123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637 |
- #!/usr/bin/env bash
- MAKE="${MAKE:-make}"
- GIT="${GIT:-git -c advice.detachedHead=false}"
- TEST_DIR="${TEST_DIR:-XXX-fips-test}"
- case "$TEST_DIR" in
- /*) ;;
- *) TEST_DIR="${PWD}/${TEST_DIR}"
- ;;
- esac
- FLAVOR="${FLAVOR:-linux}"
- KEEP="${KEEP:-no}"
- MAKECHECK=${MAKECHECK:-yes}
- DOCONFIGURE=${DOCONFIGURE:-yes}
- DOAUTOGEN=${DOAUTOGEN:-yes}
- FIPS_REPO="${FIPS_REPO:-git@github.com:wolfssl/fips.git}"
- WOLFSSL_REPO="${WOLFSSL_REPO:-git@github.com:wolfssl/wolfssl.git}"
- Usage() {
- cat <<usageText
- Usage: $0 [flavor] [keep]
- Flavor is one of:
- linuxv2 (FIPSv2, use for Win10)
- fipsv2-OE-ready (ready FIPSv2)
- solaris
- netbsd-selftest
- marvell-linux-selftest
- linuxv5 (current FIPS 140-3)
- fips-ready (ready FIPS 140-3)
- fips-dev (dev FIPS 140-3)
- wolfrand
- wolfentropy
- v6.0.0
- Keep (default off) retains the temp dir $TEST_DIR for inspection.
- Example:
- $0 windows keep
- usageText
- }
- while [ "$1" ]; do
- if [ "$1" = 'keep' ]; then KEEP='yes';
- elif [ "$1" = 'nomakecheck' ]; then MAKECHECK='no';
- elif [ "$1" = 'nodoconfigure' ]; then DOCONFIGURE='no';
- elif [ "$1" = 'noautogen' ]; then DOCONFIGURE='no'; DOAUTOGEN='no';
- else FLAVOR="$1"; fi
- shift
- done
- case "$FLAVOR" in
- linuxv2|fipsv2-OE-ready|solaris)
- FIPS_OPTION='v2'
- FIPS_FILES=(
- 'wolfcrypt/src/fips.c:WCv4-stable'
- 'wolfcrypt/src/fips_test.c:WCv4-stable'
- 'wolfcrypt/src/wolfcrypt_first.c:WCv4-stable'
- 'wolfcrypt/src/wolfcrypt_last.c:WCv4-stable'
- 'wolfssl/wolfcrypt/fips.h:WCv4-stable'
- )
- WOLFCRYPT_FILES=(
- 'wolfcrypt/src/aes.c:WCv4-stable'
- 'wolfcrypt/src/aes_asm.asm:WCv4-stable'
- 'wolfcrypt/src/aes_asm.S:WCv4-stable'
- 'wolfcrypt/src/cmac.c:WCv4-stable'
- 'wolfcrypt/src/des3.c:WCv4-stable'
- 'wolfcrypt/src/dh.c:WCv4-stable'
- 'wolfcrypt/src/ecc.c:WCv4-stable'
- 'wolfcrypt/src/hmac.c:WCv4-stable'
- 'wolfcrypt/src/random.c:WCv4-rng-stable'
- 'wolfcrypt/src/rsa.c:WCv4-stable'
- 'wolfcrypt/src/sha.c:WCv4-stable'
- 'wolfcrypt/src/sha256.c:WCv4-stable'
- 'wolfcrypt/src/sha3.c:WCv4-stable'
- 'wolfcrypt/src/sha512.c:WCv4-stable'
- 'wolfssl/wolfcrypt/aes.h:WCv4-stable'
- 'wolfssl/wolfcrypt/cmac.h:WCv4-stable'
- 'wolfssl/wolfcrypt/des3.h:WCv4-stable'
- 'wolfssl/wolfcrypt/dh.h:WCv4-stable'
- 'wolfssl/wolfcrypt/ecc.h:WCv4-stable'
- 'wolfssl/wolfcrypt/hmac.h:WCv4-stable'
- 'wolfssl/wolfcrypt/random.h:WCv4-rng-stable'
