Change Details

For FIPS, when --enable-hmac-binary-check, we (somehow experimentally) use a section of ELF to store the hmac hash. It works for major use cases, but we see problems: - using ld.gold - using clang

For FIPS, when --enable-hmac-binary-check, we (somehow experimentally) use a section of ELF to store the hmac hash. It works for major use cases, but we see problems: - using ld.gold - using clang Besides, it would be good if it allows change of the binary by strip or similar operations.

For FIPS, when --enable-hmac-binary-check, we (somehow experimentally) use a section of ELF to store the hmac hash. It works for major use cases, but we see problems: - using ld.gold - using clang Besides, it would be good if it allows change of the binary by strip or similar operations.