Is FIPS certification a good thing? Does anyone actually run in FIPS mode?
I mean, I wouldn't be surprised if it lets you check a box on PCI checklist; but only people who are forced to use that checklist.
I mean, I wouldn't be surprised if it lets you check a box on PCI checklist; but only people who are forced to use that checklist.
But it's common that if you work with governments that FIPS certification is a requriement.
So yea - great stuff!
It's a pain in the ass at times because it means things like Ed25519 and ECDSA not over NIST certified curves is not allowed...