- 'wolfssl/wolfcrypt/rsa.h:WCv4-stable'
- 'wolfssl/wolfcrypt/sha.h:WCv4-stable'
- 'wolfssl/wolfcrypt/sha256.h:WCv4-stable'
- 'wolfssl/wolfcrypt/sha3.h:WCv4-stable'
- 'wolfssl/wolfcrypt/sha512.h:WCv4-stable'
- )
- if [ "$FLAVOR" = 'solaris' ]; then MAKE='gmake'; fi
- ;;
- netbsd-selftest)
-
- FIPS_OPTION='cavp-selftest'
- FIPS_FILES=('wolfcrypt/src/selftest.c:v3.14.2b')
- WOLFCRYPT_FILES=(
- 'wolfcrypt/src/aes.c:v3.14.2'
- 'wolfcrypt/src/dh.c:v3.14.2'
- 'wolfcrypt/src/dsa.c:v3.14.2'
- 'wolfcrypt/src/ecc.c:v3.14.2'
- 'wolfcrypt/src/hmac.c:v3.14.2'
- 'wolfcrypt/src/random.c:v3.14.2'
- 'wolfcrypt/src/rsa.c:v3.14.2'
- 'wolfcrypt/src/sha.c:v3.14.2'
- 'wolfcrypt/src/sha256.c:v3.14.2'
- 'wolfcrypt/src/sha512.c:v3.14.2'
- 'wolfssl/wolfcrypt/aes.h:v3.14.2'
- 'wolfssl/wolfcrypt/dh.h:v3.14.2'
- 'wolfssl/wolfcrypt/dsa.h:v3.14.2'
- 'wolfssl/wolfcrypt/ecc.h:v3.14.2'
- 'wolfssl/wolfcrypt/hmac.h:v3.14.2'
- 'wolfssl/wolfcrypt/random.h:v3.14.2'
- 'wolfssl/wolfcrypt/rsa.h:v3.14.2'
- 'wolfssl/wolfcrypt/sha.h:v3.14.2'
- 'wolfssl/wolfcrypt/sha256.h:v3.14.2'
- 'wolfssl/wolfcrypt/sha512.h:v3.14.2'
- )
- ;;
- marvell-linux-selftest)
-
- FIPS_OPTION='cavp-selftest-v2'
- FIPS_FILES=('wolfcrypt/src/selftest.c:v3.14.2b')
- WOLFCRYPT_FILES=(
- 'wolfcrypt/src/aes.c:v4.1.0-stable'
- 'wolfcrypt/src/dh.c:v4.1.0-stable'
- 'wolfcrypt/src/dsa.c:v4.1.0-stable'
- 'wolfcrypt/src/ecc.c:v4.1.0-stable'
- 'wolfcrypt/src/hmac.c:v4.1.0-stable'
- 'wolfcrypt/src/random.c:v4.1.0-stable'
- 'wolfcrypt/src/rsa.c:v4.1.0-stable'
- 'wolfcrypt/src/sha.c:v4.1.0-stable'
- 'wolfcrypt/src/sha256.c:v4.1.0-stable'
- 'wolfcrypt/src/sha512.c:v4.1.0-stable'
- 'wolfssl/wolfcrypt/aes.h:v4.1.0-stable'
- 'wolfssl/wolfcrypt/dh.h:v4.1.0-stable'
- 'wolfssl/wolfcrypt/dsa.h:v4.1.0-stable'
- 'wolfssl/wolfcrypt/ecc.h:v4.1.0-stable'
- 'wolfssl/wolfcrypt/hmac.h:v4.1.0-stable'
- 'wolfssl/wolfcrypt/random.h:v4.1.0-stable'
- 'wolfssl/wolfcrypt/rsa.h:v4.1.0-stable'
- 'wolfssl/wolfcrypt/sha.h:v4.1.0-stable'
- 'wolfssl/wolfcrypt/sha256.h:v4.1.0-stable'
- 'wolfssl/wolfcrypt/sha512.h:v4.1.0-stable'
- )
- ;;
- linuxv5-RC12)
- FIPS_OPTION='v5-RC12'
- FIPS_FILES=(
- 'wolfcrypt/src/fips.c:WCv5.2.0.1-RC01'
- 'wolfcrypt/src/fips_test.c:WCv5.0-RC12'
- 'wolfcrypt/src/wolfcrypt_first.c:WCv5.0-RC12'
- 'wolfcrypt/src/wolfcrypt_last.c:WCv5.0-RC12'
- 'wolfssl/wolfcrypt/fips.h:WCv5.0-RC12'
- )
- WOLFCRYPT_FILES=(
- 'wolfcrypt/src/aes.c:WCv5.0-RC12'
