2 # Cryptographic Library Package for UEFI Security Implementation.
3 # PEIM, DXE Driver, and SMM Driver with all crypto services enabled.
5 # Copyright (c) 2009 - 2022, Intel Corporation. All rights reserved.<BR>
6 # Copyright (c) 2020, Hewlett Packard Enterprise Development LP. All rights reserved.<BR>
7 # Copyright (c) 2022, Loongson Technology Corporation Limited. All rights reserved.<BR>
8 # SPDX-License-Identifier: BSD-2-Clause-Patent
12 ################################################################################
14 # Defines Section - statements that will be processed to create a Makefile.
16 ################################################################################
18 PLATFORM_NAME = CryptoPkg
19 PLATFORM_GUID = E1063286-6C8C-4c25-AEF0-67A9A5B6E6B6
20 PLATFORM_VERSION = 0.98
21 DSC_SPECIFICATION = 0x00010005
22 SUPPORTED_ARCHITECTURES = IA32|X64|ARM|AARCH64|RISCV64|LOONGARCH64
23 BUILD_TARGETS = DEBUG|RELEASE|NOOPT
24 SKUID_IDENTIFIER = DEFAULT
27 # Flavor of PEI, DXE, SMM modules to build.
28 # Must be one of ALL, NONE, MIN_PEI, MIN_DXE_MIN_SMM, TARGET_UINT_TESTS.
29 # Default is ALL that is used for package build verification.
30 # ALL - Build PEIM, DXE, and SMM drivers. Protocols and PPIs
31 # publish all services.
32 # NONE - Build PEIM, DXE, and SMM drivers. Protocols and PPIs
33 # publish no services. Used to verify compiler/linker
34 # optimizations are working correctly.
35 # MIN_PEI - Build PEIM with PPI that publishes minimum required
37 # MIN_DXE_MIN_SMM - Build DXE and SMM drivers with Protocols that publish
38 # minimum required services.
39 # TARGET_UNIT_TESTS - Build target-based unit tests
41 DEFINE CRYPTO_SERVICES = ALL
42 !if $(CRYPTO_SERVICES) IN "ALL NONE MIN_PEI MIN_DXE_MIN_SMM TARGET_UNIT_TESTS"
44 !error CRYPTO_SERVICES must be set to one of ALL NONE MIN_PEI MIN_DXE_MIN_SMM TARGET_UNIT_TESTS.
48 # Define different OUTPUT_DIRECTORY for each CRYPTO_SERVICES profile
50 !if $(CRYPTO_SERVICES) == ALL
51 OUTPUT_DIRECTORY = Build/CryptoPkg/All
53 !if $(CRYPTO_SERVICES) == NONE
54 OUTPUT_DIRECTORY = Build/CryptoPkg/None
56 !if $(CRYPTO_SERVICES) == MIN_PEI
57 OUTPUT_DIRECTORY = Build/CryptoPkg/MinPei
59 !if $(CRYPTO_SERVICES) == MIN_DXE_MIN_SMM
60 OUTPUT_DIRECTORY = Build/CryptoPkg/MinDxeMinSmm
62 !if $(CRYPTO_SERVICES) == TARGET_UNIT_TESTS
63 OUTPUT_DIRECTORY = Build/CryptoPkg/TagetUnitTests
67 # Define FILE_GUID names/values for CryptoPei, CryptopDxe, and CryptoSmm
68 # drivers that are linked with different OpensslLib instances
70 DEFINE PEI_CRYPTO_GUID = C693A250-6B36-49B9-B7F3-7283F8136A72
71 DEFINE PEI_STD_GUID = EBD49F5C-6D8B-40D1-A56D-9AFA485A8661
72 DEFINE PEI_FULL_GUID = D51FCE59-6860-49C0-9B35-984470735D17
73 DEFINE PEI_STD_ACCEL_GUID = DCC9CB49-7BE2-47C6-864E-6DCC932360F9
74 DEFINE PEI_FULL_ACCEL_GUID = A10827AD-7598-4955-B661-52EE2B62B057
75 DEFINE DXE_CRYPTO_GUID = 31C17C54-325D-47D5-8622-888098F10E44
76 DEFINE DXE_STD_GUID = ADD6D05A-52A2-437B-98E7-DBFDA89352CD
77 DEFINE DXE_FULL_GUID = AA83B296-F6EA-447F-B013-E80E98629CF8
78 DEFINE DXE_STD_ACCEL_GUID = 9FBDAD27-910C-4229-9EFF-A93BB5FE18C6
79 DEFINE DXE_FULL_ACCEL_GUID = 41A491D1-A972-468B-A299-DABF415A43B7
80 DEFINE SMM_CRYPTO_GUID = 1A1C9E13-5722-4636-AB73-31328EDE8BAF
81 DEFINE SMM_STD_GUID = E4D7D1E3-E886-4412-A442-EFD6F2502DD3
82 DEFINE SMM_FULL_GUID = 1930CE7E-6598-48ED-8AB1-EBE7E85EC254
83 DEFINE SMM_STD_ACCEL_GUID = 828959D3-CEA6-4B79-B1FC-5AFA0D7F2144
84 DEFINE SMM_FULL_ACCEL_GUID = C1760694-AB3A-4532-8C6D-52D8F86EB1AA
86 !if $(CRYPTO_SERVICES) == TARGET_UNIT_TESTS
87 !include UnitTestFrameworkPkg/UnitTestFrameworkPkgTarget.dsc.inc
90 ################################################################################
92 # Library Class section - list of all Library Classes needed by this Platform.
