Request: leverage another crypto library that would allow for FIPS validation

[finnje]

Wireguard itself won't be FIPS validated as the encryption algorithms aren't approved for FIPs validation, but other crypto in use, for example the netbird ssh connections could be FIPS validated if something like https://github.com/golang-fips/go was used instead of the default go crypto library.

[braginini]

hey @finnje
Do you have an idea how to combine this lib with Golang's SSH server? I haven't looked into that yet.

[laserguy2020]

This would be awesome... +1 from me.

[nazarewk]

@finnje Does it still make sense if the context of the plans to replace internal SSH implementation with the reuse of the existing OpenSSH infrastructure?

[finnje]

@nazarewk if the goal is to switch to the underlying systems ssh package like OpenSSH then no this wouldn't be required as you could ensure your system SSH package is FIPS validated if required by your environment.