On Mon, Apr 6, 2020 at 5:45 PM Ian Lance Taylor <i...@golang.org> wrote:
> [ + filippo ] > > On Mon, Apr 6, 2020 at 2:00 PM ancientlore <michael.l...@gmail.com> wrote: > > > > Hi, we’re needing to use FIPS-validated crypto in a particular > deployment. It looks like the dev.boringcrypto branch would meet our needs > well. But I’m struggling to verify which BoringCrypto version is actually > meant when the Go version is 1.14.1b4. Looking at BoringSSL I’m trying map > b4 to a specific validated version like > https://boringssl.googlesource.com/boringssl/+/refs/tags/fips-20170615. > Does anyone know what the mapping is? i.e. what specifically is version 4 > of BoringCrypto? > Go 1.14 and earlier ship a module built according to the instructions in certificate 2964, which maps to BoringSSL tag fips-20170615. https://github.com/golang/go/blob/dev.boringcrypto.go1.14/src/crypto/internal/boring/build/build.sh Go 1.15 and later will hopefully ship a module built according to the instructions in certificate 3318, which maps to BoringSSL tag fips-20180730. https://github.com/golang/go/commit/6c64b188a53afec79563cf4ad3c5bc373036d3ae > > Thanks, > > > > Mike > > > > -- > > You received this message because you are subscribed to the Google > Groups "golang-nuts" group. > > To unsubscribe from this group and stop receiving emails from it, send > an email to golang-nuts+unsubscr...@googlegroups.com. > > To view this discussion on the web visit > https://groups.google.com/d/msgid/golang-nuts/0b0e1779-1f6c-46fb-b570-bd90a02d6dbd%40googlegroups.com > . > -- You received this message because you are subscribed to the Google Groups "golang-nuts" group. To unsubscribe from this group and stop receiving emails from it, send an email to golang-nuts+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/golang-nuts/CA%2B2K_Kqd07vTjkbbGwS_LLZ%2B7L_XBMKGM_pN9akEWT0aX37VzA%40mail.gmail.com.
