3 ms·
Most of this is silly, but there is one correct point: large enterprises will never use WG unless we can get NIST to approve ChaCha and C25519 under FIPS. Yes
by api 7y ago
Most of this is silly, but there is one correct point: large enterprises will never use WG unless we can get NIST to approve ChaCha and C25519 under FIPS.
Yes it's mostly bullshit. No it won't ever change. FIPS is a check box and its all about liability and things like insurance. It has zero to do with tech and everything to do with standards and bureaucratic and legal requirements. Nobody ever got fired for using FIPS approved stuff. Use something different like WG and it (and you) will be blamed for any breach.
Note that I'm not sure to what extent this is true in Europe, but there you have another problem. In my experience European industry is just culturally super conservative and does not like to adopt new things. So even if they don't have the FIPS boat anchor, they're just terribly change-averse.