]> Cypherpunks repositories - gostls13.git/commit
crypto/internal/fips140test: add AES ACVP tests
authorDaniel McCarney <daniel@binaryparadox.net>
Wed, 11 Dec 2024 19:48:00 +0000 (14:48 -0500)
committerGopher Robot <gobot@golang.org>
Fri, 7 Feb 2025 16:58:24 +0000 (08:58 -0800)
commit302bf3631493417b365d693788357973a379a03d
tree08cab7f9c2ef80bfad68327f8e68e8fa234b3a48
parent273db12ceeef8ec74f437ec097474eeda587485d
crypto/internal/fips140test: add AES ACVP tests

Adds ACVP AES test coverage for:

* AES CBC
* AES CTR
* AES GCM (both internal & external iv gen)

For AES key sizes of 128, 192, and 256 bits, based on the NIST spec:

  https://pages.nist.gov/ACVP/draft-celi-acvp-symmetric.html

ECB mode is excluded based on upcoming policy changes forbidding its
use.

Internal IV gen is excluded from the go-acvp static test data since it's
non-deterministic based on the DRBG.

Updates #69642

Change-Id: I34f471725e2f1a2f5d32ab9877bde153abf2db0f
Reviewed-on: https://go-review.googlesource.com/c/go/+/627655
Reviewed-by: Cherry Mui <cherryyz@google.com>
LUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>
Auto-Submit: Filippo Valsorda <filippo@golang.org>
Reviewed-by: Filippo Valsorda <filippo@golang.org>
Reviewed-by: Roland Shoemaker <roland@golang.org>
src/crypto/internal/fips140test/acvp_capabilities.json
src/crypto/internal/fips140test/acvp_test.config.json
src/crypto/internal/fips140test/acvp_test.go