@ttsc/win32-arm64 0.33.1 → 0.34.0

package/bin/go/src/crypto/internal/cryptotest/boundary_compat.go

@@ -0,0 +1,16 @@
+// Copyright 2026 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+//go:build !linux && !darwin
+
+package cryptotest
+
+import "testing"
+
+// BoundarySlices allocates a pair of slices of the given size.
+//
+// On this platform, the slices are not special.
+func BoundarySlices(t *testing.T, size int) (start, end []byte) {
+	return make([]byte, size), make([]byte, size)
+}

package/bin/go/src/crypto/internal/cryptotest/fetchmodule.go

@@ -43,15 +43,21 @@ func FetchModule(t *testing.T, module, version string) string {
 
 	t.Logf("fetching %s@%s\n", module, version)
 
-	output, err := testenv.Command(t, testenv.GoToolPath(t), "mod", "download", "-json", module+"@"+version).CombinedOutput()
+	cmd := testenv.Command(t, testenv.GoToolPath(t), "mod", "download", "-json", module+"@"+version)
+	var stderr bytes.Buffer
+	cmd.Stderr = &stderr
+	output, err := cmd.Output()
 	if err != nil {
-		t.Fatalf("failed to download %s@%s: %s\n%s\n", module, version, err, output)
+		t.Fatalf("failed to download %s@%s: %s\nstdout:\n%s\nstderr:\n%s\n", module, version, err, output, stderr.Bytes())
+	}
+	if stderr.Len() > 0 {
+		t.Logf("go mod download stderr:\n%s", stderr.Bytes())
 	}
 	var j struct {
 		Dir string
 	}
 	if err := json.Unmarshal(output, &j); err != nil {
-		t.Fatalf("failed to parse 'go mod download': %s\n%s\n", err, output)
+		t.Fatalf("failed to parse 'go mod download': %s\nstdout:\n%s\nstderr:\n%s\n", err, output, stderr.Bytes())
 	}
 
 	return j.Dir

package/bin/go/src/crypto/internal/cryptotest/fips140.go

@@ -6,12 +6,71 @@ package cryptotest
 
 import (
 	"crypto/internal/fips140"
+	"internal/testenv"
+	"regexp"
+	"strconv"
+	"strings"
 	"testing"
 )
 
-func MustSupportFIPS140(t *testing.T) {
-	t.Helper()
+func MustSupportFIPS140(tb testing.TB) {
+	tb.Helper()
 	if err := fips140.Supported(); err != nil {
-		t.Skipf("test requires FIPS 140 mode: %v", err)
+		tb.Skipf("test requires FIPS 140 mode: %v", err)
+	}
+}
+
+// MustMinimumFIPS140ModuleVersion skips the test if compiled against a lower
+// minor version of the FIPS 140-3 module than min (such as "v1.26.0").
+func MustMinimumFIPS140ModuleVersion(tb testing.TB, min string) {
+	tb.Helper()
+	if fips140.Version() == "latest" {
+		return
+	}
+	if parseFIPS140MinorVersion(tb, fips140.Version()) < parseFIPS140MinorVersion(tb, min) {
+		tb.Skipf("test requires FIPS 140-3 module %s or later", min)
+	}
+}
+
+func parseFIPS140MinorVersion(tb testing.TB, version string) int {
+	tb.Helper()
+	v, ok := strings.CutPrefix(version, "v1.")
+	if !ok {
+		tb.Fatalf("unexpected FIPS 140 version format: %q", version)
+	}
+	v, _, ok = strings.Cut(v, ".")
+	if !ok {
+		tb.Fatalf("unexpected FIPS 140 version format: %q", version)
+	}
+	i, err := strconv.Atoi(v)
+	if err != nil {
+		tb.Fatalf("unexpected FIPS 140 version format %q: %v", version, err)
+	}
+	return i
+}
+
+func RerunWithFIPS140Enabled(t *testing.T) {
+	t.Helper()
+	MustSupportFIPS140(t)
+	nameRegex := "^" + regexp.QuoteMeta(t.Name()) + "$"
+	cmd := testenv.Command(t, testenv.Executable(t), "-test.run="+nameRegex, "-test.v")
+	cmd.Env = append(cmd.Environ(), "GODEBUG=fips140=on")
+	out, err := cmd.CombinedOutput()
+	t.Logf("running with GODEBUG=fips140=on:\n%s", out)
+	if err != nil {
+		t.Errorf("fips140=on subprocess failed: %v", err)
+	}
+}
+
+func RerunWithFIPS140Enforced(t *testing.T) {
+	t.Helper()
+	MustSupportFIPS140(t)
+	nameRegex := "^" + regexp.QuoteMeta(t.Name()) + "$"
+	cmd := testenv.Command(t, testenv.Executable(t), "-test.run="+nameRegex, "-test.v")
+	cmd.Env = append(cmd.Environ(), "GODEBUG=fips140=only")
+	out, err := cmd.CombinedOutput()
+	t.Logf("running with GODEBUG=fips140=only:\n%s", out)
+	if err != nil {
+		t.Errorf("fips140=only subprocess failed: %v", err)
 	}
 }

