go/src/crypto
Filippo Valsorda d2cb140194 [release-branch.go1.21] crypto/tls: align FIPS-only mode with BoringSSL policy
This enables TLS 1.3, disables P-521, and disables non-ECDHE suites.

Updates #64717
Updates #62372
Fixes #64719

Change-Id: I3a65b239ef0198bbdbe5e55e0810e7128f90a091
Reviewed-on: https://go-review.googlesource.com/c/go/+/549975
Reviewed-by: Roland Shoemaker <roland@golang.org>
LUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>
Reviewed-by: Than McIntosh <thanm@google.com>
Reviewed-on: https://go-review.googlesource.com/c/go/+/553856
Auto-Submit: Matthew Dempsky <mdempsky@google.com>
Reviewed-by: Matthew Dempsky <mdempsky@google.com>
2024-01-04 23:16:07 +00:00
..
aes cmd/internal/obj/ppc64: modify PCALIGN to ensure alignment 2023-04-21 16:47:45 +00:00
boring
cipher
des crypto/des: fix a typo in the comment for permuteFinalBlock 2022-12-01 21:00:43 +00:00
dsa
ecdh crypto: document non-determinism of GenerateKey 2023-06-23 16:12:46 +00:00
ecdsa crypto: document non-determinism of GenerateKey 2023-06-23 16:12:46 +00:00
ed25519 crypto: document non-determinism of GenerateKey 2023-06-23 16:12:46 +00:00
elliptic crypto: use t.Parallel() to increase speed 2023-04-27 02:00:03 +00:00
hmac all: fix some problematic comments 2023-03-13 16:49:45 +00:00
internal [release-branch.go1.21] crypto/tls: align FIPS-only mode with BoringSSL policy 2024-01-04 23:16:07 +00:00
md5 all: move //go: function directives directly above functions 2023-03-02 22:56:35 +00:00
rand [release-branch.go1.21] crypto/rand,runtime: switch RtlGenRandom for ProcessPrng 2023-11-28 17:48:47 +00:00
rc4
rsa crypto: document non-determinism of GenerateKey 2023-06-23 16:12:46 +00:00
sha1 Revert "crypto/sha1: add WriteString and WriteByte method" 2023-05-03 21:27:16 +00:00
sha256 all: fix spelling errors 2023-06-14 00:03:57 +00:00
sha512 Revert "crypto/sha512: add WriteString and WriteByte method" 2023-05-03 21:17:08 +00:00
subtle crypto/subtle: don't cast to *uintptr when word size is 0 2023-03-31 23:25:07 +00:00
tls [release-branch.go1.21] crypto/tls: align FIPS-only mode with BoringSSL policy 2024-01-04 23:16:07 +00:00
x509 [release-branch.go1.21] crypto/tls: align FIPS-only mode with BoringSSL policy 2024-01-04 23:16:07 +00:00
crypto.go
issue21104_test.go