- 'wolfcrypt/src/aes_asm.asm:WCv5.0-RC12'
- 'wolfcrypt/src/aes_asm.S:WCv5.0-RC12'
- 'wolfcrypt/src/aes_gcm_asm.S:WCv5.0-RC12'
- 'wolfcrypt/src/cmac.c:WCv5.0-RC12'
- 'wolfcrypt/src/dh.c:WCv5.0-RC12'
- 'wolfcrypt/src/ecc.c:WCv5.0-RC12'
- 'wolfcrypt/src/hmac.c:WCv5.0-RC12'
- 'wolfcrypt/src/kdf.c:WCv5.0-RC12'
- 'wolfcrypt/src/random.c:WCv5.0-RC12'
- 'wolfcrypt/src/rsa.c:WCv5.0-RC12'
- 'wolfcrypt/src/sha.c:WCv5.0-RC12'
- 'wolfcrypt/src/sha256.c:WCv5.0-RC12'
- 'wolfcrypt/src/sha256_asm.S:WCv5.0-RC12'
- 'wolfcrypt/src/sha3.c:WCv5.0-RC12'
- 'wolfcrypt/src/sha512.c:WCv5.0-RC12'
- 'wolfcrypt/src/sha512_asm.S:WCv5.0-RC12'
- 'wolfssl/wolfcrypt/aes.h:WCv5.0-RC12'
- 'wolfssl/wolfcrypt/cmac.h:WCv5.0-RC12'
- 'wolfssl/wolfcrypt/dh.h:WCv5.0-RC12'
- 'wolfssl/wolfcrypt/ecc.h:WCv5.0-RC12'
- 'wolfssl/wolfcrypt/fips_test.h:WCv5.0-RC12'
- 'wolfssl/wolfcrypt/hmac.h:WCv5.0-RC12'
- 'wolfssl/wolfcrypt/kdf.h:WCv5.0-RC12'
- 'wolfssl/wolfcrypt/random.h:WCv5.0-RC12'
- 'wolfssl/wolfcrypt/rsa.h:WCv5.0-RC12'
- 'wolfssl/wolfcrypt/sha.h:WCv5.0-RC12'
- 'wolfssl/wolfcrypt/sha256.h:WCv5.0-RC12'
- 'wolfssl/wolfcrypt/sha3.h:WCv5.0-RC12'
- 'wolfssl/wolfcrypt/sha512.h:WCv5.0-RC12'
- )
- ;;
- linuxv5|linuxv5.2.1)
- FIPS_OPTION='v5'
- FIPS_FILES=(
- 'wolfcrypt/src/fips.c:v5.2.1-stable'
- 'wolfcrypt/src/fips_test.c:v5.2.1-stable'
- 'wolfcrypt/src/wolfcrypt_first.c:v5.2.1-stable'
- 'wolfcrypt/src/wolfcrypt_last.c:v5.2.1-stable'
- 'wolfssl/wolfcrypt/fips.h:v5.2.1-stable-OS_Seed-HdrOnly'
- )
- WOLFCRYPT_FILES=(
- 'wolfcrypt/src/aes.c:v5.2.1-stable'
- 'wolfcrypt/src/aes_asm.asm:v5.2.1-stable'
- 'wolfcrypt/src/aes_asm.S:v5.2.1-stable'
- 'wolfcrypt/src/aes_gcm_asm.S:v5.2.1-stable'
- 'wolfcrypt/src/cmac.c:v5.2.1-stable'
- 'wolfcrypt/src/dh.c:v5.2.1-stable'
- 'wolfcrypt/src/ecc.c:v5.2.1-stable'
- 'wolfcrypt/src/hmac.c:v5.2.1-stable'
- 'wolfcrypt/src/kdf.c:v5.2.1-stable'
- 'wolfcrypt/src/random.c:v5.2.1-stable'
- 'wolfcrypt/src/rsa.c:v5.2.1-stable'
- 'wolfcrypt/src/sha.c:v5.2.1-stable'
- 'wolfcrypt/src/sha256.c:v5.2.1-stable'
- 'wolfcrypt/src/sha256_asm.S:v5.2.1-stable'
- 'wolfcrypt/src/sha3.c:v5.2.1-stable'
- 'wolfcrypt/src/sha512.c:v5.2.1-stable'
- 'wolfcrypt/src/sha512_asm.S:v5.2.1-stable'
- 'wolfssl/wolfcrypt/aes.h:v5.2.1-stable'
- 'wolfssl/wolfcrypt/cmac.h:v5.2.1-stable'
- 'wolfssl/wolfcrypt/dh.h:v5.2.1-stable'
- 'wolfssl/wolfcrypt/ecc.h:v5.2.1-stable'
- 'wolfssl/wolfcrypt/fips_test.h:v5.2.1-stable'
