diff options
Diffstat (limited to 'src')
| -rw-r--r-- | src/crypto/internal/fips140test/fips_test.go | 18 |
1 files changed, 18 insertions, 0 deletions
diff --git a/src/crypto/internal/fips140test/fips_test.go b/src/crypto/internal/fips140test/fips_test.go index 81ccd0cf7f..3ed6152ea3 100644 --- a/src/crypto/internal/fips140test/fips_test.go +++ b/src/crypto/internal/fips140test/fips_test.go @@ -240,6 +240,13 @@ func TestFIPS140(t *testing.T) { fatalIfErr(t, err) }) + t.Run("RSA KeyGen w/ small key [NOT APPROVED]", func(t *testing.T) { + ensureServiceIndicatorFalse(t) + _, err := rsa.GenerateKey(rand.Reader, 512) + fatalIfErr(t, err) + t.Log("RSA key generated") + }) + t.Run("KTS IFC OAEP", func(t *testing.T) { ensureServiceIndicator(t) c, err := rsa.EncryptOAEP(sha256.New(), sha256.New(), rand.Reader, rsaKey.PublicKey(), plaintextSHA256, nil) @@ -423,6 +430,17 @@ func ensureServiceIndicator(t *testing.T) { }) } +func ensureServiceIndicatorFalse(t *testing.T) { + fips140.ResetServiceIndicator() + t.Cleanup(func() { + if !fips140.ServiceIndicator() { + t.Logf("Service indicator is not set") + } else { + t.Errorf("Service indicator is set") + } + }) +} + func fatalIfErr(t *testing.T, err error) { t.Helper() if err != nil { |