CMakeLists.txt

cmake_minimum_required(VERSION 3.16)
project(nextssl VERSION 1.0.0 LANGUAGES C)

set(CMAKE_C_STANDARD 11)
set(CMAKE_C_STANDARD_REQUIRED ON)

# ─────────────────────────────────────────────────────────────────
# Feature flags
#
# NextSSL is treated as a unified library: core algorithm families are forced
# on so the public surface does not shape-shift across builds. The legacy cache
# options remain for compatibility with existing presets, but the build below
# normalises the core families back to ON.
# ─────────────────────────────────────────────────────────────────
option(ENABLE_ML_KEM    "Enable ML-KEM (Kyber) KEM family"     ON)
option(ENABLE_ML_DSA    "Enable ML-DSA (Dilithium) sign family" ON)
option(ENABLE_FALCON    "Enable Falcon sign family"             ON)
option(ENABLE_HQC       "Enable HQC KEM family"                 ON)
option(ENABLE_MCELIECE  "Enable McEliece KEM family"            ON)
option(ENABLE_SPHINCS   "Enable SPHINCS+ sign family"           ON)

option(ENABLE_GMSSL     "Enable GmSSL (SM2/SM3/SM4)"            OFF)
option(ENABLE_ED448     "Enable Ed448 / X448"                   ON)
# balloon, pomelo, makwa are always built (no opt-out).

set(ENABLE_ML_KEM ON)
set(ENABLE_ML_DSA ON)
set(ENABLE_FALCON ON)
set(ENABLE_HQC ON)
set(ENABLE_MCELIECE ON)
set(ENABLE_SPHINCS ON)
set(ENABLE_ED448 ON)

option(NEXTSSL_SHARED   "Build as shared library (.dll/.so)"    ON)

# ─────────────────────────────────────────────────────────────────
# Output directory:  <root>/bin/<os>/<arch>/
# ─────────────────────────────────────────────────────────────────
if(WIN32)
    set(_NEXTSSL_OS "win")
elseif(APPLE)
    set(_NEXTSSL_OS "macos")
else()
    set(_NEXTSSL_OS "linux")
endif()

if(DEFINED NEXTSSL_OUTPUT_ARCH AND NOT NEXTSSL_OUTPUT_ARCH STREQUAL "")
    set(_NEXTSSL_ARCH "${NEXTSSL_OUTPUT_ARCH}")
elseif(APPLE AND DEFINED CMAKE_OSX_ARCHITECTURES AND NOT CMAKE_OSX_ARCHITECTURES STREQUAL "")
    set(_NEXTSSL_OSX_ARCHES ${CMAKE_OSX_ARCHITECTURES})
    list(LENGTH _NEXTSSL_OSX_ARCHES _NEXTSSL_OSX_ARCH_COUNT)
    if(_NEXTSSL_OSX_ARCH_COUNT EQUAL 1)
        list(GET _NEXTSSL_OSX_ARCHES 0 _NEXTSSL_ARCH)
    else()
        set(_NEXTSSL_ARCH "universal")
    endif()
elseif(CMAKE_SYSTEM_PROCESSOR MATCHES "AMD64|x86_64")
    set(_NEXTSSL_ARCH "x86_64")
elseif(CMAKE_SYSTEM_PROCESSOR MATCHES "i[3-6]86|x86")
    set(_NEXTSSL_ARCH "x86")
elseif(CMAKE_SYSTEM_PROCESSOR MATCHES "ARM64|aarch64")
    set(_NEXTSSL_ARCH "arm64")
elseif(CMAKE_SYSTEM_PROCESSOR MATCHES "armv7|arm")
    set(_NEXTSSL_ARCH "armv7")
else()
    set(_NEXTSSL_ARCH "${CMAKE_SYSTEM_PROCESSOR}")
endif()

set(_BIN_DIR "${PROJECT_SOURCE_DIR}/bin/${_NEXTSSL_OS}/${_NEXTSSL_ARCH}")

