Is x/crypto FIPS compliant?

[pavolloffay]

Hello,

apologies for maybe obvious question, I am just starting with FIPS.

Is https://pkg.go.dev/golang.org/x/crypto handled by this project?

[xnox]

Some of it yes, but mostly no.

For example the frozen openpgp is fine, as it does no cryptography by itself and relies on import from "crypto".

Other portions which implement unapproved algorithms are not compliant - e.g. Blake ones.

Right now this toolchain does not prevent importing or using all of x/crypto.