Add script to run FIPS break tests.
Change-Id: I88bf98f0149e12598839a116f064d7dcfd5c860b
Reviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/53385
Auto-Submit: Adam Langley <alangley@gmail.com>
Reviewed-by: David Benjamin <davidben@google.com>
diff --git a/util/fipstools/break-tests.sh b/util/fipstools/break-tests.sh
new file mode 100644
index 0000000..1b3b7d9
--- /dev/null
+++ b/util/fipstools/break-tests.sh
@@ -0,0 +1,52 @@
+# Copyright (c) 2022, Google Inc.
+#
+# Permission to use, copy, modify, and/or distribute this software for any
+# purpose with or without fee is hereby granted, provided that the above
+# copyright notice and this permission notice appear in all copies.
+#
+# THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+# WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+# MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY
+# SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+# WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION
+# OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN
+# CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+
+# This script runs test_fips repeatedly with different FIPS tests broken. It is
+# intended to be observed to demonstrate that the various tests are working and
+# thus pauses for a keystroke between tests.
+
+set -e
+
+TEST_FIPS_BIN="build/util/fipstools/test_fips"
+
+if [ ! -f $TEST_FIPS_BIN ]; then
+ echo "$TEST_FIPS_BIN is missing. Run this script from the top level of a"
+ echo "BoringSSL checkout and ensure that BoringSSL has been built in"
+ echo "build/ with -DFIPS_BREAK_TEST=TESTS passed to CMake."
+ exit 1
+fi
+
+KATS=$(go run util/fipstools/break-kat.go --list-tests)
+
+echo -e '\033[1mNormal output\033[0m'
+$TEST_FIPS_BIN
+read
+
+echo
+echo -e '\033[1mIntegrity test failure\033[0m'
+go run util/fipstools/break-hash.go $TEST_FIPS_BIN break-bin
+chmod u+x ./break-bin
+./break-bin || true
+rm ./break-bin
+read
+
+for kat in $KATS; do
+ echo
+ echo -e "\033[1mKAT failure ${kat}\033[0m"
+ go run util/fipstools/break-kat.go $TEST_FIPS_BIN $kat > break-bin
+ chmod u+x ./break-bin
+ ./break-bin || true
+ rm ./break-bin
+ read
+done
