4 ms·
How would any software be FIPS compliant? Is there a "memory-safe" implementation of TLS that is also FIPS certified?
by sidewndr46 2y ago
How would any software be FIPS compliant? Is there a "memory-safe" implementation of TLS that is also FIPS certified?
- est31 2y agorustls together with aws-lc-rs (and its FIPS mode) can do FIPS-compatible cryptography together with memory-safe TLS processing around it. The FIPS-compatible cryptography is provided in C, but low-level crypto routines is usually not where memory safety issues hide. https://www.memorysafety.org/blog/rustls-with-aws-crypto-back-end-and-fips/ https://www.memorysafety.org/blog/rustls-with-aws-crypto-bac...