Intel(R) Integrated Performance Primitives 2019 Cryptography

Author: vkubarev

README.md

@@ -146,25 +146,25 @@ with the options described in [CMake Arguments](#cmake-arguments).
 
 4.  Run CMake\* on the command line. Example CMake lines for different
     operating systems:
-
+    
     **Windows\* OS**:
-
+    
     ```
     cmake CMakeLists.txt -Bbuild -G"Visual Studio 14 2015 Win64" -T"Intel C++ Compiler 18.0"
     ```
-
+    
     **Linux\* OS**:
-
+    
     ```
     CC=icc CXX=icpc cmake CMakeLists.txt -Bbuild -DARCH=intel64
     ```
-
+    
     **macOS\***:
-
+    
     ```
     CC=icc CXX=icpc cmake CMakeLists.txt -Bbuild -DARCH=intel64 -DUSEYASM=<path to Yasm compiler>
     ```
-
+    
     The list of supported CMake arguments is available in the
     [CMake Arguments](#cmake-arguments) section.
 
@@ -173,6 +173,17 @@ with the options described in [CMake Arguments](#cmake-arguments).
 
     -   On Windows\* OS: open the Microsoft Visual Studio\* solution and
         run a build.
+        
+        **Important:** the process used to build the Microsoft Visual Studio solutions results
+		in debug information being generated for assembly files by default for both Debug and
+		Release configurations. To build Intel IPP Cryptography library binaries without debug
+		information in the Release configuration, follow these steps:
+
+        1. Right-click a project file and select **Properties**.
+        2. In the **Configuration** drop-down list, select **Release**.
+        3. Select the **Microsoft Macro Assembler** tab.
+        4. Set the value of the **Generate Debug Information** option to **No**.
+        5. Repeat steps 1-3 for all projects you want to build.
 
     -   On Linux\* OS or macOS\*: start a build using makefiles.
     
@@ -206,7 +217,7 @@ with the options described in [CMake Arguments](#cmake-arguments).
         static library with all available optimizations; build of dynamic
         libraries with a dynamic dispatcher library.
 
-    -   `-DMERGED_BLD:BOOL=off`: Build of one static library per
+    -   `-DMERGED_BLD:BOOL=off`: build of one static library per
         optimization; build of one dynamic library per optimization.
 
 -   `-DTHREADED_LIB:BOOL=<off|on>` - optional. Defines the threading
@@ -218,7 +229,7 @@ with the options described in [CMake Arguments](#cmake-arguments).
     -   `-DTHREADED_LIB:BOOL=on`: build multi-threaded Intel IPP Cryptography
         library.
 
--   `-DPLATFORM_LIST="<platform list>"` -- optional, works only if
+-   `-DPLATFORM_LIST="<platform list>"` - optional, works only if
     `-DMERGED_BLD:BOOL=off` is set. Sets target platforms for the code
     to be compiled. See the supported platform list at
     <https://software.intel.com/en-us/ipp-dev-guide-dispatching>.
@@ -253,7 +264,7 @@ CC=<path to C compiler> CXX=<path to C++ compiler> cmake <Arguments>
 
 #### Linux\* OS CMake Arguments:
 
--   `-DNONPIC_LIB:BOOL=<off|on>` -optional. Defines whether the built
+-   `-DNONPIC_LIB:BOOL=<off|on>` - optional. Defines whether the built
     library will be position-dependent or not:
 
     -   `-DNONPIC_LIB:BOOL=off:` default. Position-independent code.
@@ -271,7 +282,7 @@ CC=<path to C compiler> CXX=<path to C++ compiler> cmake <Arguments>
     `"x86_64-linux-android-"` defines the prefix for x86_64 GNU compiler
     tools.
