public inbox for devel@edk2.groups.io
 help / color / mirror / Atom feed
From: "Long, Qin" <qin.long@intel.com>
To: "Chen, Chen A" <chen.a.chen@intel.com>,
	"edk2-devel@lists.01.org" <edk2-devel@lists.01.org>
Cc: "Ye, Ting" <ting.ye@intel.com>,
	"Kinney, Michael D" <michael.d.kinney@intel.com>
Subject: Re: [PATCH 08/37] CryptoPkg: Removing ipf which is no longer supported from edk2.
Date: Wed, 13 Jun 2018 08:10:20 +0000	[thread overview]
Message-ID: <BF2CCE9263284D428840004653A28B6E54130571@SHSMSX103.ccr.corp.intel.com> (raw)
In-Reply-To: <20180613034338.3636-1-chen.a.chen@intel.com>

Hi, Chenchen,

Please do more clean-ups on CryptoPkg for IPF removal: 
	1. Remove whole "CryptRuntimeDxe" folder which was also designed for IPF before;
	2. Remove " CryptoPkg/CryptRuntimeDxe/CryptRuntimeDxe.inf" from CryptoPkg.dsc;
	3. Remove whole "Include/Protocol" folder;
	4. Remove "[Protocols]" section from CryptoPkg.dec;
	5. Remove whole "Library/BaseCryptLibRuntimeCryptProtocol" folder;


Best Regards & Thanks,
LONG, Qin

> -----Original Message-----
> From: Chen, Chen A
> Sent: Wednesday, June 13, 2018 11:44 AM
> To: edk2-devel@lists.01.org
> Cc: Chen, Chen A <chen.a.chen@intel.com>; Long, Qin <qin.long@intel.com>;
> Ye, Ting <ting.ye@intel.com>; Kinney, Michael D
> <michael.d.kinney@intel.com>
> Subject: [PATCH 08/37] CryptoPkg: Removing ipf which is no longer
> supported from edk2.
> 
> Removing rules for Ipf sources file:
> * Remove the source file which path with "ipf" and also listed in
>   [Sources.IPF] section of INF file.
> * Remove the source file which listed in [Components.IPF] section
>   of DSC file and not listed in any other [Components] section.
> * Remove the embedded Ipf code for MDE_CPU_IPF.
> 
> Removing rules for Inf file:
> * Remove IPF from VALID_ARCHITECTURES comments.
> * Remove DXE_SAL_DRIVER from LIBRARY_CLASS in [Defines] section.
> * Remove the INF which only listed in [Components.IPF] section in DSC.
> * Remove statements from [BuildOptions] that provide IPF specific flags.
> * Remove any IPF sepcific sections.
> 
> Removing rules for Dec file:
> * Remove [Includes.IPF] section from Dec.
> 
> Removing rules for Dsc file:
> * Remove IPF from SUPPORTED_ARCHITECTURES in [Defines] section of DSC.
> * Remove any IPF specific sections.
> * Remove statements from [BuildOptions] that provide IPF specific flags.
> 
> Cc: Qin Long <qin.long@intel.com>
> Cc: Ting Ye <ting.ye@intel.com>
> Cc: Michael D Kinney <michael.d.kinney@intel.com>
> Signed-off-by: chenc2 <chen.a.chen@intel.com>
> Contributed-under: TianoCore Contribution Agreement 1.1
> ---
>  CryptoPkg/CryptRuntimeDxe/CryptRuntimeDxe.inf      |   4 +-
>  CryptoPkg/CryptoPkg.dsc                            |   5 +-
>  CryptoPkg/Library/BaseCryptLib/BaseCryptLib.inf    |   5 +-
>  CryptoPkg/Library/BaseCryptLib/RuntimeCryptLib.inf |   5 +-
>  CryptoPkg/Library/BaseCryptLib/SmmCryptLib.inf     |   3 -
>  .../BaseCryptLibRuntimeCryptProtocol.inf           |  76 ----
>  .../Cipher/CryptAesNull.c                          | 165 --------
>  .../Cipher/CryptArc4Null.c                         | 130 -------
>  .../Cipher/CryptTdesNull.c                         | 166 --------
>  .../Hash/CryptMd4Null.c                            | 124 ------
>  .../Hash/CryptMd5Null.c                            | 125 ------
>  .../Hash/CryptSha1Null.c                           | 125 ------
>  .../Hmac/CryptHmacMd5Null.c                        | 127 -------
>  .../Hmac/CryptHmacSha1Null.c                       | 127 -------
>  .../InternalCryptLib.h                             |  23 --
>  .../Pem/CryptPemNull.c                             |  44 ---
>  .../Pk/CryptAuthenticodeNull.c                     |  51 ---
>  .../Pk/CryptDhNull.c                               | 156 --------
>  .../Pk/CryptPkcs7SignNull.c                        |  59 ---
>  .../Pk/CryptPkcs7VerifyNull.c                      | 163 --------
>  .../Pk/CryptRsaExtNull.c                           | 125 ------
>  .../Pk/CryptX509Null.c                             | 238 ------------
>  .../Rand/CryptRandNull.c                           |  63 ----
>  .../RuntimeDxeIpfCryptLib.c                        | 419 ---------------------
>  CryptoPkg/Library/IntrinsicLib/IntrinsicLib.inf    |  13 +-
>  CryptoPkg/Library/OpensslLib/OpensslLib.inf        |   5 +-
>  CryptoPkg/Library/OpensslLib/OpensslLibCrypto.inf  |   5 +-
>  CryptoPkg/Library/TlsLib/TlsLib.inf                |   2 +-
>  28 files changed, 9 insertions(+), 2544 deletions(-)
>  delete mode 100644
> CryptoPkg/Library/BaseCryptLibRuntimeCryptProtocol/BaseCryptLibRuntime
> CryptProtocol.inf
>  delete mode 100644
> CryptoPkg/Library/BaseCryptLibRuntimeCryptProtocol/Cipher/CryptAesNull.
> c
>  delete mode 100644
> CryptoPkg/Library/BaseCryptLibRuntimeCryptProtocol/Cipher/CryptArc4Null
> .c
>  delete mode 100644
> CryptoPkg/Library/BaseCryptLibRuntimeCryptProtocol/Cipher/CryptTdesNull
> .c
>  delete mode 100644
> CryptoPkg/Library/BaseCryptLibRuntimeCryptProtocol/Hash/CryptMd4Null.c
>  delete mode 100644
> CryptoPkg/Library/BaseCryptLibRuntimeCryptProtocol/Hash/CryptMd5Null.c
>  delete mode 100644
> CryptoPkg/Library/BaseCryptLibRuntimeCryptProtocol/Hash/CryptSha1Null.c
>  delete mode 100644
> CryptoPkg/Library/BaseCryptLibRuntimeCryptProtocol/Hmac/CryptHmacMd
> 5Null.c
>  delete mode 100644
> CryptoPkg/Library/BaseCryptLibRuntimeCryptProtocol/Hmac/CryptHmacSha
> 1Null.c
>  delete mode 100644
> CryptoPkg/Library/BaseCryptLibRuntimeCryptProtocol/InternalCryptLib.h
>  delete mode 100644
> CryptoPkg/Library/BaseCryptLibRuntimeCryptProtocol/Pem/CryptPemNull.c
>  delete mode 100644
> CryptoPkg/Library/BaseCryptLibRuntimeCryptProtocol/Pk/CryptAuthenticod
> eNull.c
>  delete mode 100644
> CryptoPkg/Library/BaseCryptLibRuntimeCryptProtocol/Pk/CryptDhNull.c
>  delete mode 100644
> CryptoPkg/Library/BaseCryptLibRuntimeCryptProtocol/Pk/CryptPkcs7SignNu
> ll.c
>  delete mode 100644
> CryptoPkg/Library/BaseCryptLibRuntimeCryptProtocol/Pk/CryptPkcs7Verify
> Null.c
>  delete mode 100644
> CryptoPkg/Library/BaseCryptLibRuntimeCryptProtocol/Pk/CryptRsaExtNull.c
>  delete mode 100644
> CryptoPkg/Library/BaseCryptLibRuntimeCryptProtocol/Pk/CryptX509Null.c
>  delete mode 100644
> CryptoPkg/Library/BaseCryptLibRuntimeCryptProtocol/Rand/CryptRandNull.
> c
>  delete mode 100644
> CryptoPkg/Library/BaseCryptLibRuntimeCryptProtocol/RuntimeDxeIpfCryptL
> ib.c
> 
> diff --git a/CryptoPkg/CryptRuntimeDxe/CryptRuntimeDxe.inf
> b/CryptoPkg/CryptRuntimeDxe/CryptRuntimeDxe.inf
> index 23df499ad3..e0e87048d2 100644
> --- a/CryptoPkg/CryptRuntimeDxe/CryptRuntimeDxe.inf
> +++ b/CryptoPkg/CryptRuntimeDxe/CryptRuntimeDxe.inf
> @@ -25,7 +25,7 @@
>  #
>  # The following information is for reference only and not required by the
> build tools.
>  #
> -#  VALID_ARCHITECTURES           = IA32 X64 IPF
> +#  VALID_ARCHITECTURES           = IA32 X64
>  #
> 
>  [Sources]
> @@ -51,4 +51,4 @@
> 
>  [UserExtensions.TianoCore."ExtraFiles"]
>    CryptRuntimeDxeExtra.uni
> -
> \ No newline at end of file
> +
> diff --git a/CryptoPkg/CryptoPkg.dsc b/CryptoPkg/CryptoPkg.dsc
> index b49e587ba1..50878d68ef 100644
> --- a/CryptoPkg/CryptoPkg.dsc
> +++ b/CryptoPkg/CryptoPkg.dsc
> @@ -23,7 +23,7 @@
>    PLATFORM_VERSION               = 0.98
>    DSC_SPECIFICATION              = 0x00010005
>    OUTPUT_DIRECTORY               = Build/CryptoPkg
> -  SUPPORTED_ARCHITECTURES        = IA32|X64|IPF|ARM|AARCH64
> +  SUPPORTED_ARCHITECTURES        = IA32|X64|ARM|AARCH64
>    BUILD_TARGETS                  = DEBUG|RELEASE|NOOPT
>    SKUID_IDENTIFIER               = DEFAULT
> 
> @@ -130,8 +130,5 @@
>  [Components.IA32, Components.X64]
>    CryptoPkg/Library/BaseCryptLib/SmmCryptLib.inf
> 
> -[Components.IPF]
> -
> CryptoPkg/Library/BaseCryptLibRuntimeCryptProtocol/BaseCryptLibRuntime
> CryptProtocol.inf
> -
>  [BuildOptions]
>    *_*_*_CC_FLAGS = -D DISABLE_NEW_DEPRECATED_INTERFACES
> diff --git a/CryptoPkg/Library/BaseCryptLib/BaseCryptLib.inf
> b/CryptoPkg/Library/BaseCryptLib/BaseCryptLib.inf
> index bb91f899ff..489c962f03 100644
> --- a/CryptoPkg/Library/BaseCryptLib/BaseCryptLib.inf
> +++ b/CryptoPkg/Library/BaseCryptLib/BaseCryptLib.inf
> @@ -29,7 +29,7 @@
>  #
>  # The following information is for reference only and not required by the
> build tools.
>  #
> -#  VALID_ARCHITECTURES           = IA32 X64 IPF ARM AARCH64
> +#  VALID_ARCHITECTURES           = IA32 X64 ARM AARCH64
>  #
> 
>  [Sources]
> @@ -66,9 +66,6 @@
>  [Sources.X64]
>    Rand/CryptRandTsc.c
> 
> -[Sources.IPF]
> -  Rand/CryptRandItc.c
> -
>  [Sources.ARM]
>    Rand/CryptRand.c
> 
> diff --git a/CryptoPkg/Library/BaseCryptLib/RuntimeCryptLib.inf
> b/CryptoPkg/Library/BaseCryptLib/RuntimeCryptLib.inf
> index 05cd31674f..2616fb89e0 100644
> --- a/CryptoPkg/Library/BaseCryptLib/RuntimeCryptLib.inf
> +++ b/CryptoPkg/Library/BaseCryptLib/RuntimeCryptLib.inf
> @@ -35,7 +35,7 @@
>  #
>  # The following information is for reference only and not required by the
> build tools.
>  #
> -#  VALID_ARCHITECTURES           = IA32 X64 IPF ARM AARCH64
> +#  VALID_ARCHITECTURES           = IA32 X64 ARM AARCH64
>  #
> 
>  [Sources]
> @@ -71,9 +71,6 @@
>  [Sources.X64]
>    Rand/CryptRandTsc.c
> 
> -[Sources.IPF]
> -  Rand/CryptRandItc.c
> -
>  [Sources.ARM]
>    Rand/CryptRand.c
> 
> diff --git a/CryptoPkg/Library/BaseCryptLib/SmmCryptLib.inf
> b/CryptoPkg/Library/BaseCryptLib/SmmCryptLib.inf
> index 36552bc4f4..1d50df6c9a 100644
> --- a/CryptoPkg/Library/BaseCryptLib/SmmCryptLib.inf
> +++ b/CryptoPkg/Library/BaseCryptLib/SmmCryptLib.inf
> @@ -71,9 +71,6 @@
>  [Sources.X64]
>    Rand/CryptRandTsc.c
> 
> -[Sources.IPF]
> -  Rand/CryptRandItc.c
> -
>  [Sources.ARM]
>    Rand/CryptRand.c
> 
> diff --git
> a/CryptoPkg/Library/BaseCryptLibRuntimeCryptProtocol/BaseCryptLibRunti
> meCryptProtocol.inf
> b/CryptoPkg/Library/BaseCryptLibRuntimeCryptProtocol/BaseCryptLibRunti
> meCryptProtocol.inf
> deleted file mode 100644
> index 1e840a5d1e..0000000000
> ---
> a/CryptoPkg/Library/BaseCryptLibRuntimeCryptProtocol/BaseCryptLibRunti
> meCryptProtocol.inf
> +++ /dev/null
> @@ -1,76 +0,0 @@
> -## @file
> -#  Cryptographic Library Instance based on Runtime Crypt Protocol.
> -#  This instance will be only used by the Authenticated Variable driver for IPF.
> -#
> -#  Note: MD4/MD5/SHA1 Digest functions, HMAC-MD5 functions, HMAC-
> SHA1 functions,
> -#  AES/TDES/ARC4 functions, RSA external functions, PKCS#7 SignedData
> sign/verify
> -#  functions, Diffie-Hellman functions, X.509 certificate handler functions,
> -#  authenticode signature verification functions, PEM handler functions,
> -#  pseudorandom number generator functions, and Sha256Duplicate() are
> not supported
> -#  in this instance.
> -#
> -#  Copyright (c) 2010 - 2014, Intel Corporation. All rights reserved.<BR>
> -#  This program and the accompanying materials
> -#  are licensed and made available under the terms and conditions of the
> BSD License
> -#  which accompanies this distribution.  The full text of the license may be
> found at
> -#  http://opensource.org/licenses/bsd-license.php
> -#
> -#  THE PROGRAM IS DISTRIBUTED UNDER THE BSD LICENSE ON AN "AS IS"
> BASIS,
> -#  WITHOUT WARRANTIES OR REPRESENTATIONS OF ANY KIND, EITHER
> EXPRESS OR IMPLIED.
