CryptoPkg/CryptoPkg.dsc

   1 ## @file
   2 #  Cryptographic Library Package for UEFI Security Implementation.
   3 #  PEIM, DXE Driver, and SMM Driver with all crypto services enabled.
   4 #
   5 #  Copyright (c) 2009 - 2021, Intel Corporation. All rights reserved.<BR>
   6 #  Copyright (c) 2020, Hewlett Packard Enterprise Development LP. All rights reserved.<BR>
   7 #  Copyright (c) 2022, Loongson Technology Corporation Limited. All rights reserved.<BR>
   8 #  SPDX-License-Identifier: BSD-2-Clause-Patent
   9 #
  10 ##
  11
  12 ################################################################################
  13 #
  14 # Defines Section - statements that will be processed to create a Makefile.
  15 #
  16 ################################################################################
  17 [Defines]
  18   PLATFORM_NAME                  = CryptoPkg
  19   PLATFORM_GUID                  = E1063286-6C8C-4c25-AEF0-67A9A5B6E6B6
  20   PLATFORM_VERSION               = 0.98
  21   DSC_SPECIFICATION              = 0x00010005
  22   SUPPORTED_ARCHITECTURES        = IA32|X64|ARM|AARCH64|RISCV64|LOONGARCH64
  23   BUILD_TARGETS                  = DEBUG|RELEASE|NOOPT
  24   SKUID_IDENTIFIER               = DEFAULT
  25
  26   #
  27   # Flavor of PEI, DXE, SMM modules to build.
  28   # Must be one of ALL, NONE, MIN_PEI, MIN_DXE_MIN_SMM, TARGET_UINT_TESTS.
  29   # Default is ALL that is used for package build verification.
  30   #   ALL             - Build PEIM, DXE, and SMM drivers.  Protocols and PPIs
  31   #                     publish all services.
  32   #   NONE            - Build PEIM, DXE, and SMM drivers.  Protocols and PPIs
  33   #                     publish no services.  Used to verify compiler/linker
  34   #                     optimizations are working correctly.
  35   #   MIN_PEI         - Build PEIM with PPI that publishes minimum required
  36   #                     services.
  37   #   MIN_DXE_MIN_SMM - Build DXE and SMM drivers with Protocols that publish
  38   #                     minimum required services.
  39   #   TARGET_UNIT_TESTS - Build target-based unit tests
  40   #
  41   DEFINE CRYPTO_SERVICES = ALL
  42 !if $(CRYPTO_SERVICES) IN "ALL NONE MIN_PEI MIN_DXE_MIN_SMM TARGET_UNIT_TESTS"
  43 !else
  44   !error CRYPTO_SERVICES must be set to one of ALL NONE MIN_PEI MIN_DXE_MIN_SMM TARGET_UNIT_TESTS.
  45 !endif
  46
  47 #
  48 # Define different OUTPUT_DIRECTORY for each CRYPTO_SERVICES profile
  49 #
  50 !if $(CRYPTO_SERVICES) == ALL
  51   OUTPUT_DIRECTORY             = Build/CryptoPkg/All
  52 !endif
  53 !if $(CRYPTO_SERVICES) == NONE
  54   OUTPUT_DIRECTORY              = Build/CryptoPkg/None
  55 !endif
  56 !if $(CRYPTO_SERVICES) == MIN_PEI
  57   OUTPUT_DIRECTORY              = Build/CryptoPkg/MinPei
  58 !endif
  59 !if $(CRYPTO_SERVICES) == MIN_DXE_MIN_SMM
  60   OUTPUT_DIRECTORY              = Build/CryptoPkg/MinDxeMinSmm
  61 !endif
  62 !if $(CRYPTO_SERVICES) == TARGET_UNIT_TESTS
  63   OUTPUT_DIRECTORY              = Build/CryptoPkg/TagetUnitTests
  64 !endif
  65
  66 #
  67 # Define FILE_GUID names/values for CryptoPei, CryptopDxe, and CryptoSmm
  68 # drivers that are linked with different OpensslLib instances
