mirror of
https://github.com/polhenarejos/pico-keys-sdk
synced 2026-05-27 00:25:11 +02:00
Use dynamic dependence resolver.
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
This commit is contained in:
Pol Henarejos
12
.gitmodules
vendored
12
.gitmodules
vendored
@@ -1,12 +0,0 @@
|
||||
[submodule "mbedtls"]
|
||||
path = third-party/mbedtls
|
||||
url = https://github.com/ARMmbed/mbedtls
|
||||
[submodule "tinycbor"]
|
||||
path = third-party/tinycbor
|
||||
url = https://github.com/intel/tinycbor.git
|
||||
[submodule "mlkem"]
|
||||
path = third-party/mlkem
|
||||
url = https://github.com/pq-code-package/mlkem-native/
|
||||
[submodule "third-party/cjson"]
|
||||
path = third-party/cjson
|
||||
url = https://github.com/davegamble/cjson
|
||||
121
cmake/deps.cmake
Normal file
121
cmake/deps.cmake
Normal file
@@ -0,0 +1,121 @@
|
||||
include(FetchContent)
|
||||
|
||||
option(ENABLE_EDDSA "Enable/disable EdDSA support" OFF)
|
||||
configure_bool_option(
|
||||
ENABLE_EDDSA
|
||||
""
|
||||
"EdDSA support:\t\t enabled"
|
||||
"EdDSA support:\t\t disabled"
|
||||
)
|
||||
|
||||
set(MBEDTLS_PATH "${CMAKE_CURRENT_LIST_DIR}/../third-party/mbedtls")
|
||||
set(TINYCBOR_PATH "${CMAKE_CURRENT_LIST_DIR}/../third-party/tinycbor")
|
||||
set(CJSON_PATH "${CMAKE_CURRENT_LIST_DIR}/../third-party/cjson")
|
||||
set(MLKEM_PATH "${CMAKE_CURRENT_LIST_DIR}/../third-party/mlkem")
|
||||
|
||||
set(PICOKEYS_MBEDTLS_STD_REPO "https://github.com/Mbed-TLS/mbedtls.git")
|
||||
set(PICOKEYS_MBEDTLS_STD_REF "v3.6.6")
|
||||
set(PICOKEYS_MBEDTLS_EDDSA_REPO "https://github.com/polhenarejos/mbedtls.git")
|
||||
set(PICOKEYS_MBEDTLS_EDDSA_REF "mbedtls-3.6-eddsa")
|
||||
|
||||
set(PICOKEYS_TINYCBOR_REPO "https://github.com/intel/tinycbor.git")
|
||||
set(PICOKEYS_TINYCBOR_REF "v0.6.1")
|
||||
set(PICOKEYS_CJSON_REPO "https://github.com/DaveGamble/cJSON.git")
|
||||
set(PICOKEYS_CJSON_REF "v1.7.19")
|
||||
set(PICOKEYS_MLKEM_REPO "https://github.com/pq-code-package/mlkem-native.git")
|
||||
set(PICOKEYS_MLKEM_REF "v1.1.0")
|
||||
|
||||
set(PICOKEYS_FETCH_DEPS_ON_DEMAND ON CACHE BOOL "Fetch third-party deps into pico-keys-sdk/third-party when missing")
|
||||
|
||||
function(picokeys_sync_dep name repo ref dest)
|
||||
set(_marker "${dest}/.picokeys_dep_source")
|
||||
set(_need_fetch OFF)
|
||||
|
||||
if(NOT EXISTS "${dest}")
|
||||
if(NOT PICOKEYS_FETCH_DEPS_ON_DEMAND)
|
||||
message(FATAL_ERROR "${name} source code not found at ${dest}. Enable PICOKEYS_FETCH_DEPS_ON_DEMAND or provide the source tree manually.")
