Go's Native FIPS 140-3 Crypto Module: A Secure and Simple Solution
Go 1.24 and later now natively supports FIPS 140-3 compliance through a new cryptographic module developed in collaboration with Geomys. This module, validated by CAVP certificate A6650 and undergoing CMVP review, eliminates previous friction points for Go users in regulated environments. Offering a seamless developer experience, it boasts uncompromising security, using optimized ECDSA and a NIST DRBG based on AES-256-CTR. It supports a wide range of platforms and algorithms, surpassing the capabilities and security of its predecessor, Go+BoringCrypto. This native module provides the easiest and most secure path to FIPS 140-3 compliance for Go developers.
Read more