Bump BoringSSL version to `fips-20220613` to match upstream Go
reedloden opened this issue · 3 comments
reedloden commented
Upstream Go is bumping the BoringSSL FIPS version used for BoringCrypto in order to pull in support for TLS 1.3 prior to the NIST SP 800-52 Rev. 2 deadline of January 1, 2024. This updated version is still in-process with NIST CMVP for FIPS 140-3 ("In Review" as of 2023-11-20).
Filing this as a tracking issue for doing the same thing in boring once this has officially landed and been released upstream. Last bump was done in #97.
howardjohn commented
FYI This was reverted in golang/go#65321
reedloden commented
FYI This was reverted in golang/go#65321
Yeah, pending NIST CMVP certification. Hopefully, that will be soon. 🤞