1
0
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-10-24 04:09:07 +03:00

8 Commits

Author SHA1 Message Date
jackctj117
2cdf44b253 fips-hash: detect in core HMAC digest from fips_test.c
fips-hash.sh now works out the in core integrity digest from the length
of the verifyCore literal in fips_test.c (64 hex SHA-256, 96 hex SHA-384,
128 hex SHA-512), falling back to a WC_SHA256 HMAC type named in the
source for placeholder values. A reported hash of the wrong length is
rejected instead of being written, and the rewrite is verified.

fips-hash-offline.sh gains HMAC-SHA-512 for v7 and checks coreKey
against the per digest key size (128 bytes for v7) instead of assuming
it matches the digest length.
2026-10-13 12:40:50 -06:00
kaleb-himes
432d5e375d Bare minimum change set to stabalize fips-ready 2026-07-16 11:03:07 -06:00
Josh Holtrop
83f46f8284 Add fips-hash-offline.sh
This script calculates the FIPS integrity hash for an already-linked
binary offline at build time.
2026-06-22 15:23:28 -04:00
Lealem Amedie
afa56497a8 Use cut command for portability 2025-12-12 12:31:07 -07:00
Lealem Amedie
7e26bc06c5 Use only the first 64 bytes of hash output in fips-hash.sh 2025-12-12 12:31:07 -07:00
Daniel Pouzzner
1c68da282c portability enhancement: use "#!/usr/bin/env <interpreter>" on all perl scripts and shell scripts that use bash extensions, and use "#!/bin/sh" on the rest. 2024-08-20 13:48:33 -05:00
John Safranek
ba9fd89314 Script Portability
1. The openssl interop test script should check that it should run before
doing anything else.
2. The process to create a random port number was using a non-portable
option to the head command. Changed to use the od tool reading from
/dev/random.
3. Ran into a sed that doesn't use the -i option, so changed it to cp its
own bak file and sed from that.
2020-05-18 09:04:41 -07:00
John Safranek
851a547fd5 FIPS Hash
Add a script that updates the verifyCore value automatically. It isn't
included in the dist like fips-check.sh.
2019-06-24 16:01:05 -07:00