FIPS Feature Improvements (#244)

* Migrate ECDSA to FIPS Approved Functions (#188)
* Migrate RSA to FIPS Approved Functions (#196)
* Migrate Agreement to FIPS Approved Functions (#198)
* FIPS AEAD API Types (#207)
* Refactor HKDF for FIPS (#217)
* FIPS Status Indicator (#216)
* Migrate Ed25519 key generation to EVP_PKEY_keygen (#224)
* FIPS Usage Documentation (#231)
* Support for TLS 1.2 PRF (#232)
* Documentation cleanup (#243)
* Cleanup for fips-api-changes branch (#248)

.github/workflows/deploy-user-guide.yml

@@ -18,7 +18,7 @@ jobs:
           override: true
       - name: Build and Test User Guide
         run: |
-          curl -L https://github.com/rust-lang/mdBook/releases/download/v0.4.28/mdbook-v0.4.28-x86_64-unknown-linux-gnu.tar.gz | tar xz
+          curl -L https://github.com/rust-lang/mdBook/releases/download/v0.4.34/mdbook-v0.4.34-x86_64-unknown-linux-gnu.tar.gz | tar xz
           ./mdbook build book
           ./mdbook test book
       - name: Deploy User Guide

aws-lc-rs-testing/benches/hkdf_benchmark.rs

@@ -113,17 +113,17 @@ fn bench_hkdf(c: &mut Criterion, config: &HKDFConfig) {
         let bench_group_name = format!("HKDF-{:?}-{}-bytes", config.algorithm, chunk_len);
         let mut group = c.benchmark_group(bench_group_name);
 
-        let aws_prk = aws_lc_rs_benchmarks::run_hkdf_extract(config);
         group.bench_function("AWS-LC", |b| {
             b.iter(|| {
+                let aws_prk = aws_lc_rs_benchmarks::run_hkdf_extract(config);
                 aws_lc_rs_benchmarks::run_hkdf_expand(&aws_prk, info_chunk);
             });
         });
         #[cfg(feature = "ring-benchmarks")]
         {
-            let ring_prk = ring_benchmarks::run_hkdf_extract(config);
             group.bench_function("Ring", |b| {
                 b.iter(|| {
+                    let ring_prk = ring_benchmarks::run_hkdf_extract(config);
                     ring_benchmarks::run_hkdf_expand(&ring_prk, info_chunk);
                 });
             });

aws-lc-rs/Cargo.toml

@@ -29,6 +29,7 @@ ring-io = ["dep:untrusted"]
 ring-sig-verify = ["dep:untrusted"]
 bindgen = ["aws-lc-sys?/bindgen", "aws-lc-fips-sys?/bindgen"]
 asan = ["aws-lc-sys?/asan", "aws-lc-fips-sys?/asan"]
+test_logging = []
 
 # require non-FIPS
 non-fips = ["aws-lc-sys"]