crypto: crypto_memneq - add equality testing of memory regions w/o timing leaks

[karo-tx-linux.git] / crypto / Makefile

diff --git a/crypto/Makefile b/crypto/Makefile
index 580af977f4969f46f825e71e53e37c0a87c588f1..d6a401c58d17699e77f198a447aa67fd75e71cc4 100644 (file)
--- a/crypto/Makefile
+++ b/crypto/Makefile
@@ -2,8 +2,13 @@
 # Cryptographic API
 #
 
+# memneq MUST be built with -Os or -O0 to prevent early-return optimizations
+# that will defeat memneq's actual purpose to prevent timing attacks.
+CFLAGS_REMOVE_memneq.o := -O1 -O2 -O3
+CFLAGS_memneq.o := -Os
+
 obj-$(CONFIG_CRYPTO) += crypto.o
-crypto-y := api.o cipher.o compress.o
+crypto-y := api.o cipher.o compress.o memneq.o
 
 obj-$(CONFIG_CRYPTO_WORKQUEUE) += crypto_wq.o