Go 1.20 Cryptography

Re:Go 1.20 Cryptography by codesniperjoe on Wednesday January 04, 2023 @01:44PM (#34249630)

> Finally, reviewing the BoringCrypto integration by Russ.

Do you think there is a rollback/cleanup possible of current boring/fips <enter most diplomatic/nice phrase here> situation?

(eg. push it back into a seperate stash, guarded by a fixed build-time compiler directive?)

[ Parent | on HN ]

Re:Go 1.20 Cryptography by FiloSottile on Wednesday January 04, 2023 @01:58PM (#34249821)

Heh. Look, no one likes FIPS 140. We don’t like it, those that need it don’t like it, sometimes I wonder if NIST likes it. But it is what it is, and the current situation is marginally better than having to fix the merge every time we touch anything.

All Go+BoringCrypto code is behind the compile time GOEXPERIMENT, and mostly in its own files or in its own blocks. It could be worse.

[ Parent | on HN ]

Re:Go 1.20 Cryptography by candiddevmike on Wednesday January 04, 2023 @10:43PM (#34255655)

Will Go ever be able to encrypt/decrypt ECDH, similar to the RSA package?

[ Parent | on HN ]