> -#
> -##
> -
> -[Defines]
> -  INF_VERSION                    = 0x00010005
> -  BASE_NAME                      = BaseCryptLibRuntimeCryptProtocol
> -  MODULE_UNI_FILE                = BaseCryptLibRuntimeCryptProtocol.uni
> -  FILE_GUID                      = BBB31581-855A-44D7-A550-8A585D9B2DE9
> -  MODULE_TYPE                    = DXE_RUNTIME_DRIVER
> -  VERSION_STRING                 = 1.0
> -  LIBRARY_CLASS                  = BaseCryptLib|DXE_RUNTIME_DRIVER
> DXE_SAL_DRIVER
> -  CONSTRUCTOR                    = RuntimeDxeIpfCryptLibConstructor
> -  DESTRUCTOR                     = RuntimeDxeIpfCryptLibDestructor
> -#
> -# The following information is for reference only and not required by the
> build tools.
> -#
> -#  VALID_ARCHITECTURES           = IPF
> -#
> -
> -[Sources]
> -  RuntimeDxeIpfCryptLib.c
> -  InternalCryptLib.h
> -  Hash/CryptMd4Null.c
> -  Hash/CryptMd5Null.c
> -  Hash/CryptSha1Null.c
> -  Hmac/CryptHmacMd5Null.c
> -  Hmac/CryptHmacSha1Null.c
> -  Cipher/CryptAesNull.c
> -  Cipher/CryptTdesNull.c
> -  Cipher/CryptArc4Null.c
> -  Pk/CryptRsaExtNull.c
> -  Pk/CryptPkcs7SignNull.c
> -  Pk/CryptPkcs7VerifyNull.c
> -  Pk/CryptDhNull.c
> -  Pk/CryptX509Null.c
> -  Pk/CryptAuthenticodeNull.c
> -  Pem/CryptPemNull.c
> -  Rand/CryptRandNull.c
> -
> -[Packages]
> -  MdePkg/MdePkg.dec
> -  CryptoPkg/CryptoPkg.dec
> -
> -[LibraryClasses]
> -  BaseLib
> -  DebugLib
> -  UefiBootServicesTableLib
> -  UefiRuntimeLib
> -
> -[Guids]
> -  gEfiEventVirtualAddressChangeGuid      ## CONSUMES ## Event
> -
> -[Protocols]
> -  gEfiRuntimeCryptProtocolGuid           ## CONSUMES
> -
> -[Depex]
> -  gEfiRuntimeCryptProtocolGuid
> diff --git
> a/CryptoPkg/Library/BaseCryptLibRuntimeCryptProtocol/Cipher/CryptAesNu
> ll.c
> b/CryptoPkg/Library/BaseCryptLibRuntimeCryptProtocol/Cipher/CryptAesN
> ull.c
> deleted file mode 100644
> index 074b07247b..0000000000
> ---
> a/CryptoPkg/Library/BaseCryptLibRuntimeCryptProtocol/Cipher/CryptAesNu
> ll.c
> +++ /dev/null
> @@ -1,165 +0,0 @@
> -/** @file
> -  AES Wrapper Implementation which does not provide real capabilities.
> -
> -Copyright (c) 2012, Intel Corporation. All rights reserved.<BR>
> -This program and the accompanying materials
> -are licensed and made available under the terms and conditions of the BSD
> License
> -which accompanies this distribution.  The full text of the license may be
> found at
> -http://opensource.org/licenses/bsd-license.php
> -
> -THE PROGRAM IS DISTRIBUTED UNDER THE BSD LICENSE ON AN "AS IS"
> BASIS,
> -WITHOUT WARRANTIES OR REPRESENTATIONS OF ANY KIND, EITHER
> EXPRESS OR IMPLIED.
> -
> -**/
> -
> -#include "InternalCryptLib.h"
> -
> -/**
> -  Retrieves the size, in bytes, of the context buffer required for AES
> operations.
> -
> -  Return zero to indicate this interface is not supported.
> -
> -  @retval  0   This interface is not supported.
> -
> -**/
> -UINTN
> -EFIAPI
> -AesGetContextSize (
> -  VOID
> -  )
> -{
> -  ASSERT (FALSE);
> -  return 0;
> -}
> -
> -/**
> -  Initializes user-supplied memory as AES context for subsequent use.
> -
> -  Return FALSE to indicate this interface is not supported.
> -
> -  @param[out]  AesContext  Pointer to AES context being initialized.
> -  @param[in]   Key         Pointer to the user-supplied AES key.
> -  @param[in]   KeyLength   Length of AES key in bits.
> -
> -  @retval FALSE  This interface is not supported.
> -
> -**/
> -BOOLEAN
> -EFIAPI
> -AesInit (
> -  OUT  VOID         *AesContext,
> -  IN   CONST UINT8  *Key,
> -  IN   UINTN        KeyLength
> -  )
> -{
> -  ASSERT (FALSE);
> -  return FALSE;
> -}
> -
> -/**
> -  Performs AES encryption on a data buffer of the specified size in ECB mode.
> -
> -  Return FALSE to indicate this interface is not supported.
> -
> -  @param[in]   AesContext  Pointer to the AES context.
> -  @param[in]   Input       Pointer to the buffer containing the data to be
> encrypted.
> -  @param[in]   InputSize   Size of the Input buffer in bytes.
> -  @param[out]  Output      Pointer to a buffer that receives the AES
> encryption output.
> -
> -  @retval FALSE  This interface is not supported.
> -
> -**/
> -BOOLEAN
> -EFIAPI
> -AesEcbEncrypt (
> -  IN   VOID         *AesContext,
> -  IN   CONST UINT8  *Input,
> -  IN   UINTN        InputSize,
> -  OUT  UINT8        *Output
> -  )
> -{
> -  ASSERT (FALSE);
> -  return FALSE;
> -}
> -
> -/**
> -  Performs AES decryption on a data buffer of the specified size in ECB mode.
> -
> -  Return FALSE to indicate this interface is not supported.
> -
> -  @param[in]   AesContext  Pointer to the AES context.
> -  @param[in]   Input       Pointer to the buffer containing the data to be
> decrypted.
> -  @param[in]   InputSize   Size of the Input buffer in bytes.
> -  @param[out]  Output      Pointer to a buffer that receives the AES
> decryption output.
> -
> -  @retval FALSE  This interface is not supported.
> -
> -**/
> -BOOLEAN
> -EFIAPI
> -AesEcbDecrypt (
> -  IN   VOID         *AesContext,
> -  IN   CONST UINT8  *Input,
> -  IN   UINTN        InputSize,
> -  OUT  UINT8        *Output
> -  )
> -{
> -  ASSERT (FALSE);
> -  return FALSE;
> -}
> -
> -/**
> -  Performs AES encryption on a data buffer of the specified size in CBC mode.
> -
> -  Return FALSE to indicate this interface is not supported.
> -
> -  @param[in]   AesContext  Pointer to the AES context.
> -  @param[in]   Input       Pointer to the buffer containing the data to be
> encrypted.
> -  @param[in]   InputSize   Size of the Input buffer in bytes.
> -  @param[in]   Ivec        Pointer to initialization vector.
> -  @param[out]  Output      Pointer to a buffer that receives the AES
> encryption output.
> -
> -  @retval FALSE  This interface is not supported.
> -
> -**/
> -BOOLEAN
> -EFIAPI
> -AesCbcEncrypt (
> -  IN   VOID         *AesContext,
> -  IN   CONST UINT8  *Input,
> -  IN   UINTN        InputSize,
> -  IN   CONST UINT8  *Ivec,
> -  OUT  UINT8        *Output
> -  )
> -{
> -  ASSERT (FALSE);
> -  return FALSE;
> -}
> -
> -/**
> -  Performs AES decryption on a data buffer of the specified size in CBC mode.
> -
> -  Return FALSE to indicate this interface is not supported.
> -
> -  @param[in]   AesContext  Pointer to the AES context.
> -  @param[in]   Input       Pointer to the buffer containing the data to be
> encrypted.
> -  @param[in]   InputSize   Size of the Input buffer in bytes.
> -  @param[in]   Ivec        Pointer to initialization vector.
> -  @param[out]  Output      Pointer to a buffer that receives the AES
> encryption output.
> -
> -  @retval FALSE  This interface is not supported.
> -
> -**/
> -BOOLEAN
> -EFIAPI
> -AesCbcDecrypt (
> -  IN   VOID         *AesContext,
> -  IN   CONST UINT8  *Input,
> -  IN   UINTN        InputSize,
> -  IN   CONST UINT8  *Ivec,
> -  OUT  UINT8        *Output
> -  )
> -{
> -  ASSERT (FALSE);
> -  return FALSE;
> -}
> diff --git
> a/CryptoPkg/Library/BaseCryptLibRuntimeCryptProtocol/Cipher/CryptArc4N
> ull.c
> b/CryptoPkg/Library/BaseCryptLibRuntimeCryptProtocol/Cipher/CryptArc4N
> ull.c
> deleted file mode 100644
> index 1275e20f89..0000000000
> ---
> a/CryptoPkg/Library/BaseCryptLibRuntimeCryptProtocol/Cipher/CryptArc4N
> ull.c
> +++ /dev/null
> @@ -1,130 +0,0 @@
> -/** @file
> -  ARC4 Wrapper Implementation which does not provide real capabilities.
> -
> -Copyright (c) 2012, Intel Corporation. All rights reserved.<BR>
> -This program and the accompanying materials
> -are licensed and made available under the terms and conditions of the BSD
> License
> -which accompanies this distribution.  The full text of the license may be
> found at
> -http://opensource.org/licenses/bsd-license.php
> -
> -THE PROGRAM IS DISTRIBUTED UNDER THE BSD LICENSE ON AN "AS IS"
> BASIS,
> -WITHOUT WARRANTIES OR REPRESENTATIONS OF ANY KIND, EITHER
> EXPRESS OR IMPLIED.
> -
> -**/
> -
> -#include "InternalCryptLib.h"
> -
> -/**
> -  Retrieves the size, in bytes, of the context buffer required for ARC4
> operations.
> -
> -  Return zero to indicate this interface is not supported.
> -
> -  @retval  0   This interface is not supported.
> -
> -
> -**/
> -UINTN
> -EFIAPI
> -Arc4GetContextSize (
> -  VOID
> -  )
> -{
> -  ASSERT (FALSE);
> -  return 0;
> -}
> -
> -/**
> -  Initializes user-supplied memory as ARC4 context for subsequent use.
> -
> -  Return FALSE to indicate this interface is not supported.
> -
> -  @param[out]  Arc4Context  Pointer to ARC4 context being initialized.
> -  @param[in]   Key          Pointer to the user-supplied ARC4 key.
> -  @param[in]   KeySize      Size of ARC4 key in bytes.
> -
> -  @retval FALSE  This interface is not supported.
> -
> -**/
> -BOOLEAN
> -EFIAPI
> -Arc4Init (
> -  OUT  VOID         *Arc4Context,
> -  IN   CONST UINT8  *Key,
> -  IN   UINTN        KeySize
> -  )
> -{
> -  ASSERT (FALSE);
> -  return FALSE;
> -}
> -
> -/**
> -  Performs ARC4 encryption on a data buffer of the specified size.
> -
> -  Return FALSE to indicate this interface is not supported.
> -
> -  @param[in, out]  Arc4Context  Pointer to the ARC4 context.
> -  @param[in]       Input        Pointer to the buffer containing the data to be
> encrypted.
> -  @param[in]       InputSize    Size of the Input buffer in bytes.
> -  @param[out]      Output       Pointer to a buffer that receives the ARC4
> encryption output.
> -
> -  @retval FALSE  This interface is not supported.
> -
> -**/
> -BOOLEAN
> -EFIAPI
> -Arc4Encrypt (
> -  IN OUT  VOID         *Arc4Context,
> -  IN      CONST UINT8  *Input,
> -  IN      UINTN        InputSize,
> -  OUT     UINT8        *Output
> -  )
> -{
> -  ASSERT (FALSE);
> -  return FALSE;
> -}
> -
> -/**
> -  Performs ARC4 decryption on a data buffer of the specified size.
> -
> -  Return FALSE to indicate this interface is not supported.
> -
> -  @param[in, out]  Arc4Context  Pointer to the ARC4 context.
> -  @param[in]       Input        Pointer to the buffer containing the data to be
> decrypted.
> -  @param[in]       InputSize    Size of the Input buffer in bytes.
> -  @param[out]      Output       Pointer to a buffer that receives the ARC4
> decryption output.
> -
> -  @retval FALSE  This interface is not supported.
> -
> -**/
> -BOOLEAN
> -EFIAPI
> -Arc4Decrypt (
> -  IN OUT  VOID   *Arc4Context,
> -  IN      UINT8  *Input,
> -  IN      UINTN  InputSize,
> -  OUT     UINT8  *Output
> -  )
> -{
> -  ASSERT (FALSE);
> -  return FALSE;
> -}
> -
> -/**
> -  Resets the ARC4 context to the initial state.
> -
> -  Return FALSE to indicate this interface is not supported.
> -
> -  @param[in, out]  Arc4Context  Pointer to the ARC4 context.
> -
> -  @retval FALSE  This interface is not supported.
> -
> -**/
> -BOOLEAN
> -EFIAPI
> -Arc4Reset (
> -  IN OUT  VOID  *Arc4Context
> -  )
> -{
> -  ASSERT (FALSE);
> -  return FALSE;
> -}
> diff --git
> a/CryptoPkg/Library/BaseCryptLibRuntimeCryptProtocol/Cipher/CryptTdesN
> ull.c
> b/CryptoPkg/Library/BaseCryptLibRuntimeCryptProtocol/Cipher/CryptTdesN
> ull.c
> deleted file mode 100644
> index cec33b6275..0000000000
> ---
> a/CryptoPkg/Library/BaseCryptLibRuntimeCryptProtocol/Cipher/CryptTdesN
> ull.c
> +++ /dev/null
> @@ -1,166 +0,0 @@
> -/** @file
> -  TDES Wrapper Implementation which does not provide real capabilities.
> -
> -Copyright (c) 2012, Intel Corporation. All rights reserved.<BR>
> -This program and the accompanying materials
> -are licensed and made available under the terms and conditions of the BSD
> License
> -which accompanies this distribution.  The full text of the license may be
> found at
> -http://opensource.org/licenses/bsd-license.php
> -
> -THE PROGRAM IS DISTRIBUTED UNDER THE BSD LICENSE ON AN "AS IS"
> BASIS,
> -WITHOUT WARRANTIES OR REPRESENTATIONS OF ANY KIND, EITHER
> EXPRESS OR IMPLIED.
> -
> -**/
> -
> -#include "InternalCryptLib.h"
> -
> -/**
> -  Retrieves the size, in bytes, of the context buffer required for TDES
> operations.
> -
> -  Return zero to indicate this interface is not supported.
> -
> -  @retval  0   This interface is not supported.
> -
> -**/
> -UINTN
> -EFIAPI
> -TdesGetContextSize (
> -  VOID
> -  )
> -{
> -  ASSERT (FALSE);
> -  return 0;
> -}
> -
> -/**
> -  Initializes user-supplied memory as TDES context for subsequent use.
> -
> -  Return FALSE to indicate this interface is not supported.
> -
> -  @param[out]  TdesContext  Pointer to TDES context being initialized.