94 ################################################################################
96 !include MdePkg/MdeLibs.dsc.inc
99 BaseLib|MdePkg/Library/BaseLib/BaseLib.inf
100 BaseMemoryLib|MdePkg/Library/BaseMemoryLib/BaseMemoryLib.inf
101 DevicePathLib|MdePkg/Library/UefiDevicePathLib/UefiDevicePathLib.inf
102 SafeIntLib|MdePkg/Library/BaseSafeIntLib/BaseSafeIntLib.inf
103 SynchronizationLib|MdePkg/Library/BaseSynchronizationLib/BaseSynchronizationLib.inf
104 TimerLib|MdePkg/Library/BaseTimerLibNullTemplate/BaseTimerLibNullTemplate.inf
105 RngLib|MdePkg/Library/BaseRngLibNull/BaseRngLibNull.inf
106 PrintLib|MdePkg/Library/BasePrintLib/BasePrintLib.inf
107 DebugLib|MdeModulePkg/Library/PeiDxeDebugLibReportStatusCode/PeiDxeDebugLibReportStatusCode.inf
108 DebugPrintErrorLevelLib|MdePkg/Library/BaseDebugPrintErrorLevelLib/BaseDebugPrintErrorLevelLib.inf
109 OemHookStatusCodeLib|MdeModulePkg/Library/OemHookStatusCodeLibNull/OemHookStatusCodeLibNull.inf
110 HashApiLib|CryptoPkg/Library/BaseHashApiLib/BaseHashApiLib.inf
111 OpensslLib|CryptoPkg/Library/OpensslLib/OpensslLib.inf
112 IntrinsicLib|CryptoPkg/Library/IntrinsicLib/IntrinsicLib.inf
114 [LibraryClasses.IA32, LibraryClasses.X64, LibraryClasses.AARCH64]
115 RngLib|MdePkg/Library/BaseRngLib/BaseRngLib.inf
117 [LibraryClasses.ARM, LibraryClasses.AARCH64]
118 ArmLib|ArmPkg/Library/ArmLib/ArmBaseLib.inf
120 # It is not possible to prevent the ARM compiler for generic intrinsic functions.
121 # This library provides the instrinsic functions generate by a given compiler.
122 # [LibraryClasses.ARM, LibraryClasses.AARCH64] and NULL mean link this library
123 # into all ARM and AARCH64 images.