if(NOT DEFINED CMAKE_RUNTIME_OUTPUT_DIRECTORY OR CMAKE_RUNTIME_OUTPUT_DIRECTORY STREQUAL "")
    set(CMAKE_RUNTIME_OUTPUT_DIRECTORY "${_BIN_DIR}")  # .dll on Windows
endif()
if(NOT DEFINED CMAKE_LIBRARY_OUTPUT_DIRECTORY OR CMAKE_LIBRARY_OUTPUT_DIRECTORY STREQUAL "")
    set(CMAKE_LIBRARY_OUTPUT_DIRECTORY "${_BIN_DIR}")  # .so on Linux/macOS
endif()
if(NOT DEFINED CMAKE_ARCHIVE_OUTPUT_DIRECTORY OR CMAKE_ARCHIVE_OUTPUT_DIRECTORY STREQUAL "")
    set(CMAKE_ARCHIVE_OUTPUT_DIRECTORY "${_BIN_DIR}")  # .a / .lib
endif()

# ─────────────────────────────────────────────────────────────────
# Compile definitions from feature flags
# ─────────────────────────────────────────────────────────────────
set(NEXTSSL_DEFS NEXTSSL_BUILDING_DLL NEXTSSL_SUPPRESS_UPSTREAM_WARNINGS)

if(DEFINED CMAKE_C_COMPILER_TARGET AND CMAKE_C_COMPILER_TARGET MATCHES "musl" AND _NEXTSSL_ARCH MATCHES "x86_64|x86")
    list(APPEND NEXTSSL_DEFS BLAKE3_NO_AVX512)
endif()

if(CMAKE_SYSTEM_NAME STREQUAL "WASI")
    list(APPEND NEXTSSL_DEFS ARGON2_NO_THREADS)
endif()

list(APPEND NEXTSSL_DEFS
    ENABLE_ML_KEM
    ENABLE_ML_DSA
    ENABLE_FALCON
    ENABLE_HQC
    ENABLE_MCELIECE
    ENABLE_SPHINCS)
if(ENABLE_GMSSL)
    list(APPEND NEXTSSL_DEFS NEXTSSL_HAS_GMSSL)
endif()
list(APPEND NEXTSSL_DEFS HAVE_ED448 HAVE_CURVE448)
list(APPEND NEXTSSL_DEFS NEXTSSL_HAS_BALLOON NEXTSSL_HAS_POMELO NEXTSSL_HAS_MAKWA)
list(APPEND NEXTSSL_DEFS ENABLE_SCRYPT ENABLE_YESCRYPT ENABLE_CATENA ENABLE_LYRA2)

# ─────────────────────────────────────────────────────────────────
# Source root
# ─────────────────────────────────────────────────────────────────
set(SRC "${CMAKE_SOURCE_DIR}/src")

# ─────────────────────────────────────────────────────────────────
# SOURCE COLLECTION — single glob over all of src/, then exclude
# platform-specific, broken, or duplicate files so nothing is missed
# when new subdirectories are added.
# ─────────────────────────────────────────────────────────────────
file(GLOB_RECURSE NEXTSSL_SOURCES "${SRC}/*.c")

# ── AArch64-only files (require 64-bit ARM — not available on armv7 or x86) ──
# aarch64/ asm blobs are obviously AArch64-only too.
if(NOT _NEXTSSL_ARCH MATCHES "arm64")
    list(FILTER NEXTSSL_SOURCES EXCLUDE REGEX "/aarch64/")
endif()