- 'wolfssl/wolfcrypt/hmac.h:v5.2.1-stable'
- 'wolfssl/wolfcrypt/kdf.h:v5.2.1-stable'
- 'wolfssl/wolfcrypt/random.h:v5.2.1-stable-OS_Seed-HdrOnly'
- 'wolfssl/wolfcrypt/rsa.h:v5.2.1-stable'
- 'wolfssl/wolfcrypt/sha.h:v5.2.1-stable'
- 'wolfssl/wolfcrypt/sha256.h:v5.2.1-stable'
- 'wolfssl/wolfcrypt/sha3.h:v5.2.1-stable'
- 'wolfssl/wolfcrypt/sha512.h:v5.2.1-stable'
- )
- ;;
- v6.0.0)
- WOLF_REPO_TAG='WCv6.0.0-RC1'
- FIPS_REPO_TAG='WCv6.0.0-RC1'
- ASM_PICKUPS_TAG='WCv6.0.0-RC2'
- FIPS_OPTION='v6'
- FIPS_FILES=(
- "wolfcrypt/src/fips.c:${FIPS_REPO_TAG}"
- "wolfcrypt/src/fips_test.c:${FIPS_REPO_TAG}"
- "wolfcrypt/src/wolfcrypt_first.c:${FIPS_REPO_TAG}"
- "wolfcrypt/src/wolfcrypt_last.c:${FIPS_REPO_TAG}"
- "wolfssl/wolfcrypt/fips.h:${FIPS_REPO_TAG}"
- )
- WOLFCRYPT_FILES=(
- "wolfcrypt/src/aes_asm.asm:${WOLF_REPO_TAG}"
- "wolfcrypt/src/aes_asm.S:${WOLF_REPO_TAG}"
- "wolfcrypt/src/aes_gcm_asm.S:${WOLF_REPO_TAG}"
- "wolfcrypt/src/aes_gcm_x86_asm.S:${WOLF_REPO_TAG}"
- "wolfcrypt/src/aes_xts_asm.S:${WOLF_REPO_TAG}"
- "wolfcrypt/src/aes.c:${WOLF_REPO_TAG}"
- "wolfcrypt/src/port/arm/armv8-32-aes-asm_c.c:${ASM_PICKUPS_TAG}"
- "wolfcrypt/src/port/arm/armv8-32-aes-asm.S:${WOLF_REPO_TAG}"
- "wolfcrypt/src/port/arm/armv8-32-curve25519_c.c:${ASM_PICKUPS_TAG}"
- "wolfcrypt/src/port/arm/armv8-32-curve25519.S:${WOLF_REPO_TAG}"
- "wolfcrypt/src/port/arm/armv8-32-sha256-asm_c.c:${ASM_PICKUPS_TAG}"
- "wolfcrypt/src/port/arm/armv8-32-sha256-asm.S:${WOLF_REPO_TAG}"
- "wolfcrypt/src/port/arm/armv8-32-sha512-asm_c.c:${ASM_PICKUPS_TAG}"
- "wolfcrypt/src/port/arm/armv8-32-sha512-asm.S:${WOLF_REPO_TAG}"
- "wolfcrypt/src/port/arm/armv8-aes.c:${ASM_PICKUPS_TAG}"
- "wolfcrypt/src/port/arm/armv8-curve25519_c.c:${ASM_PICKUPS_TAG}"
- "wolfcrypt/src/port/arm/armv8-curve25519.S:${WOLF_REPO_TAG}"
- "wolfcrypt/src/port/arm/armv8-sha256.c:${WOLF_REPO_TAG}"
- "wolfcrypt/src/port/arm/armv8-sha3-asm_c.c:${ASM_PICKUPS_TAG}"
- "wolfcrypt/src/port/arm/armv8-sha3-asm.S:${ASM_PICKUPS_TAG}"
- "wolfcrypt/src/port/arm/armv8-sha512-asm_c.c:${ASM_PICKUPS_TAG}"
- "wolfcrypt/src/port/arm/armv8-sha512-asm.S:${WOLF_REPO_TAG}"
- "wolfcrypt/src/port/arm/armv8-sha512.c:${WOLF_REPO_TAG}"
- "wolfcrypt/src/cmac.c:${WOLF_REPO_TAG}"
- "wolfcrypt/src/curve25519.c:${WOLF_REPO_TAG}"
- "wolfcrypt/src/curve448.c:${WOLF_REPO_TAG}"
- "wolfcrypt/src/dh.c:${WOLF_REPO_TAG}"
- "wolfcrypt/src/ecc.c:${WOLF_REPO_TAG}"