> -  @param[in]   Key          Pointer to the user-supplied TDES key.
> -  @param[in]   KeyLength    Length of TDES key in bits.
> -
> -  @retval FALSE  This interface is not supported.
> -
> -**/
> -BOOLEAN
> -EFIAPI
> -TdesInit (
> -  OUT  VOID         *TdesContext,
> -  IN   CONST UINT8  *Key,
> -  IN   UINTN        KeyLength
> -  )
> -{
> -  ASSERT (FALSE);
> -  return FALSE;
> -}
> -
> -/**
> -  Performs TDES encryption on a data buffer of the specified size in ECB
> mode.
> -
> -  Return FALSE to indicate this interface is not supported.
> -
> -  @param[in]   TdesContext  Pointer to the TDES context.
> -  @param[in]   Input        Pointer to the buffer containing the data to be
> encrypted.
> -  @param[in]   InputSize    Size of the Input buffer in bytes.
> -  @param[out]  Output       Pointer to a buffer that receives the TDES
> encryption output.
> -
> -  @retval FALSE  This interface is not supported.
> -
> -**/
> -BOOLEAN
> -EFIAPI
> -TdesEcbEncrypt (
> -  IN   VOID         *TdesContext,
> -  IN   CONST UINT8  *Input,
> -  IN   UINTN        InputSize,
> -  OUT  UINT8        *Output
> -  )
> -{
> -  ASSERT (FALSE);
> -  return FALSE;
> -}
> -
> -/**
> -  Performs TDES decryption on a data buffer of the specified size in ECB
> mode.
> -
> -  Return FALSE to indicate this interface is not supported.
> -
> -  @param[in]   TdesContext  Pointer to the TDES context.
> -  @param[in]   Input        Pointer to the buffer containing the data to be
> decrypted.
> -  @param[in]   InputSize    Size of the Input buffer in bytes.
> -  @param[out]  Output       Pointer to a buffer that receives the TDES
> decryption output.
> -
> -  @retval FALSE  This interface is not supported.
> -
> -**/
> -BOOLEAN
> -EFIAPI
> -TdesEcbDecrypt (
> -  IN   VOID         *TdesContext,
> -  IN   CONST UINT8  *Input,
> -  IN   UINTN        InputSize,
> -  OUT  UINT8        *Output
> -  )
> -{
> -  ASSERT (FALSE);
> -  return FALSE;
> -}
> -
> -/**
> -  Performs TDES encryption on a data buffer of the specified size in CBC
> mode.
> -
> -  Return FALSE to indicate this interface is not supported.
> -
> -  @param[in]   TdesContext  Pointer to the TDES context.
> -  @param[in]   Input        Pointer to the buffer containing the data to be
> encrypted.
> -  @param[in]   InputSize    Size of the Input buffer in bytes.
> -  @param[in]   Ivec         Pointer to initialization vector.
> -  @param[out]  Output       Pointer to a buffer that receives the TDES
> encryption output.
> -
> -  @retval FALSE  This interface is not supported.
> -
> -**/
> -BOOLEAN
> -EFIAPI
> -TdesCbcEncrypt (
> -  IN   VOID         *TdesContext,
> -  IN   CONST UINT8  *Input,
> -  IN   UINTN        InputSize,
> -  IN   CONST UINT8  *Ivec,
> -  OUT  UINT8        *Output
> -  )
> -{
> -  ASSERT (FALSE);
> -  return FALSE;
> -}
> -
> -/**
> -  Performs TDES decryption on a data buffer of the specified size in CBC
> mode.
> -
> -  Return FALSE to indicate this interface is not supported.
> -
> -  @param[in]   TdesContext  Pointer to the TDES context.
> -  @param[in]   Input        Pointer to the buffer containing the data to be
> encrypted.
> -  @param[in]   InputSize    Size of the Input buffer in bytes.
> -  @param[in]   Ivec         Pointer to initialization vector.
> -  @param[out]  Output       Pointer to a buffer that receives the TDES
> encryption output.
> -
> -  @retval FALSE  This interface is not supported.
> -
> -**/
> -BOOLEAN
> -EFIAPI
> -TdesCbcDecrypt (
> -  IN   VOID         *TdesContext,
> -  IN   CONST UINT8  *Input,
> -  IN   UINTN        InputSize,
> -  IN   CONST UINT8  *Ivec,
> -  OUT  UINT8        *Output
> -  )
> -{
> -  ASSERT (FALSE);
> -  return FALSE;
> -}
> -
> diff --git
> a/CryptoPkg/Library/BaseCryptLibRuntimeCryptProtocol/Hash/CryptMd4Nul
> l.c
> b/CryptoPkg/Library/BaseCryptLibRuntimeCryptProtocol/Hash/CryptMd4Nul
> l.c
> deleted file mode 100644
> index fc634fd163..0000000000
> ---
> a/CryptoPkg/Library/BaseCryptLibRuntimeCryptProtocol/Hash/CryptMd4Nul
> l.c
> +++ /dev/null
> @@ -1,124 +0,0 @@
> -/** @file
> -  MD4 Digest Wrapper Implementation which does not provide real
> capabilities.
> -
> -Copyright (c) 2012, Intel Corporation. All rights reserved.<BR>
> -This program and the accompanying materials
> -are licensed and made available under the terms and conditions of the BSD
> License
> -which accompanies this distribution.  The full text of the license may be
> found at
> -http://opensource.org/licenses/bsd-license.php
> -
> -THE PROGRAM IS DISTRIBUTED UNDER THE BSD LICENSE ON AN "AS IS"
> BASIS,
> -WITHOUT WARRANTIES OR REPRESENTATIONS OF ANY KIND, EITHER
> EXPRESS OR IMPLIED.
> -
> -**/
> -
> -#include "InternalCryptLib.h"
> -
> -/**
> -  Retrieves the size, in bytes, of the context buffer required for MD4 hash
> -  operations.
> -
> -  Return zero to indicate this interface is not supported.
> -
> -  @retval  0   This interface is not supported.
> -
> -**/
> -UINTN
> -EFIAPI
> -Md4GetContextSize (
> -  VOID
> -  )
> -{
> -  ASSERT (FALSE);
> -  return 0;
> -}
> -
> -/**
> -  Initializes user-supplied memory pointed by Md4Context as MD4 hash
> context for
> -  subsequent use.
> -
> -  Return FALSE to indicate this interface is not supported.
> -
> -  @param[out]  Md4Context  Pointer to MD4 context being initialized.
> -
> -  @retval FALSE  This interface is not supported.
> -
> -**/
> -BOOLEAN
> -EFIAPI
> -Md4Init (
> -  OUT  VOID  *Md4Context
> -  )
> -{
> -  ASSERT (FALSE);
> -  return FALSE;
> -}
> -
> -/**
> -  Makes a copy of an existing MD4 context.
> -
> -  Return FALSE to indicate this interface is not supported.
> -
> -  @param[in]  Md4Context     Pointer to MD4 context being copied.
> -  @param[out] NewMd4Context  Pointer to new MD4 context.
> -
> -  @retval FALSE  This interface is not supported.
> -
> -**/
> -BOOLEAN
> -EFIAPI
> -Md4Duplicate (
> -  IN   CONST VOID  *Md4Context,
> -  OUT  VOID        *NewMd4Context
> -  )
> -{
> -  ASSERT (FALSE);
> -  return FALSE;
> -}
> -
> -/**
> -  Digests the input data and updates MD4 context.
> -
> -  Return FALSE to indicate this interface is not supported.
> -
> -  @param[in, out]  Md4Context  Pointer to the MD4 context.
> -  @param[in]       Data        Pointer to the buffer containing the data to be
> hashed.
> -  @param[in]       DataSize    Size of Data buffer in bytes.
> -
> -  @retval FALSE  This interface is not supported.
> -
> -**/
> -BOOLEAN
> -EFIAPI
> -Md4Update (
> -  IN OUT  VOID        *Md4Context,
> -  IN      CONST VOID  *Data,
> -  IN      UINTN       DataSize
> -  )
> -{
> -  ASSERT (FALSE);
> -  return FALSE;
> -}
> -
> -/**
> -  Completes computation of the MD4 digest value.
> -
> -  Return FALSE to indicate this interface is not supported.
> -
> -  @param[in, out]  Md4Context  Pointer to the MD4 context.
> -  @param[out]      HashValue   Pointer to a buffer that receives the MD4
> digest
> -                               value (16 bytes).
> -
> -  @retval FALSE  This interface is not supported.
> -
> -**/
> -BOOLEAN
> -EFIAPI
> -Md4Final (
> -  IN OUT  VOID   *Md4Context,
> -  OUT     UINT8  *HashValue
> -  )
> -{
> -  ASSERT (FALSE);
> -  return FALSE;
> -}
> diff --git
> a/CryptoPkg/Library/BaseCryptLibRuntimeCryptProtocol/Hash/CryptMd5Nul
> l.c
> b/CryptoPkg/Library/BaseCryptLibRuntimeCryptProtocol/Hash/CryptMd5Nul
> l.c
> deleted file mode 100644
> index b9283d1746..0000000000
> ---
> a/CryptoPkg/Library/BaseCryptLibRuntimeCryptProtocol/Hash/CryptMd5Nul
> l.c
> +++ /dev/null
> @@ -1,125 +0,0 @@
> -/** @file
> -  MD5 Digest Wrapper Implementation which does not provide real
> capabilities.
> -
> -Copyright (c) 2012, Intel Corporation. All rights reserved.<BR>
> -This program and the accompanying materials
> -are licensed and made available under the terms and conditions of the BSD
> License
> -which accompanies this distribution.  The full text of the license may be
> found at
> -http://opensource.org/licenses/bsd-license.php
> -
> -THE PROGRAM IS DISTRIBUTED UNDER THE BSD LICENSE ON AN "AS IS"
> BASIS,
> -WITHOUT WARRANTIES OR REPRESENTATIONS OF ANY KIND, EITHER
> EXPRESS OR IMPLIED.
> -
> -**/
> -
> -#include "InternalCryptLib.h"
> -
> -
> -/**
> -  Retrieves the size, in bytes, of the context buffer required for MD5 hash
> operations.
> -
> -  Return zero to indicate this interface is not supported.
> -
> -  @retval  0   This interface is not supported.
> -
> -**/
> -UINTN
> -EFIAPI
> -Md5GetContextSize (
> -  VOID
> -  )
> -{
> -  ASSERT (FALSE);
> -  return 0;
> -}
> -
> -
> -/**
> -  Initializes user-supplied memory pointed by Md5Context as MD5 hash
> context for
> -  subsequent use.
> -
> -  Return FALSE to indicate this interface is not supported.
> -
> -  @param[out]  Md5Context  Pointer to MD5 context being initialized.
> -
> -  @retval FALSE  This interface is not supported.
> -
> -**/
> -BOOLEAN
> -EFIAPI
> -Md5Init (
> -  OUT  VOID  *Md5Context
> -  )
> -{
> -  ASSERT (FALSE);
> -  return FALSE;
> -}
> -
> -/**
> -  Makes a copy of an existing MD5 context.
> -
> -  Return FALSE to indicate this interface is not supported.
> -
> -  @param[in]  Md5Context     Pointer to MD5 context being copied.
> -  @param[out] NewMd5Context  Pointer to new MD5 context.
> -
> -  @retval FALSE  This interface is not supported.
> -
> -**/
> -BOOLEAN
> -EFIAPI
> -Md5Duplicate (
> -  IN   CONST VOID  *Md5Context,
> -  OUT  VOID        *NewMd5Context
> -  )
> -{
> -  ASSERT (FALSE);
> -  return FALSE;
> -}
> -
> -/**
> -  Digests the input data and updates MD5 context.
> -
> -  Return FALSE to indicate this interface is not supported.
> -
> -  @param[in, out]  Md5Context  Pointer to the MD5 context.
> -  @param[in]       Data        Pointer to the buffer containing the data to be
> hashed.
> -  @param[in]       DataSize    Size of Data buffer in bytes.
> -
> -  @retval FALSE  This interface is not supported.
> -
> -**/
> -BOOLEAN
> -EFIAPI
> -Md5Update (
> -  IN OUT  VOID        *Md5Context,
> -  IN      CONST VOID  *Data,
> -  IN      UINTN       DataSize
> -  )
> -{
> -  ASSERT (FALSE);
> -  return FALSE;
> -}
> -
> -/**
> -  Completes computation of the MD5 digest value.
> -
> -  Return FALSE to indicate this interface is not supported.
> -
> -  @param[in, out]  Md5Context  Pointer to the MD5 context.
> -  @param[out]      HashValue   Pointer to a buffer that receives the MD5
> digest
> -                               value (16 bytes).
> -
> -  @retval FALSE  This interface is not supported.
> -
> -**/
> -BOOLEAN
> -EFIAPI
> -Md5Final (
> -  IN OUT  VOID   *Md5Context,
> -  OUT     UINT8  *HashValue
> -  )
> -{
> -  ASSERT (FALSE);
> -  return FALSE;
> -}
> diff --git
> a/CryptoPkg/Library/BaseCryptLibRuntimeCryptProtocol/Hash/CryptSha1Nul
> l.c
> b/CryptoPkg/Library/BaseCryptLibRuntimeCryptProtocol/Hash/CryptSha1Nul
> l.c
> deleted file mode 100644
> index 7054365e80..0000000000
> ---
> a/CryptoPkg/Library/BaseCryptLibRuntimeCryptProtocol/Hash/CryptSha1Nul
> l.c
> +++ /dev/null
> @@ -1,125 +0,0 @@
> -/** @file
> -  SHA-1 Digest Wrapper Implementation which does not provide real
> capabilities.
> -
> -Copyright (c) 2012, Intel Corporation. All rights reserved.<BR>
> -This program and the accompanying materials
> -are licensed and made available under the terms and conditions of the BSD
> License
> -which accompanies this distribution.  The full text of the license may be
> found at
> -http://opensource.org/licenses/bsd-license.php
> -
> -THE PROGRAM IS DISTRIBUTED UNDER THE BSD LICENSE ON AN "AS IS"
> BASIS,
> -WITHOUT WARRANTIES OR REPRESENTATIONS OF ANY KIND, EITHER
> EXPRESS OR IMPLIED.
> -
> -**/
> -
> -#include "InternalCryptLib.h"
> -
> -
> -/**
> -  Retrieves the size, in bytes, of the context buffer required for SHA-1 hash
> operations.
> -
> -  Return zero to indicate this interface is not supported.
> -
> -  @return  The size, in bytes, of the context buffer required for SHA-1 hash
> operations.
> -  @retval  0   This interface is not supported.
> -
> -**/
> -UINTN
> -EFIAPI
> -Sha1GetContextSize (
> -  VOID
> -  )
> -{
> -  ASSERT (FALSE);
> -  return 0;
> -}
> -
> -/**
> -  Initializes user-supplied memory pointed by Sha1Context as SHA-1 hash
> context for
> -  subsequent use.
> -
> -  Return FALSE to indicate this interface is not supported.
> -
> -  @param[out]  Sha1Context  Pointer to SHA-1 context being initialized.
> -
> -  @retval FALSE  This interface is not supported.
> -
> -**/
> -BOOLEAN
> -EFIAPI
> -Sha1Init (
> -  OUT  VOID  *Sha1Context
> -  )
> -{
> -  ASSERT (FALSE);
> -  return FALSE;
> -}
> -
> -/**
> -  Makes a copy of an existing SHA-1 context.
