fips

Documentation

Overview

Package fips provides functionality to configure cryptographic implementations compliant with FIPS 140.

FIPS 140 1 is a US standard for data processing that specifies requirements for cryptographic modules. Software that is "FIPS 140 compliant" must use approved cryptographic primitives only and that are implemented by a FIPS 140 certified cryptographic module.

So, FIPS 140 requires that a certified implementation of e.g. AES is used to implement more high-level cryptographic protocols. It does not require any specific security criteria for those high-level protocols. FIPS 140 focuses only on the implementation and usage of the most low-level cryptographic building blocks.

Index

• Constants
• func CipherSuitesDARE() []byte
• func CipherSuitesTLS() []uint16
• func EllipticCurvesTLS() []tls.CurveID

Constants

const Enabled = enabled

Enabled indicates whether cryptographic primitives, like AES or SHA-256, are implemented using a FIPS 140 certified module.

If FIPS-140 is enabled no non-NIST/FIPS approved primitives must be used.

Functions

func CipherSuitesDARE

func CipherSuitesDARE() []byte

CipherSuitesDARE returns the supported cipher suites for the DARE object encryption.

func CipherSuitesTLS

func CipherSuitesTLS() []uint16

CipherSuitesTLS returns the supported cipher suites used by the TLS stack.

func EllipticCurvesTLS

func EllipticCurvesTLS() []tls.CurveID

EllipticCurvesTLS returns the supported elliptic curves used by the TLS stack.