  69 #
  70   DEFINE  PEI_CRYPTO_GUID     = C693A250-6B36-49B9-B7F3-7283F8136A72
  71   DEFINE  PEI_STD_GUID        = EBD49F5C-6D8B-40D1-A56D-9AFA485A8661
  72   DEFINE  PEI_FULL_GUID       = D51FCE59-6860-49C0-9B35-984470735D17
  73   DEFINE  PEI_STD_ACCEL_GUID  = DCC9CB49-7BE2-47C6-864E-6DCC932360F9
  74   DEFINE  PEI_FULL_ACCEL_GUID = A10827AD-7598-4955-B661-52EE2B62B057
  75   DEFINE  DXE_CRYPTO_GUID     = 31C17C54-325D-47D5-8622-888098F10E44
  76   DEFINE  DXE_STD_GUID        = ADD6D05A-52A2-437B-98E7-DBFDA89352CD
  77   DEFINE  DXE_FULL_GUID       = AA83B296-F6EA-447F-B013-E80E98629CF8
  78   DEFINE  DXE_STD_ACCEL_GUID  = 9FBDAD27-910C-4229-9EFF-A93BB5FE18C6
  79   DEFINE  DXE_FULL_ACCEL_GUID = 41A491D1-A972-468B-A299-DABF415A43B7
  80   DEFINE  SMM_CRYPTO_GUID     = 1A1C9E13-5722-4636-AB73-31328EDE8BAF
  81   DEFINE  SMM_STD_GUID        = E4D7D1E3-E886-4412-A442-EFD6F2502DD3
  82   DEFINE  SMM_FULL_GUID       = 1930CE7E-6598-48ED-8AB1-EBE7E85EC254
  83   DEFINE  SMM_STD_ACCEL_GUID  = 828959D3-CEA6-4B79-B1FC-5AFA0D7F2144
  84   DEFINE  SMM_FULL_ACCEL_GUID = C1760694-AB3A-4532-8C6D-52D8F86EB1AA
  85
  86 !if $(CRYPTO_SERVICES) == TARGET_UNIT_TESTS
  87 !include UnitTestFrameworkPkg/UnitTestFrameworkPkgTarget.dsc.inc
  88 !endif
  89
  90 ################################################################################
  91 #
  92 # Library Class section - list of all Library Classes needed by this Platform.
  93 #
  94 ################################################################################
  95
  96 !include MdePkg/MdeLibs.dsc.inc
  97
  98 [LibraryClasses]
  99   BaseLib|MdePkg/Library/BaseLib/BaseLib.inf
 100   BaseMemoryLib|MdePkg/Library/BaseMemoryLib/BaseMemoryLib.inf
 101   DevicePathLib|MdePkg/Library/UefiDevicePathLib/UefiDevicePathLib.inf
 102   SafeIntLib|MdePkg/Library/BaseSafeIntLib/BaseSafeIntLib.inf
 103   SynchronizationLib|MdePkg/Library/BaseSynchronizationLib/BaseSynchronizationLib.inf
 104   TimerLib|MdePkg/Library/BaseTimerLibNullTemplate/BaseTimerLibNullTemplate.inf
 105   RngLib|MdePkg/Library/BaseRngLibNull/BaseRngLibNull.inf
 106   PrintLib|MdePkg/Library/BasePrintLib/BasePrintLib.inf
 107   DebugLib|MdeModulePkg/Library/PeiDxeDebugLibReportStatusCode/PeiDxeDebugLibReportStatusCode.inf
 108   DebugPrintErrorLevelLib|MdePkg/Library/BaseDebugPrintErrorLevelLib/BaseDebugPrintErrorLevelLib.inf
 109   OemHookStatusCodeLib|MdeModulePkg/Library/OemHookStatusCodeLibNull/OemHookStatusCodeLibNull.inf
 110   HashApiLib|CryptoPkg/Library/BaseHashApiLib/BaseHashApiLib.inf
 111   OpensslLib|CryptoPkg/Library/OpensslLib/OpensslLib.inf
 112   IntrinsicLib|CryptoPkg/Library/IntrinsicLib/IntrinsicLib.inf
 113
 114 [LibraryClasses.IA32, LibraryClasses.X64, LibraryClasses.AARCH64]
 115   RngLib|MdePkg/Library/BaseRngLib/BaseRngLib.inf
 116
 117 [LibraryClasses.ARM, LibraryClasses.AARCH64]
 118   ArmLib|ArmPkg/Library/ArmLib/ArmBaseLib.inf
 119   #
 120   # It is not possible to prevent the ARM compiler for generic intrinsic functions.
 121   # This library provides the instrinsic functions generate by a given compiler.
 122   # [LibraryClasses.ARM, LibraryClasses.AARCH64] and NULL mean link this library
 123   # into all ARM and AARCH64 images.
