5 ms·
> Finally, reviewing the BoringCrypto integration by Russ. Do you think there is a rollback/cleanup possible of current boring/fips <enter most diplomatic/nic
by codesniperjoe 4y ago
> Finally, reviewing the BoringCrypto integration by Russ.
Do you think there is a rollback/cleanup possible of current boring/fips <enter most diplomatic/nice phrase here> situation?
(eg. push it back into a seperate stash, guarded by a fixed build-time compiler directive?)
- FiloSottile 4y agoHeh. Look, no one likes FIPS 140. We don’t like it, those that need it don’t like it, sometimes I wonder if NIST likes it. But it is what it is, and the current situation is marginally better than having to fix the merge every time we touch anything. All Go+BoringCrypto code is behind the compile time GOEXPERIMENT, and mostly in its own files or in its own blocks. It could be worse.
- candiddevmike 4y agoWill Go ever be able to encrypt/decrypt ECDH, similar to the RSA package?