cc/config/BUILD.bazel

load("@bazel_skylib//rules:common_settings.bzl", "bool_flag")

package(default_visibility = ["//:__subpackages__"])

licenses(["notice"])

cc_library(
    name = "tink_config",
    srcs = ["tink_config.cc"],
    hdrs = ["tink_config.h"],
    include_prefix = "tink/config",
    visibility = ["//visibility:public"],
    deps = [
        "//:key_manager",
        "//:registry",
        "//daead:deterministic_aead_config",
        "//hybrid:hybrid_config",
        "//prf:prf_config",
        "//proto:config_cc_proto",
        "//signature:signature_config",
        "//streamingaead:streaming_aead_config",
        "//util:status",
        "@com_google_absl//absl/base:core_headers",
    ],
)

cc_library(
    name = "config_util",
    srcs = ["config_util.cc"],
    hdrs = ["config_util.h"],
    include_prefix = "tink/config",
    deps = ["//proto:config_cc_proto"],
)

bool_flag(
    name = "use_only_fips",
    build_setting_default = False,
)

cc_library(
    name = "tink_fips",
    srcs = ["tink_fips.cc"],
    hdrs = ["tink_fips.h"],
    include_prefix = "tink/config",
    visibility = ["//visibility:public"],
    deps = [
        "//internal:fips_utils",
        "//internal:registry_impl",
        "//util:status",
        "@boringssl//:crypto",
        "@com_google_absl//absl/base:core_headers",
    ],
)

cc_library(
    name = "fips_140_2",
    srcs = ["fips_140_2.cc"],
    hdrs = ["fips_140_2.h"],
    include_prefix = "tink/config",
    visibility = ["//visibility:public"],
    deps = [
        "//:configuration",
        "//aead:aead_wrapper",
        "//aead:aes_ctr_hmac_aead_key_manager",
        "//aead:aes_gcm_key_manager",
        "//internal:configuration_impl",
        "//internal:fips_utils",
        "//mac:hmac_key_manager",
        "//mac:mac_wrapper",
        "//mac/internal:chunked_mac_wrapper",
        "//prf:hmac_prf_key_manager",
        "//prf:prf_set_wrapper",
        "//signature:ecdsa_sign_key_manager",
        "//signature:ecdsa_verify_key_manager",
        "//signature:public_key_sign_wrapper",
        "//signature:public_key_verify_wrapper",
        "//signature:rsa_ssa_pkcs1_sign_key_manager",
        "//signature:rsa_ssa_pkcs1_verify_key_manager",
        "//signature:rsa_ssa_pss_sign_key_manager",
        "//signature:rsa_ssa_pss_verify_key_manager",
        "@com_google_absl//absl/log:check",
    ],
)

cc_library(
    name = "key_gen_fips_140_2",
    srcs = ["key_gen_fips_140_2.cc"],
    hdrs = ["key_gen_fips_140_2.h"],
    include_prefix = "tink/config",
    visibility = ["//visibility:public"],
    deps = [
        "//:key_gen_configuration",
        "//aead:aes_ctr_hmac_aead_key_manager",
        "//aead:aes_gcm_key_manager",
        "//internal:fips_utils",
        "//internal:key_gen_configuration_impl",
        "//mac:hmac_key_manager",
        "//prf:hmac_prf_key_manager",
        "//signature:ecdsa_sign_key_manager",
        "//signature:ecdsa_verify_key_manager",
        "//signature:rsa_ssa_pkcs1_sign_key_manager",
        "//signature:rsa_ssa_pkcs1_verify_key_manager",
        "//signature:rsa_ssa_pss_sign_key_manager",
        "//signature:rsa_ssa_pss_verify_key_manager",
        "@com_google_absl//absl/log:check",
    ],
)

# tests

cc_test(
    name = "tink_config_test",
    size = "small",
    srcs = ["tink_config_test.cc"],
    deps = [
        ":tink_config",
        "//:aead",
        "//:deterministic_aead",
        "//:hybrid_decrypt",
        "//:hybrid_encrypt",
        "//:mac",
        "//:registry",
        "//:streaming_aead",
        "//:tink_cc",
        "//aead:aes_gcm_key_manager",
        "//util:status",
        "//util:test_matchers",
        "@com_google_absl//absl/status",
        "@com_google_googletest//:gtest_main",
    ],
)

cc_test(
    name = "config_util_test",
    size = "small",
    srcs = ["config_util_test.cc"],
    deps = [
        ":config_util",
        "@com_google_googletest//:gtest_main",
    ],
)

cc_test(
    name = "tink_fips_test",
    size = "small",
    srcs = ["tink_fips_test.cc"],
    tags = ["fips"],
    deps = [
        ":tink_fips",
        "//:registry",
        "//aead:aead_config",
        "//internal:fips_utils",
        "//util:status",
        "//util:test_matchers",
        "@boringssl//:crypto",
        "@com_google_absl//absl/status",
        "@com_google_googletest//:gtest_main",
    ],
)

cc_test(
    name = "fips_140_2_test",
    srcs = ["fips_140_2_test.cc"],
    deps = [
        ":fips_140_2",
        "//aead:aead_key_templates",
        "//aead:aes_ctr_hmac_aead_key_manager",
        "//aead:aes_gcm_key_manager",
        "//internal:configuration_impl",
        "//internal:fips_utils",
        "//internal:key_type_info_store",
        "//mac:aes_cmac_key_manager",
        "//mac:hmac_key_manager",
        "//prf:hmac_prf_key_manager",
        "//proto:tink_cc_proto",
        "//signature:ecdsa_verify_key_manager",
        "//signature:rsa_ssa_pkcs1_verify_key_manager",
        "//signature:rsa_ssa_pss_verify_key_manager",
        "//util:test_keyset_handle",
        "//util:test_matchers",
        "//util:test_util",
        "@com_google_googletest//:gtest_main",
    ],
)

cc_test(
    name = "key_gen_fips_140_2_test",
    srcs = ["key_gen_fips_140_2_test.cc"],
    deps = [
        ":key_gen_fips_140_2",
        "//aead:aead_key_templates",
        "//aead:aes_ctr_hmac_aead_key_manager",
        "//aead:aes_gcm_key_manager",
        "//internal:fips_utils",
        "//internal:key_gen_configuration_impl",
        "//mac:aes_cmac_key_manager",
        "//mac:hmac_key_manager",
        "//prf:hmac_prf_key_manager",
        "//proto:tink_cc_proto",
        "//signature:ecdsa_verify_key_manager",
        "//signature:rsa_ssa_pkcs1_verify_key_manager",
        "//signature:rsa_ssa_pss_verify_key_manager",
        "//util:test_matchers",
        "@com_google_googletest//:gtest_main",
    ],
)