package/bin/go/src/crypto/internal/cryptotest/hash.go

@@ -20,6 +20,20 @@ type MakeHash func() hash.Hash
 // TestHash performs a set of tests on hash.Hash implementations, checking the
 // documented requirements of Write, Sum, Reset, Size, and BlockSize.
 func TestHash(t *testing.T, mh MakeHash) {
+	t.Run("OutOfBounds", func(t *testing.T) {
+		start, end := BoundarySlices(t, 1000)
+		h := mh()
+		for i := range len(start) + 1 {
+			h.Write(start[:i])
+			h.Write(start[len(start)-i:])
+			h.Write(end[:i])
+			h.Write(end[len(end)-i:])
+		}
+		start, end = BoundarySlices(t, h.Size())
+		h.Sum(start[:0])
+		h.Sum(end[:0])
+	})
+
 	if boring.Enabled || fips140.Version() == "v1.0.0" {
 		testhash.TestHashWithoutClone(t, testhash.MakeHash(mh))
 		return

package/bin/go/src/crypto/internal/cryptotest/wycheproof/_schema/go.mod

@@ -0,0 +1,19 @@
+module crypto/internal/cryptotest/wycheproof/_schema
+
+go 1.26.4
+
+require (
+	github.com/atombender/go-jsonschema v0.23.1
+	github.com/c2sp/wycheproof v0.0.0-20260625212325-ee7b4f7e6119
+)
+
+require (
+	dario.cat/mergo v1.0.2 // indirect
+	github.com/goccy/go-yaml v1.19.2 // indirect
+	github.com/google/go-cmp v0.7.0 // indirect
+	github.com/mitchellh/go-wordwrap v1.0.1 // indirect
+	github.com/sanity-io/litter v1.5.8 // indirect
+	github.com/sosodev/duration v1.4.0 // indirect
+)
+
+replace github.com/atombender/go-jsonschema => github.com/filippo-claude/go-jsonschema v0.23.2-0.20260625215234-f867483bec31

