Last time I had a FIPS project, which is a long old time now, activating FIPS mode meant disabling weak ciphers but it also meant disabling stuff like DH/DHE ke

Last time I had a FIPS project, which is a long old time now, activating FIPS mode meant disabling weak ciphers but it also meant disabling stuff like DH/DHE key exchange. It seemed to be like that because it's government, and they may want to decode their traffic at a future date, for auditing or leak detection, so 'PFS' measures were not allowed. I am talking about FIPS 140-2 though, and almost 20 years ago!