125 NULL|ArmPkg/Library/CompilerIntrinsicsLib/CompilerIntrinsicsLib.inf
127 # Add support for stack protector
128 NULL|MdePkg/Library/BaseStackCheckLib/BaseStackCheckLib.inf
131 ArmSoftFloatLib|ArmPkg/Library/ArmSoftFloatLib/ArmSoftFloatLib.inf
133 [LibraryClasses.common.SEC]
134 BaseCryptLib|CryptoPkg/Library/BaseCryptLib/SecCryptLib.inf
135 TlsLib|CryptoPkg/Library/TlsLibNull/TlsLibNull.inf
137 [LibraryClasses.common.PEIM]
138 PeimEntryPoint|MdePkg/Library/PeimEntryPoint/PeimEntryPoint.inf
139 PeiServicesTablePointerLib|MdePkg/Library/PeiServicesTablePointerLib/PeiServicesTablePointerLib.inf
140 PeiServicesLib|MdePkg/Library/PeiServicesLib/PeiServicesLib.inf
141 MemoryAllocationLib|MdePkg/Library/PeiMemoryAllocationLib/PeiMemoryAllocationLib.inf
142 HobLib|MdePkg/Library/PeiHobLib/PeiHobLib.inf
143 PcdLib|MdePkg/Library/PeiPcdLib/PeiPcdLib.inf
144 ReportStatusCodeLib|MdeModulePkg/Library/PeiReportStatusCodeLib/PeiReportStatusCodeLib.inf
145 BaseCryptLib|CryptoPkg/Library/BaseCryptLib/PeiCryptLib.inf
146 TlsLib|CryptoPkg/Library/TlsLibNull/TlsLibNull.inf
148 [LibraryClasses.IA32.PEIM, LibraryClasses.X64.PEIM]
149 PeiServicesTablePointerLib|MdePkg/Library/PeiServicesTablePointerLibIdt/PeiServicesTablePointerLibIdt.inf
151 [LibraryClasses.common.DXE_DRIVER]
152 UefiDriverEntryPoint|MdePkg/Library/UefiDriverEntryPoint/UefiDriverEntryPoint.inf
153 UefiBootServicesTableLib|MdePkg/Library/UefiBootServicesTableLib/UefiBootServicesTableLib.inf
154 UefiRuntimeServicesTableLib|MdePkg/Library/UefiRuntimeServicesTableLib/UefiRuntimeServicesTableLib.inf
155 MemoryAllocationLib|MdePkg/Library/UefiMemoryAllocationLib/UefiMemoryAllocationLib.inf
156 ReportStatusCodeLib|MdeModulePkg/Library/DxeReportStatusCodeLib/DxeReportStatusCodeLib.inf
157 PcdLib|MdePkg/Library/DxePcdLib/DxePcdLib.inf
158 BaseCryptLib|CryptoPkg/Library/BaseCryptLib/BaseCryptLib.inf
159 TlsLib|CryptoPkg/Library/TlsLib/TlsLib.inf
161 [LibraryClasses.common.DXE_SMM_DRIVER]
162 UefiDriverEntryPoint|MdePkg/Library/UefiDriverEntryPoint/UefiDriverEntryPoint.inf
163 UefiBootServicesTableLib|MdePkg/Library/UefiBootServicesTableLib/UefiBootServicesTableLib.inf
164 SmmServicesTableLib|MdePkg/Library/SmmServicesTableLib/SmmServicesTableLib.inf
165 MmServicesTableLib|MdePkg/Library/MmServicesTableLib/MmServicesTableLib.inf
166 MemoryAllocationLib|MdePkg/Library/SmmMemoryAllocationLib/SmmMemoryAllocationLib.inf
167 ReportStatusCodeLib|MdeModulePkg/Library/SmmReportStatusCodeLib/SmmReportStatusCodeLib.inf
168 PcdLib|MdePkg/Library/DxePcdLib/DxePcdLib.inf
169 BaseCryptLib|CryptoPkg/Library/BaseCryptLib/SmmCryptLib.inf
170 TlsLib|CryptoPkg/Library/TlsLibNull/TlsLibNull.inf
172 [LibraryClasses.common.UEFI_APPLICATION]
173 UefiApplicationEntryPoint|MdePkg/Library/UefiApplicationEntryPoint/UefiApplicationEntryPoint.inf
174 UefiBootServicesTableLib|MdePkg/Library/UefiBootServicesTableLib/UefiBootServicesTableLib.inf
175 UefiRuntimeServicesTableLib|MdePkg/Library/UefiRuntimeServicesTableLib/UefiRuntimeServicesTableLib.inf
176 MemoryAllocationLib|MdePkg/Library/UefiMemoryAllocationLib/UefiMemoryAllocationLib.inf
177 ReportStatusCodeLib|MdePkg/Library/BaseReportStatusCodeLibNull/BaseReportStatusCodeLibNull.inf
178 PcdLib|MdePkg/Library/BasePcdLibNull/BasePcdLibNull.inf
180 ################################################################################
182 # Pcd Section - list of all EDK II PCD Entries defined by this Platform
184 ################################################################################
186 gEfiMdePkgTokenSpaceGuid.PcdDebugPropertyMask|0x0f
187 gEfiMdePkgTokenSpaceGuid.PcdDebugPrintErrorLevel|0x80000000
188 gEfiMdePkgTokenSpaceGuid.PcdReportStatusCodePropertyMask|0x06
191 # For ALL and TARGET_UINT_TESTS profiles, enable all non-deprecated families
192 # and services in PcdCryptoServiceFamilyEnable.
