var Enabledbool

funcCAST¶

func CAST(namestring, f func()error)

CAST runs the named Cryptographic Algorithm Self-Test (if operated in FIPSmode) and aborts the program (stopping the module input/output and enteringthe "error state") if the self-test fails.

CASTs are mandatory self-checks that must be performed by FIPS 140-3 modulesbefore the algorithm is used. See Implementation Guidance 10.3.A.

The name must not contain commas, colons, hashes, or equal signs.

If a package p calls CAST from its init function, an import of p should alsobe added to crypto/internal/fips140test. If a package p calls CAST on the firstuse of the algorithm, an invocation of that algorithm should be added tofipstest.TestConditionals.

funcName¶

func Name()string

funcPCT¶

func PCT(namestring, f func()error)

PCT runs the named Pairwise Consistency Test (if operated in FIPS mode) andaborts the program (stopping the module input/output and entering the "errorstate") if the test fails.

PCTs are mandatory for every generated (but not imported) key pair, includingephemeral keys (which effectively doubles the cost of key establishment). SeeImplementation Guidance 10.3.A Additional Comment 1.

The name must not contain commas, colons, hashes, or equal signs.

If a package p calls PCT during key generation, an invocation of thatfunction should be added to fipstest.TestConditionals.

funcRecordApproved¶

func RecordApproved()

RecordApproved is an internal function that records the use of an approvedservice. It does not override RecordNonApproved calls in the same span.

It should be called by exposed functions that perform a whole cryptographicalrgorithm (e.g. by Sum, not by New, unless a cryptographic Instantiatealgorithm is performed) and should be called after any checks that may causethe function to error out or panic.

funcRecordNonApproved¶

func RecordNonApproved()

RecordNonApproved is an internal function that records the use of anon-approved service. It overrides any RecordApproved calls in the same span.

funcResetServiceIndicator¶

func ResetServiceIndicator()

ResetServiceIndicator clears the service indicator for the running goroutine.

funcServiceIndicator¶

func ServiceIndicator()bool

ServiceIndicator returns true if and only if all services invoked by thisgoroutine since the last ResetServiceIndicator call are approved.

If ResetServiceIndicator was not called before by this goroutine, its returnvalue is undefined.

funcSupported¶

func Supported()error

Supported returns an error if FIPS 140-3 mode can't be enabled.

funcVersion¶

func Version()string

Version returns the formal version (such as "v1.0.0") if building against afrozen module with GOFIPS140. Otherwise, it returns "latest".