> -
> -  Return FALSE to indicate this interface is not supported.
> -
> -  @param[in]  Sha1Context     Pointer to SHA-1 context being copied.
> -  @param[out] NewSha1Context  Pointer to new SHA-1 context.
> -
> -  @retval FALSE  This interface is not supported.
> -
> -**/
> -BOOLEAN
> -EFIAPI
> -Sha1Duplicate (
> -  IN   CONST VOID  *Sha1Context,
> -  OUT  VOID        *NewSha1Context
> -  )
> -{
> -  ASSERT (FALSE);
> -  return FALSE;
> -}
> -
> -/**
> -  Digests the input data and updates SHA-1 context.
> -
> -  Return FALSE to indicate this interface is not supported.
> -
> -  @param[in, out]  Sha1Context  Pointer to the SHA-1 context.
> -  @param[in]       Data         Pointer to the buffer containing the data to be
> hashed.
> -  @param[in]       DataSize     Size of Data buffer in bytes.
> -
> -  @retval FALSE  This interface is not supported.
> -
> -**/
> -BOOLEAN
> -EFIAPI
> -Sha1Update (
> -  IN OUT  VOID        *Sha1Context,
> -  IN      CONST VOID  *Data,
> -  IN      UINTN       DataSize
> -  )
> -{
> -  ASSERT (FALSE);
> -  return FALSE;
> -}
> -
> -/**
> -  Completes computation of the SHA-1 digest value.
> -
> -  Return FALSE to indicate this interface is not supported.
> -
> -  @param[in, out]  Sha1Context  Pointer to the SHA-1 context.
> -  @param[out]      HashValue    Pointer to a buffer that receives the SHA-1
> digest
> -                                value (20 bytes).
> -
> -  @retval FALSE  This interface is not supported.
> -
> -**/
> -BOOLEAN
> -EFIAPI
> -Sha1Final (
> -  IN OUT  VOID   *Sha1Context,
> -  OUT     UINT8  *HashValue
> -  )
> -{
> -  ASSERT (FALSE);
> -  return FALSE;
> -}
> diff --git
> a/CryptoPkg/Library/BaseCryptLibRuntimeCryptProtocol/Hmac/CryptHmacM
> d5Null.c
> b/CryptoPkg/Library/BaseCryptLibRuntimeCryptProtocol/Hmac/CryptHmac
> Md5Null.c
> deleted file mode 100644
> index b4bdde0433..0000000000
> ---
> a/CryptoPkg/Library/BaseCryptLibRuntimeCryptProtocol/Hmac/CryptHmacM
> d5Null.c
> +++ /dev/null
> @@ -1,127 +0,0 @@
> -/** @file
> -  HMAC-MD5 Wrapper Implementation which does not provide real
> capabilities.
> -
> -Copyright (c) 2012, Intel Corporation. All rights reserved.<BR>
> -This program and the accompanying materials
> -are licensed and made available under the terms and conditions of the BSD
> License
> -which accompanies this distribution.  The full text of the license may be
> found at
> -http://opensource.org/licenses/bsd-license.php
> -
> -THE PROGRAM IS DISTRIBUTED UNDER THE BSD LICENSE ON AN "AS IS"
> BASIS,
> -WITHOUT WARRANTIES OR REPRESENTATIONS OF ANY KIND, EITHER
> EXPRESS OR IMPLIED.
> -
> -**/
> -
> -#include "InternalCryptLib.h"
> -
> -/**
> -  Retrieves the size, in bytes, of the context buffer required for HMAC-MD5
> operations.
> -
> -  Return zero to indicate this interface is not supported.
> -
> -  @retval  0   This interface is not supported.
> -
> -**/
> -UINTN
> -EFIAPI
> -HmacMd5GetContextSize (
> -  VOID
> -  )
> -{
> -  ASSERT (FALSE);
> -  return 0;
> -}
> -
> -/**
> -  Initializes user-supplied memory pointed by HmacMd5Context as HMAC-
> MD5 context for
> -  subsequent use.
> -
> -  Return FALSE to indicate this interface is not supported.
> -
> -  @param[out]  HmacMd5Context  Pointer to HMAC-MD5 context being
> initialized.
> -  @param[in]   Key             Pointer to the user-supplied key.
> -  @param[in]   KeySize         Key size in bytes.
> -
> -  @retval FALSE  This interface is not supported.
> -
> -**/
> -BOOLEAN
> -EFIAPI
> -HmacMd5Init (
> -  OUT  VOID         *HmacMd5Context,
> -  IN   CONST UINT8  *Key,
> -  IN   UINTN        KeySize
> -  )
> -{
> -  ASSERT (FALSE);
> -  return FALSE;
> -}
> -
> -/**
> -  Makes a copy of an existing HMAC-MD5 context.
> -
> -  Return FALSE to indicate this interface is not supported.
> -
> -  @param[in]  HmacMd5Context     Pointer to HMAC-MD5 context being
> copied.
> -  @param[out] NewHmacMd5Context  Pointer to new HMAC-MD5 context.
> -
> -  @retval FALSE  This interface is not supported.
> -
> -**/
> -BOOLEAN
> -EFIAPI
> -HmacMd5Duplicate (
> -  IN   CONST VOID  *HmacMd5Context,
> -  OUT  VOID        *NewHmacMd5Context
> -  )
> -{
> -  ASSERT (FALSE);
> -  return FALSE;
> -}
> -
> -/**
> -  Digests the input data and updates HMAC-MD5 context.
> -
> -  Return FALSE to indicate this interface is not supported.
> -
> -  @param[in, out]  HmacMd5Context  Pointer to the HMAC-MD5 context.
> -  @param[in]       Data            Pointer to the buffer containing the data to be
> digested.
> -  @param[in]       DataSize        Size of Data buffer in bytes.
> -
> -  @retval FALSE  This interface is not supported.
> -
> -**/
> -BOOLEAN
> -EFIAPI
> -HmacMd5Update (
> -  IN OUT  VOID        *HmacMd5Context,
> -  IN      CONST VOID  *Data,
> -  IN      UINTN       DataSize
> -  )
> -{
> -  ASSERT (FALSE);
> -  return FALSE;
> -}
> -
> -/**
> -  Completes computation of the HMAC-MD5 digest value.
> -
> -  Return FALSE to indicate this interface is not supported.
> -
> -  @param[in, out]  HmacMd5Context  Pointer to the HMAC-MD5 context.
> -  @param[out]      HmacValue       Pointer to a buffer that receives the HMAC-
> MD5 digest
> -                                   value (16 bytes).
> -
> -  @retval FALSE  This interface is not supported.
> -
> -**/
> -BOOLEAN
> -EFIAPI
> -HmacMd5Final (
> -  IN OUT  VOID   *HmacMd5Context,
> -  OUT     UINT8  *HmacValue
> -  )
> -{
> -  ASSERT (FALSE);
> -  return FALSE;
> -}
> diff --git
> a/CryptoPkg/Library/BaseCryptLibRuntimeCryptProtocol/Hmac/CryptHmacS
> ha1Null.c
> b/CryptoPkg/Library/BaseCryptLibRuntimeCryptProtocol/Hmac/CryptHmacS
> ha1Null.c
> deleted file mode 100644
> index b31d0d1402..0000000000
> ---
> a/CryptoPkg/Library/BaseCryptLibRuntimeCryptProtocol/Hmac/CryptHmacS
> ha1Null.c
> +++ /dev/null
> @@ -1,127 +0,0 @@
> -/** @file
> -  HMAC-SHA1 Wrapper Implementation which does not provide real
> capabilities.
> -
> -Copyright (c) 2012, Intel Corporation. All rights reserved.<BR>
> -This program and the accompanying materials
> -are licensed and made available under the terms and conditions of the BSD
> License
> -which accompanies this distribution.  The full text of the license may be
> found at
> -http://opensource.org/licenses/bsd-license.php
> -
> -THE PROGRAM IS DISTRIBUTED UNDER THE BSD LICENSE ON AN "AS IS"
> BASIS,
> -WITHOUT WARRANTIES OR REPRESENTATIONS OF ANY KIND, EITHER
> EXPRESS OR IMPLIED.
> -
> -**/
> -
> -#include "InternalCryptLib.h"
> -
> -/**
> -  Retrieves the size, in bytes, of the context buffer required for HMAC-SHA1
> operations.
> -
> -  Return zero to indicate this interface is not supported.
> -
> -  @retval  0   This interface is not supported.
> -
> -**/
> -UINTN
> -EFIAPI
> -HmacSha1GetContextSize (
> -  VOID
> -  )
> -{
> -  ASSERT (FALSE);
> -  return 0;
> -}
> -
> -/**
> -  Initializes user-supplied memory pointed by HmacSha1Context as HMAC-
> SHA1 context for
> -  subsequent use.
> -
> -  Return FALSE to indicate this interface is not supported.
> -
> -  @param[out]  HmacSha1Context  Pointer to HMAC-SHA1 context being
> initialized.
> -  @param[in]   Key              Pointer to the user-supplied key.
> -  @param[in]   KeySize          Key size in bytes.
> -
> -  @retval FALSE  This interface is not supported.
> -
> -**/
> -BOOLEAN
> -EFIAPI
> -HmacSha1Init (
> -  OUT  VOID         *HmacSha1Context,
> -  IN   CONST UINT8  *Key,
> -  IN   UINTN        KeySize
> -  )
> -{
> -  ASSERT (FALSE);
> -  return FALSE;
> -}
> -
> -/**
> -  Makes a copy of an existing HMAC-SHA1 context.
> -
> -  Return FALSE to indicate this interface is not supported.
> -
> -  @param[in]  HmacSha1Context     Pointer to HMAC-SHA1 context being
> copied.
> -  @param[out] NewHmacSha1Context  Pointer to new HMAC-SHA1 context.
> -
> -  @retval FALSE  This interface is not supported.
> -
> -**/
> -BOOLEAN
> -EFIAPI
> -HmacSha1Duplicate (
> -  IN   CONST VOID  *HmacSha1Context,
> -  OUT  VOID        *NewHmacSha1Context
> -  )
> -{
> -  ASSERT (FALSE);
> -  return FALSE;
> -}
> -
> -/**
> -  Digests the input data and updates HMAC-SHA1 context.
> -
> -  Return FALSE to indicate this interface is not supported.
> -
> -  @param[in, out]  HmacSha1Context Pointer to the HMAC-SHA1 context.
> -  @param[in]       Data            Pointer to the buffer containing the data to be
> digested.
> -  @param[in]       DataSize        Size of Data buffer in bytes.
> -
> -  @retval FALSE  This interface is not supported.
> -
> -**/
> -BOOLEAN
> -EFIAPI
> -HmacSha1Update (
> -  IN OUT  VOID        *HmacSha1Context,
> -  IN      CONST VOID  *Data,
> -  IN      UINTN       DataSize
> -  )
> -{
> -  ASSERT (FALSE);
> -  return FALSE;
> -}
> -
> -/**
> -  Completes computation of the HMAC-SHA1 digest value.
> -
> -  Return FALSE to indicate this interface is not supported.
> -
> -  @param[in, out]  HmacSha1Context  Pointer to the HMAC-SHA1 context.
> -  @param[out]      HmacValue        Pointer to a buffer that receives the
> HMAC-SHA1 digest
> -                                    value (20 bytes).
> -
> -  @retval FALSE  This interface is not supported.
> -
> -**/
> -BOOLEAN
> -EFIAPI
> -HmacSha1Final (
> -  IN OUT  VOID   *HmacSha1Context,
> -  OUT     UINT8  *HmacValue
> -  )
> -{
> -  ASSERT (FALSE);
> -  return FALSE;
> -}
> diff --git
> a/CryptoPkg/Library/BaseCryptLibRuntimeCryptProtocol/InternalCryptLib.h
> b/CryptoPkg/Library/BaseCryptLibRuntimeCryptProtocol/InternalCryptLib.h
> deleted file mode 100644
> index 24c767ced6..0000000000
> ---
> a/CryptoPkg/Library/BaseCryptLibRuntimeCryptProtocol/InternalCryptLib.h
> +++ /dev/null
> @@ -1,23 +0,0 @@
> -/** @file
> -  Internal include file for BaseCryptLibRuntimeCryptProtocol.
> -
> -Copyright (c) 2012 - 2015, Intel Corporation. All rights reserved.<BR>
> -This program and the accompanying materials
> -are licensed and made available under the terms and conditions of the BSD
> License
> -which accompanies this distribution.  The full text of the license may be
> found at
> -http://opensource.org/licenses/bsd-license.php
> -
> -THE PROGRAM IS DISTRIBUTED UNDER THE BSD LICENSE ON AN "AS IS"
> BASIS,
> -WITHOUT WARRANTIES OR REPRESENTATIONS OF ANY KIND, EITHER
> EXPRESS OR IMPLIED.
> -
> -**/
> -
> -#ifndef __INTERNAL_CRYPT_LIB_H__
> -#define __INTERNAL_CRYPT_LIB_H__
> -
> -#include <Library/BaseLib.h>
> -#include <Library/DebugLib.h>
> -#include <Library/BaseCryptLib.h>
> -
> -#endif
> -
> diff --git
> a/CryptoPkg/Library/BaseCryptLibRuntimeCryptProtocol/Pem/CryptPemNull
> .c
> b/CryptoPkg/Library/BaseCryptLibRuntimeCryptProtocol/Pem/CryptPemNull
> .c
> deleted file mode 100644
> index 8c9e4f0bb5..0000000000
> ---
> a/CryptoPkg/Library/BaseCryptLibRuntimeCryptProtocol/Pem/CryptPemNull
> .c
> +++ /dev/null
> @@ -1,44 +0,0 @@
> -/** @file
> -  PEM (Privacy Enhanced Mail) Format Handler Wrapper Implementation
> which does
> -  not provide real capabilities.
> -
> -Copyright (c) 2012, Intel Corporation. All rights reserved.<BR>
> -This program and the accompanying materials
> -are licensed and made available under the terms and conditions of the BSD
> License
> -which accompanies this distribution.  The full text of the license may be
> found at
> -http://opensource.org/licenses/bsd-license.php
> -
> -THE PROGRAM IS DISTRIBUTED UNDER THE BSD LICENSE ON AN "AS IS"
> BASIS,
> -WITHOUT WARRANTIES OR REPRESENTATIONS OF ANY KIND, EITHER
> EXPRESS OR IMPLIED.
> -
> -**/
> -
> -#include "InternalCryptLib.h"
> -
> -/**
> -  Retrieve the RSA Private Key from the password-protected PEM key data.
> -
> -  Return FALSE to indicate this interface is not supported.
> -
> -  @param[in]  PemData      Pointer to the PEM-encoded key data to be
> retrieved.
> -  @param[in]  PemSize      Size of the PEM key data in bytes.
> -  @param[in]  Password     NULL-terminated passphrase used for encrypted
> PEM key data.
> -  @param[out] RsaContext   Pointer to new-generated RSA context which
> contain the retrieved
> -                           RSA private key component. Use RsaFree() function to free
> the
> -                           resource.
> -
> -  @retval FALSE  This interface is not supported.