 124   #
 125   NULL|ArmPkg/Library/CompilerIntrinsicsLib/CompilerIntrinsicsLib.inf
 126
 127   # Add support for stack protector
 128   NULL|MdePkg/Library/BaseStackCheckLib/BaseStackCheckLib.inf
 129
 130 [LibraryClasses.ARM]
 131   ArmSoftFloatLib|ArmPkg/Library/ArmSoftFloatLib/ArmSoftFloatLib.inf
 132
 133 [LibraryClasses.common.SEC]
 134   BaseCryptLib|CryptoPkg/Library/BaseCryptLib/SecCryptLib.inf
 135   TlsLib|CryptoPkg/Library/TlsLibNull/TlsLibNull.inf
 136
 137 [LibraryClasses.common.PEIM]
 138   PeimEntryPoint|MdePkg/Library/PeimEntryPoint/PeimEntryPoint.inf
 139   PeiServicesTablePointerLib|MdePkg/Library/PeiServicesTablePointerLib/PeiServicesTablePointerLib.inf
 140   PeiServicesLib|MdePkg/Library/PeiServicesLib/PeiServicesLib.inf
 141   MemoryAllocationLib|MdePkg/Library/PeiMemoryAllocationLib/PeiMemoryAllocationLib.inf
 142   HobLib|MdePkg/Library/PeiHobLib/PeiHobLib.inf
 143   PcdLib|MdePkg/Library/PeiPcdLib/PeiPcdLib.inf
 144   ReportStatusCodeLib|MdeModulePkg/Library/PeiReportStatusCodeLib/PeiReportStatusCodeLib.inf
 145   BaseCryptLib|CryptoPkg/Library/BaseCryptLib/PeiCryptLib.inf
 146   TlsLib|CryptoPkg/Library/TlsLibNull/TlsLibNull.inf
 147
 148 [LibraryClasses.IA32.PEIM, LibraryClasses.X64.PEIM]
 149   PeiServicesTablePointerLib|MdePkg/Library/PeiServicesTablePointerLibIdt/PeiServicesTablePointerLibIdt.inf
 150
 151 [LibraryClasses.common.DXE_DRIVER]
 152   UefiDriverEntryPoint|MdePkg/Library/UefiDriverEntryPoint/UefiDriverEntryPoint.inf
 153   UefiBootServicesTableLib|MdePkg/Library/UefiBootServicesTableLib/UefiBootServicesTableLib.inf
 154   UefiRuntimeServicesTableLib|MdePkg/Library/UefiRuntimeServicesTableLib/UefiRuntimeServicesTableLib.inf
 155   MemoryAllocationLib|MdePkg/Library/UefiMemoryAllocationLib/UefiMemoryAllocationLib.inf
 156   ReportStatusCodeLib|MdeModulePkg/Library/DxeReportStatusCodeLib/DxeReportStatusCodeLib.inf
 157   PcdLib|MdePkg/Library/DxePcdLib/DxePcdLib.inf
 158   BaseCryptLib|CryptoPkg/Library/BaseCryptLib/BaseCryptLib.inf
 159   TlsLib|CryptoPkg/Library/TlsLib/TlsLib.inf
 160
 161 [LibraryClasses.common.DXE_SMM_DRIVER]
 162   UefiDriverEntryPoint|MdePkg/Library/UefiDriverEntryPoint/UefiDriverEntryPoint.inf
 163   UefiBootServicesTableLib|MdePkg/Library/UefiBootServicesTableLib/UefiBootServicesTableLib.inf
 164   SmmServicesTableLib|MdePkg/Library/SmmServicesTableLib/SmmServicesTableLib.inf
 165   MmServicesTableLib|MdePkg/Library/MmServicesTableLib/MmServicesTableLib.inf
 166   MemoryAllocationLib|MdePkg/Library/SmmMemoryAllocationLib/SmmMemoryAllocationLib.inf
 167   ReportStatusCodeLib|MdeModulePkg/Library/SmmReportStatusCodeLib/SmmReportStatusCodeLib.inf
 168   PcdLib|MdePkg/Library/DxePcdLib/DxePcdLib.inf
 169   BaseCryptLib|CryptoPkg/Library/BaseCryptLib/SmmCryptLib.inf
 170   TlsLib|CryptoPkg/Library/TlsLibNull/TlsLibNull.inf
 171
 172 [LibraryClasses.common.UEFI_APPLICATION]
 173   UefiApplicationEntryPoint|MdePkg/Library/UefiApplicationEntryPoint/UefiApplicationEntryPoint.inf
 174   UefiBootServicesTableLib|MdePkg/Library/UefiBootServicesTableLib/UefiBootServicesTableLib.inf
 175   UefiRuntimeServicesTableLib|MdePkg/Library/UefiRuntimeServicesTableLib/UefiRuntimeServicesTableLib.inf
 176   MemoryAllocationLib|MdePkg/Library/UefiMemoryAllocationLib/UefiMemoryAllocationLib.inf
 177   ReportStatusCodeLib|MdePkg/Library/BaseReportStatusCodeLibNull/BaseReportStatusCodeLibNull.inf
 178   PcdLib|MdePkg/Library/BasePcdLibNull/BasePcdLibNull.inf
 179
 180 ################################################################################
 181 #
 182 # Pcd Section - list of all EDK II PCD Entries defined by this Platform
 183 #
 184 ################################################################################
 185 [PcdsFixedAtBuild]
 186   gEfiMdePkgTokenSpaceGuid.PcdDebugPropertyMask|0x0f
 187   gEfiMdePkgTokenSpaceGuid.PcdDebugPrintErrorLevel|0x80000000
 188   gEfiMdePkgTokenSpaceGuid.PcdReportStatusCodePropertyMask|0x06
 189
 190 #
 191 # For ALL and TARGET_UINT_TESTS profiles, enable all non-deprecated families
 192 # and services in PcdCryptoServiceFamilyEnable.