 
-    Note: Before running CMake scripts for cross-platform build for
+    **Note:** Before running CMake scripts for cross-platform build for
     Android\* OS, you need to do the following:
 
     1.  Set the following environment variables for Android\* NDK:

include/ippcp.h

@@ -355,16 +355,24 @@ IPPAPI(IppStatus, ippsAES_CMACGetTag,(Ipp8u* pMD, int mdLen, const IppsAES_CMACS
 // RC4 Stream Ciphers
 // =========================================================
 */
+IPP_DEPRECATED("is deprecated. This function is obsolete and will be removed in one of the future IPP releases") \
 IPPAPI(IppStatus, ippsARCFourCheckKey, (const Ipp8u *pKey, int keyLen, IppBool* pIsWeak))
 
+IPP_DEPRECATED("is deprecated. This function is obsolete and will be removed in one of the future IPP releases") \
 IPPAPI(IppStatus, ippsARCFourGetSize, (int* pSize))
+IPP_DEPRECATED("is deprecated. This function is obsolete and will be removed in one of the future IPP releases") \
 IPPAPI(IppStatus, ippsARCFourInit, (const Ipp8u *pKey, int keyLen, IppsARCFourState *pCtx))
+IPP_DEPRECATED("is deprecated. This function is obsolete and will be removed in one of the future IPP releases") \
 IPPAPI(IppStatus, ippsARCFourReset, (IppsARCFourState* pCtx))
 
+IPP_DEPRECATED("is deprecated. This function is obsolete and will be removed in one of the future IPP releases") \
 IPPAPI(IppStatus, ippsARCFourPack,(const IppsARCFourState* pCtx, Ipp8u* pBuffer))
+IPP_DEPRECATED("is deprecated. This function is obsolete and will be removed in one of the future IPP releases") \
 IPPAPI(IppStatus, ippsARCFourUnpack,(const Ipp8u* pBuffer, IppsARCFourState* pCtx))
 
+IPP_DEPRECATED("is deprecated. This function is obsolete and will be removed in one of the future IPP releases") \
 IPPAPI(IppStatus, ippsARCFourEncrypt, (const Ipp8u *pSrc, Ipp8u *pDst, int length, IppsARCFourState *pCtx))
+IPP_DEPRECATED("is deprecated. This function is obsolete and will be removed in one of the future IPP releases") \
 IPPAPI(IppStatus, ippsARCFourDecrypt, (const Ipp8u *pSrc, Ipp8u *pDst, int length, IppsARCFourState *pCtx))
 
 

include/ippversion.h

@@ -53,6 +53,6 @@
 #define IPP_VERSION_MINOR  0
 #define IPP_VERSION_UPDATE 0
 
-#define IPP_VERSION_STR "2019.0.0 Beta Refresh"
+#define IPP_VERSION_STR "2019.0.0"
 
 #endif /* IPPVERSION_H__ */

sources/cmake/android/Intel18.0.0.cmake

@@ -47,7 +47,7 @@ set(CC_FLAGS_INLINE_ASM_UNIX_IA32 "-fasm-blocks -use_msasm -w -m32 -fomit-frame-
 
 set(CC_FLAGS_INLINE_ASM_UNIX_INTEL64 "-fasm-blocks -use_msasm -ffixed-rdi -ffixed-rsi -ffixed-rbx -ffixed-rcx -ffixed-rdx -ffixed-rbp -ffixed-r8 -ffixed-r9 -ffixed-r12 -ffixed-r13 -ffixed-r14 -ffixed-r15")
 
-set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} ${CMAKE_CXX_FLAGS} ${LIBRARY_DEFINES}")
+set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} ${LIBRARY_DEFINES}")
 
 set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} -ffreestanding -restrict -qopt-report2 -qopt-report-phase:vec -std=c99 -falign-functions=32 -falign-loops=32 -diag-error 266 -diag-disable 13366 -Wformat -Wformat-security -fstack-protector")
 set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} -platform=android")

