search

golang-fips / go

Repository for FIPS enabled Go using OpenSSL
BSD 3-Clause "New" or "Revised" License
66 stars 24 forks source link

Is x/crypto FIPS compliant? #221

Open pavolloffay opened 1 month ago

pavolloffay commented 1 month ago

Hello,

apologies for maybe obvious question, I am just starting with FIPS.

Is https://pkg.go.dev/golang.org/x/crypto handled by this project?

xnox commented 4 weeks ago

Some of it yes, but mostly no.

For example the frozen openpgp is fine, as it does no cryptography by itself and relies on import from "crypto".

Other portions which implement unapproved algorithms are not compliant - e.g. Blake ones.

Right now this toolchain does not prevent importing or using all of x/crypto.