add CMAC selftest for FIPS POST add continuous FIPS entropy test disable non-approved FIPS hashes in the enforced FIPS mode