Skip to content

feat: embed ACVP wrapper and public-scope reproducibility flow#1364

Open
vzakaznikov wants to merge 2 commits intoAltinity:masterfrom
vzakaznikov:feat/acvp-wrapper-public-repro
Open

feat: embed ACVP wrapper and public-scope reproducibility flow#1364
vzakaznikov wants to merge 2 commits intoAltinity:masterfrom
vzakaznikov:feat/acvp-wrapper-public-repro

Conversation

@vzakaznikov
Copy link
Copy Markdown

Summary

  • Embed an ACVP wrapper into the shipped clickhouse-backup binary with two entry points: argv0 dispatch via clickhouse-backup-acvp and CLI dispatch via clickhouse-backup acvp.
  • Add the pkg/acvpwrapper implementation plus tests, and package the clickhouse-backup-acvp symlink in Linux package builds so the wrapper can be exercised with acvptool against the same binary artifact.
  • Add a tracked public-API ACVP config, reproducibility script, and documentation (pkg/acvpwrapper/acvp_test_fips140v1.26.public.config.json, run.sh, README.md) with pinned upstream references and reproduction guidance.
  • Keep wrapper capabilities aligned with the supported public Go crypto scope by excluding ML-KEM/ML-DSA from advertised getConfig capabilities.

Test plan

  • docker run --rm -v "$PWD:/work" -w /work golang:1.26-alpine sh -lc 'export PATH=$PATH:/usr/local/go/bin && go test ./...'
  • bash pkg/acvpwrapper/run.sh (expected output includes 38 ACVP tests matched expectations)

Made with Cursor

Add ACVP wrapper entrypoints to clickhouse-backup and package the acvp symlink so the shipped binary can be exercised by acvptool. Add a tracked public-API-only ACVP config, reproducibility script, and documentation with pinned upstream references while aligning advertised wrapper capabilities with the supported public Go crypto scope.

Co-authored-by: Cursor <cursoragent@cursor.com>
@vzakaznikov vzakaznikov force-pushed the feat/acvp-wrapper-public-repro branch from bc467e1 to a434d4f Compare May 6, 2026 00:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant