aboutsummaryrefslogtreecommitdiff
path: root/crypto/self_test.cc
AgeCommit message (Collapse)AuthorFilesLines
2019-10-01Use a smaller hex digest in FIPS flag files when SHA-256 used.Adam Langley1-2/+1
1458b49a9e5 switched to using HMAC-SHA256 for FIPS integrity checks on Android. However, the flag file was named after a full 64-byte hex digest. The additional 32 bytes weren't uninitialised, but are still superfluous. This change gets rid of them. Change-Id: I192af9eb2b94833cdea3620a153d4fd05c7265b9 Reviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/37864 Commit-Queue: Adam Langley <agl@google.com> Reviewed-by: David Benjamin <davidben@google.com>
2019-08-23Add self-test suppression flag file for Android FIPS builds.Adam Langley1-1/+2
FIPS IG 9.11 allows for a shared library to skip running self tests if they have already run successfully for a given module and environment. This change has Android FIPS builds read and write a flag file in /dev/boringssl to implement this. The flag file is named after the hash of the module to ensure specificity. Change-Id: I5c4e7b6244831746e61c5f78f703b0b4fb0ddd10 Reviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/37204 Reviewed-by: Adam Langley <agl@google.com> Reviewed-by: David Benjamin <davidben@google.com> Commit-Queue: Adam Langley <agl@google.com>
2018-01-22Extract FIPS KAT tests into a function.Adam Langley1-0/+24
This change adds |BORINGSSL_self_test|, which allows applications to run the FIPS KAT tests on demand, even in non-FIPS builds. Change-Id: I950b30a02ab030d5e05f2d86148beb4ee1b5929c Reviewed-on: https://boringssl-review.googlesource.com/25044 Commit-Queue: Adam Langley <agl@google.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org> Reviewed-by: David Benjamin <davidben@google.com>