// Its generic security strength is 256 bits against preimage attacks,
// and 128 bits against collision attacks.
func New256() hash.Hash {
	return new256()
}

// New384 creates a new SHA3-384 hash.
// Its generic security strength is 384 bits against preimage attacks,
// and 192 bits against collision attacks.
func New384() hash.Hash {
	return new384()
}

// New512 creates a new SHA3-512 hash.

// Copyright 2014 The Go Authors. All rights reserved.
// Use of this source code is governed by a BSD-style
// license that can be found in the LICENSE file.

package unix

const (
	getrandomTrap       uintptr = 384
	copyFileRangeTrap   uintptr = 391
	pidfdSendSignalTrap uintptr = 424
	pidfdOpenTrap       uintptr = 434

//
//	expiry was changed from 1 year to 100 years (876000h)
//
// ca-csr.json:
//
//	ca expiry was set to 100 years (876000h) ("ca":{"expiry":"876000h"})
//	key was changed from ecdsa,384 to rsa,2048
//
// req-csr.json:
//
//	key was changed from ecdsa,384 to rsa,2048
//	hosts were changed to "localhost","127.0.0.1"
const CAFileContent = `
-----BEGIN CERTIFICATE-----
MIIEUDCCAzigAwIBAgIUKfV5+qwlw3JneAPdJS7JCO8xIlYwDQYJKoZIhvcNAQEL

	MOVD F12, 304(X2)
	MOVD F13, 312(X2)
	MOVD F14, 320(X2)
	MOVD F15, 328(X2)
	MOVD F16, 336(X2)
	MOVD F17, 344(X2)
	MOVD F18, 352(X2)
	MOVD F19, 360(X2)
	MOVD F20, 368(X2)
	MOVD F21, 376(X2)
	MOVD F22, 384(X2)
	MOVD F23, 392(X2)
	MOVD F24, 400(X2)
	MOVD F25, 408(X2)
	MOVD F26, 416(X2)
	MOVD F27, 424(X2)
	MOVD F28, 432(X2)
	MOVD F29, 440(X2)
	MOVD F30, 448(X2)
	MOVD F31, 456(X2)
	CALL ·asyncPreempt2(SB)

			case "P-256":
				pub.Curve = elliptic.P256()
			case "P-384":
				pub.Curve = elliptic.P384()
			case "P-521":
				pub.Curve = elliptic.P521()
			default:
				pub.Curve = nil
			}

			switch hash {
			case "SHA-1":
				h = sha1.New()
			case "SHA-224":
				h = sha256.New224()
			case "SHA-256":
				h = sha256.New()
			case "SHA-384":
				h = sha512.New384()
			case "SHA-512":

	MOVD F11, 304(R3)
	MOVD F12, 312(R3)
	MOVD F13, 320(R3)
	MOVD F14, 328(R3)
	MOVD F15, 336(R3)
	MOVD F16, 344(R3)
	MOVD F17, 352(R3)
	MOVD F18, 360(R3)
	MOVD F19, 368(R3)
	MOVD F20, 376(R3)
	MOVD F21, 384(R3)
	MOVD F22, 392(R3)
	MOVD F23, 400(R3)
	MOVD F24, 408(R3)
	MOVD F25, 416(R3)
	MOVD F26, 424(R3)
	MOVD F27, 432(R3)
	MOVD F28, 440(R3)
	MOVD F29, 448(R3)
	MOVD F30, 456(R3)
	MOVD F31, 464(R3)

	Size224 = 28

	// Size256 is the size, in bytes, of a SHA-512/256 checksum.
	Size256 = 32

	// Size384 is the size, in bytes, of a SHA-384 checksum.
	Size384 = 48

	// BlockSize is the block size, in bytes, of the SHA-512/224,
	// SHA-512/256, SHA-384 and SHA-512 hash functions.
	BlockSize = 128
)

const (
	chunk     = 128
	init0     = 0x6a09e667f3bcc908
	init1     = 0xbb67ae8584caa73b

*/

package parsers

import (
	"fmt"
	//  Import the crypto sha256 algorithm for the docker image parser to work
	_ "crypto/sha256"
	//  Import the crypto/sha512 algorithm for the docker image parser to work with 384 and 512 sha hashes
	_ "crypto/sha512"

	dockerref "github.com/distribution/reference"
)

// ParseImageName parses a docker image string into three parts: repo, tag and digest.

	case SHA224:
		return "SHA-224"
	case SHA256:
		return "SHA-256"
	case SHA384:
		return "SHA-384"
	case SHA512:
		return "SHA-512"
	case MD5SHA1:
		return "MD5+SHA1"
	case RIPEMD160:
		return "RIPEMD-160"
	case SHA3_224:
		return "SHA3-224"
	case SHA3_256:
		return "SHA3-256"
	case SHA3_384:
		return "SHA3-384"
	case SHA3_512:
		return "SHA3-512"
	case SHA512_224:
		return "SHA-512/224"
	case SHA512_256:

func boringAllowCert(c *Certificate) bool {
	if !fipstls.Required() {
		return true
	}

	// The key must be RSA 2048, RSA 3072, RSA 4096,
	// or ECDSA P-256, P-384, P-521.
	switch k := c.PublicKey.(type) {
	default:
		return false
	case *rsa.PublicKey:
		if size := k.N.BitLen(); size != 2048 && size != 3072 && size != 4096 {
			return false
		}
	case *ecdsa.PublicKey: