1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
|
#!/usr/bin/env python
from waflib import Options
from waflib import Errors, Logs
def options(opt):
opt.add_option('--accel-aes',
help=("Should we use accelerated AES crypto functions. "
"Options are intelaesni|none."),
action="store",
dest='accel_aes',
default="none")
def configure(conf):
if conf.CHECK_FUNCS('SHA1_Update'):
conf.DEFINE('SHA1_RENAME_NEEDED', 1)
#
# --aes-accel=XXX selects accelerated AES crypto library to use, if any.
# Default is none.
#
if Options.options.accel_aes.lower() == "intelaesni":
Logs.info("Attempting to compile with runtime-switchable x86_64 "
"Intel AES instructions. WARNING - this is temporary.")
elif Options.options.accel_aes.lower() != "none":
raise Errors.WafError("--aes-accel=%s is not a valid option. Valid "
"options are [none|intelaesni]" %
Options.options.accel_aes)
def build(bld):
extra_deps = ""
if (bld.CONFIG_SET("HAVE_AESNI_INTEL")
and not bld.CONFIG_SET('HAVE_GNUTLS_AES_CMAC')):
extra_deps += ' aesni-intel'
bld.SAMBA_SUBSYSTEM("GNUTLS_HELPERS",
source='''
gnutls_error.c
gnutls_aead_aes_256_cbc_hmac_sha512.c
gnutls_arcfour_confounded_md5.c
gnutls_weak_crypto.c
''',
deps="gnutls samba-errors")
bld.SAMBA_SUBSYSTEM("LIBCRYPTO_AES",
source='aes.c rijndael-alg-fst.c',
deps='talloc',
enabled=not bld.CONFIG_SET('HAVE_GNUTLS_AES_CMAC'))
bld.SAMBA_SUBSYSTEM('LIBCRYPTO_AES_CMAC',
source='aes_cmac_128.c',
deps='talloc',
enabled=not bld.CONFIG_SET('HAVE_GNUTLS_AES_CMAC'))
bld.SAMBA_SUBSYSTEM('LIBCRYPTO',
source='''
md4.c
''',
deps='''
talloc
LIBCRYPTO_AES
LIBCRYPTO_AES_CMAC
''' + extra_deps)
bld.SAMBA_SUBSYSTEM('TORTURE_LIBCRYPTO_AES_CMAC',
source='aes_cmac_128_test.c',
autoproto='aes_cmac_test_proto.h',
deps='talloc',
enabled=not bld.CONFIG_SET('HAVE_GNUTLS_AES_CMAC'))
bld.SAMBA_SUBSYSTEM('TORTURE_LIBCRYPTO',
source='md4test.c',
autoproto='test_proto.h',
deps='''
LIBCRYPTO
TORTURE_LIBCRYPTO_AES_CMAC
''')
bld.SAMBA_PYTHON('python_crypto',
source='py_crypto.c',
deps='gnutls talloc LIBCLI_AUTH',
realname='samba/crypto.so')
bld.SAMBA_BINARY('test_gnutls_aead_aes_256_cbc_hmac_sha512',
source='''
gnutls_error.c
tests/test_gnutls_aead_aes_256_cbc_hmac_sha512.c
''',
deps='cmocka gnutls samba-util samba-errors',
local_include=False,
for_selftest=True)
|