 193 #
 194 !if $(CRYPTO_SERVICES) IN "ALL TARGET_UINT_TESTS"
 195 [PcdsFixedAtBuild]
 196   gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.HmacSha256.Family                        | PCD_CRYPTO_SERVICE_ENABLE_FAMILY
 197   gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.HmacSha384.Family                        | PCD_CRYPTO_SERVICE_ENABLE_FAMILY
 198   gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Pkcs.Family                              | PCD_CRYPTO_SERVICE_ENABLE_FAMILY
 199   gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Dh.Family                                | PCD_CRYPTO_SERVICE_ENABLE_FAMILY
 200   gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Random.Family                            | PCD_CRYPTO_SERVICE_ENABLE_FAMILY
 201   gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Rsa.Family                               | PCD_CRYPTO_SERVICE_ENABLE_FAMILY
 202   gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Sha1.Family                              | PCD_CRYPTO_SERVICE_ENABLE_FAMILY
 203   gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Sha256.Family                            | PCD_CRYPTO_SERVICE_ENABLE_FAMILY
 204   gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Sha384.Family                            | PCD_CRYPTO_SERVICE_ENABLE_FAMILY
 205   gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Sha512.Family                            | PCD_CRYPTO_SERVICE_ENABLE_FAMILY
 206   gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.X509.Family                              | PCD_CRYPTO_SERVICE_ENABLE_FAMILY
 207   gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Aes.Services.GetContextSize              | TRUE
 208   gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Aes.Services.Init                        | TRUE
 209   gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Aes.Services.CbcEncrypt                  | TRUE
 210   gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Aes.Services.CbcDecrypt                  | TRUE
 211   gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Arc4.Family                              | PCD_CRYPTO_SERVICE_ENABLE_FAMILY
 212   gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Sm3.Family                               | PCD_CRYPTO_SERVICE_ENABLE_FAMILY
 213   gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Hkdf.Family                              | PCD_CRYPTO_SERVICE_ENABLE_FAMILY
 214   gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Tls.Family                               | PCD_CRYPTO_SERVICE_ENABLE_FAMILY
 215   gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.TlsSet.Family                            | PCD_CRYPTO_SERVICE_ENABLE_FAMILY
 216   gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.TlsGet.Family                            | PCD_CRYPTO_SERVICE_ENABLE_FAMILY
 217   gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.RsaPss.Family                            | PCD_CRYPTO_SERVICE_ENABLE_FAMILY
 218   gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.ParallelHash.Family                      | PCD_CRYPTO_SERVICE_ENABLE_FAMILY
 219   gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.AeadAesGcm.Family                        | PCD_CRYPTO_SERVICE_ENABLE_FAMILY
 220   gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Bn.Family                                | PCD_CRYPTO_SERVICE_ENABLE_FAMILY
 221   gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Ec.Family                                | PCD_CRYPTO_SERVICE_ENABLE_FAMILY
 222 !endif
 223
 224 #
 225 # Enable minimum set of families/services in PcdCryptoServiceFamilyEnable
 226 # required by typical PEI phase.
 227 #
 228 !if $(CRYPTO_SERVICES) == MIN_PEI
 229 [PcdsFixedAtBuild]
 230   gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.HmacSha256.Family               | PCD_CRYPTO_SERVICE_ENABLE_FAMILY
 231   gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.HmacSha384.Family               | PCD_CRYPTO_SERVICE_ENABLE_FAMILY
 232   gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Sha1.Family                     | PCD_CRYPTO_SERVICE_ENABLE_FAMILY
 233   gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Sha256.Family                   | PCD_CRYPTO_SERVICE_ENABLE_FAMILY
 234   gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Sha384.Family                   | PCD_CRYPTO_SERVICE_ENABLE_FAMILY
 235   gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Sha512.Family                   | PCD_CRYPTO_SERVICE_ENABLE_FAMILY
 236   gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Sm3.Family                      | PCD_CRYPTO_SERVICE_ENABLE_FAMILY
 237   gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Rsa.Services.Pkcs1Verify        | TRUE
 238   gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Rsa.Services.New                | TRUE
 239   gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Rsa.Services.Free               | TRUE
 240   gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Rsa.Services.SetKey             | TRUE
 241   gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Pkcs.Services.Pkcs5HashPassword | TRUE
 242 !endif
 243
 244 #
 245 # Enable minimum set of families/services in PcdCryptoServiceFamilyEnable
 246 # required by typical DXE and SMM phases.
