[Cryptography-dev] FIPS cffi bindings

Alex Gaynor alex.gaynor at gmail.com
Mon Sep 25 21:54:43 EDT 2017


As you noted, I have a disdain for FIPS-140. Familiarity breeds contempt.

That said, I'm ok with landing just the bindings.

Alex

On Mon, Sep 25, 2017 at 11:54 AM, Scott Sturdivant <
scott.sturdivant at gmail.com> wrote:

> Hi,
>
> Would the cryptography dev team be accepting of a patch that added binding
> support for the OpenSSL FIPS_mode, FIPS_mode_set, and FIPS_selftest
> functions?  Reading Alex's thoughts on the matter (
> https://bugs.python.org/issue27592#msg271008), my guess is "probably not."
>
> Assuming that a patch would not be accepted, is there a way to somehow
> build these bindings without requiring a fork of the project?  Would there
> be a way for my library to specify some build arguments to cryptography?
> The src/_cffi_src/openssl/crypto.py CUSTOMIZATIONS variable seems like a
> good place for this to go, but I cannot see how to modify it during the
> build process.
>
> Thanks for the guidance,
>
> Scott
>
> _______________________________________________
> Cryptography-dev mailing list
> Cryptography-dev at python.org
> https://mail.python.org/mailman/listinfo/cryptography-dev
>
>


-- 
"I disapprove of what you say, but I will defend to the death your right to
say it." -- Evelyn Beatrice Hall (summarizing Voltaire)
"The people's good is the highest law." -- Cicero
GPG Key fingerprint: D1B3 ADC0 E023 8CA6
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.python.org/pipermail/cryptography-dev/attachments/20170925/7fbb1b4e/attachment.html>


More information about the Cryptography-dev mailing list