Hello OpenBSD Community, I have heard very good things about OpenBSD's contributions to the
cybersecrity community. OpenBSD developers have earned a reputation for developing high-quality cryptographic software. I wanted to ask OpenBSD's thoughts on the usefulness of FIPS compliance. When I discussed this topic with others that have worked in cryptography in the industry they admitted the FIPS Compliance checklist drives cryptographic software to become bloated and difficult to audit. I would be happy to hear everyone's thoughts. Thanks! Tanveer Salim
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA384 Hello OpenBSD Community, I have heard very good things about OpenBSD's contributions to the cybersecrity community. OpenBSD developers have earned a reputation for developing high-quality cryptographic software. I wanted to ask OpenBSD's thoughts on the usefulness of FIPS compliance. When I discussed this topic with others that have worked in cryptography in the industry they admitted the FIPS Compliance checklist drives cryptographic software to become bloated and difficult to audit. I would be happy to hear everyone's thoughts. Thanks! Tanveer Salim -----BEGIN PGP SIGNATURE----- iMYFARYJAEYiIQXL8+7MUlHDxqcX9n7DUChViSV699RFCbr8Y8xXcpoHxAUCaJAd /hwcY29udGFjdEBzZWN1cmVjcnlwdG9odWIuY29tAACU0QHFFBN20yq3kUHdukWb pRiMsIcB0V8JwvOuVqgn0BFSpzdCHk1t2uAOe55eOEXAfYSUHyTeySXjmikAAcdU IzMXE6A7zNwFexjUIiybNX8T9+qTFTtykUfE/12bVP1oxKGfDSbOkTeL2oqS31MU VlT/zt49IgA= =mvhZ -----END PGP SIGNATURE-----
-----BEGIN PGP PUBLIC KEY BLOCK----- mEkFZ8YBMhYAAAA/AytlcQHEDeacjEfqeo2Gq3t+YuVhW7HzZMhC+RgdzsJ+3xKA RDphAEoeOfKDQNTh6S5o43QBY6BL72fVUtUAtJJUYW52ZWVyIFNhbGltIChUaGlz IGlzIHRoZSBPZmZpY2lhbCBQR1AgS2V5IHRvIHNlbmQgYW5kIHJlY2VpdmUgZW5j cnlwdGVkLCBzaWduZWQgZW1haWxzIHRvIGFuZCBmcm9tIFRhbnZlZXIgU2FsaW0u KSA8Y29udGFjdEBzZWN1cmVjcnlwdG9odWIuY29tPojHBRMWCgBHIiEFy/PuzFJR w8anF/Z+w1AoVYklevfURQm6/GPMV3KaB8QFAmfGATICGwMFCwkIBwICIgIGFQoJ CAsCBBYCAwECHgcCF4AAAKOEAcj276W2Wzhm6vfzW/7BvKgOzXjpzkySAYaXo1Au 2Wom5GZJeO5fmo+7KYg/ZZpsO5+qttrJTUJhTYABxRSMBBlwNfrlfqBe3JbySrtR 3xGfG2VOWRjGGvEx96PT2JlOSEcM1epmgojn3SAAw/Oizyh8+fIpAIipBRAWCgAp IiEFTzpVOdWW2S/MtBurj0VLJRRlfqtu+aR2AHAzXoWygfsFAmf0P1cAAJZNAcjY 8A4RE5VsYkTENewRyIgPN8KWpn/WMUiPeAZhivWvvhrZiyK+jlN37Wa6QWK08GQK oGhRvnPLL4ABx1URpJqHPSRtuIVvXEv55OMDpGNLtlG4fbORhABxjlSeucseScI1 o7+ATc3r3Ng+Jw1/lYW+wKYlAIipBRAWCgApIiEFKnzBkcD5xGU4+V0kO8HShVWb C/ZV6wFLz4Z8wXvKIlgFAmgKm9cAACH6AciIbMpfMZchUlAKzejqlNtWnzgPUaxn AvABMJcpWvO0OfMZcuoAxZGxYkIh8ZcJSD/+d9IojuIO4gABx1zoy3dZVQskC5Hy