIBS += libsymmtest.la
39
e5b61a8d 40VPATH += $(srcdir)/modes
0f00dc4c
MW
41
42###--------------------------------------------------------------------------
43### Autogenerated lists.
44
45## Fancy template substitutions.
46multigen = $(PYTHON) $(srcdir)/multigen
47EXTRA_DIST += multigen
48
49## The heart of this is an enormous cross-product of crypto primitives and
50## the corresponding modes of operation. Rather than write it out longhand,
51## we generate it using `multigen'. Unfortunately, this needs to be done
52## at the Automake level, which causes some interesting bootstrapping
53## problems.
24497005
MW
54##
55## Of course, now that we have this machinery for the complicated modes
56## generation, we might as well use it for simpler things.
0f00dc4c 57include modes.am
24497005 58include stubs.am
0f00dc4c
MW
59
60EXTRA_DIST += modes.am.in modes.am
24497005 61EXTRA_DIST += stubs.am.in stubs.am
0f00dc4c 62MAINTAINERCLEANFILES += $(srcdir)/modes.am
24497005 63MAINTAINERCLEANFILES += $(srcdir)/stubs.am
0f00dc4c
MW
64
65## Generate the lists.
77843a37 66$(srcdir)/modes.am: modes.am.in Makefile.am
0f00dc4c
MW
67 $(AM_V_GEN)$(multigen) -g $(srcdir)/modes.am.in $(srcdir)/modes.am \
68 blkc="$(BLKCS)" \
69 blkcmode="$(BLKCMODES)" \
70 blkcciphermode="$(BLKCCIPHERMODES)" \
96a5a09c 71 blkcaeadmode="$(BLKCAEADMODES)" \
34981755 72 blkcmacmode="$(BLKCMACMODES)" \
0f00dc4c
MW
73 hash="$(HASHES)" \
74 hashmode="$(HASHMODES)" \
75 hashciphermode="$(HASHCIPHERMODES)" \
76 hashmacmode="$(HASHMACMODES)"
24497005
MW
77$(srcdir)/stubs.am: stubs.am.in Makefile.am
78 $(AM_V_GEN)$(multigen) -g $(srcdir)/stubs.am.in $(srcdir)/stubs.am \
e91853c1 79 descr,hname,base="$(STUBS_HDR)" cname,cbase="$(STUBS_SRC)"
0f00dc4c
MW
80
81## Initialize lists of known classes.
82ALL_CIPHERS = $(CIPHER_MODES)
96a5a09c 83ALL_AEADS = $(AEAD_MODES)
0f00dc4c
MW
84ALL_HASHES = $(HASHES)
85ALL_MACS = $(MAC_MODES)
86
24497005
MW
87## Stub headers and sources.
88STUBS_HDR =
89STUBS_SRC =
90
0f00dc4c
MW
91###--------------------------------------------------------------------------
92### Block ciphers.
93
94BLKCS =
95BLKCMODES =
96
97BLKCCIPHERMODES =
98BLKCMODES += $(BLKCCIPHERMODES)
99
96a5a09c
MW
100BLKCAEADMODES =
101BLKCMODES += $(BLKCAEADMODES)
102
34981755
MW
103BLKCMACMODES =
104BLKCMODES += $(BLKCMACMODES)
105
0f00dc4c
MW
106## A tool for translating the AES-contest test vectors into a form our test
107## rigs understand.
108EXTRA_DIST += aes-trans
109
110## Block cipher utility macros, mainly used in mode implementations.
111pkginclude_HEADERS += blkc.h
112
113## Source code and headers for the block ciphers.
114libsymm_la_SOURCES += $(BLKC_C)
115pkginclude_HEADERS += $(BLKC_H)
116
117## Schneier's `Blowfish' block cipher.
118BLKCS += blowfish
c9cfa678
MW
119nodist_libsymm_la_SOURCES += ../precomp/symm/blowfish-tab.c
120PRECOMPS += $(precomp)/symm/blowfish-tab.c
e5b61a8d 121PRECOMP_PROGS += blowfish-mktab
0f00dc4c 122blowfish_mktab_CPPFLAGS = $(AM_CPPFLAGS) -DQUIET
e5b61a8d 123if !CROSS_COMPILING
c9cfa678
MW
124$(precomp)/symm/blowfish-tab.c:
125 $(AM_V_at)$(MKDIR_P) $(precomp)/symm
ba57d652 126 $(AM_V_at)$(MAKE) blowfish-mktab$(EXEEXT)
c9cfa678
MW
127 $(AM_V_GEN)./blowfish-mktab >$(precomp)/symm/blowfish-tab.c.new && \
128 mv $(precomp)/symm/blowfish-tab.c.new \
129 $(precomp)/symm/blowfish-tab.c
e5b61a8d 130endif
0f00dc4c
MW
131
132## Adams and Tavares' `CAST' block ciphers.
