blob: 46e0db4b07df8f557b23320b8d1e2790b856379c (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
|
/*
A minimal FIPS-140 application.
Written by Jack Lloyd (lloyd@randombit.net), on December 16-19, 2003
This file is in the public domain
*/
#include <botan/botan.h>
#include <botan/fips140.h>
using namespace Botan;
#include <iostream>
#include <fstream>
int main(int, char* argv[])
{
const std::string EDC_SUFFIX = ".edc";
try {
LibraryInitializer init; /* automatically does startup self tests */
// you can also do self tests on demand, like this:
if(!FIPS140::passes_self_tests())
throw Self_Test_Failure("FIPS-140 startup tests");
/*
Here, we just check argv[0] and assume that it works. You can use
various extremely nonportable APIs on some Unices (dladdr, to name one)
to find out the real name (I presume there are similiarly hairy ways of
doing it on Windows). We then assume the EDC (Error Detection Code, aka
a hash) is stored in argv[0].edc
Remember: argv[0] can be easily spoofed. Don't trust it for real.
You can also do various nasty things and find out the path of the
shared library you are linked with, and check that hash.
*/
std::string exe_path = argv[0];
std::string edc_path = exe_path + EDC_SUFFIX;
std::ifstream edc_file(edc_path.c_str());
std::string edc;
std::getline(edc_file, edc);
std::cout << "Our EDC is " << edc << std::endl;
bool good = FIPS140::good_edc(exe_path, edc);
if(good)
std::cout << "Our EDC matches" << std::endl;
else
std::cout << "Our EDC is bad" << std::endl;
}
catch(std::exception& e)
{
std::cout << "Exception caught: " << e.what() << std::endl;
}
return 0;
}
|
