-
Notifications
You must be signed in to change notification settings - Fork 123
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add FIPS aarch POC build to CI. #138
Conversation
* Remove 'ep_nistz256_add' function, and change offset calculation. 'ep_nistz256_add' in p256-armv8-asm.pl is duplicate to p256-nistz.c. Removing 'ep_nistz256_add' function is to avoid delocate.go reporting 'Duplicate symbol found'. The offset calculation expression change is to avoid 'peg' parser errors because the current delocate.peg is not comprehensive enough to parse all assembly expressions. * Add new peg rules to address new assembly expression. * Change assembly expression. * Add delocate.peg convert README. * Remove auto-generated comment. * Add more delocate.peg.go generate commands. * Fix command. * Update build files in generated-src
* Remove 'ep_nistz256_add' function, and change offset calculation. 'ep_nistz256_add' in p256-armv8-asm.pl is duplicate to p256-nistz.c. Removing 'ep_nistz256_add' function is to avoid delocate.go reporting 'Duplicate symbol found'. The offset calculation expression change is to avoid 'peg' parser errors because the current delocate.peg is not comprehensive enough to parse all assembly expressions. * Add new peg rules to address new assembly expression. * Change assembly expression. * Add delocate.peg convert README. * Remove auto-generated comment. * Add more delocate.peg.go generate commands. * Fix command. * Add offset to local symbol in delocate. * Update util/fipstools/delocate/delocate.go Co-authored-by: Nevine Ebeid <[email protected]> * Update util/fipstools/delocate/delocate.go Co-authored-by: Nevine Ebeid <[email protected]> * Update comments. Co-authored-by: Nevine Ebeid <[email protected]>
compute-type: BUILD_GENERAL1_LARGE | ||
image: ECR_REPO_PLACEHOLDER:ubuntu-20.04_clang-7x_latest | ||
variables: | ||
AWSLC_NO_ASM_FIPS: 1 |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
You probably answered this question before, Bryce; so this build will not use assembly files?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The build includes multiple flavors -- both ASM and NOASM are enabled.
When NO_ASM, ASAN is enabled.
https://github.com/awslabs/aws-lc/blob/main/tests/ci/run_fips_tests.sh#L22
Changes in |
Add global assumptions paragraph s2n-bignum original commit: awslabs/s2n-bignum@d61796f
Add global assumptions paragraph s2n-bignum original commit: awslabs/s2n-bignum@d61796f s2n-bignum original commit: awslabs/s2n-bignum@405230a
Add global assumptions paragraph s2n-bignum original commit: awslabs/s2n-bignum@d61796f
Add global assumptions paragraph
Add global assumptions paragraph s2n-bignum original commit: awslabs/s2n-bignum@d61796f
Issues:
Resolves CryptoAlg-725
Description of changes:
This PR added FIPS aarch build dimensions to awslc CI.
Call-outs:
CryptoAlg-723?selectedConversation=e0c5b7c9-60f5-4d30-a496-f5f8dbc711cd
Testing:
CodeBuild request -aws-lc-ci-linux-arm:db6724d9-5b22-4f6f-a429-c0b552eec1f9
go test
timeout, which is 10m.aws-lc-ci-linux-arm:8f624494-6ea8-46e2-b337-1f924dc40d03
By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.