133BLKCS += cast128 cast256
e5b61a8d 134libsymm_la_SOURCES += cast-s.c cast-sk.c cast-base.h
3c8d8c60 135cast256.log: t/cast256
ea054059 136EXTRA_DIST += t/cast256.aes t/cast256.local
0f00dc4c 137MAINTAINERCLEANFILES += $(srcdir)/t/cast256
ea054059
MW
138t/cast256: t/cast256.aes t/cast256.local
139 $(AM_V_GEN)cd $(srcdir) && \
140 { ./aes-trans CAST256 <t/cast256.aes && \
141 cat t/cast256.local; \
142 } >t/cast256.new && \
143 mv t/cast256.new t/cast256
0f00dc4c
MW
144
145## IBM's `DES' block cipher, by Feistel, Coppersmith, and others.
146BLKCS += des des3
c9cfa678
MW
147libsymm_la_SOURCES += des-base.h
148nodist_libsymm_la_SOURCES += ../precomp/symm/des-tab.c
149PRECOMPS += $(precomp)/symm/des-tab.c
e5b61a8d
MW
150PRECOMP_PROGS += des-mktab
151if !CROSS_COMPILING
c9cfa678
MW
152$(precomp)/symm/des-tab.c:
153 $(AM_V_at)$(MKDIR_P) $(precomp)/symm
ba57d652 154 $(AM_V_at)$(MAKE) des-mktab$(EXEEXT)
c9cfa678
MW
155 $(AM_V_GEN)./des-mktab >$(precomp)/symm/des-tab.c.new && \
156 mv $(precomp)/symm/des-tab.c.new $(precomp)/symm/des-tab.c
e5b61a8d 157endif
0f00dc4c
MW
158
159## Rivest's `DESX' variant, with pre- and post-whitening.
160BLKCS += desx
e5b61a8d 161libsymm_la_SOURCES += desx-tab.c
0f00dc4c
MW
162
163## Lai and Massey's IDEA.
164BLKCS += idea
165
166## IBM's `MARS' block cipher.
167BLKCS += mars
c9cfa678
MW
168nodist_libsymm_la_SOURCES += ../precomp/symm/mars-tab.c
169PRECOMPS += $(precomp)/symm/mars-tab.c
e5b61a8d
MW
170PRECOMP_PROGS += mars-mktab
171if !CROSS_COMPILING
c9cfa678
MW
172$(precomp)/symm/mars-tab.c:
173 $(AM_V_at)$(MKDIR_P) $(precomp)/symm
ba57d652 174 $(AM_V_at)$(MAKE) mars-mktab$(EXEEXT)
c9cfa678
MW
175 $(AM_V_GEN)./mars-mktab >$(precomp)/symm/mars-tab.c.new && \
176 mv $(precomp)/symm/mars-tab.c.new $(precomp)/symm/mars-tab.c
e5b61a8d 177endif
3c8d8c60 178mars.log: t/mars
ea054059 179EXTRA_DIST += t/mars.aes t/mars.local
0f00dc4c 180MAINTAINERCLEANFILES += $(srcdir)/t/mars
ea054059
MW
181t/mars: t/mars.aes t/mars.local
182 $(AM_V_GEN)cd $(srcdir) && \
183 { ./aes-trans Mars <t/mars.aes && \
184 cat t/mars.local; \
185 } >t/mars.new && \
186 mv t/mars.new t/mars
0f00dc4c
MW
187
188## Daemen, Peeters, Van Assche and Rijmen's `Noekeon'.
189BLKCS += noekeon
190
191## Rivest's `RC2' block cipher.
192BLKCS += rc2
e5b61a8d 193libsymm_la_SOURCES += rc2-tab.c
0f00dc4c
MW
194
195## Rivest's `RC5'.
196BLKCS += rc5
197
198## Daemen and Rijmen's `Rijndael' block cipher, selected as AES.
199BLKCS += rijndael rijndael192 rijndael256
200libsymm_la_SOURCES += rijndael-base.h rijndael-base.c
226639f3 201if CPUFAM_X86
0f23f75f
MW
202libsymm_la_SOURCES += rijndael-x86ish-aesni.S
203endif
204if CPUFAM_AMD64
205libsymm_la_SOURCES += rijndael-x86ish-aesni.S
226639f3 206endif
26e182fc
MW
207if HAVE_AS_ARMV8_CRYPTO
208if CPUFAM_ARMEL
209libsymm_la_SOURCES += rijndael-arm-crypto.S
210endif
211endif
e492db88
MW
212if CPUFAM_ARM64
213libsymm_la_SOURCES += rijndael-arm64-crypto.S
214endif
c9cfa678
MW
215nodist_libsymm_la_SOURCES += ../precomp/symm/rijndael-tab.c
216PRECOMPS += $(precomp)/symm/rijndael-tab.c
e5b61a8d
MW
217PRECOMP_PROGS += rijndael-mktab
218if !CROSS_COMPILING
c9cfa678
MW
219$(precomp)/symm/rijndael-tab.c:
220 $(AM_V_at)$(MKDIR_P) $(precomp)/symm
ba57d652 221 $(AM_V_at)$(MAKE) rijndael-mktab$(EXEEXT)
c9cfa678
MW
222 $(AM_V_GEN)./rijndael-mktab >$(precomp)/symm/rijndael-tab.c.new && \
223 mv $(precomp)/symm/rijndael-tab.c.new \
224 $(precomp)/symm/rijndael-tab.c
e5b61a8d 225endif
3c8d8c60 226rijndael.log: t/rijndael
ea054059 227EXTRA_DIST += t/rijndael.aes t/rijndael.local
0f00dc4c 228MAINTAINERCLEANFILES += $(srcdir)/t/rijndael
ea054059
MW
229t/rijndael: t/rijndael.aes t/rijndael.local
230 $(AM_V_GEN)cd $(srcdir) && \
231 { ./aes-trans Rijndael <t/rijndael.aes && \
232 cat t/rijndael.local; \
233 } >t/rijndael.new && \
234 mv t/rijndael.new t/rijndael
0f00dc4c
MW
235
236## Massey's `SAFER' block ciphers.
