The FIPS 140-3 Go Cryptographic Module
Go 1.24 introduces native FIPS 140-3 compliance with a built-in cryptographic module that eliminates the need for unsupported solutions like Go+BoringCrypto. The module integrates transparently into applications, can be enabled with the fips140=on GODEBUG option, and supports cross-compilation without cgo dependencies. It has been validated by Geomys across 23 operating environments and covers all FIPS 140-3 approved algorithms in the standard library, including post-quantum ML-KEM. The implementation prioritizes security by maintaining features like hedged ECDSA signatures and kernel-sourced randomness while meeting compliance requirements.