# ── x86-only SIMD files (require x86 intrinsics — not available on non-x86) ──
# keccak4x (KeccakP-1600-times4-SIMD256.c) uses immintrin.h (AVX2/AVX512).
if(NOT _NEXTSSL_ARCH MATCHES "x86_64|x86")
    list(FILTER NEXTSSL_SOURCES EXCLUDE REGEX "/blake3_avx2\\.c$")
    list(FILTER NEXTSSL_SOURCES EXCLUDE REGEX "/blake3_avx512\\.c$")
    list(FILTER NEXTSSL_SOURCES EXCLUDE REGEX "/blake3_sse2\\.c$")
    list(FILTER NEXTSSL_SOURCES EXCLUDE REGEX "/blake3_sse41\\.c$")
    list(FILTER NEXTSSL_SOURCES EXCLUDE REGEX "/pqc/common/keccak4x/")
endif()

# Zig musl x86 targets reject the AVX-512 BLAKE3 backend even with per-file
# ISA flags, so keep the portable and narrower SIMD backends only there.
if(DEFINED CMAKE_C_COMPILER_TARGET AND CMAKE_C_COMPILER_TARGET MATCHES "musl" AND _NEXTSSL_ARCH MATCHES "x86_64|x86")
    list(FILTER NEXTSSL_SOURCES EXCLUDE REGEX "/blake3_avx512\.c$")
endif()

# ── PQC avx2/ — pqc_main.c only uses ref/ APIs; avx2/ = dead code on Windows
#    McEliece avx2: uses ELF-only .hidden ASM directives (unsupported on COFF)
#    ML-KEM/ML-DSA/Falcon/SPHINCS+ avx2: build requires -mavx2 but all callers
#    use the ref/ namespace — exclude to avoid dead-code linker noise and errors
list(FILTER NEXTSSL_SOURCES EXCLUDE REGEX "/pqc/.*/avx2/")

# ── PQC arm64 optimized paths — current source glob only collects .c files, not
#    the companion assembly sources those implementations require. Keep the
#    algorithm surface stable by using the portable ref/ code paths instead.
list(FILTER NEXTSSL_SOURCES EXCLUDE REGEX "/pqc/.*/aarch64/")
list(FILTER NEXTSSL_SOURCES EXCLUDE REGEX "/pqc/common/keccak2x/")

# ── Duplicate definitions (only one variant needed) ─────────────
# Argon2: opt.c uses x86 SSE2 intrinsics (emmintrin.h); ref.c is the portable fallback.
# On x86/x86_64 use opt.c (exclude ref.c); on all other arches use ref.c (exclude opt.c).
if(_NEXTSSL_ARCH MATCHES "x86_64|x86")
    list(FILTER NEXTSSL_SOURCES EXCLUDE REGEX "/_argon2/ref\.c$")
else()
    list(FILTER NEXTSSL_SOURCES EXCLUDE REGEX "/_argon2/opt\.c$")
endif()
# Skein: skein_block.c is the primary; skeinBlockNo3F.c is a duplicate
list(FILTER NEXTSSL_SOURCES EXCLUDE REGEX "/skeinBlockNo3F\\.c$")
# PoW public wrappers live in src/root/pow/root_pow.c; exclude legacy duplicate
list(FILTER NEXTSSL_SOURCES EXCLUDE REGEX "/pow/pow_api\\.c$")

# ── Memory-hard hashes ───────────────────────────────────────────────
# scrypt/yescrypt/catena/lyra2/balloon/pomelo/makwa always included via main GLOB.
# Exclusions still needed for files that conflict or are included via #include:  
# balloon/balloon.c: uses pthread_create — not needed; adapter calls hash_state_* directly
list(FILTER NEXTSSL_SOURCES EXCLUDE REGEX "/balloon/balloon\\.c$")
# scrypt's original sha256.c requires cpusupport.h — use sha256_portable.c instead
list(FILTER NEXTSSL_SOURCES EXCLUDE REGEX "/scrypt/sha256\\.c$")
# yescrypt's sha256.c uses same libcperciva_ namespace — scrypt's portable covers both
list(FILTER NEXTSSL_SOURCES EXCLUDE REGEX "/yescrypt/sha256\\.c$")
# yescrypt's insecure_memzero.c duplicates scrypt's — share from scrypt
list(FILTER NEXTSSL_SOURCES EXCLUDE REGEX "/yescrypt/insecure_memzero\\.c$")
# yescrypt-platform.c is #include'd by yescrypt-opt.c, not compiled separately
list(FILTER NEXTSSL_SOURCES EXCLUDE REGEX "/yescrypt-platform\\.c$")