> -
> -**/
> -BOOLEAN
> -EFIAPI
> -RsaGetPrivateKeyFromPem (
> -  IN   CONST UINT8  *PemData,
> -  IN   UINTN        PemSize,
> -  IN   CONST CHAR8  *Password,
> -  OUT  VOID         **RsaContext
> -  )
> -{
> -  ASSERT (FALSE);
> -  return FALSE;
> -}
> diff --git
> a/CryptoPkg/Library/BaseCryptLibRuntimeCryptProtocol/Pk/CryptAuthentic
> odeNull.c
> b/CryptoPkg/Library/BaseCryptLibRuntimeCryptProtocol/Pk/CryptAuthentic
> odeNull.c
> deleted file mode 100644
> index afec025dfa..0000000000
> ---
> a/CryptoPkg/Library/BaseCryptLibRuntimeCryptProtocol/Pk/CryptAuthentic
> odeNull.c
> +++ /dev/null
> @@ -1,51 +0,0 @@
> -/** @file
> -  Authenticode Portable Executable Signature Verification which does not
> provide
> -  real capabilities.
> -
> -Copyright (c) 2012, Intel Corporation. All rights reserved.<BR>
> -This program and the accompanying materials
> -are licensed and made available under the terms and conditions of the BSD
> License
> -which accompanies this distribution.  The full text of the license may be
> found at
> -http://opensource.org/licenses/bsd-license.php
> -
> -THE PROGRAM IS DISTRIBUTED UNDER THE BSD LICENSE ON AN "AS IS"
> BASIS,
> -WITHOUT WARRANTIES OR REPRESENTATIONS OF ANY KIND, EITHER
> EXPRESS OR IMPLIED.
> -
> -**/
> -
> -#include "InternalCryptLib.h"
> -
> -/**
> -  Verifies the validity of a PE/COFF Authenticode Signature as described in
> "Windows
> -  Authenticode Portable Executable Signature Format".
> -
> -  Return FALSE to indicate this interface is not supported.
> -
> -  @param[in]  AuthData     Pointer to the Authenticode Signature retrieved
> from signed
> -                           PE/COFF image to be verified.
> -  @param[in]  DataSize     Size of the Authenticode Signature in bytes.
> -  @param[in]  TrustedCert  Pointer to a trusted/root certificate encoded in
> DER, which
> -                           is used for certificate chain verification.
> -  @param[in]  CertSize     Size of the trusted certificate in bytes.
> -  @param[in]  ImageHash    Pointer to the original image file hash value. The
> procedure
> -                           for calculating the image hash value is described in
> Authenticode
> -                           specification.
> -  @param[in]  HashSize     Size of Image hash value in bytes.
> -
> -  @retval FALSE  This interface is not supported.
> -
> -**/
> -BOOLEAN
> -EFIAPI
> -AuthenticodeVerify (
> -  IN  CONST UINT8  *AuthData,
> -  IN  UINTN        DataSize,
> -  IN  CONST UINT8  *TrustedCert,
> -  IN  UINTN        CertSize,
> -  IN  CONST UINT8  *ImageHash,
> -  IN  UINTN        HashSize
> -  )
> -{
> -  ASSERT (FALSE);
> -  return FALSE;
> -}
> diff --git
> a/CryptoPkg/Library/BaseCryptLibRuntimeCryptProtocol/Pk/CryptDhNull.c
> b/CryptoPkg/Library/BaseCryptLibRuntimeCryptProtocol/Pk/CryptDhNull.c
> deleted file mode 100644
> index 35045db3c8..0000000000
> ---
> a/CryptoPkg/Library/BaseCryptLibRuntimeCryptProtocol/Pk/CryptDhNull.c
> +++ /dev/null
> @@ -1,156 +0,0 @@
> -/** @file
> -  Diffie-Hellman Wrapper Implementation which does not provide
> -  real capabilities.
> -
> -Copyright (c) 2012, Intel Corporation. All rights reserved.<BR>
> -This program and the accompanying materials
> -are licensed and made available under the terms and conditions of the BSD
> License
> -which accompanies this distribution.  The full text of the license may be
> found at
> -http://opensource.org/licenses/bsd-license.php
> -
> -THE PROGRAM IS DISTRIBUTED UNDER THE BSD LICENSE ON AN "AS IS"
> BASIS,
> -WITHOUT WARRANTIES OR REPRESENTATIONS OF ANY KIND, EITHER
> EXPRESS OR IMPLIED.
> -
> -**/
> -
> -#include "InternalCryptLib.h"
> -
> -/**
> -  Allocates and Initializes one Diffie-Hellman Context for subsequent use.
> -
> -  @return  Pointer to the Diffie-Hellman Context that has been initialized.
> -           If the interface is not supported, DhNew() returns NULL.
> -
> -**/
> -VOID *
> -EFIAPI
> -DhNew (
> -  VOID
> -  )
> -{
> -  ASSERT (FALSE);
> -  return NULL;
> -}
> -
> -/**
> -  Release the specified DH context.
> -
> -  If the interface is not supported, then ASSERT().
> -
> -  @param[in]  DhContext  Pointer to the DH context to be released.
> -
> -**/
> -VOID
> -EFIAPI
> -DhFree (
> -  IN  VOID  *DhContext
> -  )
> -{
> -  ASSERT (FALSE);
> -}
> -
> -/**
> -  Generates DH parameter.
> -
> -  Return FALSE to indicate this interface is not supported.
> -
> -  @param[in, out]  DhContext    Pointer to the DH context.
> -  @param[in]       Generator    Value of generator.
> -  @param[in]       PrimeLength  Length in bits of prime to be generated.
> -  @param[out]      Prime        Pointer to the buffer to receive the generated
> prime number.
> -
> -  @retval FALSE  This interface is not supported.
> -
> -**/
> -BOOLEAN
> -EFIAPI
> -DhGenerateParameter (
> -  IN OUT  VOID   *DhContext,
> -  IN      UINTN  Generator,
> -  IN      UINTN  PrimeLength,
> -  OUT     UINT8  *Prime
> -  )
> -{
> -  ASSERT (FALSE);
> -  return FALSE;
> -}
> -
> -/**
> -  Sets generator and prime parameters for DH.
> -
> -  Return FALSE to indicate this interface is not supported.
> -
> -  @param[in, out]  DhContext    Pointer to the DH context.
> -  @param[in]       Generator    Value of generator.
> -  @param[in]       PrimeLength  Length in bits of prime to be generated.
> -  @param[in]       Prime        Pointer to the prime number.
> -
> -  @retval FALSE  This interface is not supported.
> -
> -**/
> -BOOLEAN
> -EFIAPI
> -DhSetParameter (
> -  IN OUT  VOID         *DhContext,
> -  IN      UINTN        Generator,
> -  IN      UINTN        PrimeLength,
> -  IN      CONST UINT8  *Prime
> -  )
> -{
> -  ASSERT (FALSE);
> -  return FALSE;
> -}
> -
> -/**
> -  Generates DH public key.
> -
> -  Return FALSE to indicate this interface is not supported.
> -
> -  @param[in, out]  DhContext      Pointer to the DH context.
> -  @param[out]      PublicKey      Pointer to the buffer to receive generated
> public key.
> -  @param[in, out]  PublicKeySize  On input, the size of PublicKey buffer in
> bytes.
> -                                  On output, the size of data returned in PublicKey buffer in
> bytes.
> -
> -  @retval FALSE  This interface is not supported.
> -
> -**/
> -BOOLEAN
> -EFIAPI
> -DhGenerateKey (
> -  IN OUT  VOID   *DhContext,
> -  OUT     UINT8  *PublicKey,
> -  IN OUT  UINTN  *PublicKeySize
> -  )
> -{
> -  ASSERT (FALSE);
> -  return FALSE;
> -}
> -
> -/**
> -  Computes exchanged common key.
> -
> -  Return FALSE to indicate this interface is not supported.
> -
> -  @param[in, out]  DhContext          Pointer to the DH context.
> -  @param[in]       PeerPublicKey      Pointer to the peer's public key.
> -  @param[in]       PeerPublicKeySize  Size of peer's public key in bytes.
> -  @param[out]      Key                Pointer to the buffer to receive generated key.
> -  @param[in, out]  KeySize            On input, the size of Key buffer in bytes.
> -                                      On output, the size of data returned in Key buffer in
> bytes.
> -
> -  @retval FALSE  This interface is not supported.
> -
> -**/
> -BOOLEAN
> -EFIAPI
> -DhComputeKey (
> -  IN OUT  VOID         *DhContext,
> -  IN      CONST UINT8  *PeerPublicKey,
> -  IN      UINTN        PeerPublicKeySize,
> -  OUT     UINT8        *Key,
> -  IN OUT  UINTN        *KeySize
> -  )
> -{
> -  ASSERT (FALSE);
> -  return FALSE;
> -}
> diff --git
> a/CryptoPkg/Library/BaseCryptLibRuntimeCryptProtocol/Pk/CryptPkcs7Sign
> Null.c
> b/CryptoPkg/Library/BaseCryptLibRuntimeCryptProtocol/Pk/CryptPkcs7Sign
> Null.c
> deleted file mode 100644
> index 539bb6b7d5..0000000000
> ---
> a/CryptoPkg/Library/BaseCryptLibRuntimeCryptProtocol/Pk/CryptPkcs7Sign
> Null.c
> +++ /dev/null
> @@ -1,59 +0,0 @@
> -/** @file
> -  PKCS#7 SignedData Sign Wrapper Implementation which does not provide
> real
> -  capabilities.
> -
> -Copyright (c) 2012, Intel Corporation. All rights reserved.<BR>
> -This program and the accompanying materials
> -are licensed and made available under the terms and conditions of the BSD
> License
> -which accompanies this distribution.  The full text of the license may be
> found at
> -http://opensource.org/licenses/bsd-license.php
> -
> -THE PROGRAM IS DISTRIBUTED UNDER THE BSD LICENSE ON AN "AS IS"
> BASIS,
> -WITHOUT WARRANTIES OR REPRESENTATIONS OF ANY KIND, EITHER
> EXPRESS OR IMPLIED.
> -
> -**/
> -
> -#include "InternalCryptLib.h"
> -
> -/**
> -  Creates a PKCS#7 signedData as described in "PKCS #7: Cryptographic
> Message
> -  Syntax Standard, version 1.5". This interface is only intended to be used for
> -  application to perform PKCS#7 functionality validation.
> -
> -  Return FALSE to indicate this interface is not supported.
> -
> -  @param[in]  PrivateKey       Pointer to the PEM-formatted private key data
> for
> -                               data signing.
> -  @param[in]  PrivateKeySize   Size of the PEM private key data in bytes.
> -  @param[in]  KeyPassword      NULL-terminated passphrase used for
> encrypted PEM
> -                               key data.
> -  @param[in]  InData           Pointer to the content to be signed.
> -  @param[in]  InDataSize       Size of InData in bytes.
> -  @param[in]  SignCert         Pointer to signer's DER-encoded certificate to
> sign with.
> -  @param[in]  OtherCerts       Pointer to an optional additional set of
> certificates to
> -                               include in the PKCS#7 signedData (e.g. any intermediate
> -                               CAs in the chain).
> -  @param[out] SignedData       Pointer to output PKCS#7 signedData.
> -  @param[out] SignedDataSize   Size of SignedData in bytes.
> -
> -  @retval FALSE  This interface is not supported.
> -
> -**/
> -BOOLEAN
> -EFIAPI
> -Pkcs7Sign (
> -  IN   CONST UINT8  *PrivateKey,
> -  IN   UINTN        PrivateKeySize,
> -  IN   CONST UINT8  *KeyPassword,
> -  IN   UINT8        *InData,
> -  IN   UINTN        InDataSize,
> -  IN   UINT8        *SignCert,
> -  IN   UINT8        *OtherCerts      OPTIONAL,
> -  OUT  UINT8        **SignedData,
> -  OUT  UINTN        *SignedDataSize
> -  )
> -{
> -  ASSERT (FALSE);
> -  return FALSE;
> -}
> -
> diff --git
> a/CryptoPkg/Library/BaseCryptLibRuntimeCryptProtocol/Pk/CryptPkcs7Verif
> yNull.c
> b/CryptoPkg/Library/BaseCryptLibRuntimeCryptProtocol/Pk/CryptPkcs7Verif
> yNull.c
> deleted file mode 100644
> index 06602ec535..0000000000
> ---
> a/CryptoPkg/Library/BaseCryptLibRuntimeCryptProtocol/Pk/CryptPkcs7Verif
> yNull.c
> +++ /dev/null
> @@ -1,163 +0,0 @@
> -/** @file
> -  PKCS#7 SignedData Verification Wrapper Implementation which does not
> provide
> -  real capabilities.
> -
> -Copyright (c) 2012 - 2015, Intel Corporation. All rights reserved.<BR>
> -This program and the accompanying materials
> -are licensed and made available under the terms and conditions of the BSD
> License
> -which accompanies this distribution.  The full text of the license may be
> found at
> -http://opensource.org/licenses/bsd-license.php
> -
> -THE PROGRAM IS DISTRIBUTED UNDER THE BSD LICENSE ON AN "AS IS"
> BASIS,
> -WITHOUT WARRANTIES OR REPRESENTATIONS OF ANY KIND, EITHER
> EXPRESS OR IMPLIED.
> -
> -**/
> -
> -#include "InternalCryptLib.h"
> -
> -/**
> -  Get the signer's certificates from PKCS#7 signed data as described in "PKCS
> #7:
> -  Cryptographic Message Syntax Standard". The input signed data could be
> wrapped
> -  in a ContentInfo structure.
> -
> -  Return FALSE to indicate this interface is not supported.
> -
> -  @param[in]  P7Data       Pointer to the PKCS#7 message to verify.
> -  @param[in]  P7Length     Length of the PKCS#7 message in bytes.
> -  @param[out] CertStack    Pointer to Signer's certificates retrieved from
> P7Data.
> -                           It's caller's responsibility to free the buffer.
> -  @param[out] StackLength  Length of signer's certificates in bytes.
> -  @param[out] TrustedCert  Pointer to a trusted certificate from Signer's
> certificates.
> -                           It's caller's responsibility to free the buffer.
> -  @param[out] CertLength   Length of the trusted certificate in bytes.
> -
> -  @retval FALSE  This interface is not supported.
> -
> -**/
> -BOOLEAN
> -EFIAPI
> -Pkcs7GetSigners (
> -  IN  CONST UINT8  *P7Data,
> -  IN  UINTN        P7Length,
> -  OUT UINT8        **CertStack,
> -  OUT UINTN        *StackLength,
> -  OUT UINT8        **TrustedCert,
> -  OUT UINTN        *CertLength
> -  )
> -{
> -  ASSERT (FALSE);
> -  return FALSE;
> -}
> -
> -/**
> -  Wrap function to use free() to free allocated memory for certificates.
> -
> -  If the interface is not supported, then ASSERT().
> -
> -  @param[in]  Certs        Pointer to the certificates to be freed.
> -
> -**/
> -VOID
> -EFIAPI
> -Pkcs7FreeSigners (
> -  IN  UINT8        *Certs
> -  )
> -{
> -  ASSERT (FALSE);
> -}
> -
> -/**
> -  Retrieves all embedded certificates from PKCS#7 signed data as described
> in "PKCS #7:
> -  Cryptographic Message Syntax Standard", and outputs two certificate lists
> chained and
> -  unchained to the signer's certificates.
> -  The input signed data could be wrapped in a ContentInfo structure.