237BLKCS += safer safersk
c9cfa678
MW
238nodist_libsymm_la_SOURCES += ../precomp/symm/safer-tab.c
239PRECOMPS += $(precomp)/symm/safer-tab.c
e5b61a8d 240PRECOMP_PROGS += safer-mktab
24497005 241STUBS_HDR += SAFER-SK,safersk,safer
84924d42 242STUBS_SRC += safersk,safer
e5b61a8d 243if !CROSS_COMPILING
c9cfa678
MW
244$(precomp)/symm/safer-tab.c:
245 $(AM_V_at)$(MKDIR_P) $(precomp)/symm
ba57d652 246 $(AM_V_at)$(MAKE) safer-mktab$(EXEEXT)
c9cfa678
MW
247 $(AM_V_GEN)./safer-mktab >$(precomp)/symm/safer-tab.c.new && \
248 mv $(precomp)/symm/safer-tab.c.new \
249 $(precomp)/symm/safer-tab.c
e5b61a8d 250endif
0f00dc4c
MW
251
252## Anderson, Biham and Knudsen's `Serpent' block cipher.
253BLKCS += serpent
254libsymm_la_SOURCES += serpent-sbox.h
e5b61a8d 255check_PROGRAMS += serpent-check
0f00dc4c 256TESTS += serpent-check
3c8d8c60 257serpent.log: t/serpent
ea054059 258EXTRA_DIST += t/serpent.aes t/serpent.local
0f00dc4c 259MAINTAINERCLEANFILES += $(srcdir)/t/serpent
ea054059
MW
260t/serpent: t/serpent.aes t/serpent.local
261 $(AM_V_GEN)cd $(srcdir) && \
262 { ./aes-trans Serpent -v rev=1 <t/serpent.aes && \
263 cat t/serpent.local; \
264 } >t/serpent.new && \
265 mv t/serpent.new t/serpent
0f00dc4c
MW
266
267## The National Security Agency's `Skipjack' block cipher. You don't want to
268## use this.
269BLKCS += skipjack
e5b61a8d 270libsymm_la_SOURCES += skipjack-tab.c
0f00dc4c
MW
271
272## Daemen and Rijmen's `Square' block cipher.
273BLKCS += square
c9cfa678
MW
274nodist_libsymm_la_SOURCES += ../precomp/symm/square-tab.c
275PRECOMPS += $(precomp)/symm/square-tab.c
e5b61a8d
MW
276PRECOMP_PROGS += square-mktab
277if !CROSS_COMPILING
c9cfa678
MW
278$(precomp)/symm/square-tab.c:
279 $(AM_V_at)$(MKDIR_P) $(precomp)/symm
ba57d652 280 $(AM_V_at)$(MAKE) square-mktab$(EXEEXT)
c9cfa678
MW
281 $(AM_V_GEN)./square-mktab >$(precomp)/symm/square-tab.c.new && \
282 mv $(precomp)/symm/square-tab.c.new \
283 $(precomp)/symm/square-tab.c
e5b61a8d 284endif
0f00dc4c
MW
285
286## Wheeler and Needham's `TEA' and `XTEA' block ciphers.
287BLKCS += tea xtea
288
289## Schneier, Kelsey, Whiting, Wagner, Hall and Ferguson's `Twofish' block
290## cipher.
291BLKCS += twofish
c9cfa678
MW
292nodist_libsymm_la_SOURCES += ../precomp/symm/twofish-tab.c
293PRECOMPS += $(precomp)/symm/twofish-tab.c
e5b61a8d
MW
294PRECOMP_PROGS += twofish-mktab
295if !CROSS_COMPILING
c9cfa678
MW
296$(precomp)/symm/twofish-tab.c:
297 $(AM_V_at)$(MKDIR_P) $(precomp)/symm
ba57d652 298 $(AM_V_at)$(MAKE) twofish-mktab$(EXEEXT)
c9cfa678
MW
299 $(AM_V_GEN)./twofish-mktab >$(precomp)/symm/twofish-tab.c.new && \
300 mv $(precomp)/symm/twofish-tab.c.new \
301 $(precomp)/symm/twofish-tab.c
e5b61a8d 302endif
3c8d8c60 303twofish.log: t/twofish
ea054059 304EXTRA_DIST += t/twofish.aes t/twofish.local
0f00dc4c 305MAINTAINERCLEANFILES += $(srcdir)/t/twofish
ea054059
MW
306t/twofish: t/twofish.aes t/twofish.local
307 $(AM_V_GEN)cd $(srcdir) && \
308 { ./aes-trans Twofish <t/twofish.aes && \
309 cat t/twofish.local; \
310 } >t/twofish.new && \
311 mv t/twofish.new t/twofish
0f00dc4c
MW
312
313## The old NIST modes for DES.
