Hacker News0 Hot0 comments16 min read2 h ago

FIPS 140-3 is not a security guarantee, and auditors know it

FIPS-validated modules shipped ROCA, EUCLEAK, Dual_EC_DRBG, and a YubiKey flaw caused by the FIPS self-tests themselves. What the certificate actually attests, what FIPS mode costs in performance, why it breaks Bitcoin tooling like BIP32, and where auditors actually look.

Read the original

#golang #cryptography

Source: https://808bits.com/articles/fips-140-3-not-a-security-guarantee. 8sync News only summarizes and links out; content copyright belongs to the authors and original sources.

Recommended for you

Product Hunt156 Hot1 min4 d agoAITop

witr: Why is this running? Trace process, port, container or file

witr là công cụ truy vết nguyên nhân của tiến trình, port, container hay file đang chạy …

#linux #golang #cli

FIPS 140-3 is not a security guarantee, and auditors know it

Recommended for you

witr: Why is this running? Trace process, port, container or file

Code like a pirate with AI — Bitfield Consulting

Bringing serverless functions to the speed of wire

Why We Chose Rust over Go for Our New Caching Layer

Benchmark, Profile, Prove: A 12x Go Performance Win

Solod 0.3: Concurrency, JSON, more safety

Write PDFs in React. Render them from Go. No Node, no browser, no sidecar.

The Great Go Transaction Dilemma: Clean Architecture vs. Idiomatic Go

One account, the whole ecosystem

8syncdev.com

Courses

Coding practice

IELTS

ZUS — AI IDE

mind0

AcoLeads