|
||||
endif()
|
||||
set(_need_fetch ON)
|
||||
else()
|
||||
set(_repo_ok OFF)
|
||||
set(_ref_ok OFF)
|
||||
if(EXISTS "${_marker}")
|
||||
file(STRINGS "${_marker}" _meta_lines)
|
||||
foreach(_line IN LISTS _meta_lines)
|
||||
if(_line STREQUAL "REPO=${repo}")
|
||||
set(_repo_ok ON)
|
||||
endif()
|
||||
if(_line STREQUAL "REF=${ref}")
|
||||
set(_ref_ok ON)
|
||||
endif()
|
||||
endforeach()
|
||||
endif()
|
||||
if(NOT _repo_ok OR NOT _ref_ok)
|
||||
set(_need_fetch ON)
|
||||
endif()
|
||||
endif()
|
||||
|
||||
if(_need_fetch)
|
||||
message(STATUS "[deps] ${name}: repo=${repo} ref=${ref} status=updating (this may take a few seconds)")
|
||||
if(EXISTS "${dest}")
|
||||
file(REMOVE_RECURSE "${dest}")
|
||||
endif()
|
||||
execute_process(
|
||||
COMMAND git clone ${repo} ${dest}
|
||||
RESULT_VARIABLE _clone_rc
|
||||
OUTPUT_VARIABLE _clone_out
|
||||
ERROR_VARIABLE _clone_err
|
||||
OUTPUT_STRIP_TRAILING_WHITESPACE
|
||||
ERROR_STRIP_TRAILING_WHITESPACE
|
||||
)
|
||||
if(NOT _clone_rc EQUAL 0)
|
||||
message(FATAL_ERROR "Failed to clone ${name} from ${repo}\nstdout: ${_clone_out}\nstderr: ${_clone_err}")
|
||||
endif()
|
||||
execute_process(
|
||||
COMMAND git -C ${dest} checkout ${ref}
|
||||
RESULT_VARIABLE _checkout_rc
|
||||
OUTPUT_VARIABLE _checkout_out
|
||||
ERROR_VARIABLE _checkout_err
|
||||
OUTPUT_STRIP_TRAILING_WHITESPACE
|
||||
ERROR_STRIP_TRAILING_WHITESPACE
|
||||
)
|
||||
if(NOT _checkout_rc EQUAL 0)
|
||||
message(FATAL_ERROR "Failed to checkout ${name} ref ${ref}\nstdout: ${_checkout_out}\nstderr: ${_checkout_err}")
|
||||
endif()
|
||||
if(NOT EXISTS "${dest}")
|
||||
message(FATAL_ERROR "Failed to fetch ${name} into ${dest}")
|
||||
endif()
|
||||
file(WRITE "${_marker}" "REPO=${repo}\nREF=${ref}\n")
|
||||
else()
|
||||
message(STATUS "[deps] ${name}: repo=${repo} ref=${ref} status=cached")
|
||||
endif()
|
||||
endfunction()
|
||||
|
||||
if(NOT ESP_PLATFORM)
|
||||
if(ENABLE_EDDSA)
|
||||
set(MBEDTLS_ORIGIN "${PICOKEYS_MBEDTLS_EDDSA_REPO}")
|
||||
set(MBEDTLS_REF "${PICOKEYS_MBEDTLS_EDDSA_REF}")
|
||||
|
||||
add_compile_definitions(
|
||||
MBEDTLS_ECP_DP_ED25519_ENABLED=1
|
||||
MBEDTLS_ECP_DP_ED448_ENABLED=1
|
||||
MBEDTLS_EDDSA_C=1
|
||||
MBEDTLS_SHA3_C=1
|
||||
)
|
||||
else()
|
||||
set(MBEDTLS_ORIGIN "${PICOKEYS_MBEDTLS_STD_REPO}")
|
||||
set(MBEDTLS_REF "${PICOKEYS_MBEDTLS_STD_REF}")
|
||||
endif()
|
||||
|
||||
picokeys_sync_dep(mbedtls_dep "${MBEDTLS_ORIGIN}" "${MBEDTLS_REF}" "${MBEDTLS_PATH}")
|
||||
endif()
|
||||
|
||||
if(USB_ITF_HID)
|
||||
picokeys_sync_dep(tinycbor_dep "${PICOKEYS_TINYCBOR_REPO}" "${PICOKEYS_TINYCBOR_REF}" "${TINYCBOR_PATH}")
|
||||
endif()
|
||||
if(USB_ITF_LWIP)
|
||||
picokeys_sync_dep(cjson_dep "${PICOKEYS_CJSON_REPO}" "${PICOKEYS_CJSON_REF}" "${CJSON_PATH}")
|
||||
endif()
|
||||
if(ENABLE_PQC)
|
||||
picokeys_sync_dep(mlkem_dep "${PICOKEYS_MLKEM_REPO}" "${PICOKEYS_MLKEM_REF}" "${MLKEM_PATH}")
|
||||
endif()
|
||||
@@ -115,117 +115,7 @@ else()
|
||||
endif()
|
||||
|
||||
message(STATUS "USB VID/PID:\t\t\t ${USB_VID}:${USB_PID}")
|
||||
|
||||
if(NOT ESP_PLATFORM)
|
||||
set(NEED_UPDATE OFF)
|
||||
|
||||
option(ENABLE_EDDSA "Enable/disable EdDSA support" OFF)
|
||||
configure_bool_option(
|
||||
ENABLE_EDDSA
|
||||
""
|
||||
"EdDSA support:\t\t enabled"
|
||||
"EdDSA support:\t\t disabled"
|
||||
)
|
||||
|
||||