> -
> -  @param[in]  P7Data            Pointer to the PKCS#7 message.
> -  @param[in]  P7Length          Length of the PKCS#7 message in bytes.
> -  @param[out] SignerChainCerts  Pointer to the certificates list chained to
> signer's
> -                                certificate. It's caller's responsibility to free the buffer.
> -  @param[out] ChainLength       Length of the chained certificates list buffer
> in bytes.
> -  @param[out] UnchainCerts      Pointer to the unchained certificates lists. It's
> caller's
> -                                responsibility to free the buffer.
> -  @param[out] UnchainLength     Length of the unchained certificates list
> buffer in bytes.
> -
> -  @retval  TRUE         The operation is finished successfully.
> -  @retval  FALSE        Error occurs during the operation.
> -
> -**/
> -BOOLEAN
> -EFIAPI
> -Pkcs7GetCertificatesList (
> -  IN  CONST UINT8  *P7Data,
> -  IN  UINTN        P7Length,
> -  OUT UINT8        **SignerChainCerts,
> -  OUT UINTN        *ChainLength,
> -  OUT UINT8        **UnchainCerts,
> -  OUT UINTN        *UnchainLength
> -  )
> -{
> -  ASSERT (FALSE);
> -  return FALSE;
> -}
> -
> -/**
> -  Verifies the validity of a PKCS#7 signed data as described in "PKCS #7:
> -  Cryptographic Message Syntax Standard". The input signed data could be
> wrapped
> -  in a ContentInfo structure.
> -
> -  Return FALSE to indicate this interface is not supported.
> -
> -  @param[in]  P7Data       Pointer to the PKCS#7 message to verify.
> -  @param[in]  P7Length     Length of the PKCS#7 message in bytes.
> -  @param[in]  TrustedCert  Pointer to a trusted/root certificate encoded in
> DER, which
> -                           is used for certificate chain verification.
> -  @param[in]  CertLength   Length of the trusted certificate in bytes.
> -  @param[in]  InData       Pointer to the content to be verified.
> -  @param[in]  DataLength   Length of InData in bytes.
> -
> -  @retval FALSE  This interface is not supported.
> -
> -**/
> -BOOLEAN
> -EFIAPI
> -Pkcs7Verify (
> -  IN  CONST UINT8  *P7Data,
> -  IN  UINTN        P7Length,
> -  IN  CONST UINT8  *TrustedCert,
> -  IN  UINTN        CertLength,
> -  IN  CONST UINT8  *InData,
> -  IN  UINTN        DataLength
> -  )
> -{
> -  ASSERT (FALSE);
> -  return FALSE;
> -}
> -
> -/**
> -  Extracts the attached content from a PKCS#7 signed data if existed. The
> input signed
> -  data could be wrapped in a ContentInfo structure.
> -
> -  Return FALSE to indicate this interface is not supported.
> -
> -  @param[in]   P7Data       Pointer to the PKCS#7 signed data to process.
> -  @param[in]   P7Length     Length of the PKCS#7 signed data in bytes.
> -  @param[out]  Content      Pointer to the extracted content from the
> PKCS#7 signedData.
> -                            It's caller's responsibility to free the buffer.
> -  @param[out]  ContentSize  The size of the extracted content in bytes.
> -
> -  @retval     TRUE          The P7Data was correctly formatted for processing.
> -  @retval     FALSE         The P7Data was not correctly formatted for processing.
> -
> -**/
> -BOOLEAN
> -EFIAPI
> -Pkcs7GetAttachedContent (
> -  IN  CONST UINT8  *P7Data,
> -  IN  UINTN        P7Length,
> -  OUT VOID         **Content,
> -  OUT UINTN        *ContentSize
> -  )
> -{
> -  ASSERT (FALSE);
> -  return FALSE;
> -}
> diff --git
> a/CryptoPkg/Library/BaseCryptLibRuntimeCryptProtocol/Pk/CryptRsaExtNull
> .c
> b/CryptoPkg/Library/BaseCryptLibRuntimeCryptProtocol/Pk/CryptRsaExtNull
> .c
> deleted file mode 100644
> index e44cdde44f..0000000000
> ---
> a/CryptoPkg/Library/BaseCryptLibRuntimeCryptProtocol/Pk/CryptRsaExtNull
> .c
> +++ /dev/null
> @@ -1,125 +0,0 @@
> -/** @file
> -  RSA Asymmetric Cipher Wrapper Implementation over OpenSSL.
> -
> -  This file does not provide real capabilities for following APIs in RSA handling:
> -  1) RsaGetKey
> -  2) RsaGenerateKey
> -  3) RsaCheckKey
> -  4) RsaPkcs1Sign
> -
> -Copyright (c) 2009 - 2012, Intel Corporation. All rights reserved.<BR>
> -This program and the accompanying materials
> -are licensed and made available under the terms and conditions of the BSD
> License
> -which accompanies this distribution.  The full text of the license may be
> found at
> -http://opensource.org/licenses/bsd-license.php
> -
> -THE PROGRAM IS DISTRIBUTED UNDER THE BSD LICENSE ON AN "AS IS"
> BASIS,
> -WITHOUT WARRANTIES OR REPRESENTATIONS OF ANY KIND, EITHER
> EXPRESS OR IMPLIED.
> -
> -**/
> -
> -#include "InternalCryptLib.h"
> -
> -/**
> -  Gets the tag-designated RSA key component from the established RSA
> context.
> -
> -  Return FALSE to indicate this interface is not supported.
> -
> -  @param[in, out]  RsaContext  Pointer to RSA context being set.
> -  @param[in]       KeyTag      Tag of RSA key component being set.
> -  @param[out]      BigNumber   Pointer to octet integer buffer.
> -  @param[in, out]  BnSize      On input, the size of big number buffer in bytes.
> -                               On output, the size of data returned in big number buffer in
> bytes.
> -
> -  @retval FALSE  This interface is not supported.
> -
> -**/
> -BOOLEAN
> -EFIAPI
> -RsaGetKey (
> -  IN OUT  VOID         *RsaContext,
> -  IN      RSA_KEY_TAG  KeyTag,
> -  OUT     UINT8        *BigNumber,
> -  IN OUT  UINTN        *BnSize
> -  )
> -{
> -  ASSERT (FALSE);
> -  return FALSE;
> -}
> -
> -/**
> -  Generates RSA key components.
> -
> -  Return FALSE to indicate this interface is not supported.
> -
> -  @param[in, out]  RsaContext           Pointer to RSA context being set.
> -  @param[in]       ModulusLength        Length of RSA modulus N in bits.
> -  @param[in]       PublicExponent       Pointer to RSA public exponent.
> -  @param[in]       PublicExponentSize   Size of RSA public exponent buffer in
> bytes.
> -
> -  @retval FALSE  This interface is not supported.
> -
> -**/
> -BOOLEAN
> -EFIAPI
> -RsaGenerateKey (
> -  IN OUT  VOID         *RsaContext,
> -  IN      UINTN        ModulusLength,
> -  IN      CONST UINT8  *PublicExponent,
> -  IN      UINTN        PublicExponentSize
> -  )
> -{
> -  ASSERT (FALSE);
> -  return FALSE;
> -}
> -
> -/**
> -  Validates key components of RSA context.
> -
> -  Return FALSE to indicate this interface is not supported.
> -
> -  @param[in]  RsaContext  Pointer to RSA context to check.
> -
> -  @retval FALSE  This interface is not supported.
> -
> -**/
> -BOOLEAN
> -EFIAPI
> -RsaCheckKey (
> -  IN  VOID  *RsaContext
> -  )
> -{
> -  ASSERT (FALSE);
> -  return FALSE;
> -}
> -
> -/**
> -  Carries out the RSA-SSA signature generation with EMSA-PKCS1-v1_5
> encoding scheme.
> -
> -  Return FALSE to indicate this interface is not supported.
> -
> -  @param[in]       RsaContext   Pointer to RSA context for signature
> generation.
> -  @param[in]       MessageHash  Pointer to octet message hash to be signed.
> -  @param[in]       HashSize     Size of the message hash in bytes.
> -  @param[out]      Signature    Pointer to buffer to receive RSA PKCS1-v1_5
> signature.
> -  @param[in, out]  SigSize      On input, the size of Signature buffer in bytes.
> -                                On output, the size of data returned in Signature buffer in
> bytes.
> -
> -  @retval FALSE  This interface is not supported.
> -
> -**/
> -BOOLEAN
> -EFIAPI
> -RsaPkcs1Sign (
> -  IN      VOID         *RsaContext,
> -  IN      CONST UINT8  *MessageHash,
> -  IN      UINTN        HashSize,
> -  OUT     UINT8        *Signature,
> -  IN OUT  UINTN        *SigSize
> -  )
> -{
> -  ASSERT (FALSE);
> -  return FALSE;
> -}
> -
> -
> diff --git
> a/CryptoPkg/Library/BaseCryptLibRuntimeCryptProtocol/Pk/CryptX509Null.c
> b/CryptoPkg/Library/BaseCryptLibRuntimeCryptProtocol/Pk/CryptX509Null.c
> deleted file mode 100644
> index d00f38daa8..0000000000
> ---
> a/CryptoPkg/Library/BaseCryptLibRuntimeCryptProtocol/Pk/CryptX509Null.c
> +++ /dev/null
> @@ -1,238 +0,0 @@
> -/** @file
> -  X.509 Certificate Handler Wrapper Implementation which does not provide
> -  real capabilities.
> -
> -Copyright (c) 2012 - 2014, Intel Corporation. All rights reserved.<BR>
> -This program and the accompanying materials
> -are licensed and made available under the terms and conditions of the BSD
> License
> -which accompanies this distribution.  The full text of the license may be
> found at
> -http://opensource.org/licenses/bsd-license.php
> -
> -THE PROGRAM IS DISTRIBUTED UNDER THE BSD LICENSE ON AN "AS IS"
> BASIS,
> -WITHOUT WARRANTIES OR REPRESENTATIONS OF ANY KIND, EITHER
> EXPRESS OR IMPLIED.
> -
> -**/
> -
> -#include "InternalCryptLib.h"
> -
> -/**
> -  Construct a X509 object from DER-encoded certificate data.
> -
> -  Return FALSE to indicate this interface is not supported.
> -
> -  @param[in]  Cert            Pointer to the DER-encoded certificate data.
> -  @param[in]  CertSize        The size of certificate data in bytes.
> -  @param[out] SingleX509Cert  The generated X509 object.
> -
> -  @retval FALSE  This interface is not supported.
> -
> -**/
> -BOOLEAN
> -EFIAPI
> -X509ConstructCertificate (
> -  IN   CONST UINT8  *Cert,
> -  IN   UINTN        CertSize,
> -  OUT  UINT8        **SingleX509Cert
> -  )
> -{
> -  ASSERT (FALSE);
> -  return FALSE;
> -}
> -
> -/**
> -  Construct a X509 stack object from a list of DER-encoded certificate data.
> -
> -  Return FALSE to indicate this interface is not supported.
> -
> -  @param[in, out]  X509Stack  On input, pointer to an existing or NULL X509
> stack object.
> -                              On output, pointer to the X509 stack object with new
> -                              inserted X509 certificate.
> -  @param           ...        A list of DER-encoded single certificate data followed
> -                              by certificate size. A NULL terminates the list. The
> -                              pairs are the arguments to X509ConstructCertificate().
> -
> -  @retval FALSE  This interface is not supported.
> -
> -**/
> -BOOLEAN
> -EFIAPI
> -X509ConstructCertificateStack (
> -  IN OUT  UINT8  **X509Stack,
> -  ...
> -  )
> -{
> -  ASSERT (FALSE);
> -  return FALSE;
> -}
> -
> -/**
> -  Release the specified X509 object.
> -
> -  If the interface is not supported, then ASSERT().
> -
> -  @param[in]  X509Cert  Pointer to the X509 object to be released.
> -
> -**/
> -VOID
> -EFIAPI
> -X509Free (
> -  IN  VOID  *X509Cert
> -  )
> -{
> -  ASSERT (FALSE);
> -}
> -
> -/**
> -  Release the specified X509 stack object.
> -
> -  If the interface is not supported, then ASSERT().
> -
> -  @param[in]  X509Stack  Pointer to the X509 stack object to be released.
> -
> -**/
> -VOID
> -EFIAPI
> -X509StackFree (
> -  IN  VOID  *X509Stack
> -  )
> -{
> -  ASSERT (FALSE);
> -}
> -
> -/**
> -  Retrieve the subject bytes from one X.509 certificate.
> -
> -  Return FALSE to indicate this interface is not supported.
> -
> -  @param[in]      Cert         Pointer to the DER-encoded X509 certificate.
> -  @param[in]      CertSize     Size of the X509 certificate in bytes.
> -  @param[out]     CertSubject  Pointer to the retrieved certificate subject
> bytes.
> -  @param[in, out] SubjectSize  The size in bytes of the CertSubject buffer on
> input,
> -                               and the size of buffer returned CertSubject on output.
> -
> -
> -  @retval FALSE  This interface is not supported.
> -
> -**/
> -BOOLEAN
> -EFIAPI
> -X509GetSubjectName (
> -  IN      CONST UINT8  *Cert,
> -  IN      UINTN        CertSize,
> -  OUT     UINT8        *CertSubject,
> -  IN OUT  UINTN        *SubjectSize
> -  )
> -{
> -  ASSERT (FALSE);
> -  return FALSE;
> -}
> -
> -/**
> -  Retrieve the common name (CN) string from one X.509 certificate.
> -
> -  Return RETURN_UNSUPPORTED to indicate this interface is not supported.
> -
> -  @param[in]      Cert             Pointer to the DER-encoded X509 certificate.
> -  @param[in]      CertSize         Size of the X509 certificate in bytes.
> -  @param[out]     CommonName       Buffer to contain the retrieved
> certificate common
> -                                   name string. At most CommonNameSize bytes will be
> -                                   written and the string will be null terminated. May be
> -                                   NULL in order to determine the size buffer needed.
> -  @param[in,out]  CommonNameSize   The size in bytes of the
> CommonName buffer on input,
> -                                   and the size of buffer returned CommonName on output.
> -                                   If CommonName is NULL then the amount of space
> needed
> -                                   in buffer (including the final null) is returned.
> -
> -  @retval RETURN_UNSUPPORTED       The operation is not supported.
> -
> -**/
> -RETURN_STATUS
> -EFIAPI
> -X509GetCommonName (
> -  IN      CONST UINT8  *Cert,
> -  IN      UINTN        CertSize,
> -  OUT     CHAR8        *CommonName,  OPTIONAL
> -  IN OUT  UINTN        *CommonNameSize
> -  )
> -{
> -  ASSERT (FALSE);
> -  return RETURN_UNSUPPORTED;
> -}
> -
> -/**
> -  Retrieve the RSA Public Key from one DER-encoded X509 certificate.
> -
> -  Return FALSE to indicate this interface is not supported.
> -
> -  @param[in]  Cert         Pointer to the DER-encoded X509 certificate.
> -  @param[in]  CertSize     Size of the X509 certificate in bytes.
> -  @param[out] RsaContext   Pointer to new-generated RSA context which
> contain the retrieved
> -                           RSA public key component. Use RsaFree() function to free the
> -                           resource.
> -
> -  @retval FALSE  This interface is not supported.