194 !if $(CRYPTO_SERVICES) IN "ALL TARGET_UINT_TESTS"
196 gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.HmacSha256.Family | PCD_CRYPTO_SERVICE_ENABLE_FAMILY
197 gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.HmacSha384.Family | PCD_CRYPTO_SERVICE_ENABLE_FAMILY
198 gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Pkcs.Family | PCD_CRYPTO_SERVICE_ENABLE_FAMILY
199 gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Dh.Family | PCD_CRYPTO_SERVICE_ENABLE_FAMILY
200 gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Random.Family | PCD_CRYPTO_SERVICE_ENABLE_FAMILY
201 gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Rsa.Family | PCD_CRYPTO_SERVICE_ENABLE_FAMILY
202 gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Sha1.Family | PCD_CRYPTO_SERVICE_ENABLE_FAMILY
203 gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Sha256.Family | PCD_CRYPTO_SERVICE_ENABLE_FAMILY
204 gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Sha384.Family | PCD_CRYPTO_SERVICE_ENABLE_FAMILY
205 gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Sha512.Family | PCD_CRYPTO_SERVICE_ENABLE_FAMILY
206 gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.X509.Family | PCD_CRYPTO_SERVICE_ENABLE_FAMILY
207 gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Aes.Services.GetContextSize | TRUE
208 gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Aes.Services.Init | TRUE
209 gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Aes.Services.CbcEncrypt | TRUE
210 gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Aes.Services.CbcDecrypt | TRUE
211 gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Arc4.Family | PCD_CRYPTO_SERVICE_ENABLE_FAMILY
212 gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Sm3.Family | PCD_CRYPTO_SERVICE_ENABLE_FAMILY
213 gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Hkdf.Family | PCD_CRYPTO_SERVICE_ENABLE_FAMILY
214 gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Tls.Family | PCD_CRYPTO_SERVICE_ENABLE_FAMILY
215 gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.TlsSet.Family | PCD_CRYPTO_SERVICE_ENABLE_FAMILY
216 gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.TlsGet.Family | PCD_CRYPTO_SERVICE_ENABLE_FAMILY
217 gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.RsaPss.Family | PCD_CRYPTO_SERVICE_ENABLE_FAMILY
218 gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.ParallelHash.Family | PCD_CRYPTO_SERVICE_ENABLE_FAMILY
219 gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.AeadAesGcm.Family | PCD_CRYPTO_SERVICE_ENABLE_FAMILY
220 gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Bn.Family | PCD_CRYPTO_SERVICE_ENABLE_FAMILY
221 gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Ec.Family | PCD_CRYPTO_SERVICE_ENABLE_FAMILY
225 # Enable minimum set of families/services in PcdCryptoServiceFamilyEnable
226 # required by typical PEI phase.
228 !if $(CRYPTO_SERVICES) == MIN_PEI
230 gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.HmacSha256.Family | PCD_CRYPTO_SERVICE_ENABLE_FAMILY
231 gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.HmacSha384.Family | PCD_CRYPTO_SERVICE_ENABLE_FAMILY
232 gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Sha1.Family | PCD_CRYPTO_SERVICE_ENABLE_FAMILY
233 gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Sha256.Family | PCD_CRYPTO_SERVICE_ENABLE_FAMILY
234 gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Sha384.Family | PCD_CRYPTO_SERVICE_ENABLE_FAMILY
235 gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Sha512.Family | PCD_CRYPTO_SERVICE_ENABLE_FAMILY
236 gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Sm3.Family | PCD_CRYPTO_SERVICE_ENABLE_FAMILY
237 gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Rsa.Services.Pkcs1Verify | TRUE
238 gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Rsa.Services.New | TRUE
239 gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Rsa.Services.Free | TRUE
240 gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Rsa.Services.SetKey | TRUE
241 gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Pkcs.Services.Pkcs5HashPassword | TRUE
242 gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Aes.Services.GetContextSize | TRUE
243 gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Aes.Services.Init | TRUE
244 gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Aes.Services.CbcEncrypt | TRUE
245 gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Aes.Services.CbcDecrypt | TRUE
246 gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Hkdf.Family | PCD_CRYPTO_SERVICE_ENABLE_FAMILY
250 # Enable minimum set of families/services in PcdCryptoServiceFamilyEnable
251 # required by typical DXE and SMM phases.
