diff options
| author | Vadim Sukhomlinov <sukhomlinov@google.com> | 2021-08-12 17:55:22 -0700 |
|---|---|---|
| committer | Commit Bot <commit-bot@chromium.org> | 2021-08-16 18:21:47 +0000 |
| commit | 994efaeb57aaa023e38b547ceede69930ed687fc (patch) | |
| tree | 464ba8c9c37dfccb8e7359b83b00618bebf4554a /board/cr50/dcrypto/hmac_sw.c | |
| parent | 5d24282d7db3854c4a6adf925c75b7573de5617d (diff) | |
| download | chrome-ec-stabilize-14163.B-cr50_stab.tar.gz | |
cr50: final touches to remove cryptoc dependencystabilize-14163.B-cr50_stab
To implement FIPS module we need to bring many crypto functions in the
module boundary. Unfortunately, cryptoc is a third-party library used
by dcrypto code in cr50. Cryptoc is also not well-maintained and shared
with other projects. While just making local copy of cryptoc would
solve an issue, it's suboptimal as prevents from many optimizations and
improvements.
1. Clean-up of #include dependencies on cryptoc
2. Build configuration drops linking with cryptoc for cr50
3. Dcrypto SHA512 code updated to compile and partially tested.
It is about 4x faster on large messages, and about 620 bytes larger.
Added an config option to use Dcrypto version as software, but not
enabled. More testing is needed to make sure it's safe and doesn't
have unintended interactions with RSA and ECDSA Dcrypto code.
BUG=b:138578318
TEST=make BOARD=cr50 CRYPTO_TEST=1; tpm_test
Signed-off-by: Vadim Sukhomlinov <sukhomlinov@google.com>
Change-Id: I030b60b75daeec9c8ef079017a73345829bf7f0b
Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/ec/+/3093093
Reviewed-by: Vadim Sukhomlinov <sukhomlinov@chromium.org>
Reviewed-by: Vadim Bendebury <vbendeb@chromium.org>
Reviewed-by: Andrey Pronin <apronin@chromium.org>
Tested-by: Vadim Sukhomlinov <sukhomlinov@chromium.org>
Commit-Queue: Vadim Sukhomlinov <sukhomlinov@chromium.org>
Diffstat (limited to 'board/cr50/dcrypto/hmac_sw.c')
| -rw-r--r-- | board/cr50/dcrypto/hmac_sw.c | 2 |
1 files changed, 0 insertions, 2 deletions
diff --git a/board/cr50/dcrypto/hmac_sw.c b/board/cr50/dcrypto/hmac_sw.c index 91e056546d..3e62906540 100644 --- a/board/cr50/dcrypto/hmac_sw.c +++ b/board/cr50/dcrypto/hmac_sw.c @@ -8,8 +8,6 @@ #include <stdint.h> -#include "cryptoc/util.h" - /** * Generic software HMAC support for any type of hash. */ |