]> Cypherpunks repositories - gostls13.git/commit
projects / gostls13.git / commit
summary | shortlog | log | commit | commitdiff | tree
(parent: 83d9afe) | patch
crypto/tls: align FIPS-only mode with BoringSSL policy
authorFilippo Valsorda <filippo@golang.org>
Thu, 14 Dec 2023 21:13:29 +0000 (22:13 +0100)
committerFilippo Valsorda <filippo@golang.org>
Sat, 10 Aug 2024 12:39:48 +0000 (12:39 +0000)
commitd36353499f673c89a267a489beb80133a14a75f9
tree8df053898ad0625f4c1b508cb6ebadcd2c2a38actree
parent83d9afefead685d9da8e993e064cbe695111110ccommit | diff
crypto/tls: align FIPS-only mode with BoringSSL policy

This enables TLS 1.3, disables P-521, and disables non-ECDHE suites.

Reapplies CL 549975.

Updates #64717
Updates #62372

Change-Id: I6c608704638d59a063a657fbd4eb1126027112dd
Reviewed-on: https://go-review.googlesource.com/c/go/+/603376
Reviewed-by: Roland Shoemaker <roland@golang.org>
LUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>
Reviewed-by: David Chase <drchase@google.com>
src/crypto/internal/boring/aes.go diff | blob | history
src/crypto/internal/boring/notboring.go diff | blob | history
src/crypto/tls/boring_test.go diff | blob | history
src/crypto/tls/cipher_suites.go diff | blob | history
src/crypto/tls/defaults.go diff | blob | history
src/crypto/tls/handshake_client.go diff | blob | history
src/crypto/tls/handshake_client_tls13.go diff | blob | history
src/crypto/tls/handshake_server_test.go diff | blob | history
src/crypto/tls/handshake_server_tls13.go diff | blob | history
Go GOST TLS 1.3