sources/cmake/linux/Intel18.0.0.cmake

@@ -42,26 +42,44 @@
 # Intel(R) Integrated Performance Primitives (Intel(R) IPP) Cryptography
 #
 
-# linker
-set(LINK_FLAG_DYNAMIC_LINUX "-nostdlib -Wl,-shared -Wl,-z,defs -Wl,-z,noexecstack -Wl,-z,relro -Wl,-z,now -Wl,-call_shared,-lc -Wl,-call_shared,-lm")
+# Linker flags
+
+# Security flags
+set(LINK_FLAG_SECURITY "") 
+# Disallows undefined symbols in object files. Undefined symbols in shared libraries are still allowed
+set(LINK_FLAG_SECURITY "${LINK_FLAG_SECURITY} -Wl,-z,defs")
+# Stack execution protection
+set(LINK_FLAG_SECURITY "${LINK_FLAG_SECURITY} -Wl,-z,noexecstack")
+# Data relocation and protection (RELRO)
+set(LINK_FLAG_SECURITY "${LINK_FLAG_SECURITY} -Wl,-z,relro -Wl,-z,now")
+
+set(LINK_FLAG_DYNAMIC_LINUX "${LINK_FLAG_SECURITY} -nostdlib -Wl,-shared -Wl,-call_shared,-lc -Wl,-call_shared,-lm")
 if(${ARCH} MATCHES "ia32")
   set(LINK_FLAG_DYNAMIC_LINUX "${LINK_FLAG_DYNAMIC_LINUX} -Wl,-m,elf_i386")
 endif(${ARCH} MATCHES "ia32")
 
-set(LINK_FLAG_PCS_LINUX "-nostdlib -Wl,-call_shared,-ldl -Wl,-call_shared,-lc -Wl,-call_shared,-lm") #check lm lc
+set(LINK_FLAG_PCS_LINUX "${LINK_FLAG_SECURITY} -nostdlib -Wl,-shared -Wl,-call_shared,-ldl -Wl,-call_shared,-lc -Wl,-call_shared,-lm")
 if(${ARCH} MATCHES "ia32")
   set(LINK_FLAG_PCS_LINUX "${LINK_FLAG_PCS_LINUX} -Wl,-m,elf_i386")
 endif(${ARCH} MATCHES "ia32")
 
-# compiler
+# Compiler flags
 set(CC_FLAGS_INLINE_ASM_UNIX_IA32 "-fasm-blocks -use_msasm -w -m32 -fomit-frame-pointer")
 
 set(CC_FLAGS_INLINE_ASM_UNIX_INTEL64 "-fasm-blocks -use_msasm -ffixed-rdi -ffixed-rsi -ffixed-rbx -ffixed-rcx -ffixed-rdx -ffixed-rbp -ffixed-r8 -ffixed-r9 -ffixed-r12 -ffixed-r13 -ffixed-r14 -ffixed-r15")
 
-set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} ${CMAKE_CXX_FLAGS} ${LIBRARY_DEFINES}")
+set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} ${LIBRARY_DEFINES}")
+
+set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} -ffreestanding -restrict -qopt-report2 -qopt-report-phase:vec -std=c99 -falign-functions=32 -falign-loops=32 -diag-error 266 -diag-disable 13366")
+
+# Stack-based Buffer Overrun Detection
+set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} -fstack-protector")
+
+# Format string vulnerabilities
+set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} -Wformat -Wformat-security")
 
-set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} -ffreestanding -restrict -qopt-report2 -qopt-report-phase:vec -std=c99 -falign-functions=32 -falign-loops=32 -diag-error 266 -diag-disable 13366 -Wformat -Wformat-security -fstack-protector")
 if(NOT NONPIC_LIB)
+  # Position Independent Execution (PIE)
   set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} -fpic -fPIC")
 endif()
 if(THREADED_LIB)

sources/cmake/macosx/Intel18.0.0.cmake

@@ -58,7 +58,7 @@ set(CC_FLAGS_INLINE_ASM_UNIX_IA32 "-fasm-blocks -use_msasm -w -m32 -fomit-frame-
 
 set(CC_FLAGS_INLINE_ASM_UNIX_INTEL64 "-fasm-blocks -use_msasm -ffixed-rdi -ffixed-rsi -ffixed-rbx -ffixed-rcx -ffixed-rdx -ffixed-rbp -ffixed-r8 -ffixed-r9 -ffixed-r12 -ffixed-r13 -ffixed-r14 -ffixed-r15")
 
