Hello, I understand from the Chromium Web Crypto README <https://chromium.googlesource.com/chromium/src/+/refs/heads/main/components/webcrypto/README.md> that BoringSSL is used for cryptography. I also understand that BoringSSL uses a library BoringCrypto <https://boringssl.googlesource.com/boringssl/+/master/crypto/fipsmodule/FIPS.md>.
My question is: *for the algorithms made available through Chromium's Web Crypto API, are some/all of them using BoringCrypto under the hood?* I ask because there is a version of BoringCrypto that is FIPS validated <https://csrc.nist.gov/Projects/Cryptographic-Module-Validation-Program/Certificate/3678>, which is relevant to what I am currently working on. I understand that the version of BoringCrypto included in a given version of Chromium may not be FIPS validated. Thank you -- You received this message because you are subscribed to the Google Groups "blink-dev" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/chromium.org/d/msgid/blink-dev/17b95430-a854-4952-8bc0-9729aa674870n%40chromium.org.
