search

saltstack / salt

Software to automate the management and configuration of any infrastructure or application at scale. Get access to the Salt software package repository here:
https://repo.saltproject.io/
Apache License 2.0
13.98k stars 5.47k forks source link

[BUG] FIPS mode uses non FIPS algorithms. #66579

Closed dwoz closed 1 week ago

dwoz commented 1 month ago

Description

3006.x is supposed to fully support FIPS environments. It was discovered that non of our current crypto libraries (pycrypto, pycryptodome, or m2crypto) are fully capable of FIPS compliant for encryption, signing, and key serialization.

The work has been started to migrate to python cryptography for our main crypto library and cryptography is capable of running (and validating) the algorithms used in a FIPS environment. It's time to pull the plug on those older libraries.

dwoz commented 1 week ago

This has been merged and will be in 3006.9