Post #1859823
2026-04-28 00:05 UTC
A bit over two years after starting to work on it...
Go is officially FIPS 140-3 certified 💥
https://csrc.nist.gov/projects/cryptographic-module-validation-program/certificate/5247
I am pretty confident Go is now one of the most—if not the most—seamless and complete FIPS 140-3 compliance solutions... with a single env var, out of the box.
Replies (5)
-
@filippo@abyssdomain.expert 2026-04-28 00:05
If you'd like, you can buy a number of services from us, including rebrands and listed Operating Environments: https://geomys.org/fips140 However, you don't have to. Our certificate has one of the broadest list of tested environments (and algorithms) of the industry, and you can just use it with stock Go 1.24+ and GOFIPS140=v1.0.0, courtesy of Geomys. Because the point was removing this roadblock to Go adoption.
-
@dolanor@hachyderm.io 2026-04-28 00:09
@filippo congrats!!!
-
@synlogic4242@social.vivaldi.net 2026-04-28 00:10
@filippo nice work!
-
@quite@mstdn.social 2026-04-28 16:53
@filippo congrats!
-
@jnsgruk@hachyderm.io 2026-05-01 17:42
@filippo this is amazing work. Congratulations on landing it 👏