Golang: Crypto/fips140: do not bloat crypto code unnecessarily

https://github.com/golang/go/issues/81639

Comments

eqvinoxSep 28, 2026, 5:18 AM
From having had my own prior interactions with you, I am entirely unsurprised that you're getting some cold shoulder due to other people's experiences with you.

As far as I can tell you're great at cryptography code. You've gotten better at the social parts of collaborative software engineering, but there's still room to grow.

westurnerSep 26, 2026, 2:59 PM
Isn't there still need for non- or post- FIPS-140 -like cipher restrictions in non FIPS-140 environments?

How much code is needed to implement Classical+PQ (Hybrid PQ) or PQ-only (Only PQ) cipher selection restrictions just?

FWIU, with golang:

  # This allows X25519MLKEM768 (Hybrid PQ)
  GODEBUG=fips140=on

  # This prevents any PQ ciphers from being used:
  GODEBUG=fips140=only
tlsref needs to be revised to specify PQ cipher lists.