---
- job:
    name: "elastic+elasticsearch+pull-request+part-2-fips"
    display-name: "elastic / elasticsearch - pull request part-2 fips"
    description: "Testing of Elasticsearch pull requests - part-2 fips"
    workspace: "/dev/shm/elastic+elasticsearch+pull-request+part-2-fips"
    scm:
      - git:
          refspec: "+refs/pull/${ghprbPullId}/*:refs/remotes/origin/pr/${ghprbPullId}/*"
          branches:
            - "${ghprbActualCommit}"

vars:
  - job-name: elastic+elasticsearch+%BRANCH%+periodic+java-fips-matrix
  - job-display-name: "elastic / elasticsearch # %BRANCH% - java fips compatibility matrix"
  - job-description: "Testing of the Elasticsearch %BRANCH% branch java FIPS compatibility matrix.\n"
  - matrix-yaml-file: ".ci/matrix-runtime-javas-fips.yml"
  - matrix-variable: ES_RUNTIME_JAVA

---
jjbb-template: periodic-trigger-lgc.yml
vars:
  - periodic-job: elastic+elasticsearch+%BRANCH%+periodic+java-fips-matrix
  - lgc-job: elastic+elasticsearch+%BRANCH%+intake

property `tests.bwc.git_fetch_latest` to `false` and the BWC builds will skip
fetching the latest from the remote.

== Testing in FIPS 140-2 mode

We have a CI matrix job that periodically runs all our tests with the JVM configured
to be FIPS 140-2 compliant with the use of the BouncyCastle FIPS approved Security Provider.
FIPS 140-2 imposes certain requirements that affect how our tests should be set up or what

  private final int bits;
  private final String toString;

  ChecksumHashFunction(
      ImmutableSupplier<? extends Checksum> checksumSupplier, int bits, String toString) {
    this.checksumSupplier = checkNotNull(checksumSupplier);
    checkArgument(bits == 32 || bits == 64, "bits (%s) must be either 32 or 64", bits);
    this.bits = bits;
    this.toString = checkNotNull(toString);
  }

            byte[] buf = new byte[8];
            int n = in.read(buf);
            assertEquals(3, n);
        }

        @Test
        @DisplayName("read() returns -1 when underlying readDirect hits EOF")
        void readSingleByteEOF() throws Exception {
            // Arrange SMB2 EOF via NT status code mapping in SmbFileInputStream

pkg math/bits (windows-amd64), const UintSize = 64
pkg math/bits, const UintSize ideal-int
pkg math/bits, func LeadingZeros(uint) int
pkg math/bits, func LeadingZeros16(uint16) int
pkg math/bits, func LeadingZeros32(uint32) int
pkg math/bits, func LeadingZeros64(uint64) int
pkg math/bits, func LeadingZeros8(uint8) int
pkg math/bits, func Len(uint) int
pkg math/bits, func Len16(uint16) int
pkg math/bits, func Len32(uint32) int

  /** Checks that the passed argument is positive, and ceils it to a multiple of 32. */
  static int checkPositiveAndMakeMultipleOf32(int bits) {
    checkArgument(bits > 0, "Number of bits must be positive");
    return (bits + 31) & ~31;
  }

  /**
   * Returns a hash function which computes its hash code by concatenating the hash codes of the
   * underlying hash functions together. This can be useful if you need to generate hash codes of a

  switch (dtype.code) {
    case DLDataTypeCode::kDLBool:
      if (dtype.bits != 8) {
        return tensorflow::errors::InvalidArgument(
            "Only DLPack bools of bitwidth 8 are supported, got: ", dtype.bits);
      }
      *tf_dtype = TF_DataType::TF_BOOL;
      return absl::OkStatus();

    case DLDataTypeCode::kDLUInt:
      switch (dtype.bits) {
        case 8:
          *tf_dtype = TF_DataType::TF_UINT8;

    assertEquals(
        Hashing.md5().bits() + Hashing.md5().bits(),
        Hashing.concatenating(asList(Hashing.md5(), Hashing.md5())).bits());
    assertEquals(
        Hashing.md5().bits() + Hashing.murmur3_32().bits(),
        Hashing.concatenating(asList(Hashing.md5(), Hashing.murmur3_32())).bits());
    assertEquals(
        Hashing.md5().bits() + Hashing.murmur3_32().bits() + Hashing.murmur3_128().bits(),