> -
> -**/
> -BOOLEAN
> -EFIAPI
> -RsaGetPublicKeyFromX509 (
> -  IN   CONST UINT8  *Cert,
> -  IN   UINTN        CertSize,
> -  OUT  VOID         **RsaContext
> -  )
> -{
> -  ASSERT (FALSE);
> -  return FALSE;
> -}
> -
> -/**
> -  Verify one X509 certificate was issued by the trusted CA.
> -
> -  Return FALSE to indicate this interface is not supported.
> -
> -  @param[in]      Cert         Pointer to the DER-encoded X509 certificate to be
> verified.
> -  @param[in]      CertSize     Size of the X509 certificate in bytes.
> -  @param[in]      CACert       Pointer to the DER-encoded trusted CA certificate.
> -  @param[in]      CACertSize   Size of the CA Certificate in bytes.
> -
> -  @retval FALSE  This interface is not supported.
> -
> -**/
> -BOOLEAN
> -EFIAPI
> -X509VerifyCert (
> -  IN  CONST UINT8  *Cert,
> -  IN  UINTN        CertSize,
> -  IN  CONST UINT8  *CACert,
> -  IN  UINTN        CACertSize
> -  )
> -{
> -  ASSERT (FALSE);
> -  return FALSE;
> -}
> -
> -/**
> -  Retrieve the TBSCertificate from one given X.509 certificate.
> -
> -  Return FALSE to indicate this interface is not supported.
> -
> -  @param[in]      Cert         Pointer to the given DER-encoded X509 certificate.
> -  @param[in]      CertSize     Size of the X509 certificate in bytes.
> -  @param[out]     TBSCert      DER-Encoded To-Be-Signed certificate.
> -  @param[out]     TBSCertSize  Size of the TBS certificate in bytes.
> -
> -  @retval  FALSE  This interface is not supported.
> -
> -**/
> -BOOLEAN
> -EFIAPI
> -X509GetTBSCert (
> -  IN  CONST UINT8  *Cert,
> -  IN  UINTN        CertSize,
> -  OUT UINT8        **TBSCert,
> -  OUT UINTN        *TBSCertSize
> -  )
> -{
> -  ASSERT (FALSE);
> -  return FALSE;
> -}
> diff --git
> a/CryptoPkg/Library/BaseCryptLibRuntimeCryptProtocol/Rand/CryptRandNu
> ll.c
> b/CryptoPkg/Library/BaseCryptLibRuntimeCryptProtocol/Rand/CryptRandNu
> ll.c
> deleted file mode 100644
> index c292a2301e..0000000000
> ---
> a/CryptoPkg/Library/BaseCryptLibRuntimeCryptProtocol/Rand/CryptRandNu
> ll.c
> +++ /dev/null
> @@ -1,63 +0,0 @@
> -/** @file
> -  Pseudorandom Number Generator Wrapper Implementation which does
> not provide
> -  real capabilities.
> -
> -Copyright (c) 2012, Intel Corporation. All rights reserved.<BR>
> -This program and the accompanying materials
> -are licensed and made available under the terms and conditions of the BSD
> License
> -which accompanies this distribution.  The full text of the license may be
> found at
> -http://opensource.org/licenses/bsd-license.php
> -
> -THE PROGRAM IS DISTRIBUTED UNDER THE BSD LICENSE ON AN "AS IS"
> BASIS,
> -WITHOUT WARRANTIES OR REPRESENTATIONS OF ANY KIND, EITHER
> EXPRESS OR IMPLIED.
> -
> -**/
> -
> -#include "InternalCryptLib.h"
> -
> -
> -/**
> -  Sets up the seed value for the pseudorandom number generator.
> -
> -  Return FALSE to indicate this interface is not supported.
> -
> -  @param[in]  Seed      Pointer to seed value.
> -                        If NULL, default seed is used.
> -  @param[in]  SeedSize  Size of seed value.
> -                        If Seed is NULL, this parameter is ignored.
> -
> -  @retval FALSE  This interface is not supported.
> -
> -**/
> -BOOLEAN
> -EFIAPI
> -RandomSeed (
> -  IN  CONST  UINT8  *Seed  OPTIONAL,
> -  IN  UINTN         SeedSize
> -  )
> -{
> -  ASSERT (FALSE);
> -  return FALSE;
> -}
> -
> -/**
> -  Generates a pseudorandom byte stream of the specified size.
> -
> -  Return FALSE to indicate this interface is not supported.
> -
> -  @param[out]  Output  Pointer to buffer to receive random value.
> -  @param[in]   Size    Size of random bytes to generate.
> -
> -  @retval FALSE  This interface is not supported.
> -
> -**/
> -BOOLEAN
> -EFIAPI
> -RandomBytes (
> -  OUT  UINT8  *Output,
> -  IN   UINTN  Size
> -  )
> -{
> -  ASSERT (FALSE);
> -  return FALSE;
> -}
> diff --git
> a/CryptoPkg/Library/BaseCryptLibRuntimeCryptProtocol/RuntimeDxeIpfCry
> ptLib.c
> b/CryptoPkg/Library/BaseCryptLibRuntimeCryptProtocol/RuntimeDxeIpfCry
> ptLib.c
> deleted file mode 100644
> index 9babc7e952..0000000000
> ---
> a/CryptoPkg/Library/BaseCryptLibRuntimeCryptProtocol/RuntimeDxeIpfCry
> ptLib.c
> +++ /dev/null
> @@ -1,419 +0,0 @@
> -/** @file
> -  Implementation of The runtime cryptographic library instance (for IPF).
> -
> -Copyright (c) 2010 - 2012, Intel Corporation. All rights reserved.<BR>
> -This program and the accompanying materials
> -are licensed and made available under the terms and conditions of the BSD
> License
> -which accompanies this distribution.  The full text of the license may be
> found at
> -http://opensource.org/licenses/bsd-license.php
> -
> -THE PROGRAM IS DISTRIBUTED UNDER THE BSD LICENSE ON AN "AS IS"
> BASIS,
> -WITHOUT WARRANTIES OR REPRESENTATIONS OF ANY KIND, EITHER
> EXPRESS OR IMPLIED.
> -
> -**/
> -
> -#include <Uefi.h>
> -
> -#include <Library/BaseLib.h>
> -#include <Library/DebugLib.h>
> -#include <Library/UefiBootServicesTableLib.h>
> -#include <Library/UefiRuntimeLib.h>
> -
> -#include <Protocol/RuntimeCrypt.h>
> -
> -#include <Guid/EventGroup.h>
> -
> -EFI_RUNTIME_CRYPT_PROTOCOL  *mCryptProtocol = NULL;
> -EFI_EVENT                   mIpfCryptLibVirtualNotifyEvent;
> -
> -/**
> -  Notification function of EVT_SIGNAL_VIRTUAL_ADDRESS_CHANGE, which
> converts
> -  pointer to new virtual address.
> -
> -  @param  Event        Event whose notification function is being invoked.
> -  @param  Context      Pointer to the notification function's context
> -
> -**/
> -VOID
> -EFIAPI
> -IpfCryptLibAddressChangeEvent (
> -  IN  EFI_EVENT        Event,
> -  IN  VOID             *Context
> -  )
> -{
> -  //
> -  // Convert Address of Runtime Crypto Protocol.
> -  //
> -  EfiConvertPointer (0x0, (VOID **) &mCryptProtocol);
> -}
> -
> -/**
> -  Constructor of IPF Crypto Library Instance.
> -  This function locates the Runtime Crypt Protocol and register notification
> -  function for EVT_SIGNAL_VIRTUAL_ADDRESS_CHANGE event.
> -
> -  @param  ImageHandle   The firmware allocated handle for the EFI image.
> -  @param  SystemTable   A pointer to the EFI System Table.
> -
> -  @retval EFI_SUCCESS   The constructor always returns EFI_SUCCESS.
> -
> -**/
> -EFI_STATUS
> -EFIAPI
> -RuntimeDxeIpfCryptLibConstructor (
> -  IN      EFI_HANDLE                ImageHandle,
> -  IN      EFI_SYSTEM_TABLE          *SystemTable
> -  )
> -{
> -  EFI_STATUS  Status;
> -
> -  //
> -  // Locate Runtime Crypt Protocol Instance
> -  //
> -  Status = gBS->LocateProtocol (
> -                  &gEfiRuntimeCryptProtocolGuid,
> -                  NULL,
> -                  (VOID**) &mCryptProtocol
> -                  );
> -  ASSERT_EFI_ERROR (Status);
> -  ASSERT (mCryptProtocol != NULL);
> -
> -  //
> -  // Register SetVirtualAddressMap () notify function
> -  //
> -  Status = gBS->CreateEventEx (
> -                  EVT_NOTIFY_SIGNAL,
> -                  TPL_NOTIFY,
> -                  IpfCryptLibAddressChangeEvent,
> -                  NULL,
> -                  &gEfiEventVirtualAddressChangeGuid,
> -                  &mIpfCryptLibVirtualNotifyEvent
> -                  );
> -  ASSERT_EFI_ERROR (Status);
> -
> -  return Status;
> -}
> -
> -/**
> -  Destructor of IPF Crypto Library Instance.
> -
> -  @param  ImageHandle   The firmware allocated handle for the EFI image.
> -  @param  SystemTable   A pointer to the EFI System Table.
> -
> -  @retval EFI_SUCCESS   The destructor completed successfully.
> -  @retval Other value   The destructor did not complete successfully.
> -
> -**/
> -EFI_STATUS
> -EFIAPI
> -RuntimeDxeIpfCryptLibDestructor (
> -  IN EFI_HANDLE        ImageHandle,
> -  IN EFI_SYSTEM_TABLE  *SystemTable
> -  )
> -{
> -  EFI_STATUS  Status;
> -
> -  //
> -  // Close the Set Virtual Address Map event
> -  //
> -  Status = gBS->CloseEvent (mIpfCryptLibVirtualNotifyEvent);
> -  ASSERT_EFI_ERROR (Status);
> -
> -  return Status;
> -}
> -
> -/**
> -  Check whether crypto service provided by Runtime Crypt protocol is ready
> to use.
> -
> -  Crypto service is available if the call is in physical mode prior to
> -  SetVirtualAddressMap() or virtual mode after SetVirtualAddressMap(). If
> either
> -  of these two conditions are met, this routine will return TRUE; if neither of
> -  these conditions are met, this routine will return FALSE.
> -
> -  @retval TRUE   The Crypto service is ready to use.
> -  @retval FALSE  The Crypto service is not available.
> -
> -**/
> -BOOLEAN
> -EFIAPI
> -InternalIsCryptServiveAvailable (
> -  VOID
> -  )
> -{
> -  INT64    CpuMode;
> -  BOOLEAN  GoneVirtual;
> -
> -  CpuMode = AsmCpuVirtual();
> -  if (CpuMode < 0) {
> -    //
> -    // CPU is in mixed mode, return failing the operation gracefully.
> -    //
> -    return FALSE;
> -  }
> -
> -  GoneVirtual = EfiGoneVirtual();
> -
> -  if ((CpuMode > 0) && !GoneVirtual) {
> -    //
> -    // CPU is in virtual mode, but SetVirtualAddressMap() has not been called,
> -    // so return failing the operation gracefully.
> -    //
> -    return FALSE;
> -  }
> -
> -  if ((CpuMode == 0) && GoneVirtual) {
> -    //
> -    // CPU is in physical mode, but SetVirtualAddressMap() has been called,
> -    // so return failing the operation gracefully.
> -    //
> -    return FALSE;
> -  }
> -
> -  return TRUE;
> -}
> -
> -/**
> -  Retrieves the size, in bytes, of the context buffer required for SHA-256
> operations.
> -
> -  @return  The size, in bytes, of the context buffer required for SHA-256
> operations.
> -
> -**/
> -UINTN
> -EFIAPI
> -Sha256GetContextSize (
> -  VOID
> -  )
> -{
> -  if (!InternalIsCryptServiveAvailable ()) {
> -    return 0;
> -  }
> -
> -  return mCryptProtocol->Sha256GetContextSize ();
> -}
> -
> -/**
> -  Initializes user-supplied memory pointed by Sha256Context as SHA-256
> hash context for
> -  subsequent use.
> -
> -  If Sha256Context is NULL, then return FALSE.
> -
> -  @param[in, out]  Sha256Context  Pointer to SHA-256 Context being
> initialized.
> -
> -  @retval TRUE   SHA-256 context initialization succeeded.
> -  @retval FALSE  SHA-256 context initialization failed.
> -
> -**/
> -BOOLEAN
> -EFIAPI
> -Sha256Init (
> -  IN OUT  VOID  *Sha256Context
> -  )
> -{
> -  if (!InternalIsCryptServiveAvailable ()) {
> -    return FALSE;
> -  }
> -
> -  return mCryptProtocol->Sha256Init (Sha256Context);
> -}
> -
> -
> -/**
> -  Makes a copy of an existing SHA-256 context.
> -
> -  Return FALSE to indicate this interface is not supported.
> -
> -  @param[in]  Sha256Context     Pointer to SHA-256 context being copied.
> -  @param[out] NewSha256Context  Pointer to new SHA-256 context.
> -
> -  @retval FALSE  This interface is not supported.
> -
> -**/
> -BOOLEAN
> -EFIAPI
> -Sha256Duplicate (
> -  IN   CONST VOID  *Sha256Context,
> -  OUT  VOID        *NewSha256Context
> -  )
> -{
> -  ASSERT (FALSE);
> -  return FALSE;
> -}
> -
> -
> -/**
> -  Performs SHA-256 digest on a data buffer of the specified length. This
> function can
> -  be called multiple times to compute the digest of long or discontinuous
> data streams.
> -
> -  If Sha256Context is NULL, then return FALSE.
> -
> -  @param[in, out]  Sha256Context  Pointer to the SHA-256 context.
> -  @param[in]       Data           Pointer to the buffer containing the data to be
> hashed.
> -  @param[in]       DataLength     Length of Data buffer in bytes.
> -
> -  @retval TRUE   SHA-256 data digest succeeded.
> -  @retval FALSE  Invalid SHA-256 context. After Sha256Final function has
> been called, the
> -                 SHA-256 context cannot be reused.
> -
> -**/
> -BOOLEAN
> -EFIAPI
> -Sha256Update (
> -  IN OUT  VOID        *Sha256Context,
> -  IN      CONST VOID  *Data,
> -  IN      UINTN       DataLength
> -  )
> -{
> -  if (!InternalIsCryptServiveAvailable ()) {
> -    return FALSE;
> -  }
> -
> -  return mCryptProtocol->Sha256Update (Sha256Context, Data, DataLength);
> -}
> -
> -/**
> -  Completes SHA-256 hash computation and retrieves the digest value into
> the specified
> -  memory. After this function has been called, the SHA-256 context cannot
> be used again.
> -
> -  If Sha256Context is NULL, then return FALSE.
> -  If HashValue is NULL, then return FALSE.
> -
> -  @param[in, out]  Sha256Context  Pointer to SHA-256 context
> -  @param[out]      HashValue      Pointer to a buffer that receives the SHA-256
> digest
> -                                  value (32 bytes).
> -
> -  @retval TRUE   SHA-256 digest computation succeeded.
> -  @retval FALSE  SHA-256 digest computation failed.
