mirror/gmsm
1
0
Fork 0
mirror of https://github.com/emmansun/gmsm.git synced 2025-05-11 03:26:17 +08:00
Code Issues Packages Projects Releases Wiki Activity

Created go crypto and BoringCrypto (markdown)

Sun Yimin 2022-05-09 13:59:22 +08:00
parent 247e0fa63c
commit 59488be1d5
1 changed files with 17 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
go-crypto-and-BoringCrypto.md Normal file

@ -0,0 +1,17 @@
There are **REVERSE MERGE dev.boringcrypto (cdcb4b6) into master** commits in golang on May/3, 2022.
### What's boringcrypto?
> BoringCrypto (BoringSSL based crypto) maintained by Google is an open-source, general-purpose cryptographic library that provides FIPS 140–2 approved cryptographic algorithms to serve BoringSSL and other user-space applications.
> BoringSSL is Google’s forked version of OpenSSL cryptographic library and BoringSSL is used in all Google website product’s TLS stacks since June 2014 — including Google Android OS and Google Chrome. Google initially forked the OpenSSL code with BoringSSL, but have now formally released Google Tink.
> The native go crypto is not FIPS compliant and there are few open proposals to facilitate Go code to meet FIPS requirements. Users can use prominent go compilers/toolsets backed by FIPS validated SSL libraries provided by Google or Redhat which enables Go to bypass the standard library cryptographic routines and instead call into a FIPS 140–2 validated cryptographic library. These toolsets are available as container images, where users can use the same to compile any Go based applications.
### The impact to this package
Mainly the compatibility issues with new golang sdk.
### Reference
[Go Crypto and Kubernetes — FIPS 140–2 and FedRAMP Compliance](https://gokulchandrapr.medium.com/go-crypto-and-kubernetes-fips-140-2-fedramp-compliance-66d852ccccd2)
[all: REVERSE MERGE dev.boringcrypto (cdcb4b6) into master](https://github.com/golang/go/commit/f771edd7f92a47c276d65fbd9619e16a786c6746)