314BLKCCIPHERMODES += cbc cfb ecb ofb
315
316## Counter mode.
317BLKCCIPHERMODES += counter
318
ea054059 319## CMAC mode.
b39fadb6 320BLKCMACMODES += cmac pmac1
ea054059 321
2964c388 322## Various AEAD modes.
b39fadb6 323pkginclude_HEADERS += ocb.h
09734e51 324BLKCAEADMODES += ccm eax gcm ocb1 ocb3
b39fadb6 325libsymm_la_SOURCES += ccm.c gcm.c ocb.c
9e6a4409
MW
326if CPUFAM_X86
327libsymm_la_SOURCES += gcm-x86ish-pclmul.S
328endif
329if CPUFAM_AMD64
330libsymm_la_SOURCES += gcm-x86ish-pclmul.S
331endif
332if CPUFAM_ARMEL
333libsymm_la_SOURCES += gcm-arm-crypto.S
334endif
335if CPUFAM_ARM64
336libsymm_la_SOURCES += gcm-arm64-pmull.S
337endif
2964c388 338
8f6a5276
MW
339TESTS += gcm.t$(EXEEXT)
340EXTRA_DIST += t/gcm
341
0f00dc4c
MW
342###--------------------------------------------------------------------------
343### Hash functions.
344
345HASHES =
346HASHMODES =
347
348HASHCIPHERMODES =
349HASHMODES += $(HASHCIPHERMODES)
350
351HASHMACMODES =
352HASHMODES += $(HASHMACMODES)
353
354## Common definitions for hash functions.
355pkginclude_HEADERS += hash.h
356
357## Source code and headers for the hash functions.
358libsymm_la_SOURCES += $(HASH_C)
359pkginclude_HEADERS += $(HASH_H)
360
361## Lim and KISA's `HAS-160', recommended for use with KCDSA.
362HASHES += has160
363
364## Rivest's `MD' series of hash functions
365HASHES += md2 md4 md5
e5b61a8d 366libsymm_la_SOURCES += md2-tab.c
0f00dc4c
MW
367
368## Dobbertin, Bosselaers and Preneel's `RIPEMD' suite.
369HASHES += rmd128 rmd160 rmd256 rmd320
370
371## The National Security Agency's `SHA-1' hash function.
372HASHES += sha
373
374## The National Security Agency's `SHA-2' suite.
375HASHES += sha224 sha256
12a5df42 376HASHES += sha384 sha512 sha512/224 sha512/256
24497005
MW
377STUBS_HDR += SHA-224,sha224,sha256
378STUBS_HDR += SHA-384,sha384,sha512
12a5df42
MW
379STUBS_HDR += SHA-512/256,sha512-256,sha512
380STUBS_HDR += SHA-512/224,sha512-224,sha512
84924d42
MW
381STUBS_SRC += sha224,sha256
382STUBS_SRC += sha384,sha512
12a5df42
MW
383STUBS_SRC += sha512-256,sha512
384STUBS_SRC += sha512-224,sha512
0f00dc4c
MW
385
386## Anderson and Biham's `Tiger' hash function.
387HASHES += tiger
c9cfa678
MW
388libsymm_la_SOURCES += tiger-base.h
389nodist_libsymm_la_SOURCES += ../precomp/symm/tiger-tab.c
390PRECOMPS += $(precomp)/symm/tiger-tab.c
e5b61a8d
MW
391PRECOMP_PROGS += tiger-mktab
392if !CROSS_COMPILING
c9cfa678
MW
393$(precomp)/symm/tiger-tab.c:
394 $(AM_V_at)$(MKDIR_P) $(precomp)/symm
ba57d652 395 $(AM_V_at)$(MAKE) tiger-mktab$(EXEEXT)
c9cfa678
MW
396 $(AM_V_GEN)./tiger-mktab >$(precomp)/symm/tiger-tab.c.new && \
397 mv $(precomp)/symm/tiger-tab.c.new \
398 $(precomp)/symm/tiger-tab.c
e5b61a8d 399endif
0f00dc4c
MW
400
401## Barreto and Rijmen's `Whirlpool' hash function.
402HASHES += whirlpool whirlpool256
c9cfa678
MW
403nodist_libsymm_la_SOURCES += ../precomp/symm/whirlpool-tab.c
404PRECOMPS += $(precomp)/symm/whirlpool-tab.c
e5b61a8d 405PRECOMP_PROGS += whirlpool-mktab
24497005 406STUBS_HDR += Whirlpool-256,whirlpool256,whirlpool
84924d42 407STUBS_SRC += whirlpool256,whirlpool
e5b61a8d 408if !CROSS_COMPILING
c9cfa678
MW
409$(precomp)/symm/whirlpool-tab.c:
410 $(AM_V_at)$(MKDIR_P) $(precomp)/symm
ba57d652 411 $(AM_V_at)$(MAKE) whirlpool-mktab$(EXEEXT)
c9cfa678
MW
412 $(AM_V_GEN)./whirlpool-mktab \
413 >$(precomp)/symm/whirlpool-tab.c.new && \
414 mv $(precomp)/symm/whirlpool-tab.c.new \
415 $(precomp)/symm/whirlpool-tab.c
e5b61a8d 416endif
0f00dc4c 417
a905c0d6
MW
418## Bertoni, Daemen, Peeters, and Van Assche's `Keccak', selected as the basis
419## for SHA-3.