 247 #
 248 !if $(CRYPTO_SERVICES) == MIN_DXE_MIN_SMM
 249 [PcdsFixedAtBuild]
 250   gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.HmacSha256.Family                        | PCD_CRYPTO_SERVICE_ENABLE_FAMILY
 251   gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.HmacSha384.Family                        | PCD_CRYPTO_SERVICE_ENABLE_FAMILY
 252   gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Pkcs.Services.Pkcs1v2Encrypt             | TRUE
 253   gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Pkcs.Services.Pkcs5HashPassword          | TRUE
 254   gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Pkcs.Services.Pkcs7Verify                | TRUE
 255   gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Pkcs.Services.VerifyEKUsInPkcs7Signature | TRUE
 256   gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Pkcs.Services.Pkcs7GetSigners            | TRUE
 257   gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Pkcs.Services.Pkcs7FreeSigners           | TRUE
 258   gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Pkcs.Services.AuthenticodeVerify         | TRUE
 259   gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Random.Family                            | PCD_CRYPTO_SERVICE_ENABLE_FAMILY
 260   gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Rsa.Services.Pkcs1Verify                 | TRUE
 261   gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Rsa.Services.New                         | TRUE
 262   gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Rsa.Services.Free                        | TRUE
 263   gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Rsa.Services.SetKey                      | TRUE
 264   gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Rsa.Services.GetPublicKeyFromX509        | TRUE
 265   gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Sha1.Family                              | PCD_CRYPTO_SERVICE_ENABLE_FAMILY
 266   gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Sha256.Family                            | PCD_CRYPTO_SERVICE_ENABLE_FAMILY
 267   gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Sha256.Services.HashAll                  | FALSE
 268   gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.X509.Services.GetSubjectName             | TRUE
 269   gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.X509.Services.GetCommonName              | TRUE
 270   gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.X509.Services.GetOrganizationName        | TRUE
 271   gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.X509.Services.GetTBSCert                 | TRUE
 272   gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Tls.Family                               | PCD_CRYPTO_SERVICE_ENABLE_FAMILY
 273   gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.TlsSet.Family                            | PCD_CRYPTO_SERVICE_ENABLE_FAMILY
 274   gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.TlsGet.Family                            | PCD_CRYPTO_SERVICE_ENABLE_FAMILY
 275   gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Aes.Services.GetContextSize              | TRUE
 276   gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Aes.Services.Init                        | TRUE
 277   gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Aes.Services.CbcEncrypt                  | TRUE
 278   gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.Aes.Services.CbcDecrypt                  | TRUE
 279   gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.AeadAesGcm.Services.Encrypt              | TRUE
 280   gEfiCryptoPkgTokenSpaceGuid.PcdCryptoServiceFamilyEnable.AeadAesGcm.Services.Decrypt              | TRUE
 281 !endif
 282
 283 ###################################################################################################
 284 #
 285 # Components Section - list of the modules and components that will be processed by compilation
 286 #                      tools and the EDK II tools to generate PE32/PE32+/Coff image files.
 287 #
 288 # Note: The EDK II DSC file is not used to specify how compiled binary images get placed
 289 #       into firmware volume images. This section is just a list of modules to compile from
 290 #       source into UEFI-compliant binaries.
 291 #       It is the FDF file that contains information on combining binary files into firmware
 292 #       volume images, whose concept is beyond UEFI and is described in PI specification.
 293 #       Binary modules do not need to be listed in this section, as they should be
 294 #       specified in the FDF file. For example: Shell binary (Shell_Full.efi), FAT binary (Fat.efi),
 295 #       Logo (Logo.bmp), and etc.
 296 #       There may also be modules listed in this section that are not required in the FDF file,
 297 #       When a module listed here is excluded from FDF file, then UEFI-compliant binary will be
 298 #       generated for it, but the binary will not be put into any firmware volume.
 299 #
 300 ###################################################################################################
 301
 302 #
 303 # If profile is TARGET_UNIT_TESTS, then build target-based unit tests
 304 # using the OpensslLib, BaseCryptLib, and TlsLib with the largest set of
 305 # available services.
