Refactor tink fips into an internal and public part.

Create a new fips_util target which captures all internal functions used for implementing the FIPS checks and puts it in the internal namespace.

The tink_fips.h now only provides functions which are part of the public API.

PiperOrigin-RevId: 368843791

1 files changed, 4 insertions, 4 deletions

diff --git a/cc/mac/mac_config_test.cc b/cc/mac/mac_config_test.cc
index 6c5183b12..211c37102 100644
--- a/cc/mac/mac_config_test.cc
+++ b/cc/mac/mac_config_test.cc
@@ -46,7 +46,7 @@ class MacConfigTest : public ::testing::Test {
 };
 
 TEST_F(MacConfigTest, Basic) {
-  if (kUseOnlyFips) {
+  if (IsFipsModeEnabled()) {
     GTEST_SKIP() << "Not supported in FIPS-only mode";
   }
 
@@ -62,7 +62,7 @@ TEST_F(MacConfigTest, Basic) {
 // Tests that the MacWrapper has been properly registered and we can wrap
 // primitives.
 TEST_F(MacConfigTest, WrappersRegistered) {
-  if (kUseOnlyFips) {
+  if (IsFipsModeEnabled()) {
     GTEST_SKIP() << "Not supported in FIPS-only mode";
   }
 
@@ -97,7 +97,7 @@ TEST_F(MacConfigTest, WrappersRegistered) {
 
 // FIPS-only mode tests
 TEST_F(MacConfigTest, RegisterNonFipsTemplates) {
-  if (!kUseOnlyFips || !FIPS_mode()) {
+  if (!IsFipsModeEnabled() || !FIPS_mode()) {
     GTEST_SKIP() << "Only supported in FIPS-only mode";
   }
 
@@ -113,7 +113,7 @@ TEST_F(MacConfigTest, RegisterNonFipsTemplates) {
 }
 
 TEST_F(MacConfigTest, RegisterFipsValidTemplates) {
-  if (!kUseOnlyFips || !FIPS_mode()) {
+  if (!IsFipsModeEnabled() || !FIPS_mode()) {
     GTEST_SKIP() << "Only supported in FIPS-only mode";
   }