scripts/crypto/fips_crypto_integrity.py

#!/usr/bin/env python3
# -*- coding: utf-8 -*-

"""
This script is needed for buildtime integrity routine.
It calculates and embeds HMAC and other needed stuff for in terms of FIPS 140-2
"""

import os
import sys
from IntegrityRoutine import IntegrityRoutine
from Utils import Utils


__author__ = "Vadym Stupakov"
__copyright__ = "Copyright (c) 2017 Samsung Electronics"
__credits__ = ["Vadym Stupakov"]
__version__ = "1.0"
__maintainer__ = "Vadym Stupakov"
__email__ = "v.stupakov@samsung.com"
__status__ = "Production"

sec_sym = {".text":     ["first_crypto_text",       "last_crypto_text",
                         "first_crypto_asm_text",   "last_crypto_asm_text"],
           ".rodata":   ["first_crypto_rodata",     "last_crypto_rodata",
                         "first_crypto_asm_rodata", "last_crypto_asm_rodata"],
           "init.text": ["first_crypto_init",       "last_crypto_init",
                         "first_crypto_asm_init",   "last_crypto_asm_init"]
           }

module_name = "crypto"

if __name__ == "__main__":
    #print("python version:\n{}\n".format(sys.version))

    if len(sys.argv) != 3:
        print("Usage " + sys.argv[0] + " elf_file readelf_path")
        sys.exit(-1)

    elf_file = os.path.abspath(sys.argv[1])
    readelf_path = os.path.abspath(sys.argv[2])
    modules = sys.argv[3:]

    utils = Utils()
    utils.paths_exists([elf_file])

    integrity = IntegrityRoutine(elf_file, readelf_path)
    integrity.make_integrity(sec_sym=sec_sym, module_name=module_name, debug=False, print_reloc_addrs=False,
                             sort_by="address", reverse=False)