# MinIO FIPS Builds

MinIO creates FIPS builds using a patched version of the Go compiler (that uses BoringCrypto, from BoringSSL, which is [FIPS 140-2 validated](https://csrc.nist.gov/csrc/media/projects/cryptographic-module-validation-program/documents/security-policies/140sp2964.pdf)) published by the Golang Team [here](https://github.com/golang/go/tree/dev.boringcrypto/misc/boring).

//go:build fips
// +build fips

package sha256

import (
	fipssha256 "crypto/sha256"
	"hash"
)

// New returns a new hash.Hash computing the SHA256 checksum.
// The SHA256 implementation is FIPS 140-2 compliant when the
// boringcrypto branch of Go is used.
// Ref: https://github.com/golang/go/tree/dev.boringcrypto
func New() hash.Hash { return fipssha256.New() }

// Sum256 returns the SHA256 checksum of the data.

// implementations compliant with FIPS 140.
//
// FIPS 140 [1] is a US standard for data processing that specifies
// requirements for cryptographic modules. Software that is "FIPS 140
// compliant" must use approved cryptographic primitives only and that
// are implemented by a FIPS 140 certified cryptographic module.
//
// So, FIPS 140 requires that a certified implementation of e.g. AES

// +build !fips

package sha256

import (
	"hash"

	nofipssha256 "github.com/minio/sha256-simd"
)

// New returns a new hash.Hash computing the SHA256 checksum.
// The SHA256 implementation is not FIPS 140-2 compliant.
func New() hash.Hash { return nofipssha256.New() }

// Sum256 returns the SHA256 checksum of the data.
func Sum256(data []byte) [nofipssha256.Size]byte { return nofipssha256.Sum256(data) }

		}
	}
}

var readerTests = []struct { // Reference values computed by: echo <content> | md5sum
	Content string
	ETag    ETag
}{
	{
		Content: "", ETag: ETag{212, 29, 140, 217, 143, 0, 178, 4, 233, 128, 9, 152, 236, 248, 66, 126},
	},
	{
		Content: " ", ETag: ETag{114, 21, 238, 156, 125, 157, 194, 41, 210, 146, 26, 64, 232, 153, 236, 95},
	},
	{

	_ = x[ErrInvalidEncryptionParameters-136]
	_ = x[ErrInvalidEncryptionParametersSSEC-137]
	_ = x[ErrInvalidSSECustomerAlgorithm-138]
	_ = x[ErrInvalidSSECustomerKey-139]
	_ = x[ErrMissingSSECustomerKey-140]
	_ = x[ErrMissingSSECustomerKeyMD5-141]
	_ = x[ErrSSECustomerKeyMD5Mismatch-142]
	_ = x[ErrInvalidSSECustomerParameters-143]
	_ = x[ErrIncompatibleEncryptionMethod-144]
	_ = x[ErrKMSNotConfigured-145]

lmhurst-Maspeth,4109,621,281,4,Queens,028100,4028100,I,QN28,Jackson Heights,4102^3389460,2,2014-03-29 12:52:18,2014-03-29 13:19:07,N,1,-73.893943786621094,40.747825622558594,-73.956573486328125,40.766941070556641,1,4.63,20,0,0.5,4,0,,,24.5,1,1,129,140,green,1.81,0.0,0.0,59,43,10.74,1295,291,4,Queens,029100,4029100,E,QN28,Jackson Heights,4102,1952,124,1,Manhattan,012400,1012400,I,MN31,Lenox Hill-Roosevelt Island,3805^3389461,2,2014-03-02 04:57:07,2014-03-02 05:05:54,N,1,-73.8936767578125,40.74766...