<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/xhtml;charset=UTF-8"/>
<title>Crypto++: fips140.cpp Source File</title>
<link href="tabs.css" rel="stylesheet" type="text/css"/>
<link href="doxygen.css" rel="stylesheet" type="text/css"/>
</head>
<body>
<!-- Generated by Doxygen 1.7.3 -->
<div id="top">
<div id="titlearea">
<table cellspacing="0" cellpadding="0">
<tbody>
<tr style="height: 56px;">
<td style="padding-left: 0.5em;">
<div id="projectname">Crypto++</div>
</td>
</tr>
</tbody>
</table>
</div>
<div id="navrow1" class="tabs">
<ul class="tablist">
<li><a href="index.html"><span>Main Page</span></a></li>
<li><a href="namespaces.html"><span>Namespaces</span></a></li>
<li><a href="annotated.html"><span>Classes</span></a></li>
<li class="current"><a href="files.html"><span>Files</span></a></li>
</ul>
</div>
<div id="navrow2" class="tabs2">
<ul class="tablist">
<li><a href="files.html"><span>File List</span></a></li>
<li><a href="globals.html"><span>File Members</span></a></li>
</ul>
</div>
<div class="header">
<div class="headertitle">
<h1>fips140.cpp</h1> </div>
</div>
<div class="contents">
<div class="fragment"><pre class="fragment"><a name="l00001"></a>00001 <span class="comment">// fips140.cpp - written and placed in the public domain by Wei Dai</span>
<a name="l00002"></a>00002
<a name="l00003"></a>00003 <span class="preprocessor">#include "pch.h"</span>
<a name="l00004"></a>00004
<a name="l00005"></a>00005 <span class="preprocessor">#ifndef CRYPTOPP_IMPORTS</span>
<a name="l00006"></a>00006 <span class="preprocessor"></span>
<a name="l00007"></a>00007 <span class="preprocessor">#include "<a class="code" href="fips140_8h.html">fips140.h</a>"</span>
<a name="l00008"></a>00008 <span class="preprocessor">#include "trdlocal.h"</span> <span class="comment">// needs to be included last for cygwin</span>
<a name="l00009"></a>00009
<a name="l00010"></a>00010 NAMESPACE_BEGIN(CryptoPP)
<a name="l00011"></a>00011
<a name="l00012"></a>00012 <span class="comment">// Define this to 1 to turn on FIPS 140-2 compliance features, including additional tests during </span>
<a name="l00013"></a>00013 <span class="comment">// startup, random number generation, and key generation. These tests may affect performance.</span>
<a name="l00014"></a>00014 <span class="preprocessor">#ifndef CRYPTOPP_ENABLE_COMPLIANCE_WITH_FIPS_140_2</span>
<a name="l00015"></a>00015 <span class="preprocessor"></span><span class="preprocessor">#define CRYPTOPP_ENABLE_COMPLIANCE_WITH_FIPS_140_2 0</span>
<a name="l00016"></a>00016 <span class="preprocessor"></span><span class="preprocessor">#endif</span>
<a name="l00017"></a>00017 <span class="preprocessor"></span>
<a name="l00018"></a>00018 <span class="preprocessor">#if (CRYPTOPP_ENABLE_COMPLIANCE_WITH_FIPS_140_2 && !defined(THREADS_AVAILABLE))</span>
<a name="l00019"></a>00019 <span class="preprocessor"></span><span class="preprocessor">#error FIPS 140-2 compliance requires the availability of thread local storage.</span>
<a name="l00020"></a>00020 <span class="preprocessor"></span><span class="preprocessor">#endif</span>
<a name="l00021"></a>00021 <span class="preprocessor"></span>
<a name="l00022"></a>00022 <span class="preprocessor">#if (CRYPTOPP_ENABLE_COMPLIANCE_WITH_FIPS_140_2 && !defined(OS_RNG_AVAILABLE))</span>
<a name="l00023"></a>00023 <span class="preprocessor"></span><span class="preprocessor">#error FIPS 140-2 compliance requires the availability of OS provided RNG.</span>
<a name="l00024"></a>00024 <span class="preprocessor"></span><span class="preprocessor">#endif</span>
<a name="l00025"></a>00025 <span class="preprocessor"></span>
<a name="l00026"></a>00026 <a class="code" href="fips140_8h.html#a8ccac50ac3bfc5abaa6cb457f0ded35d" title="enum values representing status of the power-up self test">PowerUpSelfTestStatus</a> g_powerUpSelfTestStatus = POWER_UP_SELF_TEST_NOT_DONE;
<a name="l00027"></a>00027
<a name="l00028"></a><a class="code" href="fips140_8h.html#afcc971af5af431d1528a09f52c195d64">00028</a> <span class="keywordtype">bool</span> FIPS_140_2_ComplianceEnabled()
<a name="l00029"></a>00029 {
<a name="l00030"></a>00030 <span class="keywordflow">return</span> CRYPTOPP_ENABLE_COMPLIANCE_WITH_FIPS_140_2;
<a name="l00031"></a>00031 }
<a name="l00032"></a>00032
<a name="l00033"></a><a class="code" href="fips140_8h.html#a8899256483ab45e1fc1ac856a04495fa">00033</a> <span class="keywordtype">void</span> SimulatePowerUpSelfTestFailure()
<a name="l00034"></a>00034 {
<a name="l00035"></a>00035 g_powerUpSelfTestStatus = POWER_UP_SELF_TEST_FAILED;
<a name="l00036"></a>00036 }
<a name="l00037"></a>00037