IvRaarwHV1yNVR3Av61Qv7TbRm83r9/AOZf3nyXsXqa9B7SmVq6exEpaCksAALkG bAVnxgEyCAAABmIDK2VvAcC6TTWcvSzgmNjPrCEId1DhUpIERUAlWNHvv2K294hm N6LeivORmuzdLCP2jKs0CqY5v4L4CjdM8AAABiCYJyzd1i7NVFnmkwmD05g4E3ZJ g0k+SZoBt2zR870w5oXh84gNaByp6wHd0biJVXO6q4JXhLy5AjivbB0lxoZyuGp6 QVIDkxCves1JRXedOh+qd5OG9hl6E1QQRG9GSWYlrJROHKE9K7tLmQcHVhvC86qA M3A9s2b9uJD7NrMbNE4KjG9e+Y80vFcCpoKTFFOdXDRHeL6lWrzlhn/fan3ATEKF NRAqq1e2us6RrCXsuT4jZ6Pxc0MT5iBQKUNxEHWAZyttWIY3SaO9xc5M01DltIzJ ymSAa8wQCnCcxkYvjAyKiJbOXKQOVQB1rLkwWYPH66L2cMkH58eAFAJ71AUJakdC 6DywBDhWFFB9eby/tgtFNhMi2VrLtH7McE7sbGH3EG1MHJCG1r+sC1UTyBR540Tg 410SxbgZHGQk5yPEBHBAISbu5arjwgaF0QwAabGjNSsa28MhVFBml5u8QXYgkEgu Elge955zFUMd+Iw9UK5wZ8zt2BzlUaXhZkOIIEmMiBmjJB/b6C2CChtwSSjjWR1y BKDBR4YNRK5aCEywalG5A8uSsD6D+QQwLJ4ei2ZeE4BqcKjysUZjpyKEfH/Y4Uof xhHkQo+fWrfOPAGnC1+ZlkDYdqIDVB4F6rRAmBSJkyaHpVv9CCTlYT6jQ7t9lakn 4ZOZCkojuiYl1WziM6CpIxqkmwSZoUHIuG9Bij6gyGnxtVb6iX9dOEozghkviIfA JViZEnOYNVfId7JixhnkuScyqUMOKwvtOrFhXM7YYzWXcFSDm4N/1zi10wkfUpG+ 1UqU7Gl+lCpHYQIshD0D0YWeizbE0UeWWgP7pxz6lCG2JgARuipMMHaWRy0OK3Wz VsS/Wgc/G5Onh8oUolf5RLN+SxPrazPYBUCZqGINSXzuS1SuEiAORqLgwc4WJsMs CYIHahI1eywvNsu3gzz0S6k2OB2sgg1L52qJR5kICrivwgDdizE09n2x7I0tBzI2 NSOHMFoS8R7XwqOiYJlMvDSDZgXNl02LMGYPpKgm1svb0Y/2d71WFjS2hAJXx83t fHBOxrmR5D7cS8KFOJ1uQsf/8FMmA0yu02vemzeAfIxescyViCoaCaa0N3JER4nh UX/Ltrhy5TXWJrVaaAw8A31KlK1exJfLUl3gAa5IEVpdgrU4egEAK3gkAIIy0pJ2 m8JUNcUXkWoZQzoKpIj+2gyW1yZS9wh5ixjzSqvxpZV6YD80OKz4uGG820J0VUl4 xF2ImiCF5wWlwilLLJ4U6gYrQAuTRhoPhSTXCar4OscEGmVvsCLHe2qZB0MA9bOF QhGBGYGaWyHziZh6G0VDiR0RAjWji4YoI0LusW54Ns7QFlTGonbRM8XuGWJjNUbl mXde6Iz77Aec0JkNU4bJjLNejFHAU3+XoIiXmitX1QrclnKy+88pqpkiwCTT5xhc pl+aoaR0opN09wo7fLdGuFhaymgYusj11Eu3qUgvpG9ECw8gurggmyavAYdgKTOr KUYWRVImU2vhh6Jmw7dz7KdaCXMZES4VaF6ioIB0RpmqIS7Fwc1sagGm9XV2cFsq o7C6009ptUrXEKrOWmlbd1ERimjk1M5G01ujaEsmugUzB4MUeGUjFb0vurFOZnvI AFV4Cqp18qXL8btzjBgK5FE6iDn3BQe3eKmlIbe2ixkGW3DpQHpPdZysu7rnjEE0 dA/t9lEoFqu82AR2K73XWR30bHGHQ48V5aQH2XWup8NQc65rFEcDFU4jol4w1iaR fCU02QIXYKimBYBionuM91On+iNOezu7cxmX2Y1WZ1kIIYgju3ilrJP/nKRqBTm1 V7yZ8Vrg5A56GQ4mpCZa5R0CeL6eV7DuWqM9yBox+Kq390VaLDkA96rquiYbFrwk sQf/a0DW8kMXi1P5dKQEhcR6wqELnJPOtjFsoLI9goHPJgVjTJjzyk3GV77MeIy3 MbMk+DEjyml7wStRBSmYAx/RmzbGo2fY68sG+XMjG4zR5xYg2lJF+s8pV5in1E5V 41qhST9fiz4+oVYxysdtFROpzKQTE0BrC41iCEwHq1q6OBRQNnXXdMB9iuHakoBc GS/NRmQ0zKgZv5AILYisBRgWCgAsIiEFy/PuzFJRw8anF/Z+w1AoVYklevfURQm6 /GPMV3KaB8QFAmfGATICGwwAAG+DAcY1j0f/liTR2sXATfamnAuBdSOULbSN172b J56ro0QUxwY8BY+HCHNOIYHaJFBCJdDV8k2Bw90IR4ABxilKeASHSAQaVVH7nLCU bYPxPr9tQICu7BZyL0t+paUxBAqb1Rr9JOVW2pvWSeMQxYE5HkpaW6onAA== =gO5j -----END PGP PUBLIC KEY BLOCK-----