 306 #
 307 !if $(CRYPTO_SERVICES) == TARGET_UNIT_TESTS
 308 [Components.IA32, Components.X64, Components.ARM, Components.AARCH64]
 309   #
 310   # Target based unit tests
 311   #
 312   CryptoPkg/Test/UnitTest/Library/BaseCryptLib/TestBaseCryptLibShell.inf {
 313     <LibraryClasses>
 314       OpensslLib|CryptoPkg/Library/OpensslLib/OpensslLibFull.inf
 315       BaseCryptLib|CryptoPkg/Library/BaseCryptLib/BaseCryptLib.inf
 316       TlsLib|CryptoPkg/Library/TlsLib/TlsLib.inf
 317     <BuildOptions>
 318       MSFT:*_*_*_DLINK_FLAGS     = /ALIGN:4096 /FILEALIGN:4096 /SUBSYSTEM:CONSOLE
 319       MSFT:DEBUG_*_*_DLINK_FLAGS = /EXPORT:InitializeDriver=$(IMAGE_ENTRY_POINT) /BASE:0x10000
 320       MSFT:DEBUG_*_*_DLINK_FLAGS = /EXPORT:InitializeDriver=$(IMAGE_ENTRY_POINT) /BASE:0x10000
 321       MSFT:NOOPT_*_*_DLINK_FLAGS = /EXPORT:InitializeDriver=$(IMAGE_ENTRY_POINT) /BASE:0x10000
 322   }
 323
 324 [Components.IA32, Components.X64]
 325   CryptoPkg/Test/UnitTest/Library/BaseCryptLib/TestBaseCryptLibShell.inf {
 326     <Defines>
 327       FILE_GUID = B91B9A95-4D52-4501-A98F-A1711C14ED93
 328     <LibraryClasses>
 329       OpensslLib|CryptoPkg/Library/OpensslLib/OpensslLibFullAccel.inf
 330       BaseCryptLib|CryptoPkg/Library/BaseCryptLib/BaseCryptLib.inf
 331       TlsLib|CryptoPkg/Library/TlsLib/TlsLib.inf
 332     <BuildOptions>
 333       MSFT:*_*_*_DLINK_FLAGS     = /ALIGN:4096 /FILEALIGN:4096 /SUBSYSTEM:CONSOLE
 334       MSFT:DEBUG_*_*_DLINK_FLAGS = /EXPORT:InitializeDriver=$(IMAGE_ENTRY_POINT) /BASE:0x10000
 335       MSFT:DEBUG_*_*_DLINK_FLAGS = /EXPORT:InitializeDriver=$(IMAGE_ENTRY_POINT) /BASE:0x10000
 336       MSFT:NOOPT_*_*_DLINK_FLAGS = /EXPORT:InitializeDriver=$(IMAGE_ENTRY_POINT) /BASE:0x10000
 337   }
 338
 339 [Components.RISCV64]
 340   CryptoPkg/Test/UnitTest/Library/BaseCryptLib/TestBaseCryptLibShell.inf {
 341     <LibraryClasses>
 342       OpensslLib|CryptoPkg/Library/OpensslLib/OpensslLib.inf
 343       BaseCryptLib|CryptoPkg/Library/BaseCryptLib/BaseCryptLib.inf
 344       TlsLib|CryptoPkg/Library/TlsLib/TlsLib.inf
 345   }
 346 !endif
 347
 348 #
 349 # If profile is ALL, then do verification build of all library instances.
 350 #
 351 !if $(CRYPTO_SERVICES) == ALL
 352 [Components]
 353   #
 354   # Build verification of all library instances
 355   #
 356   CryptoPkg/Library/BaseCryptLib/BaseCryptLib.inf
 357   CryptoPkg/Library/BaseCryptLib/SecCryptLib.inf
 358   CryptoPkg/Library/BaseCryptLib/PeiCryptLib.inf
 359   CryptoPkg/Library/BaseCryptLib/SmmCryptLib.inf
 360   CryptoPkg/Library/BaseCryptLib/RuntimeCryptLib.inf
 361   CryptoPkg/Library/BaseCryptLibNull/BaseCryptLibNull.inf
 362   CryptoPkg/Library/IntrinsicLib/IntrinsicLib.inf
 363   CryptoPkg/Library/TlsLib/TlsLib.inf
 364   CryptoPkg/Library/TlsLibNull/TlsLibNull.inf
 365   CryptoPkg/Library/OpensslLib/OpensslLibCrypto.inf
 366   CryptoPkg/Library/OpensslLib/OpensslLib.inf
 367   CryptoPkg/Library/OpensslLib/OpensslLibFull.inf
 368   CryptoPkg/Library/BaseHashApiLib/BaseHashApiLib.inf
 369   CryptoPkg/Library/BaseCryptLibOnProtocolPpi/PeiCryptLib.inf
 370   CryptoPkg/Library/BaseCryptLibOnProtocolPpi/DxeCryptLib.inf
 371   CryptoPkg/Library/BaseCryptLibOnProtocolPpi/SmmCryptLib.inf
 372   #
 373   # Build verification of target-based unit tests
 374   #
 375   CryptoPkg/Test/UnitTest/Library/BaseCryptLib/TestBaseCryptLibShell.inf {
 376     <LibraryClasses>
 377       UnitTestLib|UnitTestFrameworkPkg/Library/UnitTestLib/UnitTestLib.inf
 378       UnitTestPersistenceLib|UnitTestFrameworkPkg/Library/UnitTestPersistenceLibNull/UnitTestPersistenceLibNull.inf
 379       UnitTestResultReportLib|UnitTestFrameworkPkg/Library/UnitTestResultReportLib/UnitTestResultReportLibConOut.inf
 380       OpensslLib|CryptoPkg/Library/OpensslLib/OpensslLib.inf
 381       BaseCryptLib|CryptoPkg/Library/BaseCryptLib/BaseCryptLib.inf
 382       TlsLib|CryptoPkg/Library/TlsLib/TlsLib.inf
 383   }
 384
 385 [Components.IA32, Components.X64]
 386   #
 387   # Build verification of IA32/X64 specific libraries
 388   #
 389   CryptoPkg/Library/OpensslLib/OpensslLibAccel.inf
 390   CryptoPkg/Library/OpensslLib/OpensslLibFullAccel.inf
 391 !endif
 392
 393 #
 394 # If profile is ALL or NONE or MIN_PEI, then build CryptoPei with all supported
 395 # OpensslLib instances.
