]> Cypherpunks repositories - gostls13.git/commit
[release-branch.go1.24] crypto/tls: allow P-521 in FIPS 140-3 mode and Go+BoringCrypto
authorFilippo Valsorda <filippo@golang.org>
Wed, 12 Mar 2025 15:36:08 +0000 (16:36 +0100)
committerCherry Mui <cherryyz@google.com>
Mon, 17 Mar 2025 21:33:52 +0000 (14:33 -0700)
commitbd1bc8a6e7a0238af94d176cd4fa9aabb7738d73
treea9816600e5d82dbb02e6b396a4ef14f60c25b44d
parentc2a34bedeeaa0c06297dacc68d6a7f6a9918a346
[release-branch.go1.24] crypto/tls: allow P-521 in FIPS 140-3 mode and Go+BoringCrypto

Partially reverts CL 587296, restoring the Go+BoringCrypto 1.23 behavior
in terms of supported curves.

Updates #71757
Fixes #72823

Change-Id: I6a6a465651a8407056fd0fae091d10a945b37997
Reviewed-on: https://go-review.googlesource.com/c/go/+/657135
LUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>
Reviewed-by: Roland Shoemaker <roland@golang.org>
Reviewed-by: Daniel McCarney <daniel@binaryparadox.net>
Reviewed-by: David Chase <drchase@google.com>
src/crypto/tls/defaults.go
src/crypto/tls/fips_test.go