4d60c7e10f
This provides support for building in the EDK II reference implementation of UEFI. Most UEFI firmware in existence uses OpenSSL for implementing the core cryptographic functionality needed for Secure Boot. This has always previously been handled with external patches to OpenSSL but we are now making a concerted effort to eliminate those. In this mode, we don't actually use the OpenSSL makefiles; we process the MINFO file generated by 'make files' and incorporate it into the EDK2 build system. Since EDK II builds for various targets with varying word size and we need to have a single prepackaged configuration, we deliberately don't hard-code the setting of SIXTY_FOUR_BIT vs. THIRTY_TWO_BIT in opensslconf.h. We bypass that for OPENSSL_SYS_UEFI and allow EDK II itself to set those, depending on the architecture. For x86_64, EDK II sets SIXTY_FOUR_BIT and thus uses 'long long' for the 64-bit type, even when building with GCC where 'long' is also 64-bit. We do this because the Microsoft toolchain has 32-bit 'long'. Signed-off-by: Rich Salz <rsalz@akamai.com> Reviewed-by: Tim Hudson <tjh@openssl.org>
169 lines
4.9 KiB
C
169 lines
4.9 KiB
C
/* crypto/opensslconf.h.in */
|
|
|
|
/*
|
|
* Applications should use -DOPENSSL_USE_DEPRECATED to enable access to
|
|
* deprecated functions. But if the library has been built to disable
|
|
* deprecated functions then this will not work
|
|
*/
|
|
#if defined(OPENSSL_NO_DEPRECATED) && defined(OPENSSL_USE_DEPRECATED)
|
|
#error "OPENSSL_USE_DEPRECATED has been defined, but OpenSSL has been built without support for deprecated functions"
|
|
#endif
|
|
|
|
/* Test for support for deprecated attribute */
|
|
#if __GNUC__ > 3 || \
|
|
(__GNUC__ == 3 && __GNUC_MINOR__ > 0)
|
|
#define DECLARE_DEPRECATED(f) f __attribute__ ((deprecated))
|
|
#else
|
|
#define DECLARE_DEPRECATED(f) f
|
|
#endif
|
|
|
|
/* Generate 80386 code? */
|
|
#undef I386_ONLY
|
|
|
|
#if !(defined(VMS) || defined(__VMS)) /* VMS uses logical names instead */
|
|
#if defined(HEADER_CRYPTLIB_H) && !defined(OPENSSLDIR)
|
|
#define ENGINESDIR "/usr/local/lib/engines"
|
|
#define OPENSSLDIR "/usr/local/ssl"
|
|
#endif
|
|
#endif
|
|
|
|
#undef OPENSSL_UNISTD
|
|
#define OPENSSL_UNISTD <unistd.h>
|
|
|
|
#undef OPENSSL_EXPORT_VAR_AS_FUNCTION
|
|
|
|
#if defined(HEADER_IDEA_H) && !defined(IDEA_INT)
|
|
#define IDEA_INT unsigned int
|
|
#endif
|
|
|
|
#if defined(HEADER_MD2_H) && !defined(MD2_INT)
|
|
#define MD2_INT unsigned int
|
|
#endif
|
|
|
|
#if defined(HEADER_RC2_H) && !defined(RC2_INT)
|
|
/* I need to put in a mod for the alpha - eay */
|
|
#define RC2_INT unsigned int
|
|
#endif
|
|
|
|
#if defined(HEADER_RC4_H)
|
|
#if !defined(RC4_INT)
|
|
/* using int types make the structure larger but make the code faster
|
|
* on most boxes I have tested - up to %20 faster. */
|
|
/*
|
|
* I don't know what does "most" mean, but declaring "int" is a must on:
|
|
* - Intel P6 because partial register stalls are very expensive;
|
|
* - elder Alpha because it lacks byte load/store instructions;
|
|
*/
|
|
#define RC4_INT unsigned int
|
|
#endif
|
|
#if !defined(RC4_CHUNK)
|
|
/*
|
|
* This enables code handling data aligned at natural CPU word
|
|
* boundary. See crypto/rc4/rc4_enc.c for further details.