> -
> -**/
> -BOOLEAN
> -EFIAPI
> -Sha256Final (
> -  IN OUT  VOID   *Sha256Context,
> -  OUT     UINT8  *HashValue
> -  )
> -{
> -  if (!InternalIsCryptServiveAvailable ()) {
> -    return FALSE;
> -  }
> -
> -  return mCryptProtocol->Sha256Final (Sha256Context, HashValue);
> -}
> -
> -/**
> -  Allocates and initializes one RSA context for subsequent use.
> -
> -  @return  Pointer to the RSA context that has been initialized.
> -           If the allocations fails, RsaNew() returns NULL.
> -
> -**/
> -VOID *
> -EFIAPI
> -RsaNew (
> -  VOID
> -  )
> -{
> -  if (!InternalIsCryptServiveAvailable ()) {
> -    return FALSE;
> -  }
> -
> -  return mCryptProtocol->RsaNew ();
> -}
> -
> -/**
> -  Release the specified RSA context.
> -
> -  @param[in]  RsaContext  Pointer to the RSA context to be released.
> -
> -**/
> -VOID
> -EFIAPI
> -RsaFree (
> -  IN  VOID  *RsaContext
> -  )
> -{
> -  if (!InternalIsCryptServiveAvailable ()) {
> -    return;
> -  }
> -
> -  mCryptProtocol->RsaFree (RsaContext);
> -}
> -
> -/**
> -  Sets the tag-designated key component into the established RSA context.
> -
> -  This function sets the tag-designated RSA key component into the
> established
> -  RSA context from the user-specified non-negative integer (octet string
> format
> -  represented in RSA PKCS#1).
> -  If BigNumber is NULL, then the specified key component in RSA context is
> cleared.
> -
> -  If RsaContext is NULL, then return FALSE.
> -
> -  @param[in, out]  RsaContext  Pointer to RSA context being set.
> -  @param[in]       KeyTag      Tag of RSA key component being set.
> -  @param[in]       BigNumber   Pointer to octet integer buffer.
> -                               If NULL, then the specified key component in RSA
> -                               context is cleared.
> -  @param[in]       BnSize      Size of big number buffer in bytes.
> -                               If BigNumber is NULL, then it is ignored.
> -
> -  @retval  TRUE   RSA key component was set successfully.
> -  @retval  FALSE  Invalid RSA key component tag.
> -
> -**/
> -BOOLEAN
> -EFIAPI
> -RsaSetKey (
> -  IN OUT  VOID         *RsaContext,
> -  IN      RSA_KEY_TAG  KeyTag,
> -  IN      CONST UINT8  *BigNumber,
> -  IN      UINTN        BnSize
> -  )
> -{
> -  if (!InternalIsCryptServiveAvailable ()) {
> -    return FALSE;
> -  }
> -
> -  return mCryptProtocol->RsaSetKey (RsaContext, KeyTag, BigNumber,
> BnSize);
> -}
> -
> -/**
> -  Verifies the RSA-SSA signature with EMSA-PKCS1-v1_5 encoding scheme
> defined in
> -  RSA PKCS#1.
> -
> -  If RsaContext is NULL, then return FALSE.
> -  If MessageHash is NULL, then return FALSE.
> -  If Signature is NULL, then return FALSE.
> -  If HashSize is not equal to the size of MD5, SHA-1 or SHA-256 digest, then
> return FALSE.
> -
> -  @param[in]  RsaContext   Pointer to RSA context for signature verification.
> -  @param[in]  MessageHash  Pointer to octet message hash to be checked.
> -  @param[in]  HashSize     Size of the message hash in bytes.
> -  @param[in]  Signature    Pointer to RSA PKCS1-v1_5 signature to be verified.
> -  @param[in]  SigSize      Size of signature in bytes.
> -
> -  @retval  TRUE   Valid signature encoded in PKCS1-v1_5.
> -  @retval  FALSE  Invalid signature or invalid RSA context.
> -
> -**/
> -BOOLEAN
> -EFIAPI
> -RsaPkcs1Verify (
> -  IN  VOID         *RsaContext,
> -  IN  CONST UINT8  *MessageHash,
> -  IN  UINTN        HashSize,
> -  IN  CONST UINT8  *Signature,
> -  IN  UINTN        SigSize
> -  )
> -{
> -  if (!InternalIsCryptServiveAvailable ()) {
> -    return FALSE;
> -  }
> -
> -  return mCryptProtocol->RsaPkcs1Verify (
> -                           RsaContext,
> -                           MessageHash,
> -                           HashSize,
> -                           Signature,
> -                           SigSize
> -                           );
> -}
> diff --git a/CryptoPkg/Library/IntrinsicLib/IntrinsicLib.inf
> b/CryptoPkg/Library/IntrinsicLib/IntrinsicLib.inf
> index 91e5eb79b2..06c2e2df66 100644
> --- a/CryptoPkg/Library/IntrinsicLib/IntrinsicLib.inf
> +++ b/CryptoPkg/Library/IntrinsicLib/IntrinsicLib.inf
> @@ -24,7 +24,7 @@
>  #
>  # The following information is for reference only and not required by the
> build tools.
>  #
> -#  VALID_ARCHITECTURES           = IA32 X64 IPF
> +#  VALID_ARCHITECTURES           = IA32 X64
>  #
> 
>  [Sources]
> @@ -47,15 +47,6 @@
>  [Sources.X64]
>    CopyMem.c
> 
> -[Sources.IPF]
> -  CopyMem.c | MSFT
> -  CopyMem.c | INTEL
> -#
> -# In tools_def.txt, GCC rename symbol name memcpy to be CopyMem for
> IPF,
> -# i.e. "DEFINE GCC_IPF_SYMRENAME_FLAGS     = --redefine-sym
> memcpy=CopyMem",
> -# so there will be no source file CopyMem.c for GCC compiler family.
> -#
> -
>  [Packages]
>    MdePkg/MdePkg.dec
> 
> @@ -78,6 +69,4 @@
>     MSFT:RELEASE_*_IA32_CC_FLAGS           == /nologo /c /WX /GS- /W4
> /Gs32768 /D UNICODE /O1b2 /FIAutoGen.h /EHs-c- /GR- /GF
>     MSFT:DEBUG_*_X64_CC_FLAGS              == /nologo /c /WX /GS- /X /W4
> /Gs32768 /D UNICODE /O1b2s /Gy /FIAutoGen.h /EHs-c- /GR- /GF /Zi /Gm
>     MSFT:RELEASE_*_X64_CC_FLAGS            == /nologo /c /WX /GS- /X /W4
> /Gs32768 /D UNICODE /O1b2s /Gy /FIAutoGen.h /EHs-c- /GR- /GF
> -   MSFT:DEBUG_*_IPF_CC_FLAGS              == /nologo /c /WX /GS- /X /W4
> /EHs-c- /GR- /Gy /Os /FIAutoGen.h /QIPF_fr32 /Zi
> -   MSFT:RELEASE_*_IPF_CC_FLAGS            == /nologo /c /WX /GS- /X /W4
> /EHs-c- /GR- /Gy /Os /FIAutoGen.h /QIPF_fr32
>    INTEL:*_*_*_CC_FLAGS                    =  /Oi-
> diff --git a/CryptoPkg/Library/OpensslLib/OpensslLib.inf
> b/CryptoPkg/Library/OpensslLib/OpensslLib.inf
> index 55a6fa362a..8b717eb8ed 100644
> --- a/CryptoPkg/Library/OpensslLib/OpensslLib.inf
> +++ b/CryptoPkg/Library/OpensslLib/OpensslLib.inf
> @@ -24,7 +24,7 @@
>    DEFINE OPENSSL_FLAGS           = -DL_ENDIAN -
> DOPENSSL_SMALL_FOOTPRINT -D_CRT_SECURE_NO_DEPRECATE -
> D_CRT_NONSTDC_NO_DEPRECATE -DNO_SYSLOG
> 
>  #
> -#  VALID_ARCHITECTURES           = IA32 X64 IPF ARM AARCH64
> +#  VALID_ARCHITECTURES           = IA32 X64 ARM AARCH64
>  #
> 
>  [Sources]
> @@ -544,11 +544,9 @@
>    #
>    MSFT:*_*_IA32_CC_FLAGS   = -U_WIN32 -U_WIN64 -U_MSC_VER
> $(OPENSSL_FLAGS) /wd4090 /wd4244 /wd4245 /wd4267 /wd4389 /wd4702
> /wd4706 /wd4819
>    MSFT:*_*_X64_CC_FLAGS    = -U_WIN32 -U_WIN64 -U_MSC_VER
> $(OPENSSL_FLAGS) /wd4090 /wd4244 /wd4245 /wd4267 /wd4306 /wd4389
> /wd4702 /wd4706 /wd4819
> -  MSFT:*_*_IPF_CC_FLAGS    = -U_WIN32 -U_WIN64 -U_MSC_VER
> $(OPENSSL_FLAGS) /wd4090 /wd4244 /wd4245 /wd4267 /wd4306 /wd4389
> /wd4702 /wd4706 /wd4819
> 
>    INTEL:*_*_IA32_CC_FLAGS  = -U_WIN32 -U_WIN64 -U_MSC_VER -U__ICC
> $(OPENSSL_FLAGS) /w
>    INTEL:*_*_X64_CC_FLAGS   = -U_WIN32 -U_WIN64 -U_MSC_VER -U__ICC
> $(OPENSSL_FLAGS) /w
> -  INTEL:*_*_IPF_CC_FLAGS   = -U_WIN32 -U_WIN64 -U_MSC_VER -U__ICC
> $(OPENSSL_FLAGS) /w
> 
>    #
>    # Suppress the following build warnings in openssl so we don't break the
> build with -Werror
> @@ -558,7 +556,6 @@
>    #
>    GCC:*_*_IA32_CC_FLAGS    = -U_WIN32 -U_WIN64 $(OPENSSL_FLAGS) -
> Wno-error=maybe-uninitialized
>    GCC:*_*_X64_CC_FLAGS     = -U_WIN32 -U_WIN64 $(OPENSSL_FLAGS) -
> Wno-error=maybe-uninitialized -Wno-error=format -Wno-format -
> DNO_MSABI_VA_FUNCS
> -  GCC:*_*_IPF_CC_FLAGS     = -U_WIN32 -U_WIN64 $(OPENSSL_FLAGS) -
> Wno-error=maybe-uninitialized -Wno-format
>    GCC:*_*_ARM_CC_FLAGS     = $(OPENSSL_FLAGS) -Wno-error=maybe-
> uninitialized
>    GCC:*_*_AARCH64_CC_FLAGS = $(OPENSSL_FLAGS) -Wno-error=maybe-
> uninitialized -Wno-format
> 
> diff --git a/CryptoPkg/Library/OpensslLib/OpensslLibCrypto.inf
> b/CryptoPkg/Library/OpensslLib/OpensslLibCrypto.inf
> index f542998961..c568e4bff1 100644
> --- a/CryptoPkg/Library/OpensslLib/OpensslLibCrypto.inf
> +++ b/CryptoPkg/Library/OpensslLib/OpensslLibCrypto.inf
> @@ -24,7 +24,7 @@
>    DEFINE OPENSSL_FLAGS           = -DL_ENDIAN -
> DOPENSSL_SMALL_FOOTPRINT -D_CRT_SECURE_NO_DEPRECATE -
> D_CRT_NONSTDC_NO_DEPRECATE -DNO_SYSLOG
> 
>  #
> -#  VALID_ARCHITECTURES           = IA32 X64 IPF ARM AARCH64
> +#  VALID_ARCHITECTURES           = IA32 X64 ARM AARCH64
>  #
> 
>  [Sources]
> @@ -505,11 +505,9 @@
>    #
>    MSFT:*_*_IA32_CC_FLAGS   = -U_WIN32 -U_WIN64 -U_MSC_VER
> $(OPENSSL_FLAGS) /wd4090 /wd4244 /wd4245 /wd4267 /wd4389 /wd4702
> /wd4706 /wd4819
>    MSFT:*_*_X64_CC_FLAGS    = -U_WIN32 -U_WIN64 -U_MSC_VER
> $(OPENSSL_FLAGS) /wd4090 /wd4244 /wd4245 /wd4267 /wd4306 /wd4389
> /wd4702 /wd4706 /wd4819
> -  MSFT:*_*_IPF_CC_FLAGS    = -U_WIN32 -U_WIN64 -U_MSC_VER
> $(OPENSSL_FLAGS) /wd4090 /wd4244 /wd4245 /wd4267 /wd4306 /wd4389
> /wd4702 /wd4706 /wd4819
> 
>    INTEL:*_*_IA32_CC_FLAGS  = -U_WIN32 -U_WIN64 -U_MSC_VER -U__ICC
> $(OPENSSL_FLAGS) /w
>    INTEL:*_*_X64_CC_FLAGS   = -U_WIN32 -U_WIN64 -U_MSC_VER -U__ICC
> $(OPENSSL_FLAGS) /w
> -  INTEL:*_*_IPF_CC_FLAGS   = -U_WIN32 -U_WIN64 -U_MSC_VER -U__ICC
> $(OPENSSL_FLAGS) /w
> 
>    #
>    # Suppress the following build warnings in openssl so we don't break the
> build with -Werror
> @@ -519,7 +517,6 @@
>    #
>    GCC:*_*_IA32_CC_FLAGS    = -U_WIN32 -U_WIN64 $(OPENSSL_FLAGS) -
> Wno-error=maybe-uninitialized
>    GCC:*_*_X64_CC_FLAGS     = -U_WIN32 -U_WIN64 $(OPENSSL_FLAGS) -
> Wno-error=maybe-uninitialized -Wno-error=format -Wno-format -
> DNO_MSABI_VA_FUNCS
> -  GCC:*_*_IPF_CC_FLAGS     = -U_WIN32 -U_WIN64 $(OPENSSL_FLAGS) -
> Wno-error=maybe-uninitialized -Wno-format
>    GCC:*_*_ARM_CC_FLAGS     = $(OPENSSL_FLAGS) -Wno-error=maybe-
> uninitialized
>    GCC:*_*_AARCH64_CC_FLAGS = $(OPENSSL_FLAGS) -Wno-error=maybe-
> uninitialized -Wno-format
> 
> diff --git a/CryptoPkg/Library/TlsLib/TlsLib.inf
> b/CryptoPkg/Library/TlsLib/TlsLib.inf
> index 4dacb2fab0..97eb6266ce 100644
> --- a/CryptoPkg/Library/TlsLib/TlsLib.inf
> +++ b/CryptoPkg/Library/TlsLib/TlsLib.inf
> @@ -25,7 +25,7 @@
>  #
>  # The following information is for reference only and not required by the
> build tools.
>  #
> -#  VALID_ARCHITECTURES           = IA32 X64 IPF ARM AARCH64
> +#  VALID_ARCHITECTURES           = IA32 X64 ARM AARCH64
>  #
> 
>  [Sources]
> --
> 2.16.2.windows.1



      reply	other threads:[~2018-06-13  8:10 UTC|newest]

Thread overview: 2+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2018-06-13  3:43 [PATCH 08/37] CryptoPkg: Removing ipf which is no longer supported from edk2 chenc2
2018-06-13  8:10 ` Long, Qin [this message]

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-list from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=BF2CCE9263284D428840004653A28B6E54130571@SHSMSX103.ccr.corp.intel.com \
    --to=devel@edk2.groups.io \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox