Filippo Valsorda 6114b69e0c crypto/tls: relax native FIPS 140-3 mode ...

We are going to stick to BoringSSL's policy for Go+BoringCrypto, but
when using the native FIPS 140-3 module we can allow Ed25519, ML-KEM,
and P-521.

NIST SP 800-52r2 is stricter, but it only applies to some entities, so
they can restrict the profile with Config.

Fixes #71757

Change-Id: I6a6a4656eb02e56d079f0a22f98212275a40a679
Reviewed-on: https://go-review.googlesource.com/c/go/+/650576
LUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>
Reviewed-by: Junyang Shao <shaojunyang@google.com>
Auto-Submit: Filippo Valsorda <filippo@golang.org>
Reviewed-by: Daniel McCarney <daniel@binaryparadox.net>
Reviewed-by: David Chase <drchase@google.com>

2025-03-13 13:33:22 -07:00

..

elliptic

crypto/elliptic: drop hidden Inverse and CombinedMult methods

2025-03-04 12:43:35 -08:00

tls

crypto/tls: relax native FIPS 140-3 mode

2025-03-13 13:33:22 -07:00