Hacker News new | ask | show | jobs
by interroboink 779 days ago
Does anyone with FIPS experience know what sort of changes are entailed by those requirements?

This repo doesn't seem to list what sort of high-level/conceptual changes are involved. I could look at the diff, but that sounds exhausting :Þ

2 comments

The general theme is that you need to be using approved ciphers and you need to have your key management code certified by some external entity. It is an exhausting process ;)