mirror of https://github.com/wolfSSL/wolfBoot.git
185 lines
5.3 KiB
Makefile
185 lines
5.3 KiB
Makefile
# wolfBoot KeyGen and Signing Tool
|
|
|
|
V?=0
|
|
ifeq ($(V),0)
|
|
Q=@
|
|
endif
|
|
|
|
# Default library paths (can be overridden)
|
|
WOLFBOOT_LIB_WOLFSSL?=../../lib/wolfssl
|
|
|
|
# Convert to absolute paths for standalone usage
|
|
WOLFBOOT_LIB_WOLFSSL:=$(abspath $(WOLFBOOT_LIB_WOLFSSL))
|
|
|
|
# Link against an already configured and installed wolfSSL instead of
|
|
# compiling the wolfCrypt sources from $(WOLFBOOT_LIB_WOLFSSL):
|
|
#
|
|
# make WOLFSSL_LIB=1 [WOLFSSL_INCDIR=<prefix>/include] [WOLFSSL_LIBDIR=<prefix>/lib]
|
|
WOLFSSL_LIB?=0
|
|
|
|
CC = gcc
|
|
LD = gcc
|
|
WOLFBOOTDIR = ../..
|
|
CFLAGS = -Wall -Wextra -Werror
|
|
CFLAGS += -I. -I$(WOLFBOOTDIR)/include
|
|
DEPFLAGS = -MMD -MP
|
|
LDFLAGS =
|
|
OBJDIR = ./
|
|
LIBS =
|
|
|
|
# zlib supplies the DEFLATE encoder for 'sign --compress'; the decoder on the
|
|
# device side is wolfBoot's own src/gzip.c. Optional, because most builds of
|
|
# this tool never compress: without the headers the tool still builds and
|
|
# only that one option is unavailable.
|
|
HAVE_ZLIB := $(shell $(CC) -E -include zlib.h -x c /dev/null >/dev/null 2>&1 && echo 1)
|
|
ifeq ($(HAVE_ZLIB),1)
|
|
CFLAGS += -DHAVE_ZLIB
|
|
LDFLAGS += -lz
|
|
endif
|
|
|
|
ifeq ($(WOLFSSL_LIB),1)
|
|
CFLAGS += -DWOLFSSL_USE_OPTIONS_H
|
|
ifeq ($(WOLFSSL_INCDIR),)
|
|
WOLFSSL_INCDIR:=$(shell pkg-config --variable=includedir wolfssl 2>/dev/null)
|
|
endif
|
|
ifeq ($(WOLFSSL_LIBDIR),)
|
|
WOLFSSL_LIBDIR:=$(shell pkg-config --variable=libdir wolfssl 2>/dev/null)
|
|
endif
|
|
ifneq ($(WOLFSSL_INCDIR),)
|
|
CFLAGS += -I$(WOLFSSL_INCDIR)
|
|
endif
|
|
ifneq ($(WOLFSSL_LIBDIR),)
|
|
LDFLAGS += -L$(WOLFSSL_LIBDIR) -Wl,-rpath,$(WOLFSSL_LIBDIR)
|
|
endif
|
|
LDFLAGS += -lwolfssl
|
|
else
|
|
CFLAGS += -DWOLFSSL_USER_SETTINGS -I$(WOLFBOOT_LIB_WOLFSSL)
|
|
endif
|
|
|
|
ML_DSA_LEVEL?=2
|
|
CFLAGS+=-DML_DSA_LEVEL=$(ML_DSA_LEVEL)
