• Registered: 2022-12-06
  • Posts: 17

Topic: How to manually trigger POST KAT failure ?

Hi,
I can manually trigger the POST in-core memory failure by modifying wolfengine library (as suggested by embhorn in a previous post). How can I manually trigger POST KAT failure ? Will removing symbolic link to wolfengine library from OpenSSL/engines directory a valid way of doing this test i.e. OpenSSL will not be able to load engine and run POST KAT tests ?

Thanks,

Share

  • Registered: 2021-07-06
  • Posts: 152

Re: How to manually trigger POST KAT failure ?

Hi m_u_h,

To force a failed FIPS POST state, build wolfSSL with HAVE_FORCE_FIPS_FAILURE defined, then at runtime, call wolfCrypt_SetStatus_fips(DRBG_CONT_FIPS_E).

Thanks,
Kareem

Share

  • Registered: 2022-12-06
  • Posts: 17

Re: How to manually trigger POST KAT failure ?

Hi Kareem,

Thanks for the clarification. We will give it a try.

Best Regards,

Share