- "wolfcrypt/src/ed25519.c:${WOLF_REPO_TAG}"
- "wolfcrypt/src/ed448.c:${WOLF_REPO_TAG}"
- "wolfcrypt/src/hmac.c:${WOLF_REPO_TAG}"
- "wolfcrypt/src/kdf.c:${WOLF_REPO_TAG}"
- "wolfcrypt/src/pwdbased.c:${WOLF_REPO_TAG}"
- "wolfcrypt/src/random.c:${WOLF_REPO_TAG}"
- "wolfcrypt/src/rsa.c:${WOLF_REPO_TAG}"
- "wolfcrypt/src/sha.c:${WOLF_REPO_TAG}"
- "wolfcrypt/src/sha256_asm.S:${WOLF_REPO_TAG}"
- "wolfcrypt/src/sha256.c:${WOLF_REPO_TAG}"
- "wolfcrypt/src/sha3.c:${WOLF_REPO_TAG}"
- "wolfcrypt/src/sha3_asm.S:${WOLF_REPO_TAG}"
- "wolfcrypt/src/sha512_asm.S:${WOLF_REPO_TAG}"
- "wolfcrypt/src/sha512.c:${WOLF_REPO_TAG}"
- "wolfcrypt/src/sp_arm32.c:${ASM_PICKUPS_TAG}"
- "wolfcrypt/src/sp_arm64.c:${ASM_PICKUPS_TAG}"
- "wolfcrypt/src/sp_armthumb.c:${ASM_PICKUPS_TAG}"
- "wolfcrypt/src/sp_c32.c:${ASM_PICKUPS_TAG}"
- "wolfcrypt/src/sp_c64.c:${ASM_PICKUPS_TAG}"
- "wolfcrypt/src/sp_cortexm.c:${ASM_PICKUPS_TAG}"
- "wolfcrypt/src/sp_x86_64_asm.asm:${WOLF_REPO_TAG}"
- "wolfcrypt/src/sp_x86_64_asm.S:${WOLF_REPO_TAG}"
- "wolfcrypt/src/sp_x86_64.c:${ASM_PICKUPS_TAG}"
- "wolfcrypt/src/port/arm/thumb2-aes-asm_c.c:${WOLF_REPO_TAG}"
- "wolfcrypt/src/port/arm/thumb2-aes-asm.S:${WOLF_REPO_TAG}"
- "wolfcrypt/src/port/arm/thumb2-curve25519_c.c:${WOLF_REPO_TAG}"
- "wolfcrypt/src/port/arm/thumb2-curve25519.S:${WOLF_REPO_TAG}"
- "wolfcrypt/src/port/arm/thumb2-sha256-asm_c.c:${WOLF_REPO_TAG}"
- "wolfcrypt/src/port/arm/thumb2-sha256-asm.S:${WOLF_REPO_TAG}"
- "wolfcrypt/src/port/arm/thumb2-sha512-asm_c.c:${WOLF_REPO_TAG}"
- "wolfcrypt/src/port/arm/thumb2-sha512-asm.S:${WOLF_REPO_TAG}"
- "wolfssl/wolfcrypt/aes.h:${WOLF_REPO_TAG}"
- "wolfssl/wolfcrypt/cmac.h:${WOLF_REPO_TAG}"
- "wolfssl/wolfcrypt/curve25519.h:${WOLF_REPO_TAG}"
- "wolfssl/wolfcrypt/curve448.h:${WOLF_REPO_TAG}"
- "wolfssl/wolfcrypt/dh.h:${WOLF_REPO_TAG}"
- "wolfssl/wolfcrypt/ecc.h:${WOLF_REPO_TAG}"
- "wolfssl/wolfcrypt/ed25519.h:${WOLF_REPO_TAG}"
- "wolfssl/wolfcrypt/ed448.h:${WOLF_REPO_TAG}"
- "wolfssl/wolfcrypt/fips_test.h:${WOLF_REPO_TAG}"
- "wolfssl/wolfcrypt/hmac.h:${WOLF_REPO_TAG}"
- "wolfssl/wolfcrypt/kdf.h:${WOLF_REPO_TAG}"
- "wolfssl/wolfcrypt/pwdbased.h:${WOLF_REPO_TAG}"
- "wolfssl/wolfcrypt/random.h:${WOLF_REPO_TAG}"
- "wolfssl/wolfcrypt/rsa.h:${WOLF_REPO_TAG}"
- "wolfssl/wolfcrypt/sha.h:${WOLF_REPO_TAG}"
- "wolfssl/wolfcrypt/sha256.h:${WOLF_REPO_TAG}"
- "wolfssl/wolfcrypt/sha3.h:${WOLF_REPO_TAG}"
- "wolfssl/wolfcrypt/sha512.h:${WOLF_REPO_TAG}"
