mirror of
https://github.com/intel/linux-sgx
synced 2026-06-08 14:49:32 +00:00
aplatasz
79d06a4e58
Added security-focused compiler and linker flags --------- Signed-off-by: Anna Platasz <anna.platasz@intel.com>
169 lines
5.4 KiB
Makefile
169 lines
5.4 KiB
Makefile
#
|
|
# Copyright(c) 2011-2026 Intel Corporation
|
|
#
|
|
# SPDX-License-Identifier: BSD-3-Clause
|
|
#
|
|
|
|
# PCL library makefile
|
|
|
|
include ../../buildenv.mk
|
|
|
|
ifndef VERBOSE
|
|
PCLVERBOSE := @
|
|
else
|
|
PCLVERBOSE :=
|
|
endif
|
|
|
|
ifeq ($(ARCH), x86)
|
|
$(error x86 build is not supported, only x64!!)
|
|
endif
|
|
|
|
# output dir for simulation build objects
|
|
SIM_DIR := simulation/
|
|
SIM_OBJ_DIR := $(SIM_DIR)
|
|
|
|
|
|
PCL_SIM_LIB := libsgx_pclsim.a
|
|
PCL_LIB := libsgx_pcl.a
|
|
|
|
# source files
|
|
PCL_ASM_FILES := crypto/pcl_vpaes-x86_64.s \
|
|
crypto/pcl_ghash-x86_64.s
|
|
|
|
PCL_CPP_FILES := pcl_entry.cpp \
|
|
pcl_mem.cpp \
|
|
crypto/pcl_crypto.cpp \
|
|
unseal/pcl_tSeal.cpp \
|
|
unseal/pcl_sgx_get_key.cpp \
|
|
unseal/pcl_tSeal_util.cpp \
|
|
unseal/pcl_tSeal_internal.cpp
|
|
|
|
PCL_C_FILES := crypto/pcl_sha256.c \
|
|
crypto/pcl_gcm128.c
|
|
|
|
# files for simulation mode
|
|
PCL_SIM_C_FILES := $(PCL_C_FILES) crypto/pcl_cmac.c
|
|
PCL_SIM_CPP_FILES := $(PCL_CPP_FILES) unseal/sim/pcl_deriv.cpp unseal/sim/pcl_t_instructions.cpp
|
|
|
|
# object files
|
|
PCL_CPP_OBJECTS := $(PCL_CPP_FILES:%.cpp=%.o)
|
|
PCL_C_OBJECTS := $(PCL_C_FILES:%.c=%.o)
|
|
PCL_ASM_OBJECTS := $(PCL_ASM_FILES:%.s=%.o)
|
|
|
|
# simulation objects
|
|
PCL_SIM_CPP_OBJECTS := $(PCL_SIM_CPP_FILES:%.cpp=$(SIM_OBJ_DIR)%.o)
|
|
PCL_SIM_C_OBJECTS := $(PCL_SIM_C_FILES:%.c=$(SIM_OBJ_DIR)%.o)
|
|
|
|
# build flags
|
|
PCL_INCLUDE_PATH := -I$(COMMON_DIR)/inc \
|
|
-I$(COMMON_DIR)/inc/tlibc \
|
|
-I$(COMMON_DIR)/inc/internal \
|
|
-I./crypto \
|
|
-I./unseal \
|
|
-I/usr/include \
|
|
-I/usr/include/x86_64-linux-gnu \
|
|
-I./
|
|
|
|
TCFLAGS := $(filter-out -ffunction-sections -fdata-sections, $(CFLAGS))
|
|
TCXXFLAGS := $(filter-out -ffunction-sections -fdata-sections, $(CXXFLAGS))
|
|
PCL_LIB_C_FLAGS := $(TCFLAGS) $(ENCLAVE_CFLAGS) $(PCL_INCLUDE_PATH)
|
|
PCL_LIB_CPP_FLAGS := $(TCXXFLAGS) $(ENCLAVE_CXXFLAGS) $(PCL_INCLUDE_PATH)
|
|
|
|
|
|
PCL_SIM_LIB_C_FLAGS := $(TCFLAGS) $(ENCLAVE_CFLAGS) -DSE_SIM=1 $(PCL_INCLUDE_PATH) -I$(LINUX_SDK_DIR)/simulation/tinst
|
|
PCL_SIM_LIB_CPP_FLAGS := $(TCXXFLAGS) $(ENCLAVE_CXXFLAGS) -DSE_SIM=1 $(PCL_INCLUDE_PATH) -I$(LINUX_SDK_DIR)/simulation/tinst
|
|
|
|
# optimize bug on GCC 13.3.2(ubuntu23.10) and gcc 12.2 debian12, we need to disable optimize when build with GCC 12
|
|
# CC_NO_LESS_THAN_12 is defined in the main buildenv.mk
|
|
ifeq ($(CC_NO_LESS_THAN_12), 1)
|
|
PCL_LIB_C_FLAGS += -DTURN_OFF_O2
|
|
PCL_LIB_CPP_FLAGS += -DTURN_OFF_O2
|
|
PCL_SIM_LIB_C_FLAGS += -DTURN_OFF_O2
|
|
PCL_SIM_LIB_CPP_FLAGS += -DTURN_OFF_O2
|
|
endif
|
|
|
|
# targets
|
|
.PHONY: all
|
|
|
|
all: | $(BUILD_DIR)