<a name="l00038"></a><a class="code" href="fips140_8h.html#a4c02704f811a57301d998fabd8bcf5ae">00038</a> <a class="code" href="fips140_8h.html#a8ccac50ac3bfc5abaa6cb457f0ded35d" title="enum values representing status of the power-up self test">PowerUpSelfTestStatus</a> CRYPTOPP_API GetPowerUpSelfTestStatus()
<a name="l00039"></a>00039 {
<a name="l00040"></a>00040 <span class="keywordflow">return</span> g_powerUpSelfTestStatus;
<a name="l00041"></a>00041 }
<a name="l00042"></a>00042
<a name="l00043"></a>00043 <span class="preprocessor">#if CRYPTOPP_ENABLE_COMPLIANCE_WITH_FIPS_140_2</span>
<a name="l00044"></a>00044 <span class="preprocessor"></span><a class="code" href="class_thread_local_storage.html" title="thread local storage">ThreadLocalStorage</a> & AccessPowerUpSelfTestInProgress()
<a name="l00045"></a>00045 {
<a name="l00046"></a>00046 <span class="keyword">static</span> <a class="code" href="class_thread_local_storage.html" title="thread local storage">ThreadLocalStorage</a> selfTestInProgress;
<a name="l00047"></a>00047 <span class="keywordflow">return</span> selfTestInProgress;
<a name="l00048"></a>00048 }
<a name="l00049"></a>00049 <span class="preprocessor">#endif</span>
<a name="l00050"></a>00050 <span class="preprocessor"></span>
<a name="l00051"></a>00051 <span class="keywordtype">bool</span> PowerUpSelfTestInProgressOnThisThread()
<a name="l00052"></a>00052 {
<a name="l00053"></a>00053 <span class="preprocessor">#if CRYPTOPP_ENABLE_COMPLIANCE_WITH_FIPS_140_2</span>
<a name="l00054"></a>00054 <span class="preprocessor"></span> <span class="keywordflow">return</span> AccessPowerUpSelfTestInProgress().GetValue() != NULL;
<a name="l00055"></a>00055 <span class="preprocessor">#else</span>
<a name="l00056"></a>00056 <span class="preprocessor"></span> assert(<span class="keyword">false</span>); <span class="comment">// should not be called</span>
<a name="l00057"></a>00057 <span class="keywordflow">return</span> <span class="keyword">false</span>;
<a name="l00058"></a>00058 <span class="preprocessor">#endif</span>
<a name="l00059"></a>00059 <span class="preprocessor"></span>}
<a name="l00060"></a>00060
<a name="l00061"></a>00061 <span class="keywordtype">void</span> SetPowerUpSelfTestInProgressOnThisThread(<span class="keywordtype">bool</span> inProgress)
<a name="l00062"></a>00062 {
<a name="l00063"></a>00063 <span class="preprocessor">#if CRYPTOPP_ENABLE_COMPLIANCE_WITH_FIPS_140_2</span>
<a name="l00064"></a>00064 <span class="preprocessor"></span> AccessPowerUpSelfTestInProgress().SetValue((<span class="keywordtype">void</span> *)inProgress);
<a name="l00065"></a>00065 <span class="preprocessor">#endif</span>
<a name="l00066"></a>00066 <span class="preprocessor"></span>}
<a name="l00067"></a>00067
<a name="l00068"></a>00068 <span class="keywordtype">void</span> EncryptionPairwiseConsistencyTest_FIPS_140_Only(<span class="keyword">const</span> <a class="code" href="class_p_k___encryptor.html" title="interface for public-key encryptors">PK_Encryptor</a> &encryptor, <span class="keyword">const</span> <a class="code" href="class_p_k___decryptor.html" title="interface for public-key decryptors">PK_Decryptor</a> &decryptor)
<a name="l00069"></a>00069 {
<a name="l00070"></a>00070 <span class="preprocessor">#if CRYPTOPP_ENABLE_COMPLIANCE_WITH_FIPS_140_2</span>
<a name="l00071"></a>00071 <span class="preprocessor"></span> EncryptionPairwiseConsistencyTest(encryptor, decryptor);
<a name="l00072"></a>00072 <span class="preprocessor">#endif</span>
<a name="l00073"></a>00073 <span class="preprocessor"></span>}
<a name="l00074"></a>00074
<a name="l00075"></a>00075 <span class="keywordtype">void</span> SignaturePairwiseConsistencyTest_FIPS_140_Only(<span class="keyword">const</span> <a class="code" href="class_p_k___signer.html" title="interface for public-key signers">PK_Signer</a> &signer, <span class="keyword">const</span> <a class="code" href="class_p_k___verifier.html" title="interface for public-key signature verifiers">PK_Verifier</a> &verifier)
<a name="l00076"></a>00076 {
<a name="l00077"></a>00077 <span class="preprocessor">#if CRYPTOPP_ENABLE_COMPLIANCE_WITH_FIPS_140_2</span>
<a name="l00078"></a>00078 <span class="preprocessor"></span> SignaturePairwiseConsistencyTest(signer, verifier);
<a name="l00079"></a>00079 <span class="preprocessor">#endif</span>
<a name="l00080"></a>00080 <span class="preprocessor"></span>}
<a name="l00081"></a>00081
<a name="l00082"></a>00082 NAMESPACE_END
<a name="l00083"></a>00083
<a name="l00084"></a>00084 <span class="preprocessor">#endif</span>
</pre></div></div>
</div>
<hr class="footer"/><address class="footer"><small>Generated on Tue Feb 8 2011 for Crypto++ by 
<a href="http://www.doxygen.org/index.html">
<img class="footer" src="doxygen.png" alt="doxygen"/></a> 1.7.3 </small></address>
</body>
</html>