420pkginclude_HEADERS += keccak1600.h
421libsymm_la_SOURCES += keccak1600.c
422TESTS += keccak1600.t$(EXEEXT)
423EXTRA_DIST += t/keccak1600
424
78b4ea88
MW
425pkginclude_HEADERS += sha3.h
426libsymm_la_SOURCES += sha3.c
427
428HASHES += sha3-224 sha3-256 sha3-384 sha3-512
429STUBS_HDR += SHA3-224,sha3-224,sha3
430STUBS_HDR += SHA3-256,sha3-256,sha3
431STUBS_HDR += SHA3-384,sha3-384,sha3
432STUBS_HDR += SHA3-512,sha3-512,sha3
433STUBS_SRC += sha3-224,sha3
434STUBS_SRC += sha3-256,sha3
435STUBS_SRC += sha3-384,sha3
436STUBS_SRC += sha3-512,sha3
437
438STUBS_HDR += SHAKE128,shake128,sha3
439STUBS_HDR += SHAKE256,shake256,sha3
440
441STUBS_HDR += SHAKE128-XOF,shake128-xof,sha3
442STUBS_HDR += SHAKE256-XOF,shake256-xof,sha3
443
444STUBS_HDR += KMAC128,kmac128,sha3
445STUBS_HDR += KMAC256,kmac256,sha3
446
447ALL_HASHES += shake128 shake256
448ALL_CIPHERS += shake128-xof shake256-xof
449ALL_MACS += kmac128 kmac256
450
451TESTS += sha3.t$(EXEEXT)
452SHA3_TESTS = t/SHA3_224ShortMsg.rsp
453SHA3_TESTS += t/SHA3_224LongMsg.rsp
454SHA3_TESTS += t/SHA3_256ShortMsg.rsp
455SHA3_TESTS += t/SHA3_256LongMsg.rsp
456SHA3_TESTS += t/SHA3_384ShortMsg.rsp
457SHA3_TESTS += t/SHA3_384LongMsg.rsp
458SHA3_TESTS += t/SHA3_512ShortMsg.rsp
459SHA3_TESTS += t/SHA3_512LongMsg.rsp
460SHA3_TESTS += t/SHA3_224Monte.rsp
461SHA3_TESTS += t/SHA3_256Monte.rsp
462SHA3_TESTS += t/SHA3_384Monte.rsp
463SHA3_TESTS += t/SHA3_512Monte.rsp
464SHA3_TESTS += t/SHAKE128ShortMsg.rsp
465SHA3_TESTS += t/SHAKE128LongMsg.rsp
466SHA3_TESTS += t/SHAKE128VariableOut.rsp
467SHA3_TESTS += t/SHAKE256ShortMsg.rsp
468SHA3_TESTS += t/SHAKE256LongMsg.rsp
469SHA3_TESTS += t/SHAKE256VariableOut.rsp
470EXTRA_DIST += $(SHA3_TESTS) sha3-trans t/sha3.local t/sha3
471MAINTAINERCLEANFILES += $(srcdir)/t/sha3
472sha3.log: t/sha3
473$(srcdir)/t/sha3: $(SHA3_TESTS) sha3-trans t/sha3.local
474 $(AM_V_GEN)cd $(srcdir) && \
475 { ./sha3-trans $(SHA3_TESTS); \
476 cat t/sha3.local; } >t/sha3.new && \
477 mv t/sha3.new t/sha3
478
b1d7b424
MW
479## Mike Hamburg's STROBE protocol framework.
480pkginclude_HEADERS += strobe.h
481libsymm_la_SOURCES += strobe.c
482TESTS += strobe.t$(EXEEXT)
483EXTRA_DIST += t/strobe
484
0f00dc4c
MW
485## Bellare, Canetti and Krawczyk's `HMAC' mode for message authentication.
486HASHMACMODES += hmac
487
488## MGF1, used in OAEP and PSS.
489HASHCIPHERMODES += mgf
490
491###--------------------------------------------------------------------------
492### Other symmetric primitives.
493
494## The CRC32 algorithm, which is useful, but has no worthwhile security.
495pkginclude_HEADERS += crc32.h
496libsymm_la_SOURCES += crc32.c
497ALL_HASHES += crc32=gcrc32
498
499## Rivest's `RC4' stream cipher.
500pkginclude_HEADERS += rc4.h
501libsymm_la_SOURCES += rc4.c
ba57d652 502TESTS += rc4.t$(EXEEXT)
0f00dc4c
MW
503EXTRA_DIST += t/rc4
504ALL_CIPHERS += rc4
505
506## Coppersmith and Rogaway's `SEAL' pseudorandom function.
