上下文:我正在阅读多篇有关使我的 golang 应用程序符合 FIPS 规范的文章(换句话说,使我的应用程序使用 Boringcrypto 而不是本机 golang 加密):
\n简而言之,他们都说要跑
\n# Build a binary and assert that it uses boringcrypto instead of the native golang crypto\nRUN GOEXPERIMENT=boringcrypto go build . && \\\n go tool nm fips-echo-server > tags.txt && \\\n grep \'_Cfunc__goboringcrypto_\' tags.txt 1> /dev/null\nRun Code Online (Sandbox Code Playgroud)\n然后期望以下输出:
\n e70fa0 T _cgo_d3bdb93f8e25_Cfunc__goboringcrypto_AES_cbc_encrypt\n e70fc0 T _cgo_d3bdb93f8e25_Cfunc__goboringcrypto_AES_ctr128_encrypt\n e70ff0 T _cgo_d3bdb93f8e25_Cfunc__goboringcrypto_AES_decrypt\n e71000 T _cgo_d3bdb93f8e25_Cfunc__goboringcrypto_AES_encrypt\n e71010 T _cgo_d3bdb93f8e25_Cfunc__goboringcrypto_AES_set_decrypt_key\n e71050 T _cgo_d3bdb93f8e25_Cfunc__goboringcrypto_AES_set_encrypt_key\n e71200 T _cgo_d3bdb93f8e25_Cfunc__goboringcrypto_BN_bn2le_padded\n e71240 T _cgo_d3bdb93f8e25_Cfunc__goboringcrypto_BN_free\n …Run Code Online (Sandbox Code Playgroud)