|
|
|
|
LMS_LEVELS?=1
|
|
LMS_HEIGHT?=10
|
|
LMS_WINTERNITZ?=8
|
|
|
|
# Common to wc_lms and ext_lms.
|
|
CFLAGS +=-D"LMS_LEVELS=$(LMS_LEVELS)" \
|
|
-D"LMS_HEIGHT=$(LMS_HEIGHT)" \
|
|
-D"LMS_WINTERNITZ=$(LMS_WINTERNITZ)"
|
|
|
|
# XMSS flags
|
|
XMSS_PARAMS?='XMSS-SHA2_10_256'
|
|
CFLAGS +=-D"IMAGE_SIGNATURE_SIZE"=$(IMAGE_SIGNATURE_SIZE) \
|
|
-DWOLFBOOT_XMSS_PARAMS=\"$(XMSS_PARAMS)\"
|
|
|
|
# When WOLFBOOT_UNIVERSAL_KEYSTORE is defined, pad store_sizes in keystore.der
|
|
ifeq ($(WOLFBOOT_UNIVERSAL_KEYSTORE),1)
|
|
CFLAGS+=-DWOLFBOOT_UNIVERSAL_KEYSTORE
|
|
endif
|
|
|
|
# option variables
|
|
DEBUG_FLAGS = -g -DDEBUG -DDEBUG_SIGNTOOL -DDEBUG_WOLFSSL -DDEBUG_WOLFSSL_VERBOSE
|
|
SANITIZE_FLAGS = -fsanitize=address
|
|
OPTIMIZE = -O2
|
|
|
|
# Options
|
|
ifeq ($(DEBUG),1)
|
|
CFLAGS+=$(DEBUG_FLAGS)
|
|
else
|
|
#CFLAGS+=$(SANITIZE_FLAGS)
|
|
CFLAGS+=$(OPTIMIZE)
|
|
endif
|
|
|
|
CFLAGS+=-DDELTA_UPDATES
|
|
|
|
ifneq ($(RENESAS_KEY),)
|
|
CFLAGS+=-DRENESAS_KEY=$(RENESAS_KEY)
|
|
|
|
ifeq ($(RENESAS_KEY),1)
|
|
CFLAGS+=-DWOLFBOOT_RENESAS_SCEPROTECT
|
|
else ifeq ($(RENESAS_KEY),2)
|
|
CFLAGS+=-DWOLFBOOT_RENESAS_TSIP
|
|
else ifeq ($(RENESAS_KEY),3)
|
|
CFLAGS+=-DWOLFBOOT_RENESAS_RSIP
|
|
endif
|
|
endif
|
|
|
|
# Sources
|
|
OBJS_REAL=\
|
|
$(WOLFBOOTDIR)/src/delta.o
|
|
|
|
# wolfCrypt objects, compiled from the sources unless WOLFSSL_LIB=1
|
|
ifneq ($(WOLFSSL_LIB),1)
|
|
OBJS_REAL+=\
|
|
$(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/asn.o \
|
|
$(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/aes.o \
|
|
$(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/ecc.o \
|
|
$(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/coding.o \
|
|
$(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/chacha.o \
|
|
$(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/ed25519.o \
|
|
$(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/ed448.o \
|
|
$(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/fe_operations.o \
|
|
$(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/ge_operations.o \
|
|
$(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/fe_448.o \
|
|
$(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/ge_448.o \
|
|
$(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/hash.o \
|
|
$(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/logging.o \
|
|
$(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/memory.o \
|
|
$(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/random.o \
|
|
$(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/rsa.o \
|
|
$(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/sp_int.o \
|
|
$(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/sp_c32.o \
|
|
$(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/sp_c64.o \
|
|
$(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/sha3.o \
|
|
$(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/sha256.o \
|
|
$(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/sha512.o \
|
|
$(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/tfm.o \
|
|
$(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/wc_port.o \
|
|
$(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/wolfmath.o
|
|
|
|
OBJS_REAL+=\
|
|
$(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/wc_lms.o \
|
|
$(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/wc_lms_impl.o
|
|
|
|
OBJS_REAL+=\
|
|
$(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/wc_xmss.o \
|
|
$(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/wc_xmss_impl.o
|
|
OBJS_REAL+=$(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/wc_mldsa.o
|
|
endif
|
|
|
|
OBJS_VIRT=$(addprefix $(OBJDIR), $(notdir $(OBJS_REAL)))
|
|
DEPS=$(OBJS_VIRT:.o=.d) sign.d keygen.d
|
|
vpath %.c $(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/
|
|
vpath %.c $(WOLFBOOTDIR)/src/
|
|
vpath %.c ./
|
|
|
|
.PHONY: clean all
|
|
|
|
all: sign keygen
|
|
|
|
debug: CFLAGS+=$(DEBUG_FLAGS)
|
|
debug: all
|
|
|
|
# build objects
|
|
$(OBJDIR)/%.o: %.c
|
|
$(Q)$(CC) $(CFLAGS) $(DEPFLAGS) -c -o $@ $<
|
|
$(OBJDIR)/%.o: $(WOLFBOOTDIR)/src/%.c
|
|
$(Q)$(CC) $(CFLAGS) $(DEPFLAGS) -c -o $@ $<
|
|
$(OBJDIR)/%.o: $(WOLFBOOT_LIB_WOLFSSL)/wolfcrypt/src/%.c
|
|
$(Q)$(CC) $(CFLAGS) $(DEPFLAGS) -c -o $@ $<
|
|
|
|
# build templates
|
|
sign: $(OBJS_VIRT) $(LIBS) sign.o
|
|
@echo "Building signing tool"
|
|
$(Q)$(LD) -o $@ $@.o $(OBJS_VIRT) $(LIBS) $(LDFLAGS)
|
|
|
|
keygen: $(OBJS_VIRT) $(LIBS) keygen.o
|
|
@echo "Building keygen tool"
|
|
$(Q)$(LD) -o $@ $@.o $(OBJS_VIRT) $(LIBS) $(LDFLAGS)
|
|
|
|
clean:
|
|
rm -f sign keygen *.o *.d
|
|
|
|
-include $(DEPS)
|