MyFavMirrors/minio
1
0
Fork 0
mirror of https://github.com/minio/minio.git synced 2025-11-24 11:37:46 -05:00
Code Issues Packages Projects Releases Wiki Activity

add go1.18 specific curve preferences (#15132)

Browse Source
This commit is contained in:
Harshavardhana
2022-06-21 11:10:50 -07:00
committed by GitHub
parent e2e5bd6f19
commit 10522438b7
3 changed files with 55 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
internal/fips/api.go
View File

@@ -134,13 +134,14 @@ func TLSCiphersBackwardCompatible() []uint16 {
// TLSCurveIDs returns a list of supported elliptic curve IDs
// in preference order.
func TLSCurveIDs() []tls.CurveID {
// TODO(aead): Once MinIO switches to Go 1.18
// enable CurveP384 and CurveP512.
//
// See: https://go.dev/doc/go1.18 Changes to crypto/elliptic
if Enabled {
return []tls.CurveID{tls.CurveP256}
curves := []tls.CurveID{tls.CurveP256}
if go18 {
// With go1.18 enable P384, P521 newer constant time implementations.
curves = append(curves, []tls.CurveID{tls.CurveP384, tls.CurveP521}...)
}
return []tls.CurveID{tls.X25519, tls.CurveP256}
if !Enabled {
// No-FIPS we enable x25519 as well.
curves = append(curves, tls.X25519)
}
return curves
}