package/bin/go/src/crypto/internal/cryptotest/wycheproof/_schema/go.sum

@@ -0,0 +1,27 @@
+dario.cat/mergo v1.0.2 h1:85+piFYR1tMbRrLcDwR18y4UKJ3aH1Tbzi24VRW1TK8=
+dario.cat/mergo v1.0.2/go.mod h1:E/hbnu0NxMFBjpMIE34DRGLWqDy0g5FuKDhCb31ngxA=
+github.com/c2sp/wycheproof v0.0.0-20260625212325-ee7b4f7e6119 h1:jOCu6erj86P93+eFn8Qxp6XLwftn1nW0C9RUx7xZwZg=
+github.com/c2sp/wycheproof v0.0.0-20260625212325-ee7b4f7e6119/go.mod h1:/5JsOpi3fKmnnig5BQ2mz49TNtnrD308VfTVHcbr5x4=
+github.com/davecgh/go-spew v0.0.0-20161028175848-04cdfd42973b/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
+github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c=
+github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
+github.com/filippo-claude/go-jsonschema v0.23.2-0.20260625215234-f867483bec31 h1:c2W1mlsq9K/W+GPQWycHmGxTq4/RkWgDHOY99K+rtaw=
+github.com/filippo-claude/go-jsonschema v0.23.2-0.20260625215234-f867483bec31/go.mod h1:4SrgNrwGKijxhewvpPQ8HKEbin5Q2N4Tk+pFKW77HEk=
+github.com/goccy/go-yaml v1.19.2 h1:PmFC1S6h8ljIz6gMRBopkjP1TVT7xuwrButHID66PoM=
+github.com/goccy/go-yaml v1.19.2/go.mod h1:XBurs7gK8ATbW4ZPGKgcbrY1Br56PdM69F7LkFRi1kA=
+github.com/google/go-cmp v0.7.0 h1:wk8382ETsv4JYUZwIsn6YpYiWiBsYLSJiTsyBybVuN8=
+github.com/google/go-cmp v0.7.0/go.mod h1:pXiqmnSA92OHEEa9HXL2W4E7lf9JzCmGVUdgjX3N/iU=
+github.com/mitchellh/go-wordwrap v1.0.1 h1:TLuKupo69TCn6TQSyGxwI1EblZZEsQ0vMlAFQflz0v0=
+github.com/mitchellh/go-wordwrap v1.0.1/go.mod h1:R62XHJLzvMFRBbcrT7m7WgmE1eOyTSsCt+hzestvNj0=
+github.com/pmezard/go-difflib v0.0.0-20151028094244-d8ed2627bdf0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
+github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM=
+github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
+github.com/sanity-io/litter v1.5.8 h1:uM/2lKrWdGbRXDrIq08Lh9XtVYoeGtcQxk9rtQ7+rYg=
+github.com/sanity-io/litter v1.5.8/go.mod h1:9gzJgR2i4ZpjZHsKvUXIRQVk7P+yM3e+jAF7bU2UI5U=
+github.com/sosodev/duration v1.4.0 h1:35ed0KiVFriGHHzZZJaZLgmTEEICIyt8Sx0RQfj9IjE=
+github.com/sosodev/duration v1.4.0/go.mod h1:RQIBBX0+fMLc/D9+Jb/fwvVmo0eZvDDEERAikUR6SDg=
+github.com/stretchr/testify v0.0.0-20161117074351-18a02ba4a312/go.mod h1:a8OnRcib4nhh0OaRAV+Yts87kKdq0PP7pXfy6kDkUVs=
+github.com/stretchr/testify v1.11.1 h1:7s2iGBzp5EwR7/aIZr8ao5+dra3wiQyKjjFuvgVKu7U=
+github.com/stretchr/testify v1.11.1/go.mod h1:wZwfW3scLgRK+23gO65QZefKpKQRnfz6sD981Nm4B6U=
+gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
+gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=

