Skip to content

Commit

Permalink
cryptsetup: Replace libgcrypt with AFALG
Browse files Browse the repository at this point in the history
Add several configure arguments to speed up build time.

Switch from using libgcrypt to using the kernel directly.

This has a number of benefits including smaller size and faster speed. It
also allows selection of desired crypto primatives instead of having all
of them.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
  • Loading branch information
neheb committed Feb 1, 2019
1 parent 83b304c commit 685ca41
Showing 1 changed file with 19 additions and 10 deletions.
29 changes: 19 additions & 10 deletions utils/cryptsetup/Makefile
Expand Up @@ -9,22 +9,19 @@ include $(TOPDIR)/rules.mk

PKG_NAME:=cryptsetup
PKG_VERSION:=2.0.6
PKG_RELEASE:=1
PKG_RELEASE:=2

PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.xz
PKG_SOURCE_URL:=@KERNEL/linux/utils/cryptsetup/v2.0
PKG_HASH:=7c51fae0f0e7ea9af0f515b2ac77009fb2969a6619ebab47d097dca38b083d30
PKG_BUILD_DIR:=$(BUILD_DIR)/$(PKG_NAME)-$(BUILD_VARIANT)/$(PKG_NAME)-$(PKG_VERSION)

PKG_MAINTAINER:=Daniel Golle <daniel@makrotopia.org>
PKG_LICENSE:=GPL-2.0+ LGPL-2.1+
PKG_LICENSE_FILES:=COPYING COPYING.LGPL
PKG_MAINTAINER:=Daniel Golle <daniel@makrotopia.org>

PKG_BUILD_DIR:=$(BUILD_DIR)/$(PKG_NAME)-$(BUILD_VARIANT)/$(PKG_NAME)-$(PKG_VERSION)

include $(INCLUDE_DIR)/package.mk

TARGET_LDFLAGS+=-Wl,-rpath-link=$(STAGING_DIR)/usr/lib

define Package/cryptsetup/Default
SECTION:=utils
CATEGORY:=Utilities
Expand All @@ -36,8 +33,8 @@ endef

define Package/cryptsetup
$(call Package/cryptsetup/Default)
DEPENDS+=+libgcrypt
VARIANT:=gcrypt
DEPENDS+=+kmod-crypto-user
VARIANT:=kernel
endef

define Package/cryptsetup-openssl
Expand All @@ -53,7 +50,7 @@ endef

define Package/cryptsetup/description
$(call Package/cryptsetup/Default/description)
linked against libgcrypt
linked against kernel crypto API
endef


Expand All @@ -62,9 +59,21 @@ $(call Package/cryptsetup/Default/description)
linked against openssl
endef

CONFIGURE_ARGS += \
--disable-cryptsetup-reencrypt \
--disable-integritysetup \
--disable-selinux \
--disable-rpath \
--disable-veritysetup \
--disable-udev \
--with-default-luks-format=LUKS2

ifeq ($(BUILD_VARIANT),openssl)
CONFIGURE_ARGS+= \
CONFIGURE_ARGS += \
--with-crypto_backend=openssl
else
CONFIGURE_ARGS += \
--with-crypto_backend=kernel
endif

define Package/cryptsetup/install
Expand Down

0 comments on commit 685ca41

Please sign in to comment.