# scrypt/yescrypt/catena/lyra2/balloon/pomelo/makwa always included via main GLOB

# ─────────────────────────────────────────────────────────────────
# Library target
# ─────────────────────────────────────────────────────────────────
if(NEXTSSL_SHARED)
    add_library(nextssl SHARED ${NEXTSSL_SOURCES})
else()
    add_library(nextssl STATIC ${NEXTSSL_SOURCES})
endif()

target_compile_definitions(nextssl PRIVATE ${NEXTSSL_DEFS})

target_include_directories(nextssl PUBLIC
    "${SRC}/root"
)
target_include_directories(nextssl PRIVATE
    "${SRC}"
    "${SRC}/encoding"
    "${SRC}/common"
    "${SRC}/common/sanitizer"
    "${SRC}/hash"
    "${SRC}/hash/interface"
    "${SRC}/hash/adapters"
    "${SRC}/hash/generic"
    "${SRC}/hash/root_functions"
    # ── hash family dirs ─────────────────────────────────────────────
    "${SRC}/hash/_argon2"
    "${SRC}/hash/_keccak"
    "${SRC}/hash/_skein"
    # ── hash algo dirs (flat) ─────────────────────────────────────────
    "${SRC}/hash/blake2b"
    "${SRC}/hash/blake2s"
    "${SRC}/hash/blake3"
    "${SRC}/hash/sha224"
    "${SRC}/hash/sha256"
    "${SRC}/hash/sha384"
    "${SRC}/hash/sha512"
    "${SRC}/hash/sha512_224"
    "${SRC}/hash/sha512_256"
    "${SRC}/hash/sm3"
    "${SRC}/hash/has160"
    "${SRC}/hash/md2"
    "${SRC}/hash/md4"
    "${SRC}/hash/md5"
    "${SRC}/hash/nt"
    "${SRC}/hash/ripemd128"
    "${SRC}/hash/ripemd160"
    "${SRC}/hash/ripemd256"
    "${SRC}/hash/ripemd320"
    "${SRC}/hash/sha0"
    "${SRC}/hash/sha1"
    "${SRC}/hash/tiger"
    "${SRC}/hash/whirlpool"
    "${SRC}/hash/argon2d"
    "${SRC}/hash/argon2i"
    "${SRC}/hash/argon2id"
    "${SRC}/hash/balloon"
    "${SRC}/hash/bcrypt"
    "${SRC}/hash/catena"
    "${SRC}/hash/lyra2"
    "${SRC}/hash/makwa"
    "${SRC}/hash/pomelo"
    "${SRC}/hash/scrypt"
    "${SRC}/hash/yescrypt"
    "${SRC}/hash/keccak256"
    "${SRC}/hash/sha3_224"
    "${SRC}/hash/sha3_256"
    "${SRC}/hash/sha3_384"
    "${SRC}/hash/sha3_512"
    "${SRC}/hash/shake"
    "${SRC}/hash/shake128"
    "${SRC}/hash/shake256"
    "${SRC}/hash/skein256"
    "${SRC}/hash/skein512"
    "${SRC}/hash/skein1024"
    "${SRC}/hash/kmac"
    "${SRC}/hash/kmac128"
    "${SRC}/hash/kmac256"
    "${SRC}/hash/cshake"
    "${SRC}/hash/parallelhash"
    "${SRC}/hash/tuplehash"
    "${SRC}/seed"
    "${SRC}/seed/hash"
    "${SRC}/seed/random"
    "${SRC}/seed/rng"
    "${SRC}/seed/drbg"
    "${SRC}/seed/udbf"
    "${SRC}/modern"