507pkginclude_HEADERS += seal.h
508libsymm_la_SOURCES += seal.c
ba57d652 509TESTS += seal.t$(EXEEXT)
0f00dc4c
MW
510EXTRA_DIST += t/seal
511ALL_CIPHERS += seal
512
194e93f2
MW
513## Bernstein's `Salsa20' stream cipher. Most of the test vectors come from
514## the eSTREAM project, captured by the Internet Archive's Wayback Machine at
515##
516## http://web.archive.org/web/20070814004154/http://www.ecrypt.eu.org/stream/svn/viewcvs.cgi/ecrypt/trunk/submissions/salsa20.tar.gz?view=tar
517##
518## and automatically converted into the format we want.
519EXTRA_DIST += salsa20-tvconv
520pkginclude_HEADERS += salsa20.h salsa20-core.h
521libsymm_la_SOURCES += salsa20.c
e10e6494 522if CPUFAM_X86
0f23f75f
MW
523libsymm_la_SOURCES += salsa20-x86ish-sse2.S
524endif
525if CPUFAM_AMD64
526libsymm_la_SOURCES += salsa20-x86ish-sse2.S
e10e6494 527endif
704d59c8
MW
528if CPUFAM_ARMEL
529libsymm_la_SOURCES += salsa20-arm-neon.S
530endif
e492db88
MW
531if CPUFAM_ARM64
532libsymm_la_SOURCES += salsa20-arm64.S
533endif
ba57d652 534TESTS += salsa20.t$(EXEEXT)
194e93f2 535ALL_CIPHERS += salsa20 salsa2012 salsa208
1778ca95 536ALL_CIPHERS += salsa20-ietf salsa2012-ietf salsa208-ietf
194e93f2
MW
537ALL_CIPHERS += xsalsa20 xsalsa2012 xsalsa208
538STUBS_HDR += Salsa20/12,salsa2012,salsa20
539STUBS_HDR += Salsa20/8,salsa208,salsa20
1778ca95
MW
540STUBS_HDR += Salsa20-IETF,salsa20-ietf,salsa20
541STUBS_HDR += Salsa20/12-IETF,salsa2012-ietf,salsa20
542STUBS_HDR += Salsa20/8-IETF,salsa208-ietf,salsa20
194e93f2
MW
543STUBS_HDR += XSalsa20,xsalsa20,salsa20
544STUBS_HDR += XSalsa20/12,xsalsa2012,salsa20
545STUBS_HDR += XSalsa20/8,xsalsa208,salsa20
546EXTRA_DIST += t/salsa20
547MAINTAINERCLEANFILES += t/salsa20
3c8d8c60 548salsa20.log: t/salsa20
194e93f2
MW
549SALSA20_ESTREAM_TV = t/salsa20.estream
550SALSA20_ESTREAM_TV += t/salsa2012.estream
551SALSA20_ESTREAM_TV += t/salsa208.estream
552EXTRA_DIST += t/salsa20.local $(SALSA20_ESTREAM_TV)
553t/salsa20: salsa20-tvconv t/salsa20.local $(SALSA20_ESTREAM_TV)
554 $(AM_V_GEN)cd $(srcdir) && \
555 { echo "### GENERATED by salsa20-tvconv" && \
556 cat t/salsa20.local && \
557 ./salsa20-tvconv $(SALSA20_ESTREAM_TV); \
558 } >t/salsa20.new && \
559 mv t/salsa20.new t/salsa20
560
55d81656
MW
561## Bernstein's `ChaCha' stream cipher.
562pkginclude_HEADERS += chacha.h chacha-core.h
563libsymm_la_SOURCES += chacha.c
e10e6494 564if CPUFAM_X86
0f23f75f
MW
565libsymm_la_SOURCES += chacha-x86ish-sse2.S
566endif
567if CPUFAM_AMD64
568libsymm_la_SOURCES += chacha-x86ish-sse2.S
e10e6494 569endif
704d59c8
MW
570if CPUFAM_ARMEL
571libsymm_la_SOURCES += chacha-arm-neon.S
572endif
e492db88
MW
573if CPUFAM_ARM64
574libsymm_la_SOURCES += chacha-arm64.S
575endif
ba57d652 576TESTS += chacha.t$(EXEEXT)
55d81656
MW
577EXTRA_DIST += t/chacha
578ALL_CIPHERS += chacha20 chacha12 chacha8
1778ca95 579ALL_CIPHERS += chacha20-ietf chacha12-ietf chacha8-ietf
55d81656
MW
580ALL_CIPHERS += xchacha20 xchacha12 xchacha8
581STUBS_HDR += ChaCha20,chacha20,chacha
582STUBS_HDR += ChaCha12,chacha12,chacha
583STUBS_HDR += ChaCha8,chacha8,chacha
1778ca95
MW
584STUBS_HDR += ChaCha20-IETF,chacha20-ietf,chacha
585STUBS_HDR += ChaCha12-IETF,chacha12-ietf,chacha
586STUBS_HDR += ChaCha8-IETF,chacha8-ietf,chacha
55d81656
MW
587STUBS_HDR += XChaCha20,xchacha20,chacha
588STUBS_HDR += XChaCha12,xchacha12,chacha
589STUBS_HDR += XChaCha8,xchacha8,chacha
590
57496a50
MW
591## Bernstein's `Poly1305' message authentication code.