|
|
*/
|
|
#undef RC4_CHUNK
|
|
#endif
|
|
#endif
|
|
|
|
#if (defined(HEADER_NEW_DES_H) || defined(HEADER_DES_H)) && !defined(DES_LONG)
|
|
/* If this is set to 'unsigned int' on a DEC Alpha, this gives about a
|
|
* %20 speed up (longs are 8 bytes, int's are 4). */
|
|
#ifndef DES_LONG
|
|
#define DES_LONG unsigned long
|
|
#endif
|
|
#endif
|
|
|
|
#if defined(HEADER_BN_H) && !defined(CONFIG_HEADER_BN_H) && !defined(OPENSSL_SYS_UEFI)
|
|
#define CONFIG_HEADER_BN_H
|
|
#undef BN_LLONG
|
|
|
|
/* Should we define BN_DIV2W here? */
|
|
|
|
/* Only one for the following should be defined */
|
|
#undef SIXTY_FOUR_BIT_LONG
|
|
#undef SIXTY_FOUR_BIT
|
|
#define THIRTY_TWO_BIT
|
|
#endif
|
|
|
|
#if defined(HEADER_RC4_LOCL_H) && !defined(CONFIG_HEADER_RC4_LOCL_H)
|
|
#define CONFIG_HEADER_RC4_LOCL_H
|
|
/* if this is defined data[i] is used instead of *data, this is a %20
|
|
* speedup on x86 */
|
|
#undef RC4_INDEX
|
|
#endif
|
|
|
|
#if defined(HEADER_BF_LOCL_H) && !defined(CONFIG_HEADER_BF_LOCL_H)
|
|
#define CONFIG_HEADER_BF_LOCL_H
|
|
#undef BF_PTR
|
|
#endif /* HEADER_BF_LOCL_H */
|
|
|
|
#if defined(HEADER_DES_LOCL_H) && !defined(CONFIG_HEADER_DES_LOCL_H)
|
|
#define CONFIG_HEADER_DES_LOCL_H
|
|
#ifndef DES_DEFAULT_OPTIONS
|
|
/* the following is tweaked from a config script, that is why it is a
|
|
* protected undef/define */
|
|
#ifndef DES_PTR
|
|
#undef DES_PTR
|
|
#endif
|
|
|
|
/* This helps C compiler generate the correct code for multiple functional
|
|
* units. It reduces register dependancies at the expense of 2 more
|
|
* registers */
|
|
#ifndef DES_RISC1
|
|
#undef DES_RISC1
|
|
#endif
|
|
|
|
#ifndef DES_RISC2
|
|
#undef DES_RISC2
|
|
#endif
|
|
|
|
#if defined(DES_RISC1) && defined(DES_RISC2)
|
|
#error YOU SHOULD NOT HAVE BOTH DES_RISC1 AND DES_RISC2 DEFINED!!!!!
|
|
#endif
|
|
|
|
/* Unroll the inner loop, this sometimes helps, sometimes hinders.
|
|
* Very mucy CPU dependant */
|
|
#ifndef DES_UNROLL
|
|
#undef DES_UNROLL
|
|
#endif
|
|
|
|
/* These default values were supplied by
|
|
* Peter Gutman <pgut001@cs.auckland.ac.nz>
|
|
* They are only used if nothing else has been defined */
|
|
#if !defined(DES_PTR) && !defined(DES_RISC1) && !defined(DES_RISC2) && !defined(DES_UNROLL)
|
|
/* Special defines which change the way the code is built depending on the
|
|
CPU and OS. For SGI machines you can use _MIPS_SZLONG (32 or 64) to find
|
|
even newer MIPS CPU's, but at the moment one size fits all for
|
|
optimization options. Older Sparc's work better with only UNROLL, but
|
|
there's no way to tell at compile time what it is you're running on */
|
|
|
|
#if defined( sun ) /* Newer Sparc's */
|
|
# define DES_PTR
|
|
# define DES_RISC1
|
|
# define DES_UNROLL
|
|
#elif defined( __ultrix ) /* Older MIPS */
|
|
# define DES_PTR
|
|
# define DES_RISC2
|
|
# define DES_UNROLL
|
|
#elif defined( __osf1__ ) /* Alpha */
|
|
# define DES_PTR
|
|
# define DES_RISC2
|
|
#elif defined ( _AIX ) /* RS6000 */
|
|
/* Unknown */
|
|
#elif defined( __hpux ) /* HP-PA */
|
|
/* Unknown */
|
|
#elif defined( __aux ) /* 68K */
|
|
/* Unknown */
|
|
#elif defined( __sgi ) /* Newer MIPS */
|
|
# define DES_PTR
|
|
# define DES_RISC2
|
|
# define DES_UNROLL
|
|
#elif defined(i386) || defined(__i386__) /* x86 boxes, should be gcc */
|
|
# define DES_PTR
|
|
# define DES_RISC1
|
|
# define DES_UNROLL
|
|
#endif /* Systems-specific speed defines */
|
|
#endif
|
|
|
|
#endif /* DES_DEFAULT_OPTIONS */
|
|
#endif /* HEADER_DES_LOCL_H */
|