 396 #
 397 !if $(CRYPTO_SERVICES) in "ALL NONE MIN_PEI"
 398 [Components]
 399   #
 400   # CryptoPei with OpensslLib instance without SSL or EC services
 401   #
 402   CryptoPkg/Driver/CryptoPei.inf {
 403     <Defines>
 404       FILE_GUID = $(PEI_CRYPTO_GUID)
 405     <LibraryClasses>
 406       OpensslLib|CryptoPkg/Library/OpensslLib/OpensslLibCrypto.inf
 407   }
 408   #
 409   # CryptoPei with OpensslLib instance without EC services
 410   #
 411   CryptoPkg/Driver/CryptoPei.inf {
 412     <Defines>
 413       FILE_GUID = $(PEI_STD_GUID)
 414     <LibraryClasses>
 415       OpensslLib|CryptoPkg/Library/OpensslLib/OpensslLib.inf
 416   }
 417 [Components.IA32, Components.X64, Components.ARM, Components.AARCH64]
 418   #
 419   # CryptoPei with OpensslLib instance with all services
 420   #
 421   CryptoPkg/Driver/CryptoPei.inf {
 422     <Defines>
 423       FILE_GUID = $(PEI_FULL_GUID)
 424     <LibraryClasses>
 425       OpensslLib|CryptoPkg/Library/OpensslLib/OpensslLibFull.inf
 426   }
 427
 428 [Components.IA32, Components.X64]
 429   #
 430   # CryptoPei with IA32/X64 performance optimized OpensslLib instance without EC services
 431   # IA32/X64 assembly optimizations required larger alignments
 432   #
 433   CryptoPkg/Driver/CryptoPei.inf {
 434     <Defines>
 435       FILE_GUID = $(PEI_STD_ACCEL_GUID)
 436     <LibraryClasses>
 437       OpensslLib|CryptoPkg/Library/OpensslLib/OpensslLibAccel.inf
 438     <BuildOptions>
 439       MSFT:*_*_IA32_DLINK_FLAGS = /ALIGN:64
 440       MSFT:*_*_X64_DLINK_FLAGS  = /ALIGN:256
 441   }
 442
 443   #
 444   # CryptoPei with IA32/X64 performance optimized OpensslLib instance all services
 445   # IA32/X64 assembly optimizations required larger alignments
 446   #
 447   CryptoPkg/Driver/CryptoPei.inf {
 448     <Defines>
 449       FILE_GUID = $(PEI_FULL_ACCEL_GUID)
 450     <LibraryClasses>
 451       OpensslLib|CryptoPkg/Library/OpensslLib/OpensslLibFullAccel.inf
 452     <BuildOptions>
 453       MSFT:*_*_IA32_DLINK_FLAGS = /ALIGN:64
 454       MSFT:*_*_X64_DLINK_FLAGS  = /ALIGN:256
 455   }
 456 !endif
 457
 458 #
 459 # If profile is ALL or NONE or MIN_DXE_MIN_SMM, then build CryptoDxe and
 460 # CryptoSmm using all supported OpensslLib instances.
 461 #
 462 !if $(CRYPTO_SERVICES) in "ALL NONE MIN_DXE_MIN_SMM"
 463 [Components]
 464   #
 465   # CryptoDxe with OpensslLib instance with no SSL or EC services
 466   #
 467   CryptoPkg/Driver/CryptoDxe.inf {
 468     <Defines>
 469       FILE_GUID = $(DXE_CRYPTO_GUID)
 470     <LibraryClasses>
 471       OpensslLib|CryptoPkg/Library/OpensslLib/OpensslLibCrypto.inf
 472       TlsLib|CryptoPkg/Library/TlsLibNull/TlsLibNull.inf
 473   }
 474   #
 475   # CryptoDxe with OpensslLib instance with no EC services
 476   #
 477   CryptoPkg/Driver/CryptoDxe.inf {
 478     <Defines>
 479       FILE_GUID = $(DXE_STD_GUID)
 480     <LibraryClasses>
 481       OpensslLib|CryptoPkg/Library/OpensslLib/OpensslLib.inf
 482   }
 483 [Components.IA32, Components.X64, Components.ARM, Components.AARCH64]
 484   #
 485   # CryptoDxe with OpensslLib instance with all services
 486   #
 487   CryptoPkg/Driver/CryptoDxe.inf {
 488     <Defines>
 489       FILE_GUID = $(DXE_FULL_GUID)
 490     <LibraryClasses>
 491       OpensslLib|CryptoPkg/Library/OpensslLib/OpensslLibFull.inf
 492   }
 493
 494 [Components.IA32, Components.X64]
 495   #
 496   # CryptoDxe with IA32/X64 performance optimized OpensslLib instance with no EC services
 497   # with TLS feature enabled.
