Thanks so much for the quick reply. I see where that comes from now.

On Tuesday, April 7, 2020 at 12:40:52 PM UTC-4, Filippo Valsorda wrote:
>
> On Mon, Apr 6, 2020 at 5:45 PM Ian Lance Taylor <ia...@golang.org 
> <javascript:>> wrote:
>
>> [ + filippo ]
>>
>> On Mon, Apr 6, 2020 at 2:00 PM ancientlore <micha...@gmail.com 
>> <javascript:>> wrote:
>> >
>> > Hi, we’re needing to use FIPS-validated crypto in a particular 
>> deployment. It looks like the dev.boringcrypto branch would meet our needs 
>> well. But I’m struggling to verify which BoringCrypto version is actually 
>> meant when the Go version is 1.14.1b4. Looking at BoringSSL I’m trying map 
>> b4 to a specific validated version like 
>> https://boringssl.googlesource.com/boringssl/+/refs/tags/fips-20170615. 
>> Does anyone know what the mapping is? i.e. what specifically is version 4 
>> of BoringCrypto?
>>
>
> Go 1.14 and earlier ship a module built according to the instructions in 
> certificate 2964, which maps to BoringSSL tag fips-20170615.
>
>
> https://github.com/golang/go/blob/dev.boringcrypto.go1.14/src/crypto/internal/boring/build/build.sh
>
> Go 1.15 and later will hopefully ship a module built according to the 
> instructions in certificate 3318, which maps to BoringSSL tag fips-20180730.
>
>
> https://github.com/golang/go/commit/6c64b188a53afec79563cf4ad3c5bc373036d3ae
>  
>
>> > Thanks,
>> >
>> > Mike
>> >
>> > --
>> > You received this message because you are subscribed to the Google 
>> Groups "golang-nuts" group.
>> > To unsubscribe from this group and stop receiving emails from it, send 
>> an email to golan...@googlegroups.com <javascript:>.
>> > To view this discussion on the web visit 
>> https://groups.google.com/d/msgid/golang-nuts/0b0e1779-1f6c-46fb-b570-bd90a02d6dbd%40googlegroups.com
>> .
>>
>

-- 
You received this message because you are subscribed to the Google Groups 
"golang-nuts" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to golang-nuts+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/golang-nuts/91b8c044-3aa0-415e-b89c-371b135c7671%40googlegroups.com.

Reply via email to