set(MBEDTLS_PATH "${CMAKE_SOURCE_DIR}/pico-keys-sdk/third-party/mbedtls")
|
||||
execute_process(
|
||||
COMMAND git config --global --add safe.directory ${MBEDTLS_PATH}
|
||||
WORKING_DIRECTORY ${CMAKE_SOURCE_DIR}
|
||||
OUTPUT_QUIET ERROR_QUIET
|
||||
)
|
||||
|
||||
if(ENABLE_EDDSA)
|
||||
set(MBEDTLS_ORIGIN "https://github.com/polhenarejos/mbedtls.git")
|
||||
set(MBEDTLS_REF "mbedtls-3.6-eddsa")
|
||||
|
||||
execute_process(
|
||||
COMMAND git -C ${MBEDTLS_PATH} symbolic-ref --quiet --short HEAD
|
||||
OUTPUT_VARIABLE CURRENT_BRANCH
|
||||
OUTPUT_STRIP_TRAILING_WHITESPACE
|
||||
RESULT_VARIABLE BRANCH_ERR
|
||||
)
|
||||
|
||||
message(STATUS "Current branch for mbedTLS: ${CURRENT_BRANCH}")
|
||||
message(STATUS "Target branch for mbedTLS: ${MBEDTLS_REF}")
|
||||
|
||||
if(NOT BRANCH_ERR EQUAL 0 OR NOT "${CURRENT_BRANCH}" STREQUAL "${MBEDTLS_REF}")
|
||||
set(NEED_UPDATE ON)
|
||||
else()
|
||||
set(NEED_UPDATE OFF)
|
||||
endif()
|
||||
|
||||
add_compile_definitions(
|
||||
MBEDTLS_ECP_DP_ED25519_ENABLED=1
|
||||
MBEDTLS_ECP_DP_ED448_ENABLED=1
|
||||
MBEDTLS_EDDSA_C=1
|
||||
MBEDTLS_SHA3_C=1
|
||||
)
|
||||
|
||||
else()
|
||||
set(MBEDTLS_ORIGIN "https://github.com/Mbed-TLS/mbedtls.git")
|
||||
set(MBEDTLS_REF "v3.6.6")
|
||||
|
||||
execute_process(
|
||||
COMMAND git -C ${MBEDTLS_PATH} describe --tags --exact-match
|
||||
OUTPUT_VARIABLE CURRENT_TAG
|
||||
OUTPUT_STRIP_TRAILING_WHITESPACE
|
||||
RESULT_VARIABLE TAG_ERR
|
||||
)
|
||||
|
||||
message(STATUS "Current tag for mbedTLS: ${CURRENT_TAG}")
|
||||
message(STATUS "Target tag for mbedTLS: ${MBEDTLS_REF}")
|
||||
|
||||
if(NOT TAG_ERR EQUAL 0 OR NOT "${CURRENT_TAG}" STREQUAL "${MBEDTLS_REF}")
|
||||
set(NEED_UPDATE ON)
|
||||
else()
|
||||
set(NEED_UPDATE OFF)
|
||||
endif()
|
||||
|
||||
endif()
|
||||
|
||||
if(NEED_UPDATE)
|
||||
message(STATUS "Updating mbedTLS source code...")
|
||||
|
||||
execute_process(
|
||||
COMMAND git -C ${MBEDTLS_PATH} submodule update --init --recursive --remote pico-keys-sdk
|
||||
WORKING_DIRECTORY ${CMAKE_SOURCE_DIR}
|
||||
OUTPUT_QUIET ERROR_QUIET
|
||||
)
|
||||
|
||||
execute_process(
|
||||
COMMAND git -C ${MBEDTLS_PATH} remote set-url origin ${MBEDTLS_ORIGIN}
|
||||
OUTPUT_QUIET ERROR_QUIET
|
||||
)
|
||||
|
||||
execute_process(
|
||||
COMMAND git -C ${MBEDTLS_PATH} fetch origin +refs/heads/*:refs/remotes/origin/* --tags --force
|
||||
WORKING_DIRECTORY ${CMAKE_SOURCE_DIR}
|
||||
OUTPUT_QUIET ERROR_QUIET
|
||||
)
|
||||
|
||||
execute_process(
|
||||
COMMAND rm -rf ${MBEDTLS_PATH}/framework
|
||||
WORKING_DIRECTORY ${CMAKE_SOURCE_DIR}
|
||||
OUTPUT_QUIET ERROR_QUIET
|
||||
)
|
||||
|
||||
if(ENABLE_EDDSA)
|
||||
execute_process(
|
||||
COMMAND git -C ${MBEDTLS_PATH} checkout -B ${MBEDTLS_REF} --track origin/${MBEDTLS_REF}
|
||||
WORKING_DIRECTORY ${CMAKE_SOURCE_DIR}
|
||||
OUTPUT_QUIET ERROR_QUIET
|
||||
)
|
||||
else()
|
||||
execute_process(
|
||||
COMMAND git -C ${MBEDTLS_PATH} checkout ${MBEDTLS_REF}
|
||||
WORKING_DIRECTORY ${CMAKE_SOURCE_DIR}
|
||||
OUTPUT_QUIET ERROR_QUIET
|
||||
)
|
||||
endif()
|
||||
else()
|
||||
message(STATUS "mbedTLS source code is up to date.")
|
||||
endif()
|
||||
endif()
|
||||
include(${CMAKE_CURRENT_LIST_DIR}/cmake/deps.cmake)
|
||||
|
||||
option(ENABLE_PQC "Enable/disable PQC support" OFF)
|
||||
configure_bool_option(
|
||||
|
||||
Reference in New Issue
Block a user