592pkginclude_HEADERS += poly1305.h
593libsymm_la_SOURCES += poly1305.c
594TESTS += poly1305.t$(EXEEXT)
595TESTS += poly1305-p11.t$(EXEEXT)
596EXTRA_DIST += t/poly1305
597
598check_PROGRAMS += poly1305-p11.t
599poly1305_p11_t_SOURCES = poly1305.c
600poly1305_p11_t_CPPFLAGS = $(AM_CPPFLAGS) -DTEST_RIG -DSRCDIR="\"$(srcdir)\""
601poly1305_p11_t_CPPFLAGS += -DPOLY1305_IMPL=11
6a024d24 602poly1305_p11_t_LDFLAGS = $(TEST_LDFLAGS)
57496a50
MW
603poly1305_p11_t_LDADD = $(TEST_LIBS) $(top_builddir)/libcatacomb.la
604poly1305_p11_t_LDADD += $(mLib_LIBS) $(CATACOMB_LIBS) $(LIBS)
605
aac19f0d
MW
606## Combining Salsa20/ChaCha with Poly1305.
607pkginclude_HEADERS += latinpoly.h latinpoly-def.h
608libsymm_la_SOURCES += latinpoly.c chacha-poly1305.c salsa20-poly1305.c
609libsymmtest_la_SOURCES += latinpoly-test.c latinpoly-test.h
610
611ALL_AEADS += chacha20-poly1305 salsa20-poly1305
612ALL_AEADS += chacha12-poly1305 salsa2012-poly1305
613ALL_AEADS += chacha8-poly1305 salsa208-poly1305
459d1a80
MW
614ALL_AEADS += chacha20-naclbox salsa20-naclbox
615ALL_AEADS += chacha12-naclbox salsa2012-naclbox
616ALL_AEADS += chacha8-naclbox salsa208-naclbox
aac19f0d
MW
617STUBS_HDR += ChaCha20-Poly1305,chacha20-poly1305,latinpoly
618STUBS_HDR += ChaCha12-Poly1305,chacha12-poly1305,latinpoly
619STUBS_HDR += ChaCha8-Poly1305,chacha8-poly1305,latinpoly
620STUBS_HDR += Salsa20-Poly1305,salsa20-poly1305,latinpoly
621STUBS_HDR += Salsa20/12-Poly1305,salsa2012-poly1305,latinpoly
622STUBS_HDR += Salsa20/8-Poly1305,salsa208-poly1305,latinpoly
459d1a80
MW
623STUBS_HDR += ChaCha20-NaClBox,chacha20-naclbox,latinpoly
624STUBS_HDR += ChaCha12-NaClBox,chacha12-naclbox,latinpoly
625STUBS_HDR += ChaCha8-NaClBox,chacha8-naclbox,latinpoly
626STUBS_HDR += Salsa20-NaClBox,salsa20-naclbox,latinpoly
627STUBS_HDR += Salsa20/12-NaClBox,salsa2012-naclbox,latinpoly
628STUBS_HDR += Salsa20/8-NaClBox,salsa208-naclbox,latinpoly
aac19f0d
MW
629TESTS += chacha-poly1305.t$(EXEEXT)
630TESTS += salsa20-poly1305.t$(EXEEXT)
631
0f00dc4c
MW
632###--------------------------------------------------------------------------
633### Autogenerated mode implementations.
634
635## The master stamp file, indicating that we generated all of the sources.
0f00dc4c 636EXTRA_DIST += mode.h.in mode.c.in
e5b61a8d
MW
637EXTRA_DIST += modes/gen-stamp
638MAINTAINERCLEANFILES += modes/gen-stamp
77843a37 639modes/gen-stamp: Makefile.am
e5b61a8d 640 $(AM_V_at)$(MKDIR_P) $(srcdir)/modes
0f00dc4c 641 $(AM_V_GEN)$(multigen) -g $(srcdir)/mode.c.in \
aaae9cab 642 $(srcdir)/modes/@{base:f}-@mode.c \
0f00dc4c
MW
643 base="$(BLKCS)" mode="$(BLKCMODES)"
644 $(AM_V_at)$(multigen) -g $(srcdir)/mode.h.in \
aaae9cab 645 $(srcdir)/modes/@{base:f}-@mode.h \
0f00dc4c
MW
646 base="$(BLKCS)" mode="$(BLKCMODES)"
647 $(AM_V_at)$(multigen) -g $(srcdir)/mode.c.in \
aaae9cab 648 $(srcdir)/modes/@{base:f}-@mode.c \
0f00dc4c
MW
649 base="$(HASHES)" mode="$(HASHMODES)"
650 $(AM_V_at)$(multigen) -g $(srcdir)/mode.h.in \
aaae9cab 651 $(srcdir)/modes/@{base:f}-@mode.h \
0f00dc4c 652 base="$(HASHES)" mode="$(HASHMODES)"
e5b61a8d 653 $(AM_V_at)touch $(srcdir)/modes/gen-stamp
0f00dc4c
MW
654
655## The individual mode interfaces and implementations.
