extend security options for windows build

Signed-off-by: Marcel Cornu <marcel.d.cornu@intel.com>

Makefile.nmake

@@ -267,7 +267,7 @@ objs = \
 INCLUDES  = -I./ -Isha1_mb/ -Isha256_mb/ -Isha512_mb/ -Imd5_mb/ -Imh_sha1/ -Imh_sha1_murmur3_x64_128/ -Imh_sha256/ -Irolling_hash/ -Ism3_mb/ -Iaes/ -Iinclude/ -Iintel-ipsec-mb/lib
 # Modern asm feature level, consider upgrading nasm before decreasing feature_level
 FEAT_FLAGS = -DAS_FEATURE_LEVEL=10
-CFLAGS_REL = -O2 -DNDEBUG /Z7 /Gy
+CFLAGS_REL = -O2 -DNDEBUG /Z7 /Gy /ZH:SHA_256 /guard:cf
 CFLAGS_DBG = -Od -DDEBUG /Z7
 
 !if "$(CONFIG)" == "DEBUG"
@@ -276,7 +276,7 @@ CFLAGS=$(CFLAGS_DBG)
 CFLAGS=$(CFLAGS_REL)
 !endif
 
-LINKFLAGS  = -nologo -incremental:no -debug
+LINKFLAGS  = -nologo -incremental:no -debug -guard:cf -DYNAMICBASE
 CFLAGS     = $(CFLAGS) -nologo -D_USE_MATH_DEFINES -DNO_COMPAT_ISAL_CRYPTO_API_2_24 $(FEAT_FLAGS) $(INCLUDES) $(D) /W3
 AFLAGS     = -f win64 $(FEAT_FLAGS) $(INCLUDES) $(D)
 CC         = cl