FilesExpand file tree

main

/

defaults_fips140.go

Copy path

Blame

More file actions

Blame

More file actions

Latest commit

 

History

History

History

86 lines (80 loc) · 2.1 KB

main

/

defaults_fips140.go

Copy path

Top

File metadata and controls

• Code
• Blame

86 lines (80 loc) · 2.1 KB

Raw

Copy raw file

Download raw file

Open symbols panel

Edit and raw actions

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

55

56

57

58

59

60

61

62

63

64

65

66

67

68

69

70

71

72

73

74

75

76

77

78

79

80

81

82

83

84

85

86

// Copyright 2025 The Go Authors. All rights reserved.

// Use of this source code is governed by a BSD-style

// license that can be found in the LICENSE file.

//go:build !boringcrypto

package reality

import (

"crypto/ecdsa"

"crypto/ed25519"

"crypto/elliptic"

"crypto/mldsa"

"crypto/rsa"

"crypto/x509"

)

// These FIPS 140-3 policies allow anything approved by SP 800-140C

// and SP 800-140D, and tested as part of the Go Cryptographic Module.

//

// Notably, not SHA-1, 3DES, RC4, ChaCha20Poly1305, RSA PKCS #1 v1.5 key

// transport, or TLS 1.0—1.1 (because we don't test its KDF).

//

// These are not default lists, but filters to apply to the default or

// configured lists. Missing items are treated as if they were not implemented.

//

// They are applied when the fips140 GODEBUG is "on" or "only".

var (

allowedSupportedVersionsFIPS = []uint16{

VersionTLS12,

VersionTLS13,

}

allowedCurvePreferencesFIPS = []CurveID{

X25519MLKEM768,

SecP256r1MLKEM768,

SecP384r1MLKEM1024,

MLKEM1024,

CurveP256,

CurveP384,

CurveP521,

}

allowedSignatureAlgorithmsFIPS = []SignatureScheme{

PSSWithSHA256,

ECDSAWithP256AndSHA256,

Ed25519,

MLDSA44,

MLDSA65,

MLDSA87,

PSSWithSHA384,

PSSWithSHA512,

PKCS1WithSHA256,

PKCS1WithSHA384,

PKCS1WithSHA512,

ECDSAWithP384AndSHA384,

ECDSAWithP521AndSHA512,

}

allowedCipherSuitesFIPS = []uint16{

TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,

TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,

TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,

TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,

TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256,

TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,

}

allowedCipherSuitesTLS13FIPS = []uint16{

TLS_AES_128_GCM_SHA256,

TLS_AES_256_GCM_SHA384,

}

)

func isCertificateAllowedFIPS(c *x509.Certificate) bool {

switch k := c.PublicKey.(type) {

case *rsa.PublicKey:

return k.N.BitLen() >= 2048

case *ecdsa.PublicKey:

return k.Curve == elliptic.P256() || k.Curve == elliptic.P384() || k.Curve == elliptic.P521()

case ed25519.PublicKey:

return true

case *mldsa.PublicKey:

// Only for the native module.

return true //!boring.Enabled

default:

return false

}

}