util/fipstools/break-tests.sh

# Copyright (c) 2022, Google Inc.
#
# Permission to use, copy, modify, and/or distribute this software for any
# purpose with or without fee is hereby granted, provided that the above
# copyright notice and this permission notice appear in all copies.
#
# THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
# WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
# MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY
# SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
# WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION
# OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN
# CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.

# This script runs test_fips repeatedly with different FIPS tests broken. It is
# intended to be observed to demonstrate that the various tests are working and
# thus pauses for a keystroke between tests.

set -e

TEST_FIPS_BIN="build/util/fipstools/test_fips"

if [ ! -f $TEST_FIPS_BIN ]; then
  echo "$TEST_FIPS_BIN is missing. Run this script from the top level of a"
  echo "BoringSSL checkout and ensure that BoringSSL has been built in"
  echo "build/ with -DFIPS_BREAK_TEST=TESTS passed to CMake."
  exit 1
fi

KATS=$(go run util/fipstools/break-kat.go --list-tests)

echo -e '\033[1mNormal output\033[0m'
$TEST_FIPS_BIN
read

echo
echo -e '\033[1mIntegrity test failure\033[0m'
go run util/fipstools/break-hash.go $TEST_FIPS_BIN break-bin
chmod u+x ./break-bin
./break-bin || true
rm ./break-bin
read

for kat in $KATS; do
  echo
  echo -e "\033[1mKAT failure ${kat}\033[0m"
  go run util/fipstools/break-kat.go $TEST_FIPS_BIN $kat > break-bin
  chmod u+x ./break-bin
  ./break-bin || true
  rm ./break-bin
  read
done