-set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} ${CMAKE_CXX_FLAGS} ${LIBRARY_DEFINES}")
+set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} ${LIBRARY_DEFINES}")
 
 set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} -ffreestanding -restrict -qopt-report2 -qopt-report-phase:vec -std=c99 -falign-functions=32 -falign-loops=32 -diag-error 266 -diag-disable 13366 -Wformat -Wformat-security -fstack-protector")
 set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} -fpic -fPIC")

sources/cmake/windows/Intel18.0.0.cmake

@@ -55,7 +55,7 @@ set(LINK_LIB_STATIC_RELEASE  ${LINK_LIB_STATIC_RELEASE_VS2015})
 set(LINK_LIB_STATIC_DEBUG  ${LINK_LIB_STATIC_DEBUG_VS2015})
 
 # compiler
-set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} ${CMAKE_CXX_FLAGS} ${LIBRARY_DEFINES}")
+set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} ${LIBRARY_DEFINES}")
 
 set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} -nologo -Qfp-speculation:safe -Qfreestanding -X -W4 -GS -Qdiag-error:266 -Qdiag-disable:13366 /Qfnalign:32 /Qalign-loops:32 -Qrestrict -Zp16 -Qvc12 -Qopt-report2 -Qopt-report-phase:vec -Qopt-report-stdout -Qsox- /Gy -Qstd=c99")
 if(THREADED_LIB)

sources/ippcp/CMakeLists.txt

@@ -249,7 +249,7 @@ if(IPP_REVISION)
   set(LIBRARY_DEFINES "${LIBRARY_DEFINES} -DIPP_REVISION=${IPP_REVISION}")
 endif()
 
-include(${COMPILER_OPTIONS_FILE}) # uses ${CMAKE_C_FLAGS} ${CMAKE_CXX_FLAGS} ${LIBRARY_DEFINES} from the scope
+include(${COMPILER_OPTIONS_FILE}) # uses ${CMAKE_C_FLAGS} ${LIBRARY_DEFINES} from the scope
 
 if(WIN32)
   set(OPTKEY "-Qx")
@@ -570,10 +570,9 @@ if(MERGED_BLD)
     else()
       set(IPPCP_LIB_PCS ${IPPCP_LIB_PCS} PARENT_SCOPE)
       if(${ARCH} MATCHES "ia32")
-        # NOTE: O3 is reduced to O1
-        set_source_files_properties(pcpmain.c PROPERTIES COMPILE_FLAGS "${CC_FLAGS_INLINE_ASM_UNIX_IA32} -D_GNU_SOURCE -D_FORTIFY_SOURCE=2 -O1")
+        set_source_files_properties(pcpmain.c PROPERTIES COMPILE_FLAGS "${CC_FLAGS_INLINE_ASM_UNIX_IA32} -D_GNU_SOURCE")
       else()
-        set_source_files_properties(pcpmain.c PROPERTIES COMPILE_FLAGS "${CC_FLAGS_INLINE_ASM_UNIX_INTEL64} -D_GNU_SOURCE -D_FORTIFY_SOURCE=2 -O1")
+        set_source_files_properties(pcpmain.c PROPERTIES COMPILE_FLAGS "${CC_FLAGS_INLINE_ASM_UNIX_INTEL64} -D_GNU_SOURCE")
       endif()
       add_library(${IPPCP_LIB_PCS} SHARED pcpmain.c cpinit.c  ${ASM_SOURCES_PCS})
       if(NOT APPLE)
@@ -589,7 +588,11 @@ if(MERGED_BLD)
       add_dependencies(${IPPCP_LIB_PCS} ${TARGET_NAME}_dyn_${opt})
       target_link_libraries(${IPPCP_LIB_PCS} ${TARGET_NAME}_dyn_${opt})
     endforeach()
-    set_target_properties(${IPPCP_LIB_PCS} PROPERTIES COMPILE_FLAGS "-D_PCS -D_IPP_DYNAMIC -D_IPP_DATA")
+    if(NOT APPLE)
+      set_target_properties(${IPPCP_LIB_PCS} PROPERTIES COMPILE_FLAGS "-D_PCS -D_IPP_DYNAMIC -D_IPP_DATA -D_FORTIFY_SOURCE=2 -O2")
+    else()
+      set_target_properties(${IPPCP_LIB_PCS} PROPERTIES COMPILE_FLAGS "-D_PCS -D_IPP_DYNAMIC -D_IPP_DATA")
+    endif(NOT APPLE)
     if(WIN32)
       foreach(link ${LINK_LIB_STATIC_DEBUG})
         target_link_libraries(${IPPCP_LIB_PCS} debug ${link})