deps: add blst and upgrade crypto deps

Author: 0x0ece

deps.sh

@@ -135,10 +135,11 @@ fetch () {
   fi
   checkout_repo zstd      https://github.com/facebook/zstd          "v1.5.6"
   checkout_repo lz4       https://github.com/lz4/lz4                "v1.10.0"
-  checkout_repo s2n       https://github.com/awslabs/s2n-bignum     "" "efa579c"
+  checkout_repo s2n       https://github.com/awslabs/s2n-bignum     "" "4d2e22a"
   #checkout_repo openssl   https://github.com/openssl/openssl        "openssl-3.3.1"
   checkout_repo secp256k1 https://github.com/bitcoin-core/secp256k1 "v0.6.0"
   if [[ $DEVMODE == 1 ]]; then
+    checkout_repo blst      https://github.com/supranational/blst     "v0.3.14"
     checkout_repo rocksdb   https://github.com/facebook/rocksdb       "v9.7.4"
     checkout_repo snappy    https://github.com/google/snappy          "1.2.1"
   fi
@@ -393,13 +394,30 @@ install_s2n () {
   echo "[+] Successfully installed s2n-bignum"
 }
 
+install_blst () {
+  cd "$PREFIX/git/blst"
+
+  echo "[+] Installing blst to $PREFIX"
+
+  # this is copied from ./build.sh:27
+  CFLAGS=${CFLAGS:--O2 -fno-builtin -fPIC -Wall -Wextra -Werror}
+  # this adds our flags, e.g. for MSAN
+  CFLAGS+=" $EXTRA_CFLAGS"
+
+  CFLAGS=$CFLAGS ./build.sh
+  cp libblst.a "$PREFIX/lib"
+  cp bindings/*.h "$PREFIX/include"
+  echo "[+] Successfully installed blst"
+}
+
 install_secp256k1 () {
   cd "$PREFIX/git/secp256k1"
 
   echo "[+] Configuring secp256k1"
   rm -rf build
   mkdir build
   cd build
+  # https://github.com/bitcoin-core/secp256k1/blob/master/CMakeLists.txt#L59
   cmake .. \
     -G"Unix Makefiles" \
     -DCMAKE_INSTALL_PREFIX:PATH="$PREFIX" \
@@ -410,6 +428,7 @@ install_secp256k1 () {
     -DSECP256K1_BUILD_BENCHMARK=OFF \
     -DSECP256K1_DISABLE_SHARED=OFF \
     -DBUILD_SHARED_LIBS=OFF \
+    -DSECP256K1_ENABLE_MODULE_ECDH=OFF \
     -DSECP256K1_ENABLE_MODULE_RECOVERY=ON \
     -DSECP256K1_ENABLE_MODULE_EXTRAKEYS=OFF \
     -DSECP256K1_ENABLE_MODULE_SCHNORRSIG=OFF \
@@ -578,6 +597,7 @@ install () {
   #( install_openssl   )
   ( install_secp256k1 )
   if [[ $DEVMODE == 1 ]]; then
+    ( install_blst      )
     ( install_snappy    )
     ( install_rocksdb   )
   fi