253 !if $(CRYPTO_SERVICES) == MIN_DXE_MIN_SMM
255 gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.HmacSha256.Family | PCD_CRYPTO_SERVICE_ENABLE_FAMILY
256 gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.HmacSha384.Family | PCD_CRYPTO_SERVICE_ENABLE_FAMILY
257 gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Pkcs.Services.Pkcs1v2Encrypt | TRUE
258 gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Pkcs.Services.Pkcs5HashPassword | TRUE
259 gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Pkcs.Services.Pkcs7Verify | TRUE
260 gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Pkcs.Services.VerifyEKUsInPkcs7Signature | TRUE
261 gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Pkcs.Services.Pkcs7GetSigners | TRUE
262 gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Pkcs.Services.Pkcs7FreeSigners | TRUE
263 gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Pkcs.Services.AuthenticodeVerify | TRUE
264 gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Random.Family | PCD_CRYPTO_SERVICE_ENABLE_FAMILY
265 gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Rsa.Services.Pkcs1Verify | TRUE
266 gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Rsa.Services.New | TRUE
267 gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Rsa.Services.Free | TRUE
268 gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Rsa.Services.SetKey | TRUE
269 gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Rsa.Services.GetPublicKeyFromX509 | TRUE
270 gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Sha1.Family | PCD_CRYPTO_SERVICE_ENABLE_FAMILY
271 gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Sha256.Family | PCD_CRYPTO_SERVICE_ENABLE_FAMILY
272 gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Sha256.Services.HashAll | FALSE
273 gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.X509.Services.GetSubjectName | TRUE
274 gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.X509.Services.GetCommonName | TRUE
275 gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.X509.Services.GetOrganizationName | TRUE
276 gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.X509.Services.GetTBSCert | TRUE
277 gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Tls.Family | PCD_CRYPTO_SERVICE_ENABLE_FAMILY
278 gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.TlsSet.Family | PCD_CRYPTO_SERVICE_ENABLE_FAMILY
279 gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.TlsGet.Family | PCD_CRYPTO_SERVICE_ENABLE_FAMILY
280 gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Aes.Services.GetContextSize | TRUE
281 gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Aes.Services.Init | TRUE
282 gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Aes.Services.CbcEncrypt | TRUE
283 gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Aes.Services.CbcDecrypt | TRUE
284 gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.AeadAesGcm.Services.Encrypt | TRUE
285 gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.AeadAesGcm.Services.Decrypt | TRUE
286 gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Hkdf.Family | PCD_CRYPTO_SERVICE_ENABLE_FAMILY
289 ###################################################################################################
291 # Components Section - list of the modules and components that will be processed by compilation
292 # tools and the EDK II tools to generate PE32/PE32+/Coff image files.
294 # Note: The EDK II DSC file is not used to specify how compiled binary images get placed
295 # into firmware volume images. This section is just a list of modules to compile from
296 # source into UEFI-compliant binaries.
297 # It is the FDF file that contains information on combining binary files into firmware
298 # volume images, whose concept is beyond UEFI and is described in PI specification.
299 # Binary modules do not need to be listed in this section, as they should be
300 # specified in the FDF file. For example: Shell binary (Shell_Full.efi), FAT binary (Fat.efi),
301 # Logo (Logo.bmp), and etc.
302 # There may also be modules listed in this section that are not required in the FDF file,
303 # When a module listed here is excluded from FDF file, then UEFI-compliant binary will be
304 # generated for it, but the binary will not be put into any firmware volume.
306 ###################################################################################################
309 # If profile is TARGET_UNIT_TESTS, then build target-based unit tests
310 # using the OpensslLib, BaseCryptLib, and TlsLib with the largest set of
311 # available services.
