Re:The FIPS 140-3 Go Cryptographic Module
by aranw on Tuesday July 15, 2025 @06:31PM
(#44576568)
I’m curious to understand what implications this will have on Go and where it is used? How does this differ to other languages as well? I don’t fully understand what it will mean for Go and its community
[ Parent
| on HN ]
None; it's an optional package you use when your users require FIPS 140.
Ahh okay I didn’t realise it is just a package. I wondered if it was more than that and included stuff with the compiler or something
Re:The FIPS 140-3 Go Cryptographic Module
by haiku2077 on Wednesday July 16, 2025 @10:32AM
(#44582795)
It's also a new compiler option to transparently replace calls to the crypto stdlib package with FIPS versions
Re:The FIPS 140-3 Go Cryptographic Module
by haiku2077 on Tuesday July 15, 2025 @08:40PM
(#44577510)
It means companies with US government contracts writing Go code can use the standard library crypto package in native Go instead if having to enable CGO and using a crypto library written in C. CGO is kind of a pain in the ass to develop with compared to fully native Go code, especially when cross-compiling (and cross compilation is very common now that ARM is common on both laptops and servers).
This also now makes Go a very convenient language to write US Gov software in.
If you have never heard of FIPS before ignore this entirely and continue to live in happiness.
> This also now makes Go a very convenient language to write US Gov software in.
This is something I wondered. Will we now see even more adoption of Go? Will Go be a more attractive option compared to language X/Yv
Re:The FIPS 140-3 Go Cryptographic Module
by haiku2077 on Wednesday July 16, 2025 @10:34AM
(#44582811)
Yeah, honestly, this just rocketed Go to possible one of the best languages to write these services in. You can write a fully self-contained and compliant program using just the standard library, where a lot of other languages need to be linked to a commercial SSL library.