Cipher list context that support FIPS crypto library #507
-
What should be the cipher list for aws_tls_cipher_pref that support FIPS mode crypto library like OpenSSL or BSafe? Looks like default list |
Beta Was this translation helpful? Give feedback.
Replies: 2 comments
-
@jannostern , @dagnir , @bretambrose , @hyandell |
Beta Was this translation helpful? Give feedback.
-
As it currently stands there is no FIPS-specific support in the CRT or its supporting libraries. FIPS suport via s2n/aws-lc is planned but I don't have any timeline. If you're using a FIPS-compliant openssl (rather than aws-lc) then you may want to ask a similar question on the s2n repository; I certainly do not have enough background to give any correct guidance on that matter. |
Beta Was this translation helpful? Give feedback.
As it currently stands there is no FIPS-specific support in the CRT or its supporting libraries. FIPS suport via s2n/aws-lc is planned but I don't have any timeline. If you're using a FIPS-compliant openssl (rather than aws-lc) then you may want to ask a similar question on the s2n repository; I certainly do not have enough background to give any correct guidance on that matter.