Most of import "crypto/internal/fips140/... imports that are not within "crypto/internal/fips140" requires patching on our side to redirect those usages to our crypto backends. We currently detect new things to patch by having Quim Muntal (@qmuntal) manually inspecting all the commits that land into crypto, and that's not scalable.
We should have a tool that checks in CI that we haven't missed anything.
Design pending.
Most of
import "crypto/internal/fips140/...imports that are not within "crypto/internal/fips140" requires patching on our side to redirect those usages to our crypto backends. We currently detect new things to patch by having Quim Muntal (@qmuntal) manually inspecting all the commits that land into crypto, and that's not scalable.We should have a tool that checks in CI that we haven't missed anything.
Design pending.