    "${SRC}/modern/symmetric"
    "${SRC}/modern/aead"
    "${SRC}/modern/mac"
    "${SRC}/modern/kdf"
    "${SRC}/modern/curve_math"
    "${SRC}/modern/asymmetric"
    "${SRC}/modern/asymmetric/curve448"
    "${SRC}/modern/asymmetric/rsa"
    # ── modern/symmetric per-algo ────────────────────────────────────
    "${SRC}/modern/symmetric/_aes"
    "${SRC}/modern/symmetric/aes_cbc"
    "${SRC}/modern/symmetric/aes_cbc_cs"
    "${SRC}/modern/symmetric/aes_cfb"
    "${SRC}/modern/symmetric/aes_ctr"
    "${SRC}/modern/symmetric/aes_ecb"
    "${SRC}/modern/symmetric/aes_fpe"
    "${SRC}/modern/symmetric/aes_kw"
    "${SRC}/modern/symmetric/aes_ofb"
    "${SRC}/modern/symmetric/aes_xpn"
    "${SRC}/modern/symmetric/aes_xts"
    "${SRC}/modern/symmetric/chacha20"
    "${SRC}/modern/symmetric/three_des"
    # ── modern/aead per-algo ─────────────────────────────────────────
    "${SRC}/modern/aead/_monocypher"
    "${SRC}/modern/aead/aes_ccm"
    "${SRC}/modern/aead/aes_eax"
    "${SRC}/modern/aead/aes_gcm"
    "${SRC}/modern/aead/aes_gcm_siv"
    "${SRC}/modern/aead/aes_gmac"
    "${SRC}/modern/aead/aes_ocb"
    "${SRC}/modern/aead/aes_poly1305"
    "${SRC}/modern/aead/aes_siv"
    "${SRC}/modern/aead/chacha20_poly1305"
    "${SRC}/modern/aead/ascon/_ascon"
    # ── modern/mac per-algo ──────────────────────────────────────────
    "${SRC}/modern/mac/aes_cmac"
    "${SRC}/modern/mac/hmac"
    "${SRC}/modern/mac/poly1305"
    "${SRC}/modern/mac/siphash"
    # ── modern/kdf per-algo ──────────────────────────────────────────
    "${SRC}/modern/kdf/hkdf"
    "${SRC}/modern/kdf/pbkdf2"
    # ── modern/asymmetric: ed25519 + nist_ecc families ───────────────
    "${SRC}/modern/asymmetric/_ed25519"
    "${SRC}/modern/asymmetric/_nist_ecc"
    "${SRC}/modern/asymmetric/_nist_ecc/micro_ecc"
    "${SRC}/modern/asymmetric/p256"
    "${SRC}/modern/asymmetric/p384"
    "${SRC}/modern/asymmetric/p521"
    "${SRC}/modern/asymmetric/det_ecdsa"
    "${SRC}/modern/asymmetric/dsa"
    "${SRC}/pow"
    "${SRC}/pow/core"
    "${SRC}/pow/client"
    "${SRC}/pow/server"
    "${SRC}/pow/dhcm"
    "${SRC}/pqc"
    "${SRC}/pqc/common"
    "${SRC}/root/hash"
    "${SRC}/root/seed"
    "${SRC}/root/modern"
    "${SRC}/root/pqc"
    "${SRC}/root/pow"
)

if(ENABLE_GMSSL)
    target_include_directories(nextssl PRIVATE "${SRC}/modern/asymmetric/sm2")
endif()
target_include_directories(nextssl PRIVATE "${SRC}/hash/balloon")

