mirror of
https://github.com/openssl/openssl.git
synced 2026-06-06 20:18:09 +00:00
Simo Sorce
eb58322dc9
This introduces a new function, `SELF_TEST_kats_single()`, to the FIPS provider. This allows for deferring running the Known Answer Tests (KATs) for a specific algorithm. This is useful to avoid running computationally costly tests upfront and instead run them only if the algorithm is actually going to be used. To support this, a `deferred` flag has been added to the test data structures. The main self-test function, `SELF_TEST_kats()`, is updated to skip tests marked for deferred execution, preserving its existing startup behavior for all other tests. Signed-off-by: Simo Sorce <simo@redhat.com> Reviewed-by: Paul Dale <paul.dale@oracle.com> Reviewed-by: Shane Lontis <shane.lontis@oracle.com> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28725)
58 lines
1.7 KiB
C
58 lines
1.7 KiB
C
/*
|
|
* Copyright 2025 The OpenSSL Project Authors. All Rights Reserved.
|
|
*
|
|
* Licensed under the Apache License 2.0 (the "License"). You may not use
|
|
* this file except in compliance with the License. You can obtain a copy
|
|
* in the file LICENSE in the source distribution or at
|
|
* https://www.openssl.org/source/license.html
|
|
*/
|
|
|
|
#ifndef OSSL_INTERNAL_FIPS_H
|
|
# define OSSL_INTERNAL_FIPS_H
|
|
# pragma once
|
|
|
|
# ifdef FIPS_MODULE
|
|
|
|
/* Return 1 if the FIPS self tests are running and 0 otherwise */
|
|
int ossl_fips_self_testing(void);
|
|
|
|
/* Deferred KAT tests categories */
|
|
|
|
/*
|
|
* The Integrity category is used to run test that are required by the
|
|
* integrity check and are a special category that can therefore never
|
|
* really be deferred. Keep it commented here as a reminder.
|
|
* # define FIPS_DEFERRED_KAT_INTEGRITY 0
|
|
*/
|
|
# define FIPS_DEFERRED_KAT_CIPHER 1
|
|
# define FIPS_DEFERRED_KAT_ASYM_CIPHER 2
|
|
# define FIPS_DEFERRED_KAT_ASYM_KEYGEN 3
|
|
# define FIPS_DEFERRED_KAT_KEM 4
|
|
# define FIPS_DEFERRED_KAT_DIGEST 5
|
|
# define FIPS_DEFERRED_KAT_SIGNATURE 6
|
|
# define FIPS_DEFERRED_KAT_KDF 7
|
|
# define FIPS_DEFERRED_KAT_KA 8
|
|
/* Currently unused because all MAC tests are satisfied through other tests */
|
|
# define FIPS_DEFERRED_KAT_MAC 9
|
|
# define FIPS_DEFERRED_DRBG 10
|
|
# define FIPS_DEFERRED_MAX 11
|
|
|
|
struct fips_deferred_test_st {
|
|
const char *algorithm;
|
|
int category;
|
|
int state;
|
|
};
|
|
|
|
# define FIPS_DEFERRED_TEST_INIT 0
|
|
# define FIPS_DEFERRED_TEST_IN_PROGRESS 1
|
|
# define FIPS_DEFERRED_TEST_PASSED 2
|
|
# define FIPS_DEFERRED_TEST_FAILED 3
|
|
|
|
typedef struct fips_deferred_test_st FIPS_DEFERRED_TEST;
|
|
|
|
int FIPS_deferred_self_tests(OSSL_LIB_CTX *libctx, FIPS_DEFERRED_TEST tests[]);
|
|
|
|
# endif /* FIPS_MODULE */
|
|
|
|
#endif
|