Re:The FIPS 140-3 Go Cryptographic Module
by aranw on Wednesday July 16, 2025 @06:49AM
(#44580756)
Did this make Go a less attractive option compared to other languages then? I’m interested in understanding how this will help Go and the community
[ Parent
| on HN ]
Re:The FIPS 140-3 Go Cryptographic Module
by caleblloyd on Wednesday July 16, 2025 @08:45AM
(#44581686)
Yes. Any language that dynamically links to the OS crypto library (like OpenSSL) is more attractive because your Government customer can install your software on their OS with their FIPS compliant OS crypto library.
This moves the needle for Go but you still need to cut a FIPS version of your software since this crypto is still statically linked. I like this option quite a bit if the Government customers get on board with it.
There are some Go forks maintained by Microsoft and RedHat I believe that do dynamic linking for crypto which requires CGO.
Re:The FIPS 140-3 Go Cryptographic Module
by haiku2077 on Wednesday July 16, 2025 @10:37AM
(#44582834)
> This moves the needle for Go
To clarify, you could previously link to an external SSL library (typically something like BoringSSL) and people did do that. However, it makes cross compilation a pain compared to native Go.