 498   # IA32/X64 assembly optimizations required larger alignments
 499   #
 500   CryptoPkg/Driver/CryptoDxe.inf {
 501     <Defines>
 502       FILE_GUID = $(DXE_STD_ACCEL_GUID)
 503     <LibraryClasses>
 504       OpensslLib|CryptoPkg/Library/OpensslLib/OpensslLibAccel.inf
 505     <BuildOptions>
 506       MSFT:*_*_IA32_DLINK_FLAGS = /ALIGN:64
 507       MSFT:*_*_X64_DLINK_FLAGS  = /ALIGN:256
 508   }
 509   #
 510   # CryptoDxe with IA32/X64 performance optimized OpensslLib instance with all services.
 511   # IA32/X64 assembly optimizations required larger alignments
 512   #
 513   CryptoPkg/Driver/CryptoDxe.inf {
 514     <Defines>
 515       FILE_GUID = $(DXE_FULL_ACCEL_GUID)
 516     <LibraryClasses>
 517       OpensslLib|CryptoPkg/Library/OpensslLib/OpensslLibFullAccel.inf
 518     <BuildOptions>
 519       MSFT:*_*_IA32_DLINK_FLAGS = /ALIGN:64
 520       MSFT:*_*_X64_DLINK_FLAGS  = /ALIGN:256
 521   }
 522   #
 523   # CryptoSmm with OpensslLib instance with no SSL or EC services
 524   #
 525   CryptoPkg/Driver/CryptoSmm.inf {
 526     <Defines>
 527       FILE_GUID = $(SMM_CRYPTO_GUID)
 528     <LibraryClasses>
 529       OpensslLib|CryptoPkg/Library/OpensslLib/OpensslLibCrypto.inf
 530   }
 531   #
 532   # CryptoSmm with OpensslLib instance with no SSL services
 533   #
 534   CryptoPkg/Driver/CryptoSmm.inf {
 535     <Defines>
 536       FILE_GUID = $(SMM_STD_GUID)
 537     <LibraryClasses>
 538       OpensslLib|CryptoPkg/Library/OpensslLib/OpensslLib.inf
 539   }
 540   #
 541   # CryptoSmm with OpensslLib instance with no all services
 542   #
 543   CryptoPkg/Driver/CryptoSmm.inf {
 544     <Defines>
 545       FILE_GUID = $(SMM_FULL_GUID)
 546     <LibraryClasses>
 547       OpensslLib|CryptoPkg/Library/OpensslLib/OpensslLibFull.inf
 548   }
 549   #
 550   # CryptoSmm with IA32/X64 performance optimized OpensslLib instance with no EC services
 551   # IA32/X64 assembly optimizations required larger alignments
 552   #
 553   CryptoPkg/Driver/CryptoSmm.inf {
 554     <Defines>
 555       FILE_GUID = $(SMM_STD_ACCEL_GUID)
 556     <LibraryClasses>
 557       OpensslLib|CryptoPkg/Library/OpensslLib/OpensslLibAccel.inf
 558     <BuildOptions>
 559       MSFT:*_*_IA32_DLINK_FLAGS = /ALIGN:64
 560       MSFT:*_*_X64_DLINK_FLAGS  = /ALIGN:256
 561   }
 562   #
 563   # CryptoSmm with IA32/X64 performance optimized OpensslLib instance with all services
 564   # IA32/X64 assembly optimizations required larger alignments
 565   #
 566   CryptoPkg/Driver/CryptoSmm.inf {
 567     <Defines>
 568       FILE_GUID = $(SMM_FULL_ACCEL_GUID)
 569     <LibraryClasses>
 570       OpensslLib|CryptoPkg/Library/OpensslLib/OpensslLibFullAccel.inf
 571     <BuildOptions>
 572       MSFT:*_*_IA32_DLINK_FLAGS = /ALIGN:64
 573       MSFT:*_*_X64_DLINK_FLAGS  = /ALIGN:256
 574   }
 575 !endif
 576
 577 [BuildOptions]
 578   RELEASE_*_*_CC_FLAGS = -DMDEPKG_NDEBUG
 579   *_*_*_CC_FLAGS = -D DISABLE_NEW_DEPRECATED_INTERFACES