313 !if $(CRYPTO_SERVICES) == TARGET_UNIT_TESTS
314 [Components.IA32, Components.X64, Components.ARM, Components.AARCH64]
316 # Target based unit tests
318 CryptoPkg/Test/UnitTest/Library/BaseCryptLib/TestBaseCryptLibShell.inf {
320 OpensslLib|CryptoPkg/Library/OpensslLib/OpensslLibFull.inf
321 BaseCryptLib|CryptoPkg/Library/BaseCryptLib/BaseCryptLib.inf
322 TlsLib|CryptoPkg/Library/TlsLib/TlsLib.inf
324 MSFT:*_*_*_DLINK_FLAGS = /ALIGN:4096 /FILEALIGN:4096 /SUBSYSTEM:CONSOLE
325 MSFT:DEBUG_*_*_DLINK_FLAGS = /EXPORT:InitializeDriver=$(IMAGE_ENTRY_POINT) /BASE:0x10000
326 MSFT:DEBUG_*_*_DLINK_FLAGS = /EXPORT:InitializeDriver=$(IMAGE_ENTRY_POINT) /BASE:0x10000
327 MSFT:NOOPT_*_*_DLINK_FLAGS = /EXPORT:InitializeDriver=$(IMAGE_ENTRY_POINT) /BASE:0x10000
330 [Components.IA32, Components.X64]
331 CryptoPkg/Test/UnitTest/Library/BaseCryptLib/TestBaseCryptLibShell.inf {
333 FILE_GUID = B91B9A95-4D52-4501-A98F-A1711C14ED93
335 OpensslLib|CryptoPkg/Library/OpensslLib/OpensslLibFullAccel.inf
336 BaseCryptLib|CryptoPkg/Library/BaseCryptLib/BaseCryptLib.inf
337 TlsLib|CryptoPkg/Library/TlsLib/TlsLib.inf
339 MSFT:*_*_*_DLINK_FLAGS = /ALIGN:4096 /FILEALIGN:4096 /SUBSYSTEM:CONSOLE
340 MSFT:DEBUG_*_*_DLINK_FLAGS = /EXPORT:InitializeDriver=$(IMAGE_ENTRY_POINT) /BASE:0x10000
341 MSFT:DEBUG_*_*_DLINK_FLAGS = /EXPORT:InitializeDriver=$(IMAGE_ENTRY_POINT) /BASE:0x10000
342 MSFT:NOOPT_*_*_DLINK_FLAGS = /EXPORT:InitializeDriver=$(IMAGE_ENTRY_POINT) /BASE:0x10000
346 CryptoPkg/Test/UnitTest/Library/BaseCryptLib/TestBaseCryptLibShell.inf {
348 OpensslLib|CryptoPkg/Library/OpensslLib/OpensslLib.inf
349 BaseCryptLib|CryptoPkg/Library/BaseCryptLib/BaseCryptLib.inf
350 TlsLib|CryptoPkg/Library/TlsLib/TlsLib.inf
355 # If profile is ALL, then do verification build of all library instances.