- )
- ;;
- fips-ready|fips-dev)
- if [ "$FLAVOR" = 'fips-dev' ]; then
- FIPS_OPTION='dev'
- else
- FIPS_OPTION='ready'
- fi
- FIPS_FILES=(
- 'wolfcrypt/src/fips.c:master'
- 'wolfcrypt/src/fips_test.c:master'
- 'wolfcrypt/src/wolfcrypt_first.c:master'
- 'wolfcrypt/src/wolfcrypt_last.c:master'
- 'wolfssl/wolfcrypt/fips.h:master'
- )
- WOLFCRYPT_FILES=()
- ;;
- wolfrand)
- FIPS_OPTION='rand'
- FIPS_FILES=(
- 'wolfcrypt/src/fips.c:WRv4-stable'
- 'wolfcrypt/src/fips_test.c:WRv4-stable'
- 'wolfcrypt/src/wolfcrypt_first.c:WRv4-stable'
- 'wolfcrypt/src/wolfcrypt_last.c:WRv4-stable'
- 'wolfssl/wolfcrypt/fips.h:WRv4-stable'
- )
- WOLFCRYPT_FILES=(
- 'wolfcrypt/src/hmac.c:WCv4-stable'
- 'wolfcrypt/src/random.c:WCv4-rng-stable'
- 'wolfcrypt/src/sha256.c:WCv4-stable'
- 'wolfssl/wolfcrypt/hmac.h:WCv4-stable'
- 'wolfssl/wolfcrypt/random.h:WCv4-rng-stable'
- 'wolfssl/wolfcrypt/sha256.h:WCv4-stable'
- )
- ;;
- wolfentropy)
- FIPS_OPTION='v6'
- FIPS_FILES=(
- 'wolfcrypt/src/fips.c:wolfEntropy1'
- 'wolfcrypt/src/fips_test.c:wolfEntropy1'
- 'wolfcrypt/src/wolfcrypt_first.c:wolfEntropy1'
- 'wolfcrypt/src/wolfcrypt_last.c:wolfEntropy1'
- 'wolfssl/wolfcrypt/fips.h:wolfEntropy1'
- )
- WOLFCRYPT_FILES=(
- 'wolfcrypt/src/aes.c:wolfEntropy1'
- 'wolfcrypt/src/aes_asm.asm:wolfEntropy1'
- 'wolfcrypt/src/aes_asm.S:wolfEntropy1'
- 'wolfcrypt/src/aes_gcm_asm.S:wolfEntropy1'
- 'wolfcrypt/src/ecc.c:wolfEntropy1'
- 'wolfcrypt/src/hmac.c:wolfEntropy1'
- 'wolfcrypt/src/kdf.c:wolfEntropy1'
- 'wolfcrypt/src/random.c:wolfEntropy1'
- 'wolfcrypt/src/sha256.c:wolfEntropy1'
- 'wolfcrypt/src/sha256_asm.S:wolfEntropy1'
- 'wolfcrypt/src/sha3.c:wolfEntropy1'
- 'wolfcrypt/src/sha512.c:wolfEntropy1'
- 'wolfcrypt/src/sha512_asm.S:wolfEntropy1'
- 'wolfssl/wolfcrypt/aes.h:wolfEntropy1'
- 'wolfssl/wolfcrypt/ecc.h:wolfEntropy1'
- 'wolfssl/wolfcrypt/fips_test.h:wolfEntropy1'
- 'wolfssl/wolfcrypt/hmac.h:wolfEntropy1'
- 'wolfssl/wolfcrypt/kdf.h:wolfEntropy1'
- 'wolfssl/wolfcrypt/random.h:wolfEntropy1'
- 'wolfssl/wolfcrypt/sha256.h:wolfEntropy1'
- 'wolfssl/wolfcrypt/sha3.h:wolfEntropy1'
- 'wolfssl/wolfcrypt/sha512.h:wolfEntropy1'
- )
- ;;
- *)
- Usage
- exit 1
- esac
- function checkout_files() {
- local name
- local tag
- for file_entry in "$@"; do
- name=${file_entry%%:*}
- tag=${file_entry#*:}
- if ! $GIT rev-parse -q --verify "my$tag" >/dev/null
- then
- $GIT branch --no-track "my$tag" "$tag" || exit $?