package/bin/go/src/crypto/internal/cryptotest/wycheproof/_schema/schema_gen.go

@@ -0,0 +1,151 @@
+// Copyright 2026 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// A stand-alone Go module that generates ../schema.go using the
+// upstream Wycheproof JSON schema documents.
+//
+// We maintain this in a separate Go module and vendor the resulting
+// generated .go code to avoid the standard library taking a direct
+// dependency on the c2sp/wycheproof or atombender/go-jsonschema modules.
+
+package main
+
+import (
+	"bufio"
+	"fmt"
+	"io/fs"
+	"log"
+	"os"
+	"path/filepath"
+	"strings"
+
+	"github.com/atombender/go-jsonschema/pkg/generator"
+	"github.com/c2sp/wycheproof"
+)
+
+func main() {
+	outputName := "schema.go"
+	cfg := generator.Config{
+		DefaultPackageName: "wycheproof",
+		DefaultOutputName:  outputName,
+		Tags:               []string{"json"},
+		Warner: func(message string) {
+			log.Printf("go-jsonschema: %s", message)
+		},
+	}
+	gen, err := generator.New(cfg)
+	if err != nil {
+		log.Fatal(err)
+	}
+
+	// Without upstream modifications we can't use the embedded Wycheproof
+	// schema FS directly w/ go-jsonschema and instead make files in a tempdir
+	// on the native FS. See https://github.com/omissis/go-jsonschema/issues/495
+	schemaDir, err := os.MkdirTemp("", "*-wycheproof")
+	if err != nil {
+		log.Fatal(err)
+	}
+	defer os.RemoveAll(schemaDir)
+
+	rawSchemas, _ := fs.ReadDir(wycheproof.Schemas, ".")
+	for _, entry := range rawSchemas {
+		entryName := entry.Name()
+		schemaFile := filepath.Join(schemaDir, entryName)
+
+		schemaData, err := fs.ReadFile(wycheproof.Schemas, entryName)
+		if err != nil {
+			log.Fatalf("reading %s: %v", entryName, err)
+		}
+		err = os.WriteFile(schemaFile, schemaData, 0644)
+		if err != nil {
+			log.Fatalf("writing %s: %v", schemaFile, err)
+		}
+	}
+
+	// Note: it's important we process schemas in a second pass after writing
+	// **all** of the schema file content to disk so that go-jsonschema can
+	// resolve cross-file references.
+	for _, entry := range rawSchemas {
+		entryName := entry.Name()
+		schemaFile := filepath.Join(schemaDir, entryName)
+
+		err = gen.DoFile(schemaFile)
+		if err != nil {
+			log.Fatalf("processing %s: %v", schemaFile, err)
+		}
+	}
+
+	sources, err := gen.Sources()
+	if err != nil {
+		log.Fatalf("error generating sources: %v\n", err)
+	}
+	if sourceCount := len(sources); sourceCount != 1 {
+		log.Fatalf("expected to generate 1 source file, got %d\n", sourceCount)
+	}
+	content, ok := sources[outputName]
+	if !ok {
+		log.Fatalf("missing generated %q output file source", outputName)
+	}
+	outFile := filepath.Join("../", outputName)
+	if err := os.WriteFile(outFile, content, 0644); err != nil {
+		log.Fatalf("error writing file %s: %v\n", outFile, err)
+	}
+
+	// Write a sibling file recording the Wycheproof module version that the
+	// generated schema.go was produced against. The wycheproof package uses
+	// this constant to fetch matching test vectors at runtime. We avoid reading
+	// go.sum at test time because it might not be available (e.g. if the test
+	// binary was copied to a remote machine).
+	version, err := wycheproofVersionFromSum("go.sum")
+	if err != nil {
+		log.Fatalf("extracting wycheproof version: %v", err)
+	}
+	const versionFile = "../schemaversion.go"
+	versionSrc := fmt.Sprintf(`// Copyright 2026 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// Code generated by _schema/schema_gen.go, DO NOT EDIT.
+
+package wycheproof
+
+// wycheproofVersion is the github.com/c2sp/wycheproof module version that
+// schema.go was generated against.
+const wycheproofVersion = %q
+`, version)
+	if err := os.WriteFile(versionFile, []byte(versionSrc), 0644); err != nil {
+		log.Fatalf("writing %s: %v", versionFile, err)
+	}
+}
+
+// wycheproofVersionFromSum returns the github.com/c2sp/wycheproof module
+// version recorded in the given go.sum file.
+func wycheproofVersionFromSum(path string) (string, error) {
+	f, err := os.Open(path)
+	if err != nil {
+		return "", err
+	}
+	defer f.Close()
+
+	var version string
+	found := 0
+	scanner := bufio.NewScanner(f)
+	for scanner.Scan() {
+		fields := strings.Fields(scanner.Text())
+		if len(fields) == 3 && fields[0] == "github.com/c2sp/wycheproof" {
+			version = strings.TrimSuffix(fields[1], "/go.mod")
+			found++
+		}
+	}
+	if err := scanner.Err(); err != nil {
+		return "", err
+	}
+	switch {
+	case found == 0:
+		return "", fmt.Errorf("%s: missing github.com/c2sp/wycheproof entry", path)
+	case found > 2:
+		return "", fmt.Errorf("%s: %d github.com/c2sp/wycheproof entries (run 'go mod tidy')", path, found)
+	}
+	return version, nil
+}