357 !if $(CRYPTO_SERVICES) == ALL
360 # Build verification of all library instances
362 CryptoPkg/Library/BaseCryptLib/BaseCryptLib.inf
363 CryptoPkg/Library/BaseCryptLib/SecCryptLib.inf
364 CryptoPkg/Library/BaseCryptLib/PeiCryptLib.inf
365 CryptoPkg/Library/BaseCryptLib/SmmCryptLib.inf
366 CryptoPkg/Library/BaseCryptLib/RuntimeCryptLib.inf
367 CryptoPkg/Library/BaseCryptLibNull/BaseCryptLibNull.inf
368 CryptoPkg/Library/IntrinsicLib/IntrinsicLib.inf
369 CryptoPkg/Library/TlsLib/TlsLib.inf
370 CryptoPkg/Library/TlsLibNull/TlsLibNull.inf
371 CryptoPkg/Library/OpensslLib/OpensslLibCrypto.inf
372 CryptoPkg/Library/OpensslLib/OpensslLib.inf
373 CryptoPkg/Library/OpensslLib/OpensslLibFull.inf
374 CryptoPkg/Library/BaseHashApiLib/BaseHashApiLib.inf
375 CryptoPkg/Library/BaseCryptLibOnProtocolPpi/PeiCryptLib.inf
376 CryptoPkg/Library/BaseCryptLibOnProtocolPpi/DxeCryptLib.inf
377 CryptoPkg/Library/BaseCryptLibOnProtocolPpi/SmmCryptLib.inf
379 # Build verification of target-based unit tests
381 CryptoPkg/Test/UnitTest/Library/BaseCryptLib/TestBaseCryptLibShell.inf {
383 UnitTestLib|UnitTestFrameworkPkg/Library/UnitTestLib/UnitTestLib.inf
384 UnitTestPersistenceLib|UnitTestFrameworkPkg/Library/UnitTestPersistenceLibNull/UnitTestPersistenceLibNull.inf
385 UnitTestResultReportLib|UnitTestFrameworkPkg/Library/UnitTestResultReportLib/UnitTestResultReportLibConOut.inf
386 OpensslLib|CryptoPkg/Library/OpensslLib/OpensslLib.inf
387 BaseCryptLib|CryptoPkg/Library/BaseCryptLib/BaseCryptLib.inf
388 TlsLib|CryptoPkg/Library/TlsLib/TlsLib.inf
391 [Components.IA32, Components.X64]
393 # Build verification of IA32/X64 specific libraries
395 CryptoPkg/Library/OpensslLib/OpensslLibAccel.inf
396 CryptoPkg/Library/OpensslLib/OpensslLibFullAccel.inf
400 # If profile is ALL or NONE or MIN_PEI, then build CryptoPei with all supported
401 # OpensslLib instances.
403 !if $(CRYPTO_SERVICES) in "ALL NONE MIN_PEI"
406 # CryptoPei with OpensslLib instance without SSL or EC services
408 CryptoPkg/Driver/CryptoPei.inf {
410 FILE_GUID = $(PEI_CRYPTO_GUID)
412 OpensslLib|CryptoPkg/Library/OpensslLib/OpensslLibCrypto.inf
415 # CryptoPei with OpensslLib instance without EC services
417 CryptoPkg/Driver/CryptoPei.inf {
419 FILE_GUID = $(PEI_STD_GUID)
421 OpensslLib|CryptoPkg/Library/OpensslLib/OpensslLib.inf
423 [Components.IA32, Components.X64, Components.ARM, Components.AARCH64]
425 # CryptoPei with OpensslLib instance with all services
427 CryptoPkg/Driver/CryptoPei.inf {
429 FILE_GUID = $(PEI_FULL_GUID)
431 OpensslLib|CryptoPkg/Library/OpensslLib/OpensslLibFull.inf
434 [Components.IA32, Components.X64]
436 # CryptoPei with IA32/X64 performance optimized OpensslLib instance without EC services
437 # IA32/X64 assembly optimizations required larger alignments
439 CryptoPkg/Driver/CryptoPei.inf {
441 FILE_GUID = $(PEI_STD_ACCEL_GUID)
443 OpensslLib|CryptoPkg/Library/OpensslLib/OpensslLibAccel.inf
445 MSFT:*_*_IA32_DLINK_FLAGS = /ALIGN:64
446 MSFT:*_*_X64_DLINK_FLAGS = /ALIGN:256
450 # CryptoPei with IA32/X64 performance optimized OpensslLib instance all services
451 # IA32/X64 assembly optimizations required larger alignments
453 CryptoPkg/Driver/CryptoPei.inf {
455 FILE_GUID = $(PEI_FULL_ACCEL_GUID)
457 OpensslLib|CryptoPkg/Library/OpensslLib/OpensslLibFullAccel.inf
459 MSFT:*_*_IA32_DLINK_FLAGS = /ALIGN:64
460 MSFT:*_*_X64_DLINK_FLAGS = /ALIGN:256
465 # If profile is ALL or NONE or MIN_DXE_MIN_SMM, then build CryptoDxe and
466 # CryptoSmm using all supported OpensslLib instances.