|
|
$(PCLVERBOSE)$(MAKE) $(PCL_LIB)
|
|
$(PCLVERBOSE)$(MAKE) $(PCL_SIM_LIB)
|
|
$(PCLVERBOSE)$(CP) $(PCL_LIB) $|
|
|
$(PCLVERBOSE)$(CP) $(PCL_SIM_LIB) $|
|
|
|
|
$(BUILD_DIR):
|
|
$(PCLVERBOSE)$(MKDIR) $@
|
|
|
|
.PHONY: $(PCL_LIB)
|
|
$(PCL_LIB):$(PCL_CPP_OBJECTS) $(PCL_ASM_OBJECTS) $(PCL_C_OBJECTS)
|
|
@echo "library build with DEBUG =" $(DEBUG)
|
|
$(PCLVERBOSE)$(AR) -rc $@ $^
|
|
@echo "AR <= $@"
|
|
|
|
|
|
.PHONY: $(PCL_SIM_LIB)
|
|
$(PCL_SIM_LIB):$(PCL_SIM_CPP_OBJECTS) $(PCL_ASM_OBJECTS) $(PCL_SIM_C_OBJECTS)
|
|
@echo "library build with DEBUG =" $(DEBUG)
|
|
$(PCLVERBOSE)$(AR) -rc $@ $^
|
|
@echo "AR <= $@"
|
|
|
|
|
|
%.o: %.s
|
|
$(PCLVERBOSE)mkdir -p $(@D)
|
|
$(PCLVERBOSE)$(CC) $(PCL_LIB_C_FLAGS) -c $< -o $@
|
|
$(PCLVERBOSE)$(OBJCOPY) $@ --rename-section .text=$(NIPX)
|
|
$(PCLVERBOSE)$(OBJCOPY) $@ --rename-section .data=$(NIPD)
|
|
$(PCLVERBOSE)$(OBJCOPY) $@ --rename-section .rodata=$(NIPRODT)
|
|
@echo "CC <= $<"
|
|
|
|
%.o: %.c
|
|
$(PCLVERBOSE)mkdir -p $(@D)
|
|
$(PCLVERBOSE)$(CC) $(PCL_LIB_C_FLAGS) -c $< -o $@
|
|
$(PCLVERBOSE)$(OBJCOPY) $@ --rename-section .text=$(NIPX)
|
|
$(PCLVERBOSE)$(OBJCOPY) $@ --rename-section .data=$(NIPD)
|
|
$(PCLVERBOSE)$(OBJCOPY) $@ --rename-section .rodata=$(NIPRODT)
|
|
@echo "CC <= $<"
|
|
|
|
%.o: %.cpp
|
|
$(PCLVERBOSE)mkdir -p $(@D)
|
|
$(PCLVERBOSE)$(CXX) $(PCL_LIB_CPP_FLAGS) -c $< -o $@
|
|
$(PCLVERBOSE)$(OBJCOPY) $@ --rename-section .text=$(NIPX)
|
|
$(PCLVERBOSE)$(OBJCOPY) $@ --rename-section .data=$(NIPD)
|
|
$(PCLVERBOSE)$(OBJCOPY) $@ --rename-section .rodata=$(NIPRODT)
|
|
@echo "CXX <= $<"
|
|
|
|
# Simulation objects
|
|
$(SIM_OBJ_DIR)%.o: %.s
|
|
$(PCLVERBOSE)mkdir -p $(@D)
|
|
$(PCLVERBOSE)$(CC) $(PCL_SIM_LIB_C_FLAGS) -c $< -o $@
|
|
$(PCLVERBOSE)$(OBJCOPY) $@ --rename-section .text=$(NIPX)
|
|
$(PCLVERBOSE)$(OBJCOPY) $@ --rename-section .data=$(NIPD)
|
|
$(PCLVERBOSE)$(OBJCOPY) $@ --rename-section .rodata=$(NIPRODT)
|
|
@echo "CC <= $<"
|
|
|
|
$(SIM_OBJ_DIR)%.o: %.c
|
|
$(PCLVERBOSE)mkdir -p $(@D)
|
|
$(PCLVERBOSE)$(CC) $(PCL_SIM_LIB_C_FLAGS) -c $< -o $@
|
|
$(PCLVERBOSE)$(OBJCOPY) $@ --rename-section .text=$(NIPX)
|
|
$(PCLVERBOSE)$(OBJCOPY) $@ --rename-section .data=$(NIPD)
|
|
$(PCLVERBOSE)$(OBJCOPY) $@ --rename-section .rodata=$(NIPRODT)
|
|
@echo "CC <= $<"
|
|
|
|
$(SIM_OBJ_DIR)%.o: %.cpp
|
|
$(PCLVERBOSE)mkdir -p $(@D)
|
|
$(PCLVERBOSE)$(CXX) $(PCL_SIM_LIB_CPP_FLAGS) -c $< -o $@
|
|
$(PCLVERBOSE)$(OBJCOPY) $@ --rename-section .text=$(NIPX)
|
|
$(PCLVERBOSE)$(OBJCOPY) $@ --rename-section .data=$(NIPD)
|
|
$(PCLVERBOSE)$(OBJCOPY) $@ --rename-section .rodata=$(NIPRODT)
|
|
@echo "CXX <= $<"
|
|
|
|
.PHONY: clean
|
|
clean:
|
|
$(PCLVERBOSE)$(RM) $(PCL_LIB) $(PCL_SIM_LIB) $(PCL_CPP_OBJECTS) $(PCL_ASM_OBJECTS) $(PCL_C_OBJECTS) $(PCL_SIM_CPP_OBJECTS) $(PCL_SIM_C_OBJECTS)
|
|
$(PCLVERBOSE)rm -rf $(SIM_DIR) $(BUILD_DIR)/$(PCL_LIB) $(BUILD_DIR)/$(PCL_SIM_LIB)
|
|
|
|
.PHONY: rebuild
|
|
rebuild:
|
|
$(MAKE) clean
|
|
$(MAKE) all
|