minio/cmd/crypto
Andreas Auernhammer c1a49be639
use crypto/sha256 for FIPS 140-2 compliance (#11623)
This commit replaces the usage of
github.com/minio/sha256-simd with crypto/sha256
of the standard library in all non-performance
critical paths.

This is necessary for FIPS 140-2 compliance which
requires that all crypto. primitives are implemented
by a FIPS-validated module.

Go can use the Google FIPS module. The boringcrypto
branch of the Go standard library uses the BoringSSL
FIPS module to implement crypto. primitives like AES
or SHA256.

We only keep github.com/minio/sha256-simd when computing
the content-SHA256 of an object. Therefore, this commit
relies on a build tag `fips`.

When MinIO is compiled without the `fips` flag it will
use github.com/minio/sha256-simd. When MinIO is compiled
with the fips flag (go build --tags "fips") then MinIO
uses crypto/sha256 to compute the content-SHA256.
2021-02-24 09:00:15 -08:00
..
config.go discard empty endpoint in crypto kes 2020-08-31 19:35:43 -07:00
doc.go Replace Minio refs in docs with MinIO and links (#7494) 2019-04-09 11:39:42 -07:00
error.go Add crypto context errors (#8740) 2020-01-06 16:15:22 -08:00
header.go refactor cmd/crypto code for SSE handling and parsing (#11045) 2020-12-22 09:19:32 -08:00
header_test.go refactor cmd/crypto code for SSE handling and parsing (#11045) 2020-12-22 09:19:32 -08:00
help.go add minio/keys KMS integration (#8631) 2019-12-13 12:57:11 -08:00
json.go crypto: Escape JSON text (#10794) 2021-01-19 01:39:04 -08:00
kes.go validate storage class across pools when setting config (#11320) 2021-01-22 12:09:24 -08:00
key.go use crypto/sha256 for FIPS 140-2 compliance (#11623) 2021-02-24 09:00:15 -08:00
key_test.go Replace Minio refs in docs with MinIO and links (#7494) 2019-04-09 11:39:42 -07:00
kms.go use crypto/sha256 for FIPS 140-2 compliance (#11623) 2021-02-24 09:00:15 -08:00
kms_test.go crypto: Escape JSON text (#10794) 2021-01-19 01:39:04 -08:00
legacy.go Add crypto context errors (#8740) 2020-01-06 16:15:22 -08:00
metadata.go crypto: add support for decrypting SSE-KMS metadata (#11415) 2021-02-03 15:19:08 -08:00
metadata_test.go crypto: add support for decrypting SSE-KMS metadata (#11415) 2021-02-03 15:19:08 -08:00
parse.go Add crypto context errors (#8740) 2020-01-06 16:15:22 -08:00
parse_test.go admin: new API for creating KMS master keys (#9982) 2020-07-08 18:50:43 -07:00
retry.go crypto: reduce retry delay when retrying KES requests (#10394) 2020-09-02 11:04:10 -07:00
sse-c.go refactor cmd/crypto code for SSE handling and parsing (#11045) 2020-12-22 09:19:32 -08:00
sse-kms.go crypto: add support for decrypting SSE-KMS metadata (#11415) 2021-02-03 15:19:08 -08:00
sse-s3.go crypto: add support for decrypting SSE-KMS metadata (#11415) 2021-02-03 15:19:08 -08:00
sse.go refactor cmd/crypto code for SSE handling and parsing (#11045) 2020-12-22 09:19:32 -08:00
sse_test.go Move etcd, logger, crypto into their own packages (#8366) 2019-10-08 11:17:56 +05:30
vault.go Optimize decryptObjectInfo (#10726) 2020-10-29 09:34:20 -07:00
vault_test.go Bring in safe mode support (#8478) 2019-11-09 09:27:23 -08:00