468 !if $(CRYPTO_SERVICES) in "ALL NONE MIN_DXE_MIN_SMM"
471 # CryptoDxe with OpensslLib instance with no SSL or EC services
473 CryptoPkg/Driver/CryptoDxe.inf {
475 FILE_GUID = $(DXE_CRYPTO_GUID)
477 OpensslLib|CryptoPkg/Library/OpensslLib/OpensslLibCrypto.inf
478 TlsLib|CryptoPkg/Library/TlsLibNull/TlsLibNull.inf
481 # CryptoDxe with OpensslLib instance with no EC services
483 CryptoPkg/Driver/CryptoDxe.inf {
485 FILE_GUID = $(DXE_STD_GUID)
487 OpensslLib|CryptoPkg/Library/OpensslLib/OpensslLib.inf
489 [Components.IA32, Components.X64, Components.ARM, Components.AARCH64]
491 # CryptoDxe with OpensslLib instance with all services
493 CryptoPkg/Driver/CryptoDxe.inf {
495 FILE_GUID = $(DXE_FULL_GUID)
497 OpensslLib|CryptoPkg/Library/OpensslLib/OpensslLibFull.inf
500 [Components.IA32, Components.X64]
502 # CryptoDxe with IA32/X64 performance optimized OpensslLib instance with no EC services
503 # with TLS feature enabled.
504 # IA32/X64 assembly optimizations required larger alignments
506 CryptoPkg/Driver/CryptoDxe.inf {
508 FILE_GUID = $(DXE_STD_ACCEL_GUID)
510 OpensslLib|CryptoPkg/Library/OpensslLib/OpensslLibAccel.inf
512 MSFT:*_*_IA32_DLINK_FLAGS = /ALIGN:64
513 MSFT:*_*_X64_DLINK_FLAGS = /ALIGN:256
516 # CryptoDxe with IA32/X64 performance optimized OpensslLib instance with all services.
517 # IA32/X64 assembly optimizations required larger alignments
519 CryptoPkg/Driver/CryptoDxe.inf {
521 FILE_GUID = $(DXE_FULL_ACCEL_GUID)
523 OpensslLib|CryptoPkg/Library/OpensslLib/OpensslLibFullAccel.inf
525 MSFT:*_*_IA32_DLINK_FLAGS = /ALIGN:64
526 MSFT:*_*_X64_DLINK_FLAGS = /ALIGN:256
529 # CryptoSmm with OpensslLib instance with no SSL or EC services
531 CryptoPkg/Driver/CryptoSmm.inf {
533 FILE_GUID = $(SMM_CRYPTO_GUID)
535 OpensslLib|CryptoPkg/Library/OpensslLib/OpensslLibCrypto.inf
538 # CryptoSmm with OpensslLib instance with no SSL services
540 CryptoPkg/Driver/CryptoSmm.inf {
542 FILE_GUID = $(SMM_STD_GUID)
544 OpensslLib|CryptoPkg/Library/OpensslLib/OpensslLib.inf
547 # CryptoSmm with OpensslLib instance with no all services
549 CryptoPkg/Driver/CryptoSmm.inf {
551 FILE_GUID = $(SMM_FULL_GUID)
553 OpensslLib|CryptoPkg/Library/OpensslLib/OpensslLibFull.inf
556 # CryptoSmm with IA32/X64 performance optimized OpensslLib instance with no EC services
557 # IA32/X64 assembly optimizations required larger alignments
559 CryptoPkg/Driver/CryptoSmm.inf {
561 FILE_GUID = $(SMM_STD_ACCEL_GUID)
563 OpensslLib|CryptoPkg/Library/OpensslLib/OpensslLibAccel.inf
565 MSFT:*_*_IA32_DLINK_FLAGS = /ALIGN:64
566 MSFT:*_*_X64_DLINK_FLAGS = /ALIGN:256
569 # CryptoSmm with IA32/X64 performance optimized OpensslLib instance with all services
570 # IA32/X64 assembly optimizations required larger alignments
572 CryptoPkg/Driver/CryptoSmm.inf {
574 FILE_GUID = $(SMM_FULL_ACCEL_GUID)
576 OpensslLib|CryptoPkg/Library/OpensslLib/OpensslLibFullAccel.inf
578 MSFT:*_*_IA32_DLINK_FLAGS = /ALIGN:64
579 MSFT:*_*_X64_DLINK_FLAGS = /ALIGN:256
584 RELEASE_*_*_CC_FLAGS = -DMDEPKG_NDEBUG
585 *_*_*_CC_FLAGS = -D DISABLE_NEW_DEPRECATED_INTERFACES