656pkginclude_HEADERS += $(MODE_H)
657
658## Generated implementations.
659BUILT_SOURCES += $(GENMODES_C)
e5b61a8d 660MAINTAINERCLEANFILES += $(GENMODES_C)
ef75f314 661libsymm_la_SOURCES += $(GENMODES_C)
0f00dc4c
MW
662$(GENMODES_C): modes/gen-stamp
663
664## Generated interfaces.
665BUILT_SOURCES += $(GENMODES_H)
e5b61a8d 666MAINTAINERCLEANFILES += $(GENMODES_H)
ef75f314 667pkginclude_HEADERS += $(GENMODES_H)
0f00dc4c
MW
668$(GENMODES_H): modes/gen-stamp
669
57f459eb
MW
670## Additional test machinery.
671libsymmtest_la_SOURCES += modes-test.c modes-test.h
672
0f00dc4c 673###--------------------------------------------------------------------------
24497005
MW
674### Autogenerated stub headers.
675
676## The master stamp file.
677EXTRA_DIST += stub.h.in
678EXTRA_DIST += stubs.gen-stamp
679MAINTAINERCLEANFILES += stubs.gen-stamp
680stubs.gen-stamp: Makefile.am
681 $(AM_V_at)$(MKDIR_P) $(srcdir)/stubs
682 $(AM_V_GEN)$(multigen) -g $(srcdir)/stub.h.in \
683 $(srcdir)/@name.h descr,name,base="$(STUBS_HDR)"
684 $(AM_V_GEN)$(multigen) -g $(srcdir)/stub.c.in \
e91853c1 685 $(srcdir)/@name.c name,base="$(STUBS_SRC)"
24497005
MW
686 $(AM_V_at)touch $(srcdir)/stubs.gen-stamp
687
688## Generated stub headers.
689BUILT_SOURCES += $(STUB_H) $(STUB_C)
690MAINTAINERCLEANFILES += $(STUB_H) $(STUB_C)
691pkginclude_HEADERS += $(STUB_H)
692$(STUB_H) $(STUB_C): stubs.gen-stamp
693
694###--------------------------------------------------------------------------
0f00dc4c
MW
695### Tables of classes for encryption, hashing, and message authentication.
696
697## The skeleton for the class tables.
698EXTRA_DIST += gthingtab.c.in
699
700## Table of cipher classes.
701pkginclude_HEADERS += gcipher.h
702CLEANFILES += gciphertab.c
703nodist_libsymm_la_SOURCES += gciphertab.c
77843a37 704gciphertab.c: gthingtab.c.in Makefile.am
0f00dc4c
MW
705 $(AM_V_GEN)$(multigen) -g $(srcdir)/gthingtab.c.in gciphertab.c \
706 what=gcipher cls=gccipher thing="$(ALL_CIPHERS)"
707
96a5a09c
MW
708## Table of AEAD classes.
709pkginclude_HEADERS += gaead.h
710CLEANFILES += gaeadtab.c
711libsymm_la_SOURCES += gaead.c
712nodist_libsymm_la_SOURCES += gaeadtab.c
713gaeadtab.c: gthingtab.c.in Makefile.am
714 $(AM_V_GEN)$(multigen) -g $(srcdir)/gthingtab.c.in gaeadtab.c \
715 what=gaead cls=gcaead thing="$(ALL_AEADS)"
716
0f00dc4c
MW
717## Table of hash classes.
718pkginclude_HEADERS += ghash.h ghash-def.h
719CLEANFILES += ghashtab.c
720nodist_libsymm_la_SOURCES += ghashtab.c
77843a37 721ghashtab.c: gthingtab.c.in Makefile.am
0f00dc4c
MW
722 $(AM_V_GEN)$(multigen) -g $(srcdir)/gthingtab.c.in ghashtab.c \
723 what=ghash cls=gchash thing="$(ALL_HASHES)"
724
725## Table of MAC classes.
726pkginclude_HEADERS += gmac.h
727CLEANFILES += gmactab.c
728nodist_libsymm_la_SOURCES += gmactab.c
77843a37 729gmactab.c: gthingtab.c.in Makefile.am
0f00dc4c
MW
730 $(AM_V_GEN)$(multigen) -g $(srcdir)/gthingtab.c.in gmactab.c \
731 what=gmac cls=gcmac thing="$(ALL_MACS)"
732
733###--------------------------------------------------------------------------
734### Testing.
735
736## Run the test programs.
737TESTS += $(SYMM_TESTS)
738EXTRA_DIST += $(SYMM_TEST_FILES)
57f459eb 739EXTRA_DIST += $(REGRESSION_TEST_FILES)
0f00dc4c 740
57f459eb
MW
741t/modes/%.regress:
742 $(MAKE) modes/$*.t && \
743 mkdir -p $(srcdir)/t/modes/ && \
744 modes/$*.t -o$(srcdir)/$@.new && \
745 mv $(srcdir)/$@.new $(srcdir)/$@
0f00dc4c
MW
746
747## Clean the debris from the `modes' subdirectory.
ba57d652 748CLEANFILES += modes/*.to modes/*.t$(EXEEXT)
0f00dc4c
MW
749
750###----- That's all, folks --------------------------------------------------