//go:build boringcrypto

// Package fipsonly restricts all TLS configuration to FIPS-approved settings.
//
// The effect is triggered by importing the package anywhere in a program, as in:
//
//	import _ "crypto/tls/fipsonly"
//
// This package only exists when using Go compiled with GOEXPERIMENT=boringcrypto.
package fipsonly

// This functionality is provided as a side effect of an import to make

// the final binary. The functions themselves are no-ops.
package sig

// BoringCrypto indicates that the BoringCrypto module is present.
func BoringCrypto()

// FIPSOnly indicates that package crypto/tls/fipsonly is present.
func FIPSOnly()

// StandardCrypto indicates that standard Go crypto is present.

	BYTE $0x3e; BYTE $0x99; BYTE $0xc5; BYTE $0x9c;
	BYTE $0xf9; BYTE $0x11; BYTE $0xcb; BYTE $0x8e;
	BYTE $0x80; BYTE $0xda;  BYTE $0xf1; BYTE $0x2f;
	END

// FIPSOnly indicates that crypto/tls/fipsonly is present.
TEXT ·FIPSOnly(SB),NOSPLIT,$0
	START
	BYTE $0x36; BYTE $0x3C; BYTE $0xB9; BYTE $0xCE;
	BYTE $0x9D; BYTE $0x68; BYTE $0x04; BYTE $0x7D;
	BYTE $0x31; BYTE $0xF2; BYTE $0x8D; BYTE $0x32;

// Copyright 2017 The Go Authors. All rights reserved.
// Use of this source code is governed by a BSD-style
// license that can be found in the LICENSE file.

//go:build boringcrypto

package fipsonly

import (
	"crypto/internal/boring/fipstls"
	"testing"
)

func Test(t *testing.T) {
	if !fipstls.Required() {
		t.Fatal("fipstls.Required() = false, must be true")
	}

// search a particular binary to see if they are present.
// On other platforms (those using this source file), they don't.

//go:build !amd64

TEXT ·BoringCrypto(SB),$0
	RET

TEXT ·FIPSOnly(SB),$0
	RET

TEXT ·StandardCrypto(SB),$0

	NONE < crypto/internal/boring/sig, crypto/internal/boring/syso;
	sync/atomic < crypto/internal/boring/bcache, crypto/internal/boring/fipstls;
	crypto/internal/boring/sig, crypto/internal/boring/fipstls < crypto/tls/fipsonly;

	# CRYPTO is core crypto algorithms - no cgo, fmt, net.
	crypto/internal/boring/sig,
	crypto/internal/boring/syso,
	golang.org/x/sys/cpu,
	hash, embed
	< crypto
	< crypto/subtle