]> Cypherpunks repositories - gostls13.git/commit
crypto: implement fips140=only mode
authorFilippo Valsorda <filippo@golang.org>
Fri, 22 Nov 2024 03:21:12 +0000 (04:21 +0100)
committerGopher Robot <gobot@golang.org>
Fri, 22 Nov 2024 03:48:06 +0000 (03:48 +0000)
commitb299e9a44f298e72815ca0513bcc6ccca075f3fc
treeed61881d01d27c7b71552d632cb10a9e30656d47
parent07b42666051841352077c0d04ba67d510247fd1d
crypto: implement fips140=only mode

Running the test suite in this mode is definitely not an option. Testing
this will probably look like a very long test that tries all functions.
Filed #70514 to track the tests.

For #70123

Change-Id: I6f67de83da37dd1e94e620b7f4f4f6aabe040c41
Reviewed-on: https://go-review.googlesource.com/c/go/+/631018
Reviewed-by: Dmitri Shuralyov <dmitshur@google.com>
Auto-Submit: Filippo Valsorda <filippo@golang.org>
Reviewed-by: Roland Shoemaker <roland@golang.org>
Reviewed-by: Daniel McCarney <daniel@binaryparadox.net>
LUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>
19 files changed:
src/crypto/cipher/cfb.go
src/crypto/cipher/gcm.go
src/crypto/cipher/ofb.go
src/crypto/des/cipher.go
src/crypto/dsa/dsa.go
src/crypto/ecdh/x25519.go
src/crypto/ecdsa/ecdsa_legacy.go
src/crypto/ed25519/ed25519.go
src/crypto/hkdf/hkdf.go
src/crypto/hmac/hmac.go
src/crypto/internal/fips140only/fips140only.go [new file with mode: 0644]
src/crypto/md5/md5.go
src/crypto/pbkdf2/pbkdf2.go
src/crypto/rand/util.go
src/crypto/rc4/rc4.go
src/crypto/rsa/fips.go
src/crypto/rsa/pkcs1v15.go
src/crypto/sha1/sha1.go
src/go/build/deps_test.go