#2 Allow pre-hashed inputs to some crypto APIs
Closed by tstellar. Opened by tstellar.
tstellar/go relax-hash-requirements  into  go1.11-openssl-fips

Download 2.patch

This change is not FIPS compliant but will allow existing applications
to continue to run correctly while they migrate to using the crypto APIs
in a FIPS compliant manner. A warning message will be printed when pre-hashed
inputs are used to help users update their applications.

Applications can set the GOLANG_STRICT_FIPS=1 environment variable to restore
previous behavior and cause the crypto module to reject pre-hashed inputs.

This has been superseded by PR#3.

Pull-Request has been closed by tstellar

Metadata