- fi
- $GIT checkout "my$tag" -- "$name" || exit $?
- done
- }
- function copy_fips_files() {
- local name
- local bname
- local dname
- local tag
- for file_entry in "$@"; do
- name=${file_entry%%:*}
- tag=${file_entry#*:}
- bname=$(basename "$name")
- dname=$(dirname "$name")
- if ! $GIT rev-parse -q --verify "my$tag" >/dev/null; then
- $GIT branch --no-track "my$tag" "$tag" || exit $?
- fi
- $GIT checkout "my$tag" -- "$bname" || exit $?
- cp "$bname" "../$dname"
- done
- }
- declare -a WOLFCRYPT_TAGS_NEEDED_UNSORTED WOLFCRYPT_TAGS_NEEDED
- if [ ${#WOLFCRYPT_FILES[@]} -gt 0 ]; then
- for file_entry in "${WOLFCRYPT_FILES[@]}"; do
- WOLFCRYPT_TAGS_NEEDED_UNSORTED+=("${file_entry#*:}")
- done
- while IFS= read -r tag; do WOLFCRYPT_TAGS_NEEDED+=("$tag"); done < <(IFS=$'\n'; sort -u <<< "${WOLFCRYPT_TAGS_NEEDED_UNSORTED[*]}")
- if [ "${#WOLFCRYPT_TAGS_NEEDED[@]}" = "0" ]; then
- echo "Error -- missing wolfCrypt tags." 1>&2
- exit 1
- fi
- fi
- declare -a FIPS_TAGS_NEEDED_UNSORTED FIPS_TAGS_NEEDED
- for file_entry in "${FIPS_FILES[@]}"; do
- FIPS_TAGS_NEEDED_UNSORTED+=("${file_entry#*:}")
- done
- while IFS= read -r tag; do FIPS_TAGS_NEEDED+=("$tag"); done < <(IFS=$'\n'; sort -u <<< "${FIPS_TAGS_NEEDED_UNSORTED[*]}")
- if [ "${#FIPS_TAGS_NEEDED[@]}" = "0" ]; then
- echo "Error -- missing FIPS tags." 1>&2
- exit 1
- fi
- if [ ${#WOLFCRYPT_TAGS_NEEDED[@]} -gt 0 ]; then
- echo "wolfCrypt tag$( [[ ${#WOLFCRYPT_TAGS_NEEDED[@]} != "1" ]] && echo -n 's'):"
-
-
- if [ -f .git/shallow ]; then
- shallow_args=(--depth 1)
- else
- shallow_args=()
- fi
- for tag in "${WOLFCRYPT_TAGS_NEEDED[@]}"; do
- if $GIT describe --long --exact-match "$tag" 2>/dev/null; then
- continue
- fi
- if ! $GIT fetch "${shallow_args[@]}" "$WOLFSSL_REPO" tag "$tag"; then
- echo "Can't fetch wolfCrypt tag: $tag" 1>&2
- exit 1
- fi
-
- $GIT tag "$tag" FETCH_HEAD >/dev/null 2>&1
- done
- fi
- if ! $GIT clone --shared . "$TEST_DIR"; then
- echo "fips-check: Couldn't clone current working directory." 1>&2
- exit 1
- fi
- if [ -d ../fips/.git ]; then
- pushd ../fips 1>/dev/null || exit 2
-
-
- if [ -f .git/shallow ]; then
- shallow_args=(--depth 1)
- else
- shallow_args=()
- fi
- echo "FIPS tag$( [[ ${#FIPS_TAGS_NEEDED[@]} != "1" ]] && echo -n 's'):"
- for tag in "${FIPS_TAGS_NEEDED[@]}"; do
- if [ "$tag" = "master" ]; then
-
- continue
- fi
- if $GIT describe --long --exact-match "$tag" 2>/dev/null; then
- continue
- fi
- if ! $GIT fetch "${shallow_args[@]}" "$FIPS_REPO" tag "$tag"; then