# ─────────────────────────────────────────────────────────────────
# BLAKE3 SIMD — disable intrinsics on non-x86 or when unavailable
# ─────────────────────────────────────────────────────────────────
if(_NEXTSSL_ARCH MATCHES "x86_64|x86")
    set_source_files_properties("${SRC}/hash/blake3/blake3_avx2.c"   PROPERTIES COMPILE_FLAGS "-mavx2")
    set_source_files_properties("${SRC}/hash/blake3/blake3_avx512.c" PROPERTIES COMPILE_FLAGS "-mavx512f -mavx512vl")
    set_source_files_properties("${SRC}/hash/blake3/blake3_sse2.c"   PROPERTIES COMPILE_FLAGS "-msse2")
    set_source_files_properties("${SRC}/hash/blake3/blake3_sse41.c"  PROPERTIES COMPILE_FLAGS "-msse4.1")
    # Argon2 opt.c uses SSE2; must be explicit for -m32 (i686) where SSE2 is not the default
    set_source_files_properties("${SRC}/hash/_argon2/opt.c"    PROPERTIES COMPILE_FLAGS "-msse2")
    # PQC Keccak-4x AVX2 (used by ML-KEM, ML-DSA, Falcon, HQC, SPHINCS+ ref/)
    set_source_files_properties(
        "${SRC}/pqc/common/keccak4x/KeccakP-1600-times4-SIMD256.c"
        PROPERTIES COMPILE_FLAGS "-mavx2")
else()
    # Non-x86: disable SIMD dispatch, use portable fallback only
    target_compile_definitions(nextssl PRIVATE
        BLAKE3_NO_AVX2 BLAKE3_NO_AVX512 BLAKE3_NO_SSE2 BLAKE3_NO_SSE41)
endif()

# ─────────────────────────────────────────────────────────────────
# Compiler warnings / optimization
# ─────────────────────────────────────────────────────────────────
if(MSVC)
    target_compile_options(nextssl PRIVATE /W3 /wd4996 /std:c11 /experimental:c11atomics)
else()
    target_compile_options(nextssl PRIVATE
        -Wall -Wextra -Wno-unused-parameter -Wno-sign-compare
        -Wno-missing-field-initializers
        $<$<CONFIG:Release>:-O3>
        $<$<CONFIG:Debug>:-g -O0>
    )
    if(NOT APPLE)
        # Apple ld warns that -s is obsolete; keep the strip flag on ELF targets only.
        target_link_options(nextssl PRIVATE
            $<$<CONFIG:Release>:-Wl,-s>
        )
    endif()
endif()

# ─────────────────────────────────────────────────────────────────
# On Windows link ws2_32 (needed by some network/random code)
# ─────────────────────────────────────────────────────────────────
if(WIN32)
    target_link_libraries(nextssl PRIVATE ws2_32 bcrypt)
endif()

# ─────────────────────────────────────────────────────────────────
# Install rules
# ─────────────────────────────────────────────────────────────────
install(TARGETS nextssl
    RUNTIME DESTINATION bin
    LIBRARY DESTINATION lib
    ARCHIVE DESTINATION lib
)
install(FILES "${SRC}/root/nextssl.h" "${SRC}/root/nextssl_export.h"
    DESTINATION include/nextssl
)

# ─────────────────────────────────────────────────────────────────
# Summary
# ─────────────────────────────────────────────────────────────────
message(STATUS "NextSSL build configuration:")
message(STATUS "  Type        : ${CMAKE_BUILD_TYPE}")
message(STATUS "  Shared lib  : ${NEXTSSL_SHARED}")
message(STATUS "  ML-KEM      : ${ENABLE_ML_KEM}")
message(STATUS "  ML-DSA      : ${ENABLE_ML_DSA}")
message(STATUS "  Falcon      : ${ENABLE_FALCON}")
message(STATUS "  HQC         : ${ENABLE_HQC}")
message(STATUS "  McEliece    : ${ENABLE_MCELIECE}")
message(STATUS "  SPHINCS+    : ${ENABLE_SPHINCS}")
message(STATUS "  GmSSL       : ${ENABLE_GMSSL}")
message(STATUS "  Ed448/X448  : ${ENABLE_ED448}")
message(STATUS "  Balloon     : ON (always)")
message(STATUS "  Pomelo      : ON (always)")
message(STATUS "  Makwa       : ON (always)")