- echo "Can't fetch FIPS tag: $tag" 1>&2
- exit 1
- fi
-
- $GIT tag "$tag" FETCH_HEAD >/dev/null 2>&1
- done
-
-
- if ! $GIT clone --shared --branch master . "${TEST_DIR}/fips"; then
- echo "fips-check: Couldn't clone current working directory." 1>&2
- exit 1
- fi
- popd 1>/dev/null || exit 2
-
- pushd "${TEST_DIR}/fips" 1>/dev/null || exit 2
- if ! $GIT pull "$FIPS_REPO" master; then
- echo "Can't refresh master FIPS tag" 1>&2
- exit 1
- fi
- popd 1>/dev/null || exit 2
- fi
- pushd "$TEST_DIR" 1>/dev/null || exit 2
- if [ ! -d fips ]; then
-
-
- if ! $GIT clone --depth 1 --branch master "$FIPS_REPO" fips; then
- echo "fips-check: Couldn't check out FIPS repository."
- exit 1
- fi
- pushd fips 1>/dev/null || exit 2
- echo "FIPS tag$( [[ ${#FIPS_TAGS_NEEDED[@]} != "1" ]] && echo -n 's'):"
- for tag in "${FIPS_TAGS_NEEDED[@]}"; do
- if [ "$tag" = "master" ]; then
-
- continue
- fi
- if $GIT describe --long --exact-match "$tag" 2>/dev/null; then
- continue
- fi
-
-
- if ! $GIT fetch --depth 1 "$FIPS_REPO" tag "$tag"; then
- echo "Can't fetch FIPS tag: $tag" 1>&2
- exit 1
- fi
-
- $GIT tag "$tag" FETCH_HEAD >/dev/null 2>&1
- done
- popd 1>/dev/null || exit 2
- fi
- checkout_files "${WOLFCRYPT_FILES[@]}" || exit 3
- pushd fips 1>/dev/null || exit 2
- copy_fips_files "${FIPS_FILES[@]}" || exit 3
- popd 1>/dev/null || exit 2
- if [ "$FLAVOR" = 'fipsv2-OE-ready' ] && [ -s wolfcrypt/src/fips.c ]; then
- cp wolfcrypt/src/fips.c wolfcrypt/src/fips.c.bak
- sed "s/v4.0.0-alpha/fipsv2-OE-ready/" wolfcrypt/src/fips.c.bak >wolfcrypt/src/fips.c
- fi
- if [ "$DOAUTOGEN" = "yes" ]; then
- ./autogen.sh
- fi
- if [ "$DOCONFIGURE" = "yes" ]; then
- case "$FIPS_OPTION" in
- cavp-selftest)
- ./configure --enable-selftest
- ;;
- cavp-selftest-v2)
- ./configure --enable-selftest=v2
- ;;
- *)
- ./configure --enable-fips=$FIPS_OPTION
- ;;
- esac
- if ! $MAKE; then
- echo 'fips-check: Make failed. Debris left for analysis.'
- exit 3
- fi
- if [ -s wolfcrypt/src/fips_test.c ]; then
- NEWHASH=$(./wolfcrypt/test/testwolfcrypt | sed -n 's/hash = \(.*\)/\1/p')
- if [ -n "$NEWHASH" ]; then
- cp wolfcrypt/src/fips_test.c wolfcrypt/src/fips_test.c.bak
- sed "s/^\".*\";/\"${NEWHASH}\";/" wolfcrypt/src/fips_test.c.bak >wolfcrypt/src/fips_test.c
- make clean
- fi
- fi
- if [ "$MAKECHECK" = "yes" ]; then
- if ! $MAKE check; then
- echo 'fips-check: Test failed. Debris left for analysis.'
- exit 3
- fi
- fi
- fi
- popd 1>/dev/null || exit 2
- if [ "$KEEP" = 'no' ]; then
- rm -rf "$TEST_DIR"
- fi
|